PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) recvmmsg(r0, &(0x7f00000004c0), 0x0, 0x100000000, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty}, 0x23e) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) [ 486.070693] FAULT_INJECTION: forcing a failure. [ 486.070693] name failslab, interval 1, probability 0, space 0, times 0 [ 486.099169] CPU: 0 PID: 24281 Comm: syz-executor.1 Not tainted 4.14.138 #34 [ 486.106351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 486.106357] Call Trace: [ 486.106382] dump_stack+0x138/0x19c [ 486.106401] should_fail.cold+0x10f/0x159 [ 486.126129] should_failslab+0xdb/0x130 [ 486.130123] __kmalloc+0x2f0/0x7a0 [ 486.133680] ? trace_hardirqs_on_caller+0x400/0x590 [ 486.138712] ? match_number.isra.0+0x86/0x1e0 [ 486.138727] match_number.isra.0+0x86/0x1e0 [ 486.138738] ? match_strdup+0xa0/0xa0 [ 486.138747] ? match_wildcard+0x2d0/0x2d0 [ 486.138757] match_int+0x41/0x50 [ 486.138772] parse_opts.part.0+0x1c9/0x2e0 [ 486.147628] ? p9_fd_show_options+0x1a0/0x1a0 [ 486.155572] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 486.155587] ? p9_idpool_create+0x40/0x120 [ 486.155599] p9_fd_create+0x86/0x340 [ 486.155614] ? parse_opts.part.0+0x2e0/0x2e0 [ 486.185754] ? __raw_spin_lock_init+0x2d/0x100 [ 486.185989] BFS-fs: bfs_fill_super(): No BFS filesystem on loop0 (magic=00000000) [ 486.190358] p9_client_create+0x648/0x1120 [ 486.190376] ? p9_client_zc_rpc.constprop.0+0x1120/0x1120 [ 486.190391] ? __kmalloc_track_caller+0x372/0x790 [ 486.190405] ? __lockdep_init_map+0x10c/0x570 [ 486.190416] ? lockdep_init_map+0x9/0x10 [ 486.190425] ? __raw_spin_lock_init+0x2d/0x100 [ 486.190440] v9fs_session_init+0x1dc/0x1620 [ 486.190460] ? check_preemption_disabled+0x3c/0x250 [ 486.190469] ? v9fs_show_options+0x730/0x730 [ 486.190483] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 486.246284] ? v9fs_mount+0x5e/0x870 [ 486.259031] ? rcu_read_lock_sched_held+0x110/0x130 [ 486.264088] ? kmem_cache_alloc_trace+0x623/0x790 [ 486.268951] ? free_pages+0x46/0x50 [ 486.272605] v9fs_mount+0x7d/0x870 [ 486.276251] mount_fs+0x97/0x2a1 [ 486.279629] vfs_kern_mount.part.0+0x5e/0x3d0 [ 486.284154] do_mount+0x417/0x27d0 [ 486.287887] ? copy_mount_options+0x5c/0x2f0 [ 486.292311] ? rcu_read_lock_sched_held+0x110/0x130 [ 486.297351] ? copy_mount_string+0x40/0x40 [ 486.301809] ? copy_mount_options+0x1fe/0x2f0 [ 486.306324] SyS_mount+0xab/0x120 [ 486.309778] ? copy_mnt_ns+0x8c0/0x8c0 [ 486.313672] do_syscall_64+0x1e8/0x640 16:27:34 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getaffinity(0x0, 0x8, &(0x7f0000000040)) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) inotify_init1(0x0) r0 = openat$mixer(0xffffffffffffff9c, 0x0, 0x480002, 0x0) accept$netrom(r0, &(0x7f0000000340)={{0x3, @rose}, [@netrom, @rose, @default, @rose, @netrom, @netrom, @default]}, &(0x7f0000000280)=0x48) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) r1 = request_key(0x0, 0x0, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000000680), 0x0, r1) keyctl$search(0xa, 0x0, 0x0, &(0x7f00000003c0)={'syz', 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x1000000000000237, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000080)=0x1, r2, 0x0, 0x0, 0x1}}, 0x20) umount2(&(0x7f0000000140)='./file0\x00', 0x8) openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mixer\x00', 0x2000, 0x0) socket$unix(0x1, 0x5, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) accept(r3, 0x0, &(0x7f0000000000)) bind$unix(0xffffffffffffffff, 0x0, 0x0) [ 486.317569] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 486.322439] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 486.327678] RIP: 0033:0x459829 [ 486.330884] RSP: 002b:00007f0241e81c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 486.338620] RAX: ffffffffffffffda RBX: 00007f0241e81c90 RCX: 0000000000459829 [ 486.338627] RDX: 0000000020000100 RSI: 0000000020000040 RDI: 0000000000000000 [ 486.338633] RBP: 000000000075bf20 R08: 0000000020000280 R09: 0000000000000000 [ 486.338638] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0241e826d4 16:27:34 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)) ioctl$int_in(r0, 0x800060c004500a, 0x0) 16:27:34 executing program 5: r0 = memfd_create(&(0x7f000088f000)='b\n\x00', 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x5011, r0, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000080)={0xa, 0x3, 0x20000000007ffd, 0x100cf3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x1a) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x101000, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x3, 0x1f, 0x6}}, 0x28) ftruncate(r0, 0x400000) 16:27:34 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0xf7, 0xc02) ioctl$FS_IOC_FSGETXATTR(r0, 0x41045508, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x10001, 0x0, 0x200000000000000}) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x3f}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYBLOB="014add70d40031cacdd9aac1a9b20b4eb8f439d3914d0dcdc81f44ee2576004bbe1f71405c26e1947c84656db0ad9542f781c1d8f52825a3e09fd0d73c35dcb975549e3867f754f1841bd3629de9d6c6b45b13ed14375cb6b7ea3d76784dc7eac823f88769c04dfbe53ec6acf76aae571baf104bff76c8ef56b4406c7ede1176bfd5eb4cbd8b09e128f19b0ed7dbb461134ce23afc11d5"], &(0x7f0000000140)=0xa) ioctl$VT_ACTIVATE(r0, 0x5606, 0x1) 16:27:34 executing program 1 (fault-call:4 fault-nth:20): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) eventfd(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 486.338643] R13: 00000000004c5dcf R14: 00000000004da870 R15: 0000000000000005 [ 486.346195] 9pnet: Insufficient options for proto=fd 16:27:34 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xe95, 0x40805) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0) restart_syscall() getsockopt$inet_dccp_buf(r0, 0x21, 0xd, &(0x7f0000000080)=""/96, &(0x7f0000000100)=0x60) 16:27:34 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4003, &(0x7f0000000200)=0x1fd, 0x6, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x200000, 0x0) accept4$rose(r1, &(0x7f0000000080)=@full={0xb, @remote, @rose, 0x0, [@default, @remote, @bcast, @rose, @default, @default]}, &(0x7f00000000c0)=0x40, 0x80800) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000000)=0x1009, 0x7, 0x0) [ 486.458959] FAULT_INJECTION: forcing a failure. [ 486.458959] name failslab, interval 1, probability 0, space 0, times 0 [ 486.524795] CPU: 0 PID: 24306 Comm: syz-executor.1 Not tainted 4.14.138 #34 [ 486.531998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 486.541819] Call Trace: [ 486.544426] dump_stack+0x138/0x19c [ 486.548079] should_fail.cold+0x10f/0x159 [ 486.552244] should_failslab+0xdb/0x130 [ 486.556248] kmem_cache_alloc_trace+0x2e9/0x790 [ 486.560953] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 486.566420] ? p9_idpool_create+0x40/0x120 [ 486.570751] p9_fd_create+0x137/0x340 [ 486.574569] ? parse_opts.part.0+0x2e0/0x2e0 [ 486.578993] ? __raw_spin_lock_init+0x2d/0x100 [ 486.583631] p9_client_create+0x648/0x1120 [ 486.587887] ? p9_client_zc_rpc.constprop.0+0x1120/0x1120 [ 486.593444] ? __kmalloc_track_caller+0x372/0x790 [ 486.598318] ? __lockdep_init_map+0x10c/0x570 [ 486.602822] ? lockdep_init_map+0x9/0x10 [ 486.606890] ? __raw_spin_lock_init+0x2d/0x100 [ 486.611494] v9fs_session_init+0x1dc/0x1620 [ 486.615869] ? check_preemption_disabled+0x3c/0x250 [ 486.620899] ? v9fs_show_options+0x730/0x730 [ 486.625412] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 486.631222] ? v9fs_mount+0x5e/0x870 [ 486.634953] ? rcu_read_lock_sched_held+0x110/0x130 [ 486.640338] ? kmem_cache_alloc_trace+0x623/0x790 [ 486.645227] ? free_pages+0x46/0x50 [ 486.648876] v9fs_mount+0x7d/0x870 [ 486.652427] mount_fs+0x97/0x2a1 [ 486.655808] vfs_kern_mount.part.0+0x5e/0x3d0 [ 486.660397] do_mount+0x417/0x27d0 [ 486.660407] ? copy_mount_options+0x5c/0x2f0 [ 486.660420] ? rcu_read_lock_sched_held+0x110/0x130 16:27:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x88002, 0x0) ioctl$SIOCAX25OPTRT(r1, 0x89e7, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, 0x2, 0x56}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000200)=0xe8) connect$can_bcm(r1, &(0x7f0000000240)={0x1d, r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000080), 0x12) [ 486.660432] ? copy_mount_string+0x40/0x40 [ 486.660445] ? copy_mount_options+0x1fe/0x2f0 [ 486.660458] SyS_mount+0xab/0x120 [ 486.660466] ? copy_mnt_ns+0x8c0/0x8c0 [ 486.660481] do_syscall_64+0x1e8/0x640 [ 486.694563] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 486.699431] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 486.704627] RIP: 0033:0x459829 [ 486.707822] RSP: 002b:00007f0241e81c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 486.715542] RAX: ffffffffffffffda RBX: 00007f0241e81c90 RCX: 0000000000459829 16:27:35 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8ff0000000069a2f8ff0000966f1503db0cfd2a0000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0xffffffffffffff87) r0 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r0, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0xc5) r1 = socket$inet_udp(0x2, 0x2, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x80100, 0x20) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000003040)='ip6tnl0\x00', 0x10) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f00000038c0), 0x4000000000000a8, 0x0) 16:27:35 executing program 0: setitimer(0x0, &(0x7f00000001c0), &(0x7f0000000200)) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="cefaad1b0100000001", 0x9}], 0x0, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x430c, 0x200000) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000140)=0x24, &(0x7f0000000180)=0x2) 16:27:35 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r1 = dup2(r0, r0) creat(&(0x7f0000000300)='./file0\x00', 0x22) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f0000000040)={0x34}) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$P9_RREAD(r2, &(0x7f0000000200)=ANY=[], 0x5aa78d33) fallocate(r2, 0x100000012, 0x0, 0x380000000) lseek(r2, 0x0, 0x3) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000100)={0x0, r2}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, &(0x7f0000000180)={0x200, 0x401, 0x3, 0x1f}) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f00000001c0)) [ 486.715549] RDX: 0000000020000100 RSI: 0000000020000040 RDI: 0000000000000000 [ 486.715555] RBP: 000000000075bf20 R08: 0000000020000280 R09: 0000000000000000 [ 486.715560] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0241e826d4 [ 486.715565] R13: 00000000004c5dcf R14: 00000000004da870 R15: 0000000000000005 16:27:35 executing program 4: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}, &(0x7f00000000c0)=0x10) r1 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r1, 0x41045508, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={0x0, r1, 0x0, 0x1}, 0x14) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) [ 486.773368] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 486.786818] BFS-fs: bfs_fill_super(): Superblock is corrupted 16:27:35 executing program 0: syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1b0100000001", 0x9}], 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getuid() ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000140)={0x3, @null, r1}) [ 486.911365] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 486.939035] BFS-fs: bfs_fill_super(): Superblock is corrupted 16:27:35 executing program 5: unshare(0x8020000) semget$private(0x0, 0x403, 0x0) semop(0x0, &(0x7f0000000080)=[{0x0, 0x0, 0x81800}], 0x1) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'os2.', 'vboxnet1[-*\x00'}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x8020400) 16:27:35 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r0, 0x41045508, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x1}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000000c0)={r1, 0x401, 0x2, 0xd868}, 0x10) 16:27:35 executing program 2 (fault-call:2 fault-nth:0): r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) [ 487.020403] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 487.046623] BFS-fs: bfs_fill_super(): Superblock is corrupted 16:27:35 executing program 1 (fault-call:4 fault-nth:21): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) eventfd(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 16:27:35 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x2, 0x802) ioctl$FS_IOC_FSGETXATTR(r0, 0x41045508, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000140)=""/218) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) 16:27:35 executing program 0: syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="cefaad1b0100000001", 0x9}], 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cachefiles\x00', 0x20040, 0x0) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x243f30b04298ad90}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00072dbd7000fddbdf250400000014e7000000000000000000000000ffffac1e010114000100ff01000000000000000000000000000108000400feffffff080002009f298a7d08000300566900000800030004000000"], 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40010) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000340)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0xfff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x100000001}, r2}}, 0x30) 16:27:35 executing program 5: unshare(0x8020000) semget$private(0x0, 0x403, 0x0) semop(0x0, &(0x7f0000000080)=[{0x0, 0x0, 0x81800}], 0x1) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'os2.', 'vboxnet1[-*\x00'}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x8020400) 16:27:35 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x41045508, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}) [ 487.233394] FAULT_INJECTION: forcing a failure. [ 487.233394] name failslab, interval 1, probability 0, space 0, times 0 [ 487.298488] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 487.303464] CPU: 0 PID: 24384 Comm: syz-executor.1 Not tainted 4.14.138 #34 [ 487.310567] BFS-fs: bfs_fill_super(): Superblock is corrupted [ 487.311982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 487.311989] Call Trace: [ 487.312011] dump_stack+0x138/0x19c [ 487.312040] should_fail.cold+0x10f/0x159 [ 487.312059] should_failslab+0xdb/0x130 [ 487.342126] __kmalloc+0x2f0/0x7a0 [ 487.345690] ? trace_hardirqs_on_caller+0x400/0x590 [ 487.350718] ? match_number.isra.0+0x86/0x1e0 [ 487.355245] match_number.isra.0+0x86/0x1e0 [ 487.360562] ? match_strdup+0xa0/0xa0 [ 487.364360] ? match_wildcard+0x2d0/0x2d0 [ 487.368525] match_int+0x41/0x50 [ 487.371917] parse_opts.part.0+0x1c9/0x2e0 [ 487.376155] ? p9_fd_show_options+0x1a0/0x1a0 [ 487.380760] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 487.386234] ? p9_idpool_create+0x40/0x120 [ 487.390472] p9_fd_create+0x86/0x340 [ 487.394274] ? parse_opts.part.0+0x2e0/0x2e0 [ 487.398697] ? __raw_spin_lock_init+0x2d/0x100 [ 487.403390] p9_client_create+0x648/0x1120 [ 487.407635] ? p9_client_zc_rpc.constprop.0+0x1120/0x1120 [ 487.413329] ? __kmalloc_track_caller+0x372/0x790 [ 487.418271] ? __lockdep_init_map+0x10c/0x570 [ 487.422881] ? lockdep_init_map+0x9/0x10 [ 487.427725] ? __raw_spin_lock_init+0x2d/0x100 [ 487.432333] v9fs_session_init+0x1dc/0x1620 [ 487.436895] ? lock_downgrade+0x6e0/0x6e0 [ 487.441061] ? check_preemption_disabled+0x3c/0x250 [ 487.446092] ? v9fs_show_options+0x730/0x730 [ 487.451298] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 487.456752] ? v9fs_mount+0x5e/0x870 [ 487.460560] ? rcu_read_lock_sched_held+0x110/0x130 [ 487.465680] ? kmem_cache_alloc_trace+0x623/0x790 [ 487.470731] v9fs_mount+0x7d/0x870 [ 487.474272] mount_fs+0x97/0x2a1 [ 487.477636] vfs_kern_mount.part.0+0x5e/0x3d0 [ 487.482135] do_mount+0x417/0x27d0 [ 487.485676] ? copy_mount_options+0x5c/0x2f0 [ 487.490183] ? rcu_read_lock_sched_held+0x110/0x130 [ 487.495300] ? copy_mount_string+0x40/0x40 [ 487.499562] ? copy_mount_options+0x1fe/0x2f0 [ 487.504059] SyS_mount+0xab/0x120 [ 487.507608] ? copy_mnt_ns+0x8c0/0x8c0 [ 487.511589] do_syscall_64+0x1e8/0x640 [ 487.515497] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 487.520452] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 487.525730] RIP: 0033:0x459829 [ 487.530206] RSP: 002b:00007f0241e81c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 487.538316] RAX: ffffffffffffffda RBX: 00007f0241e81c90 RCX: 0000000000459829 16:27:35 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x3000008914, &(0x7f0000000100)="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"/273) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "c22df7", 0x10, 0x21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x3800000000000000]}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}, {[], @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x2, 0x2, 0x0, "0087ae", 0x0, "ca8345"}}}}}}}, 0x0) [ 487.546233] RDX: 0000000020000100 RSI: 0000000020000040 RDI: 0000000000000000 [ 487.553599] RBP: 000000000075bf20 R08: 0000000020000280 R09: 0000000000000000 [ 487.560877] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0241e826d4 [ 487.568253] R13: 00000000004c5dcf R14: 00000000004da870 R15: 0000000000000005 [ 487.581375] 9pnet: Insufficient options for proto=fd 16:27:36 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x8, 0x4) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)=0x101) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) getpeername$packet(r0, &(0x7f0000000040), &(0x7f00000001c0)=0x14) 16:27:36 executing program 1 (fault-call:4 fault-nth:22): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) eventfd(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 16:27:36 executing program 0: syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="cefaad1b0100000001", 0x9}], 0x0, 0x0) r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x8}, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)={&(0x7f00000000c0)='./file0\x00', r0}, 0x10) 16:27:36 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r0, 0x41045508, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7f, 0x0, 0x200000000000000}) ioctl$int_out(r0, 0x2, &(0x7f0000000040)) 16:27:36 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[], 0xfffffed5) bind$netrom(r0, &(0x7f0000000180)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x5a) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r4, 0x0, 0x1ffffd, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x3c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0xc5f, @local, 0x4c}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0xfffffffffffffffe, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000280)={r5, 0xe8, "f852d5ed49ddd21d940ce52533dc18bf35806152dec55adb0783f735a4e68fdf5102753e680bd96051c180c9e2b43299f311180592eaa3847e2653dadcc17cd71dba8a215b401884eff6addaa740ad72be96b7801f8fbf30ed1c5a3d9babea6e5b32e68260c100fd4aae0ed8d928983b890dfab576bb74bb2cac4f395aa1cb7c2f76fe96aa09fce8d59caee75dbc17350b64d75908d3bdc8f86343ceec11fd6ff3d421d2e60e3aa7e852c226fdef81846afe7ea27996ab97e2e7ec71f0367d8265cceaa366eddeb440ccaf93abe5037d70d561199429fecae83714869e84f5ab2f3c1a9b7d63e4d4"}, &(0x7f0000000380)=0xf0) accept(0xffffffffffffffff, &(0x7f0000000700)=@ipx, 0x0) ioctl$VIDIOC_OVERLAY(0xffffffffffffffff, 0x4004560e, 0x0) 16:27:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x20000, 0x0) sendmmsg$alg(r1, &(0x7f0000004a80)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="b3d4534fb843f5627169cf1a5bd6e4a7e552115c50c40ae50ac83d547b4d7211ceed0651872eb5c29407f47860b3d4453dbaaf189126356f66d68c3d1ca9db86", 0x40}, {&(0x7f0000000180)="9e633f2afe958ef4e572597cd0e7df5f60affc4c1b713d726f819512dd431dbc8b9fa9859a9ce570aaeb8b77460b9f5862eda29d87a0946b1c96d4e60a4ed7cce12e17dea23cf39c71b1720c2a03ba060315b390fa72b3e717145cc5c6bb7994d8c5223939edd76fb1493bf243f9e168a3a7c0aaddfb6ccb67cbb08facb3c8af7d8db9d27cb0df98c5edd953665d1591b0b757b8cbc5382f80172b53b94871acd0cdfe924213ca2b27901d32df4002ea5a73e2162434ee370222069c", 0xbc}, {&(0x7f00000002c0)="1f594716363fc877d8d869f5b1151dc3afc5298dabd3bf4efa0cc30f6a2384257dca04fb96c15fe441e74941ead139c97e8a9a3c3dc9ff7cfbbb74e57d0e7e039ce1105983145e83a427c476ee69656661fafe2a7faa5a3f6ff3b778ef732368e5be1c5d9754d30ce46c797aaad404b4c29599020955add5644a9d3216a57ab7d131a0a09b7c9582a132deba43c26c5cff227faa9cd19b6169ce69c58aa5f17ec68981d7ab9229f5baf3a068fc568308c1b51d859e", 0xb5}], 0x3, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x3}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x4000080}, {0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="20f5f7d6f8f4aa30d8c4caab8bb5b4e2b2c48a4127c6d77327e8b15fc7e547a440406de2d03cd56b88fc1a0565a2aa748060e5ae303dc6f81120193555a8453b348ec4f58c50b2e0b35b81619c228a1cdb1c27781690940e36575afcfb225d37a501010d61a186a8fd9054c30448d146afaf4c4e79ec68715efe72b92b4d283fcaa5fc034a68de87b57b8e04999310b6a23eb9b51a3ef48df1142a5acbca9c1fd5c635c535822743a21c10615fbaeb8c79c20b0549c44fc49d5da24dc5fd717854602acf6257d510025222c0bedbba41053a28fa6261aaa8315f9047db28e696728451de7686cdf21cd09c643c88b24640734094605fa2203ac032b4", 0xfc}, {&(0x7f0000000480)="cc01924ded68d9929be2812e6fc306aeb74af8c2d8040fd34c6ccc613c5dfec1dfe56dca8e56da57d1e5dad0c87424ab0e5fbad445a8f2760e595f6bcb4fa095ed6e61c98855f1e7a3f47dec81000638f1eefc3d428345222f9093f3464f7575f079f1aed72f6d485fd46e87db142675178016add2db6034c9bbc8bb7c53217bb187b299a7c25c028da64d3675db31eabf6f7fc5554b619e1e502c54676d8f4426d3", 0xa2}, {&(0x7f0000000540)="dea7eac74c400e361dda35bfa4fb4300c93118e8a3875df7aba1a5bcc6424096a0860118c319595ec2ab7a7ff758fd0be0bbdbea6e85f7498434ca24a76b9c23f98de1550371cf84fe54175ab9db690ffbd31d21c528b408ddb633874bf436d52e6368f8cd0f247c5143bf4846b9637e8d09750e306423604d7e497023a6", 0x7e}, {&(0x7f00000005c0)="aeaca4e8ce3530a6228867d16433540f2e85eafbda95c368dd210192687b8a622e9050d0638588f6d59688e2f9dc007c6933d56747ab1d48ae0258e7e6d236372d75fbf35b3e7ffb045728b50332d59e07e06f4785cd4fc0", 0x58}], 0x4, &(0x7f0000000680)=[@op={0x18, 0x117, 0x3, 0xb144b90ec5aa0a10}], 0x18, 0x20000801}, {0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000006c0)="60cae5885513aec0828b1d206c1e4e347551a5fd425279d18ef08af8ac2043fbdd040e73b6201fa73c0a587b12dac0a508a5a150d91678f74b62407ce7546c1290ba8209f8601636d284aceaea4525f35c4873bf439065fd8a90dd95eb6c626021b661ed1bd2692ecb9a4e9a", 0x6c}, {&(0x7f0000000740)="efa09f912317c03ed68a14c2c842ac4957fa7f997d270655705dea79c2bc14a8", 0x20}], 0x2, 0x0, 0x0, 0x80}, {0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)="25e13c08bf4faa4ca15a460357dd04781511588db8faeb2243a9dadd21a1ba983ed14c1b236175d2fddcea054eca100317963199a1981a2fe745d90e05155795b66f23f7654d50a9bfd7450a7ae2c755989b7d", 0x53}, {&(0x7f0000000840)="95809289aff5d8c54a174d42736b6a2a702c33a16f85bf251b30a21dc2b4eb045ddbf4b5bbcd2c49919b41839255125b1b8b76f897c82cd2e66d17de65", 0x3d}, {&(0x7f0000000880)="11f1d20d7257d28a8ea6825130ce9292f06d77e305d61995de34739f84bb2e6f0605ba5217", 0x25}], 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1160, 0x8000}, {0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000001a80)="6222bcaefd23f672c07dd3056af53cdf5ae47b295ead6e572cfd0a306c9468cfc2058013bd40744c370713ce4e364537ad700a3ec7a7bcc1dc4acdab8ea9b418f6101250ee9520b49062cac132d6c10e01be840716625587a8616f6007cfbfc77ddba22ee6d1", 0x66}], 0x1, &(0x7f0000001b40)=[@assoc={0x18, 0x117, 0x4, 0xb9}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}], 0x48, 0x20000000}, {0x0, 0x0, &(0x7f0000002240)=[{&(0x7f0000001bc0)="e8c4ac7630d0a94c4e146e53bf02e02547acd722c175aa395a9bf4d3924bb145ac2ca0bdeea9b659cfe5a8e121dd5587c9f18e637708307738ef5630beee4b6d4dacd3cdc2da2179b33185b2e7e33a8c166121359a6d047212c6c0067462bef3ec5420c37d8062ccfc6e343174fb407edb823b66a25bb4869d0c5deca323a2f95a30907f466994f93932a38b5b4c08e23ffc624416f61c8a533562943241e593d9cc795a034e71aaa3d5b214193d2a17610f057f02360c9d185179", 0xbb}, {&(0x7f0000001c80)="04ca8b8bbaaa896b2ab2eb64975359f4ccdcd7add47ecfd37709ee7b52ad915500a81626213653a54b22fc987230afb38761c6f696a12376629116c4a3d3ccc9771c", 0x42}, {&(0x7f0000001d00)="816436360e134c6e4070704434eb8d733c8bb15eef9247ef7b34c00a4f1b11e2d7686e0b515c0d3e1ed460db88e572f9e121c31e0086a6273a69706c15b0e4113a86be64b41213b96922f4935bae41e1374e02fa475b76083dd14f3d21c10759f01a094badd96b6c6f0989974614e151e8a3b012e96e577d37653a0e7eb9861c70fbd3e4473d5fb2d224d17615416591ea9686baac130d5b712931c7a99240bb165dd163fedb3df839cac1d74a0236", 0xaf}, {&(0x7f0000001dc0)="6e660d852bacf7bbe2479df45c2187caebe333e7c8349dddf114394ad3fb78cc1597593cf4cde545325a2ffe945cd2a1c6453887c181bda2cd345b8d91507fe3c2fd772007c8dfc517834967460a53e298c299982a93f20a1201258c53cb762820f81359e1f7fdea24893a44fdde61d2ab65ef525d082151f6cf0c0ea018f839bef6b3b2cb6d45ed9327596388a1e0b24bac5c81a07966f62ea6ad3f137622ac32cb53ee92cc335b55b07c205bb71208f84f485ccac9c840b17585ce992a1a65c443a549ce3efe", 0xc7}, {&(0x7f0000001ec0)="4373b49e40925909e2cf17389f15bbc2d77047ea93782b4a1c36948f71c16f3fc4c1153353c5b8006ede99c0435563bdde0bb3765583614376c59c446c9c89b5c39e22f974fc293b637bba5d21f2fb60222030c2c4e37f71804044b4d8c180eb6f69da5242e1600fd18ce08028324e159a2b60d872c8bd50996dea56b4fe88610d2806ec53ce556ca14cd31be11cef2fe4596cc50c89ee35dbeb1292be340fdc8cb046fe54e153d3e377f03451f2b60060e8187cad354ab5536ba40a9a76529fe5332fd76c9e85e1f24c25fc1cf9", 0xce}, {&(0x7f0000001fc0)="50fa2ac55615dcc320257445306e4bf039ef94db58e341df9f5dd23ca4a0899b09939843c366e8e2904b45fe894b019097b070928870169fb287ec125e9643b4b66d96bf03b05a8f88f652a20f81d172bc81827051dddf5d30effdb26554cbed05a34c8256c0ff5be4e7d6919393857ee664a4905ece0f1de1310b4ef533d0c9a4f00b9c240f12a9bbf9f1c25c007a19a93ca0be97c8c6aedff217d9a938952dd5fbc5e9c89c0d23dfe751a959faf7a8dae77735432cbc2bd766242075d5d263431f83b3c23563f2ccf9cbd7c4638c23407bf490f76c211da31fb070b04948265fabbecb6a79ac10d845d67a844c", 0xee}, {&(0x7f00000020c0)="44eb1d737b823d15ec62ad68aaad2c7783afba2e9bfd01f91404c1347cbe5c345a4d0c5d19af75eeb4177e583293d7440465bdfc50f79ac0965bbd612ddace99e8f56aee28553a3f996c97f458570f31b0a8aa507e24c86b20cdd9a686f0a73c584d480bb00cdc30015d48d1b62e108533a32ea31d30ceeffc23590716d1eb49bdb5547ba5095b25aeaf174308185417107f0955a27458eb1f30c509c477437e43309df62ef1e2c1f499067d1ed8ea6194cf19eae2e5fd436e64d949e8fc5743084e8aa1c90aecbc9f2aa70c17d8035c503dfb9787a382c71cd2c0aa2a9971863c9380dcfd99deac291abdd32486ad53033fd71068", 0xf5}, {&(0x7f00000021c0)="58f771f09cb8b201b2eea02c7a4a39f0596e09c899e61260cdb7b3dbc314f0276ba16035cab7d53363d77d109a3d4ad515f620b0636017c9fa66d7fb92f49a8780734c8e35be431e42594710d0346e8bf5e84d74628ec2e715952ab4a47cc0df4933", 0x62}], 0x8, 0x0, 0x0, 0x10}, {0x0, 0x0, &(0x7f0000004400)=[{&(0x7f00000022c0)="2f317170ed673cc64e9b7440a1661da45ee8742d01a4478eb61ca768001a0ffc11e4fccf2bc238c7f991b1da7fe10078bb638899a76bad38624499af0588a3077a6b4127e0d7328e5b4d782db01403344d50be7ad91496a8884e91956be30421f6ca3f15ed4120ca2e14d601fa908ba54ba124efd39331bd3a9295bf6800e19ccaa7a584b3d26ac8f47af43e6192d9b88fefa754d89eec77be4e3e30e9f4c1d69fd617cc547a31a1aa85ca8dadc79bb73c399d2a204102c803c042c1f9d703fbe098efeb564c8c1636082dfbf4b6179ab2738d0a43a0edba843d87a192be8b5e441cb098b938f12396d65c1eefdd0ec3c0bde00db4626f6c9a5a618307d23309a637e192ad41f69c8c97bfb60eefc34ae22c336b85f12971430cf8a99aef737abd0d5d62e11923a0c049f4eb6c65d80b4d087ebc66867f99f4d45f4ac2754befa1119dc7321302a191b954ca5fae32f4869e34ad47adb1d8154bf4b485fe5d0fe4592dee7c365c685fb75f16c80f12a73f26982e11109a28e0ff001fbfafe5064b54fd4a9e83aa75c652e7add0e70a373e3e0090a4e398748c6bbd7282922fcfe681d2694871a4699597389fc4b90dabb885d35b3ab8537a89a6dd0d96fc523d80472659ca4ae90fdfdcc49f1236d39b83841ab608290d3641d079b4378836f4984b5239345e5ec1df0beadaa4d2959bc7317e12f0b1aae1c04e895dd0dd7e3a3e0bf6d166226b3705806cc150be860eccba2709fe4fa22c66446cf219e66cd3e5207709817c12d9d4a424c2a301c66e0db2a7e5e35466b1d57e8d122dc5ade8dc82770ab14ed4f3fc8297465f58a000931dd27d1066f6ec35d04493d27bf56226f80f21158474ff74898b951ba3a2bbf758862f93c4c41384061f5f31d70c248c3bf5c3f049d794b991da8000bf27a069d3eda4b54bbc0cb95f02ec3573ef84a27f66e168d672f3c105986e8785c67d20a5fbab7ddf1a2db8262ca482c9db0375f79ac09c5b83818f5fa8d79d21a29ddea536f9edfb0823a1759b2ca0f4d39d422808ce8972f201b1350eda461040c6e43fa02ad820d51d0f1d3cd4cf66a83572defdd38c215354678adc37246b95ba74db35161268ea6ef84842669954b967a7bba67e558b66d934943f61a931801f47722abaaa6f3697175b45b7802e600b8abd4a611ed478fc87319c7df03b896ea6bd8f2c6c21ba6e4d5d069e199261463774b080be07028383f486538296c6d78f5a6494133ef5b80c6c3326848e1e60c855bb6848b664855d78f18bc509e3592d0af85c4a70e3cc6819dc9df54baec8b1079a20b8b8ec4dc60d2a619a68687623d62dae8f19ae883eb5b91e6ce594aad74d9477e2da477ae4183df5b495711a290e26abd136846381907f67878327edf1dbefd57d9770ce7689226b13aa2b11dc43b9adb221e77f6c6ea8906c76e02647b6a9e99c7d8a6ab448bc008ddc1161ba4539388cdf9cdcfa4498723376a815029a35ff61fb78ca4bbce8559d6cef3cebc272aea862c2a7a9ad4877e9e025186b9aac5e18083116a30136ea8916ca273c09d03a12c8b6384a118f6d5b6e76c7799c8ef64ed759c0efba1f565c9fa12e005f7daecf603468c7efe7a039ef69abf80663e6102618ca5c312fd6284bfc2b126f3a9ebcaf673903eb8b1f5172f2bfdba415aaaa1e63e04f00603bf5954c41e68484ab86aea4211d0ba1fddd8fca8e6e32f8423203192312ca4bd5c20fa18b035d7c273ca7eecc8003786eccc1b9fd561fd217f5a9cb3df45b107f27af2391c1de80a52039a42a2e787558df022fcd91422421832515a98405dd301633f300cc426226c9b6aa4391e1ed3fca69df87595506d6940f612c3ca31b3693d51487ba399422fb6a1f193fe6e88849700a3265f490fc219b6473dcb8888f8829a609580cc5847eee254133dfd50550324c3c0639dd5c5c661c1dc22748b3d8f028eaa3afb3a15f394651093121b9ab160649eaa7ddd33a353a69fc075191d1ba0fb11e22c00d5547be2f26a2e9af05885687e95cd1587334abef6ba0697b5bdae0987d6bd081cb658cb13d559e79ce57db83b6960443b389312716a35f2393a4675ae8d3c60c8128bc269045f1d063e06f6ae1bec6c5dda02c4b45728e3d78b01ae6074f7b1d87d9753357d0f805cbd578d5995cff385e0d866a3858da10c1477852a4bef0b33a32ad535f3e244915abdeca4e60ba440110308e5bced6a2d43b8309967f00d70d1872e3bcbc0aa3b9bbc30563aa0e11ba6c3995a36252fc337481e6751ea1431e081ad0e18549f5056850edc001f561010858da89f0df63e2629307823f72693cf94216615b997b2a81052b84d9af159dd703910ef186be269a53f10b5c558636fcdce316457f3b71f6d37a4bcb80d916875d61315d8c72c5cfb09391b997e321296cf600fa0dc4e9d1a25a350b611f5824267c6c5dacfb187085dbe23445d3a4e8f1f917fe449813fd505f604cb9d73399f31857bf1c191b600b82da1b5d827445da3037d091dfb06a70f68a1cf9263bebb9c434b70cee9a17175e591e0886e7022ea476d956b89f8cd6e7849d0123b75455c01eaa13e659b637e128cb87f7ebefddb191d33da2638d38da286896f580d856673ecc3b3152dc4d85e4e44f2e4b5e97670d18ba32fe624212299a3f256833b29fd5bfb55f28f9691d302228be18ac4beabb772fa9cdc1eaec5c881606799d257fb97d912d513e09c06419fbab80bcf04277f67ad02f30cdb8e59b5976219a6fb99c9fd4076517002b87104fffc83cc890400763dda5120cb6cd6e15f3493d462f1d49ade6b512bb450ae9acc0589e762fad8d1657111fb96f83c0077f09de51ee016990155322ae6e82215a0f1ef1c91aba406e21a272e7f5deab74d1b6203445d1a04cedba9102ed625b9ec58bc89df61ad230db45769acdf55e61bc0f192a4548d5fde95c07e6bfba4ba9824c737ae5050f7a77c6c92118a0ee906597173b22242011b5537e744029a3851ecef60cad3837d10607cab2e7e1e31dae3bd2c9cfc0e8287c7a77b5e6d11a4e7a57168711defa09ca0b06c3b77deb6629cf493ba7b8921904e451ca806c5c5f231eeb80e13bc4204ae915446c6a722ab618b95194a4caf2ad44b01742d687de777f3c6b513ee594da70b505c02d7c72510820175181206b453f38198ef63fd852ed8c53a88ab6c5d868ba3d401eb9fe49975c2f8420344b3cf26411c4ccd8463e7ce5c2683380a4010c269dfa3902fb70967c52fa7847b334f1520579ae768f95fa2316353fde6535be5ceb38f8c47bf6eab1440954c6cd494ccb517d013b3205a4011241448c6e10e6ac67460b7422dd1b408cd2a5212896d8d24bfb34fe7005aa724872f3b600c220c374ff5d23cac10a87ba406445266c1e1f290c05ea6a04b06a763fa816a0c808515e3a83d23e06ceadd6a5bbf2e0628142e8eb8204e35119adfbcd7bf5357c921d2bf3e90252e0fb7453bfae77f67226379a2850baa17614af215fac5ffdf11086c340dd15ac47aa31db4110f345bdd3dad236e2563b8afe540ad3c8b0ca3807292575160c4551f0120c0d261be41617717aa1591a657f05889ea77b9b047a6cbf1df660254f68d8eb9f5e07088709190d52240a8902c3ac5e0d9302db245947fd08d3e7c46ad9d34153347eedc51a4879a2f621a584d39560e1f2976a1edf68063ad43e09bb3be4f5f013aad4a2c132951ae967658441cee55a47121443ca09c0c72aa6a9cf2726deb719133fa3ba5323b0d75afbe8568aa77ed51295216ce2b9ec1e6a66a6791edab0bf14a500fcd0ee1019852d548a7a4893dbb43669a72ba25a88da13697a6954cf1fed8dab88fa065d55976f2120d607218bf77f7efe3dd91e7c0c6e68dc48de7ee147d5db7769c56d945b2b90045d3143b93b19be50c397915022497f0bd339fbc365e2b5af89d2aa91d2762f643d71f448d24765cd2c5bdee51484d17d38571c43726e48482b8302f37e3e9ccfa4443cdd439ce3f8bf1fcd80a17cdb0ae4c3b08eb36d216391608cfe12c016576627eaddea43c52dd485bac1b020ee1c30c5e40226e2a7114479ca07ad85473721a65d24944ed6afe8cf8f54ec63d61abd21e0d28ec648341d0f3976a0353fca4b3c13f6f8787561173f5ba89bd6f2d208ceb1d39ce0df6d373436ee5a9c6c4a7b311cf54b82b5e7a838351c8ea80a70cb061a38fddccc4179779d8f874b1913ecb1c7c3d5ed4fcb4b6f05ba7861302ba8914886d01dec9c1d66e5236676721847be1d27f8e79ee4c8c700f16799315eb233d7feab1c7b4093ab831454059b99b8ce0676b99a5e48ccb4c5949424562bd99030a3c0c9ba8c04c7842e9fb5fae62d59b6c9a36f5f58cfefc4df092a86470180854dd18959b6d29256b0d6dd07d95eef96793f7da5298db7d6a20a5811066a723410f9cf5add9e4f2713dc159ff4a5ce6c609d2b5d14d061702a2cfded2022c005652c1b58efbc3bf49adeee268379cbb4e2aeb31f903225e2213b0a0e120c9e7191e3bd92bddbb9357c4d20aa8733e9c1483dbbbf4773720974f715d7503f6b45c7c9ee44e87cc3219d8212ead955254e2d4c40a7d60141a14438567240f2a4cbda0378a8a3eefb4660b560b7bad327665a1cf18ace55098550890cf090f3f77d31cdf9e36ed2d9e1861ebc24aca7450f8b3515c3a7e2ed345d28be8004ed87eef4046522584e29095d03b5452d32fb1c28233ec7f7662243909d079243c4ab3bfd9f7fe7c81e3d841f0b992fe379443ac16690d91d4d64e278fa56e8da1359b2fc5bf42c2ffb3848a8193abd4f775fbb07575e9d86397c343c98ad93d84bc212dfcee5748998d254ef69c9cc92645f9e48011014170f8abb9517baf90a472a59674fd017b1f0be24f4e152617439f67b5cd4a9ea6743957be59d3c3cda4d18ebe82be5cc04c13e79b6fa3f4df9f79d8fd915a09d2cb80c180e00582da7fa35f8ddf49575c4e53bb841797721bd7d059bc35378dabfe34aa4e136a833bf8984fa033bfb5fc1038cf8dfedf6576bc110ecc9b483e08ca707f5702e292cefb2c27e0c6802573d1e807dbba842d26db6b54bc3e254306dc854e382be33e1eebe7b81ed450fdbe45d4b46aa070f20d901e1d334e43d63b0901f2eebb83df7e1165043e6dde2d06cc9d078377e95efa0a919d06c96ba3cf8e3c1ccdccc706596e0a8027cd011eba14dbdabd4f19394c032018bb54e2d3e43785cb25d19ef11ce13eaac70d25bc7e6a9653a91721e9357f9dea398e5f5f9a568c6612e4df359cbe76e07742b2f8789b76ba958fb3d30e1a9ba78891388f99c653269a6b3e75f70b9fc02bcf56e8f5967aca7f6fd26dba673af18a6901325a7eac75cf34b87892d5bee977f80e536b57919c7f202e02f66a94bcc38befb43d3340c01eff4c54796d707d7b6b7f86b5d4fc9a477821803821401efcb4c0fd8597fbfc4b5121b82c511828f4e3c8af81f680eb599e376eeb41525d69edfcfde30eee29cd0b7f7a013d07f13a02dc8ac368972a54da7dde99e2726db78fca18ab35afd2ea1f6ff9add28970dd5d1b9128b22ed1ed092119d9891fcd025ba970951c4914e48db83d6586c6eff2a3436f65d80fc7cbef649d38a124dab1300ab78144a8cde35e85bf9a7b1acdaff8d1224f4ddb16e7b690a42d12ba3755fd3c8b5c006eca842058e157ca4bb99466f8812916fb921d36f807ac4cf584503cd09859ee32342beb0f63023d0cc176877a7c516660ebc3d46adfcc324d74a6c286b4d7a4bf5ff64", 0x1000}, {&(0x7f00000032c0)="7d7f9533f71d8aff0511aec3fb2e42be3f3367e0ed565525236967d7a4d0afc0feb80ddee460c2d4bd9437013e2c34d8ffcbad45e2c7164adb6a0df0eb4116367839102811993e91e1bce6c189c60e636223bd49c8230d54533e7ee2d377d4cc9c60a632437a53dea934d7b9d6e3c96c5192735bef290126dadf066fdd0374ff5b1313e91634957b669d0b3c5558fb5dd83a3fa2e36898e6877dafe835fbee2beadb553489f6d01841e5c3c35ccad7fba3c1821871b9ca0b08b6", 0xba}, {&(0x7f0000003380)="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", 0x1000}, {&(0x7f0000004380)="b27ef8dbb3f2b9428d406719e4d527821c88b474501518b81c8a0a9e57d0ce4e69e473c3707344895c3676832752e4e5ea5824fdf534da61075bff95482c68478ff443fa9865dc69dd1329", 0x4b}], 0x4, &(0x7f0000004440)=[@assoc={0x18, 0x117, 0x4, 0xffff}], 0x18, 0x40}, {0x0, 0x0, &(0x7f0000004900)=[{&(0x7f0000004480)="f54990947c842d4b933254dbb655dccfb6bd8afc97ba29e28b99f6fa90a788c4a4", 0x21}, {&(0x7f00000044c0)="010528845a54c735350903bafa01140afbeea26e8410a936fb55be264921689888cbbee0258f8cdd56090b5b14e4235a189c8cdc6c37fceb9b63c490cf1366", 0x3f}, {&(0x7f0000004500)="d42cc7bf7097cd1e70a288548c08ec45f43820c8df4436ad2ef07f6e81a1da596ebbc68e8818af2445df620a979ea3642f263596b16b1d627c25305739990280885963ef407d3e3babbd4c114c1e69a44400278efdeeba59d93143ab15cbbfc3ab251b4e090a75ad2277fc35985747653490b7dba8f5f6ef9c5905a10c", 0x7d}, {&(0x7f0000004580)="e5280285b9e4c2dce4ccb93683b958ab871ab119676bb919beb29bfca6817c5e11e160a3dfda5d4be36bff887d18510fa19bb52a3a04ed9c9e60887f119c58f05e7d3b75ce060455d1f7a1fe9096a5515a87ea15a7c2e3b89de87383043713a7d559b588669adc52cbc765a764ad6866e89d3671babaa8dd9d673a32e6b89f4a9b2e11f5cb62f3316fa52d29764f065698ea6346f2e95891aa37f8e0d519f021b7c23f78a03d30a3b9344dd83274eceda5f22d45d285c8b734071164db848a0b87b396b56515bfe670c5e81216443b2ad0069e7ca6407eb3761bae507195676e7ab2f53c51765cc65f", 0xe9}, {&(0x7f0000004680)="75c488d6b3b2db0757d089df4b9f5d25f767c4c312bc01b1bf0a78ae25f41c084145ffc7b1773342fd978e2efc303e04e902b1335f7ad3f3a6a7d3d2fe93d91e182e35f0ae27fa19bf69e4fca3b3394df1618c157f14e03e86707a71c3f0446e6a6ac156e692589d7d29069a9efd60e88d84da9feabf6453f3ba", 0x7a}, {&(0x7f0000004700)="f8c406a238da69809bb114c0ea4a0174c110f53be03295b17ccf8b4d701085ac5425c52e7d72c82c26c708ef5b0a7bf61328c26977552edaf23f2a7c28f25b4ba5390dead108928f3cd2e9af9b93eec90356b570ba40abcecb82ba23288ed41249ec34bef32016e8f3ea92a10178837740d94f182bc2105697c50e14735fef56fe703b595ddb5ba79a7ad48187248ab6df7e5f1c501df6927a40641f07f5cfbeada9f5c39acbf3ea4753b31cdc6df4d3554b55a144c68720156674bf3cd339", 0xbf}, {&(0x7f00000047c0)="8a2352a7f6348608d1e26101ac04413feee9d8f2e115c9750324351607749fe9d2a539c7c1a537f088337d5f17cbc99251e16053a77fe81711813f06ea665734e3a2", 0x42}, {&(0x7f0000004840)="b99bd9cbbeacd4a9925bf46a881f97eb4be13e90ef1d352d6d74498e0e8df0d33067a6098f3b0daee535d43662876ed045689b960ef4b1db739711b8590ec9b0b6c408e6ec5fe19043be283d45fe78ddec44c439838bee5eb52faabb63d8212848", 0x61}, {&(0x7f00000048c0)="75cc052c3c4d7cd2ed5d3dbb45f9e9b6f59533e729a5694f9e1e815afabadeb8f76c040a264fde45544a7f931ee6131b12b12bddbf03b7b0d3093dc3", 0x3c}], 0x9, 0x0, 0x0, 0x20000800}, {0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f00000049c0)="84794ea653a780fdb8c8dcc3ddbabc6862", 0x11}], 0x1, &(0x7f0000004a40)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x4}], 0x30, 0x1}], 0x9, 0x40) ioctl(r0, 0x1000008912, &(0x7f0000000280)="11dca50d5e0bcfe47bf070") r2 = socket(0x10, 0x80002, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@gettaction={0x28, 0x30, 0x801, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, @TCA_ACT_INDEX={0x8}}]}]}, 0x28}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924924924924f0, 0x0) [ 487.907960] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 487.908710] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 487.921126] FAULT_INJECTION: forcing a failure. [ 487.921126] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 487.936083] CPU: 1 PID: 24428 Comm: syz-executor.1 Not tainted 4.14.138 #34 [ 487.943203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 487.953311] Call Trace: [ 487.955921] dump_stack+0x138/0x19c [ 487.959567] should_fail.cold+0x10f/0x159 [ 487.963763] __alloc_pages_nodemask+0x1d6/0x7a0 [ 487.968447] ? trace_hardirqs_on+0x10/0x10 [ 487.972693] ? depot_save_stack+0x11c/0x410 [ 487.977034] ? __alloc_pages_slowpath+0x2930/0x2930 [ 487.982169] ? trace_hardirqs_on+0x10/0x10 [ 487.986421] ? trace_hardirqs_on+0x10/0x10 [ 487.988358] BFS-fs: bfs_fill_super(): Superblock is corrupted [ 487.990666] cache_grow_begin+0x80/0x400 [ 487.990684] kmem_cache_alloc_trace+0x6b2/0x790 [ 487.990693] ? find_held_lock+0x35/0x130 [ 487.990711] p9_client_prepare_req.part.0+0x4d8/0xa90 [ 487.990728] p9_client_rpc+0x170/0x1180 [ 487.990741] ? trace_event_raw_event_9p_client_res+0x260/0x260 [ 487.990749] ? p9_conn_create+0x4c0/0x4c0 [ 487.990760] ? eventfd_poll+0xd3/0x120 [ 487.990776] ? p9_conn_create+0x3c0/0x4c0 [ 487.990788] ? p9_fd_create+0x245/0x340 [ 487.990797] ? parse_opts.part.0+0x2e0/0x2e0 [ 487.990816] p9_client_create+0x997/0x1120 [ 488.049903] ? p9_client_zc_rpc.constprop.0+0x1120/0x1120 [ 488.053416] bond0: Error: Device is in use and cannot be enslaved [ 488.055457] ? __kmalloc_track_caller+0x372/0x790 [ 488.055472] ? __lockdep_init_map+0x10c/0x570 [ 488.055484] ? lockdep_init_map+0x9/0x10 [ 488.055498] ? __raw_spin_lock_init+0x2d/0x100 [ 488.068415] bond0: Error: Device is in use and cannot be enslaved [ 488.071276] v9fs_session_init+0x1dc/0x1620 [ 488.071300] ? check_preemption_disabled+0x3c/0x250 [ 488.071309] ? v9fs_show_options+0x730/0x730 [ 488.071321] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 488.071333] ? v9fs_mount+0x5e/0x870 [ 488.071345] ? rcu_read_lock_sched_held+0x110/0x130 [ 488.071357] ? kmem_cache_alloc_trace+0x623/0x790 [ 488.071370] ? free_pages+0x46/0x50 [ 488.071385] v9fs_mount+0x7d/0x870 [ 488.071399] mount_fs+0x97/0x2a1 [ 488.109820] vfs_kern_mount.part.0+0x5e/0x3d0 [ 488.126931] do_mount+0x417/0x27d0 [ 488.126943] ? copy_mount_options+0x5c/0x2f0 [ 488.126958] ? rcu_read_lock_sched_held+0x110/0x130 [ 488.126970] ? copy_mount_string+0x40/0x40 [ 488.152225] ? copy_mount_options+0x1fe/0x2f0 16:27:36 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000000)={'bond0\x86\xe6\xc9\xc7T\xb5\x1d\xda\x00\x02\xff', @ifru_flags=0x1}) socket$inet_udplite(0x2, 0x2, 0x88) r1 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000140), 0x0, 0xfffffffffffffff9) r2 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) r3 = add_key(&(0x7f0000000200)='encrypted\x00', &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r1, r2, r3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000100)="33aeb3701b1dfba1ff7fa0") ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000040)={'bond0\x00\xe1\x00\n\x00!!\x0f\xdb\x00\x14', @ifru_names='bond_slave_1\x00\x00\x00\a'}) 16:27:36 executing program 3: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x105000, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000040)=[@window={0x3, 0xa7, 0xe1c}, @timestamp], 0x2) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000300)={0x0, 0x0, 0x0}) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000100)=0xffff, 0x4) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000080)={0x0, 0x8, 0x0}) [ 488.156743] SyS_mount+0xab/0x120 [ 488.160210] ? copy_mnt_ns+0x8c0/0x8c0 [ 488.164114] do_syscall_64+0x1e8/0x640 [ 488.168123] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 488.172986] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 488.178860] RIP: 0033:0x459829 [ 488.182085] RSP: 002b:00007f0241e81c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 488.189814] RAX: ffffffffffffffda RBX: 00007f0241e81c90 RCX: 0000000000459829 [ 488.197256] RDX: 0000000020000100 RSI: 0000000020000040 RDI: 0000000000000000 16:27:36 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r0, 0x41045508, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x2100, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000180)={0x32947f91, [0x2, 0x2, 0x8, 0xffffffff, 0x7, 0x7, 0x4, 0x80, 0x3403, 0x3, 0x3f, 0x1, 0x9, 0x0, 0x7fffffff, 0x4, 0x6, 0x1000, 0x6, 0x7, 0x1, 0x0, 0x6aa, 0x5, 0x7f, 0xffff, 0x8, 0x3a0b, 0xff, 0xfffffffffffffffe, 0x8, 0x3, 0x1, 0xa1, 0x400, 0x157, 0x9, 0x40, 0x5, 0x3e, 0x7ff, 0x5, 0x0, 0x5, 0x445, 0x1, 0x5, 0x3ff], 0xa}) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x1, 0x3, 0x1, 0x1, r1}) [ 488.204558] RBP: 000000000075bf20 R08: 0000000020000280 R09: 0000000000000000 [ 488.211919] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0241e826d4 [ 488.219189] R13: 00000000004c5dcf R14: 00000000004da870 R15: 0000000000000005 16:27:36 executing program 1 (fault-call:4 fault-nth:23): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) eventfd(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 16:27:36 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000340)=""/246) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000)=0x13, 0x4) r2 = epoll_create(0x8002) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000001c0)) 16:27:36 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000140)={0x0, r0, 0x3, 0x42, 0x7f, 0x1000}) ioctl$FS_IOC_FSGETXATTR(r0, 0x41045508, &(0x7f0000000000)={0x3, 0xfffffffeffffffff, 0x4, 0x5, 0x9, 0x200000000000000}) ioctl$int_out(r0, 0x5462, &(0x7f0000000240)) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)={0x81, 0x0, 0x10000, 0x8}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000200)={0x1, r1}) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f00000001c0)={0x0, 0x7ff, 0xffffffffbadbab2c, [], &(0x7f0000000180)=0x8}) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040), &(0x7f0000000080)=0x8) [ 488.293247] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 488.323408] FAULT_INJECTION: forcing a failure. [ 488.323408] name failslab, interval 1, probability 0, space 0, times 0 [ 488.333330] BFS-fs: bfs_fill_super(): Superblock is corrupted [ 488.372660] CPU: 1 PID: 24462 Comm: syz-executor.1 Not tainted 4.14.138 #34 [ 488.379816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 488.389456] Call Trace: [ 488.389480] dump_stack+0x138/0x19c [ 488.389501] should_fail.cold+0x10f/0x159 [ 488.389533] should_failslab+0xdb/0x130 [ 488.389552] kmem_cache_alloc_trace+0x2e9/0x790 [ 488.389564] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 488.389579] ? trace_hardirqs_on_caller+0x400/0x590 [ 488.389597] p9_client_prepare_req.part.0+0x812/0xa90 [ 488.389615] p9_client_rpc+0x170/0x1180 [ 488.389628] ? trace_event_raw_event_9p_client_res+0x260/0x260 [ 488.434746] ? p9_conn_create+0x4c0/0x4c0 [ 488.438899] ? eventfd_poll+0xd3/0x120 [ 488.442813] ? p9_conn_create+0x3c0/0x4c0 [ 488.447142] ? p9_fd_create+0x245/0x340 [ 488.451206] ? parse_opts.part.0+0x2e0/0x2e0 [ 488.455639] p9_client_create+0x997/0x1120 [ 488.459893] ? p9_client_zc_rpc.constprop.0+0x1120/0x1120 [ 488.465546] ? __kmalloc_track_caller+0x372/0x790 [ 488.470393] ? __lockdep_init_map+0x10c/0x570 [ 488.474900] ? lockdep_init_map+0x9/0x10 [ 488.478985] ? __raw_spin_lock_init+0x2d/0x100 [ 488.483583] v9fs_session_init+0x1dc/0x1620 [ 488.487917] ? check_preemption_disabled+0x3c/0x250 [ 488.493070] ? v9fs_show_options+0x730/0x730 [ 488.497507] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 488.502997] ? v9fs_mount+0x5e/0x870 [ 488.506720] ? rcu_read_lock_sched_held+0x110/0x130 [ 488.511844] ? kmem_cache_alloc_trace+0x623/0x790 [ 488.516698] ? free_pages+0x46/0x50 [ 488.520340] v9fs_mount+0x7d/0x870 [ 488.523883] mount_fs+0x97/0x2a1 [ 488.527255] vfs_kern_mount.part.0+0x5e/0x3d0 [ 488.531756] do_mount+0x417/0x27d0 [ 488.535314] ? copy_mount_options+0x5c/0x2f0 [ 488.539733] ? rcu_read_lock_sched_held+0x110/0x130 [ 488.545287] ? copy_mount_string+0x40/0x40 [ 488.549540] ? copy_mount_options+0x1fe/0x2f0 [ 488.554051] SyS_mount+0xab/0x120 [ 488.557512] ? copy_mnt_ns+0x8c0/0x8c0 [ 488.561412] do_syscall_64+0x1e8/0x640 [ 488.565307] ? trace_hardirqs_off_thunk+0x1a/0x1c 16:27:36 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x7) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r0, 0x10, &(0x7f00000000c0)={&(0x7f0000000000)=""/112, 0x70, 0xffffffffffffffff}}, 0x10) ioctl$FS_IOC_FSGETXATTR(r0, 0x41045508, &(0x7f0000000080)={0x1, 0x3, 0x0, 0x0, 0x0, 0x200000000000000}) bind$rds(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$KVM_SET_BOOT_CPU_ID(r0, 0xae78, &(0x7f0000000280)) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000200)={@ipv4={[], [], @empty}}, &(0x7f0000000240)=0x14) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000300)) connect$pptp(r0, &(0x7f00000001c0)={0x18, 0x2, {0x3, @multicast1}}, 0x1e) getgroups(0x3, &(0x7f00000002c0)=[0xee01, 0xffffffffffffffff, 0xee01]) setfsgid(r1) [ 488.570167] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 488.575362] RIP: 0033:0x459829 [ 488.578654] RSP: 002b:00007f0241e81c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 488.586371] RAX: ffffffffffffffda RBX: 00007f0241e81c90 RCX: 0000000000459829 [ 488.593648] RDX: 0000000020000100 RSI: 0000000020000040 RDI: 0000000000000000 [ 488.601027] RBP: 000000000075bf20 R08: 0000000020000280 R09: 0000000000000000 [ 488.608568] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0241e826d4 [ 488.615971] R13: 00000000004c5dcf R14: 00000000004da870 R15: 0000000000000005 [ 488.675501] 9pnet: Couldn't grow tag array 16:27:37 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) write$P9_RLCREATE(r0, &(0x7f00000001c0)={0x18, 0xf, 0x2, {{0x11, 0x1, 0x6}, 0x9}}, 0x18) read(r0, &(0x7f0000000080)=""/144, 0x90) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000040)=0x9c, 0x4) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000200)=0x5) 16:27:37 executing program 1 (fault-call:4 fault-nth:24): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) eventfd(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 16:27:37 executing program 0: syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0xc000000000000000, 0x2, &(0x7f00000002c0)=[{&(0x7f0000000100)="ba8a42ef644b7825adf5e83835d2537405b156c12cd0049d309757b133651f516b17475e229df8b999e2fd7bc04b3bac947b7a79f29348b24e6de2116110e043fb44dfc1be6253f6efd921979bf79fce8154d1e7a0459710079d00a00b2f33796b0b7f09022e9380d4e41df01e3e47d0a454a12756434a26edba0a3d5b0493214b10844abfd5fce5c6e55860c5b9bc608cf4ad3e33d4317a5bae9ec2d13995da110090e7c862c86ef5f699a8de7fb2b4e30e32624106c13b702a43f898b28d2e299039576590c65af639c59526c1b05abeb55524679a0078adfd1e96471202b42f72673545be5da7f08abb41", 0xec, 0x6}, {&(0x7f0000000300)="42320d073d1b218cd33d39dcf1e2511ccd379d4e1bd51ac51d2325a33b0ee850cb18bd89925ef25bdae563ecc8a312bfa9291b49bfd81f26d083ee44b0d03661cc94b53669e86a6b1ae1c876e8de3ff134466f99a2d0eb1ab7fd45ab3ea89cb794d1dea03b8784996f0199ef455cbb2f5d0301cb445dca8d914bf8d6022ae0d58b38", 0xf}], 0x0, 0x0) 16:27:37 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x8, 0x4) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)=0x101) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) getpeername$packet(r0, &(0x7f0000000040), &(0x7f00000001c0)=0x14) 16:27:37 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x8, 0x4) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)=0x101) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) getpeername$packet(r0, &(0x7f0000000040), &(0x7f00000001c0)=0x14) 16:27:37 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f0000000040)={0x4, "ded2d3a05cf472a340aff300db059fd4437742e3328141dd9da07e500d1ed5f6", 0x3, 0xff, 0xffff, 0xffffff, 0x2}) ioctl$FS_IOC_FSGETXATTR(r0, 0x41045508, &(0x7f0000000000)={0x1, 0x0, 0x40000000000000, 0x8, 0x0, 0x200000000000000}) [ 488.797974] FAULT_INJECTION: forcing a failure. [ 488.797974] name failslab, interval 1, probability 0, space 0, times 0 [ 488.820803] CPU: 1 PID: 24482 Comm: syz-executor.1 Not tainted 4.14.138 #34 [ 488.828090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 488.837706] Call Trace: [ 488.840305] dump_stack+0x138/0x19c [ 488.843942] should_fail.cold+0x10f/0x159 [ 488.848090] should_failslab+0xdb/0x130 [ 488.852062] __kmalloc+0x2f0/0x7a0 [ 488.855617] ? __lockdep_init_map+0x10c/0x570 [ 488.860203] ? __lockdep_init_map+0x10c/0x570 [ 488.864703] ? p9_fcall_alloc+0x1d/0x90 [ 488.868676] p9_fcall_alloc+0x1d/0x90 [ 488.872471] p9_client_prepare_req.part.0+0x7b3/0xa90 [ 488.877691] p9_client_rpc+0x170/0x1180 [ 488.882979] ? trace_event_raw_event_9p_client_res+0x260/0x260 [ 488.889056] ? p9_conn_create+0x4c0/0x4c0 [ 488.893374] ? eventfd_poll+0xd3/0x120 [ 488.897459] ? p9_conn_create+0x3c0/0x4c0 [ 488.901618] ? p9_fd_create+0x245/0x340 [ 488.905614] ? parse_opts.part.0+0x2e0/0x2e0 [ 488.910029] p9_client_create+0x997/0x1120 [ 488.914359] ? p9_client_zc_rpc.constprop.0+0x1120/0x1120 [ 488.919892] ? __kmalloc_track_caller+0x372/0x790 [ 488.924813] ? __lockdep_init_map+0x10c/0x570 [ 488.929300] ? lockdep_init_map+0x9/0x10 [ 488.933353] ? __raw_spin_lock_init+0x2d/0x100 [ 488.938017] v9fs_session_init+0x1dc/0x1620 [ 488.942350] ? check_preemption_disabled+0x3c/0x250 [ 488.947384] ? v9fs_show_options+0x730/0x730 [ 488.951789] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 488.957279] ? v9fs_mount+0x5e/0x870 [ 488.961002] ? rcu_read_lock_sched_held+0x110/0x130 [ 488.966018] ? kmem_cache_alloc_trace+0x623/0x790 [ 488.970982] ? free_pages+0x46/0x50 [ 488.974616] v9fs_mount+0x7d/0x870 [ 488.978171] mount_fs+0x97/0x2a1 [ 488.981547] vfs_kern_mount.part.0+0x5e/0x3d0 [ 488.986082] do_mount+0x417/0x27d0 [ 488.989618] ? copy_mount_options+0x5c/0x2f0 [ 488.994032] ? rcu_read_lock_sched_held+0x110/0x130 [ 488.999048] ? copy_mount_string+0x40/0x40 [ 489.003302] ? copy_mount_options+0x1fe/0x2f0 [ 489.007804] SyS_mount+0xab/0x120 [ 489.011260] ? copy_mnt_ns+0x8c0/0x8c0 [ 489.015155] do_syscall_64+0x1e8/0x640 [ 489.019073] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 489.023911] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 489.029174] RIP: 0033:0x459829 [ 489.032365] RSP: 002b:00007f0241e81c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 489.040247] RAX: ffffffffffffffda RBX: 00007f0241e81c90 RCX: 0000000000459829 16:27:37 executing program 1 (fault-call:4 fault-nth:25): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) eventfd(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 489.047959] RDX: 0000000020000100 RSI: 0000000020000040 RDI: 0000000000000000 [ 489.055247] RBP: 000000000075bf20 R08: 0000000020000280 R09: 0000000000000000 [ 489.062693] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0241e826d4 [ 489.069986] R13: 00000000004c5dcf R14: 00000000004da870 R15: 0000000000000005 [ 489.079865] 9pnet: Couldn't grow tag array 16:27:37 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) recvmsg(r0, &(0x7f00000018c0)={&(0x7f00000001c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000001700)=[{&(0x7f0000000240)=""/35, 0x23}, {&(0x7f0000000280)=""/175, 0xaf}, {&(0x7f0000000340)=""/58, 0x3a}, {&(0x7f0000000380)=""/239, 0xef}, {&(0x7f0000000480)}, {&(0x7f00000004c0)=""/120, 0x78}, {&(0x7f0000000540)=""/197, 0xc5}, {&(0x7f0000000640)=""/181, 0xb5}, {&(0x7f0000000700)=""/4096, 0x1000}], 0x9, &(0x7f00000017c0)=""/203, 0xcb}, 0x2) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000001900)={@loopback, @local, @ipv4={[], [], @multicast2}, 0xfc8e, 0x6, 0xffffffffffffffa5, 0x400, 0x1, 0x2000000, r1}) ioctl$VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f0000000080)={0x10}) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000000)={0x0, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e21, @broadcast}, 0x84, 0x0, 0x0, 0x0, 0x1200000000000000, 0x0, 0x1000000000, 0x4f63, 0x10000}) [ 489.165485] BFS-fs: bfs_fill_super(): No BFS filesystem on loop0 (magic=070d3242) [ 489.178097] FAULT_INJECTION: forcing a failure. [ 489.178097] name failslab, interval 1, probability 0, space 0, times 0 [ 489.197620] CPU: 0 PID: 24503 Comm: syz-executor.1 Not tainted 4.14.138 #34 [ 489.204818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 16:27:37 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r0, 0x28, &(0x7f0000000180)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r1, 0x5, 0x18}, 0xc) ioctl$FS_IOC_FSGETXATTR(r0, 0x41045508, &(0x7f0000000080)={0x1, 0x4, 0x0, 0x5, 0x0, 0x200000000000000}) [ 489.214196] Call Trace: [ 489.216805] dump_stack+0x138/0x19c [ 489.220490] should_fail.cold+0x10f/0x159 [ 489.224651] should_failslab+0xdb/0x130 [ 489.231177] __kmalloc+0x2f0/0x7a0 [ 489.234758] ? __lockdep_init_map+0x10c/0x570 [ 489.239275] ? __lockdep_init_map+0x10c/0x570 [ 489.243785] ? p9_fcall_alloc+0x1d/0x90 [ 489.247859] p9_fcall_alloc+0x1d/0x90 [ 489.251682] p9_client_prepare_req.part.0+0x7b3/0xa90 [ 489.257073] p9_client_rpc+0x170/0x1180 16:27:37 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r0, 0x41045508, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) 16:27:37 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x200, 0x0) fchdir(r0) r1 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000140)={0x0, "78b574f5d7c2930acbb1630ed003ec82caa676c868da5a7eef3f9d8e0d7a28d1", 0x2, 0x2, 0x5, 0xffffffff, 0x2, 0x3, 0xffffffff, 0x56}) ioctl$FS_IOC_FSGETXATTR(r1, 0x41045508, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}) [ 489.261333] ? trace_event_raw_event_9p_client_res+0x260/0x260 [ 489.267492] ? p9_conn_create+0x4c0/0x4c0 [ 489.271652] ? eventfd_poll+0xd3/0x120 [ 489.275561] ? p9_conn_create+0x3c0/0x4c0 [ 489.279755] ? p9_fd_create+0x245/0x340 [ 489.283773] ? parse_opts.part.0+0x2e0/0x2e0 [ 489.288203] p9_client_create+0x997/0x1120 [ 489.292474] ? p9_client_zc_rpc.constprop.0+0x1120/0x1120 [ 489.298064] ? __kmalloc_track_caller+0x372/0x790 [ 489.302924] ? __lockdep_init_map+0x10c/0x570 [ 489.307545] ? lockdep_init_map+0x9/0x10 [ 489.311613] ? __raw_spin_lock_init+0x2d/0x100 16:27:37 executing program 4: ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x41045508, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r0, 0x10, &(0x7f0000000040)={&(0x7f00000000c0)=""/79, 0x4f, 0xffffffffffffffff}}, 0x10) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) [ 489.311630] v9fs_session_init+0x1dc/0x1620 [ 489.311652] ? check_preemption_disabled+0x3c/0x250 [ 489.311662] ? v9fs_show_options+0x730/0x730 [ 489.311676] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 489.320636] ? v9fs_mount+0x5e/0x870 [ 489.320652] ? rcu_read_lock_sched_held+0x110/0x130 [ 489.320666] ? kmem_cache_alloc_trace+0x623/0x790 [ 489.320680] ? free_pages+0x46/0x50 [ 489.352956] v9fs_mount+0x7d/0x870 [ 489.356537] mount_fs+0x97/0x2a1 [ 489.360909] vfs_kern_mount.part.0+0x5e/0x3d0 [ 489.365429] do_mount+0x417/0x27d0 [ 489.368999] ? copy_mount_string+0x40/0x40 [ 489.373249] ? copy_mount_options+0x18f/0x2f0 [ 489.377810] ? __sanitizer_cov_trace_pc+0x4a/0x60 [ 489.383280] ? copy_mount_options+0x1fe/0x2f0 [ 489.387976] SyS_mount+0xab/0x120 [ 489.391446] ? copy_mnt_ns+0x8c0/0x8c0 [ 489.395439] do_syscall_64+0x1e8/0x640 [ 489.399315] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 489.404167] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 489.409388] RIP: 0033:0x459829 [ 489.412569] RSP: 002b:00007f0241e81c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 489.420271] RAX: ffffffffffffffda RBX: 00007f0241e81c90 RCX: 0000000000459829 [ 489.427536] RDX: 0000000020000100 RSI: 0000000020000040 RDI: 0000000000000000 [ 489.434800] RBP: 000000000075bf20 R08: 0000000020000280 R09: 0000000000000000 [ 489.442252] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0241e826d4 [ 489.449520] R13: 00000000004c5dcf R14: 00000000004da870 R15: 0000000000000005 [ 489.460464] 9pnet: Couldn't grow tag array [ 489.495265] BFS-fs: bfs_fill_super(): No BFS filesystem on loop0 (magic=070d3242) 16:27:37 executing program 2: r0 = syz_open_dev$dspn(&(0x7f00000001c0)='/dev/dsp#\x00', 0x1005, 0x200000) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r0) ioctl$KVM_SET_SIGNAL_MASK(r0, 0x4004ae8b, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"]) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) poll(&(0x7f0000000140)=[{r0, 0x2a}, {r0, 0x400}, {r0}, {r0, 0x4000}, {r0, 0x400}, {r0, 0x440}], 0x6, 0x1000) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)) 16:27:37 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000040)=0x4000000000000000) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x9) ioctl$FS_IOC_FSGETXATTR(r0, 0x41045508, &(0x7f0000000000)={0x40000000000001, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000080)={0x100000000, 0x100}) 16:27:37 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x8, 0x4) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)=0x101) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) getpeername$packet(r0, &(0x7f0000000040), &(0x7f00000001c0)=0x14) 16:27:37 executing program 1 (fault-call:4 fault-nth:26): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) eventfd(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 489.612809] FAULT_INJECTION: forcing a failure. [ 489.612809] name failslab, interval 1, probability 0, space 0, times 0 [ 489.644971] CPU: 0 PID: 24539 Comm: syz-executor.1 Not tainted 4.14.138 #34 [ 489.652230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 489.661601] Call Trace: [ 489.664216] dump_stack+0x138/0x19c [ 489.667868] should_fail.cold+0x10f/0x159 [ 489.672129] should_failslab+0xdb/0x130 [ 489.676224] __kmalloc+0x2f0/0x7a0 [ 489.679794] ? __lockdep_init_map+0x10c/0x570 [ 489.684310] ? p9_fcall_alloc+0x1d/0x90 [ 489.688274] p9_fcall_alloc+0x1d/0x90 [ 489.692063] p9_client_prepare_req.part.0+0x73a/0xa90 [ 489.698127] p9_client_rpc+0x170/0x1180 [ 489.702093] ? trace_event_raw_event_9p_client_res+0x260/0x260 [ 489.708154] ? p9_conn_create+0x4c0/0x4c0 [ 489.712384] ? eventfd_poll+0xd3/0x120 [ 489.716291] ? p9_conn_create+0x3c0/0x4c0 [ 489.720631] ? p9_fd_create+0x245/0x340 [ 489.724671] ? parse_opts.part.0+0x2e0/0x2e0 [ 489.729116] p9_client_create+0x997/0x1120 [ 489.733371] ? p9_client_zc_rpc.constprop.0+0x1120/0x1120 [ 489.738925] ? __kmalloc_track_caller+0x372/0x790 [ 489.743765] ? __lockdep_init_map+0x10c/0x570 [ 489.748272] ? lockdep_init_map+0x9/0x10 [ 489.752430] ? __raw_spin_lock_init+0x2d/0x100 [ 489.757196] v9fs_session_init+0x1dc/0x1620 [ 489.761885] ? lock_downgrade+0x6e0/0x6e0 [ 489.766118] ? check_preemption_disabled+0x3c/0x250 [ 489.771160] ? v9fs_show_options+0x730/0x730 [ 489.775579] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 489.781075] ? v9fs_mount+0x5e/0x870 [ 489.784784] ? rcu_read_lock_sched_held+0x110/0x130 [ 489.789794] ? kmem_cache_alloc_trace+0x623/0x790 [ 489.794652] v9fs_mount+0x7d/0x870 [ 489.798216] mount_fs+0x97/0x2a1 [ 489.801753] vfs_kern_mount.part.0+0x5e/0x3d0 [ 489.806328] do_mount+0x417/0x27d0 [ 489.809906] ? copy_mount_options+0x5c/0x2f0 [ 489.814396] ? rcu_read_lock_sched_held+0x110/0x130 [ 489.819495] ? copy_mount_string+0x40/0x40 [ 489.823717] ? copy_mount_options+0x1fe/0x2f0 [ 489.828196] SyS_mount+0xab/0x120 [ 489.831632] ? copy_mnt_ns+0x8c0/0x8c0 [ 489.835515] do_syscall_64+0x1e8/0x640 [ 489.839506] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 489.844368] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 489.849919] RIP: 0033:0x459829 [ 489.853117] RSP: 002b:00007f0241e81c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 489.860829] RAX: ffffffffffffffda RBX: 00007f0241e81c90 RCX: 0000000000459829 [ 489.868109] RDX: 0000000020000100 RSI: 0000000020000040 RDI: 0000000000000000 [ 489.875372] RBP: 000000000075bf20 R08: 0000000020000280 R09: 0000000000000000 [ 489.882651] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0241e826d4 [ 489.890060] R13: 00000000004c5dcf R14: 00000000004da870 R15: 0000000000000005 [ 489.900143] 9pnet: Couldn't grow tag array 16:27:38 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/audio\x00', 0x100, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000600)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000005c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000640)={0x15, 0x110, 0xfa00, {r3, 0x70, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x1, @ipv4={[], [], @multicast1}, 0x80000000}, @in6={0xa, 0x4e23, 0x5, @rand_addr="c33547f42194bb0a02b1b3fbcbf4241f", 0x3}}}, 0x118) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000400)={0x0, 0x40}, &(0x7f0000000440)=0x8) sendmsg$nl_crypto(r2, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x29cfc005d8598140}, 0xc, &(0x7f0000000900)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x110}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000480)={r4, 0xbe, "7a4855000238bd5307941f3010a9b806d62cb498871c593cec1fad0d9b1a63fb08a31d5a7d8f5a097b26d37f657cda53a4103ba7ee7b2c67d6a15d039b93cc8309114975c16cbfb1aca0e3717b97bd1e31fbb17e14c5fa903d9776390c8caebc9dd71dfed091b23acbeeab74e0e8c124407eef9270bcd2a54bd273eb6fea9602b269cff79ca383f297415ec7561572db23b806f69d43761d15c05b7ebac5ef638569d265d0200d8ee9793d72d8f0df943e0a96194153f0d8b26406002c68"}, &(0x7f0000000580)=0xc6) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r5 = socket$nl_generic(0x10, 0x3, 0x10) vmsplice(r5, &(0x7f0000000280)=[{&(0x7f0000000140)="820643d0619efd4da575766ac2bac30d69c97fe493451dbf52f123513e9180cd2be026484425b37b7fb07f0bc398139a62285bf84cfe66a6f81e7da82b7a7d159a4b37c84798d97871410010bd1a4784d0849cd24c8a0f19166b9bdb6c433a886f6dc56e3c52cc3a5ed9359beaaa924450fb", 0x72}, {&(0x7f00000001c0)="e462252d67906280f0f90969575369f1984edf6f7eb1962ec07018fd909f250655edc6af33bc0319d092a76a52d858e84f75c3960f7350d470f52b", 0x3b}, {&(0x7f0000000200)="0b32b72c156962b6462201d9bc0844641ddf2019e49f", 0x16}, {&(0x7f0000000240)="d6feff484da1098979d83fba07caf460f336d5f30f8fd8ba695b8c89280d25b8c7910c284b640d2f", 0x28}], 0x4, 0x2ad3469f096b647e) r6 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') write$binfmt_misc(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="73797a309409ab84dad28a830ed1322be782059965d2601eefe0a96f9a904399f03fb3e54bcaad23be2b2aa2472811c54038b0aa7874c74a3a42dd29ae6d2ef49e4c686c605473086ceb58e4b83f61ce955593f84a551102bbc02b1361458699c84731f12bcac3b328a3a6f96e59504bcbea21361d243142f187834480d245ee3e506b7ce7832d2c809995c134594e8f92e094a0e347f9ceb1b71c25884850e4160722fe236b171d3d45785ca3f1991f72e34bba2bf59dda642a45a8043005609e6aef1fab8fbe000000000000000000"], 0xd2) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000100)={0x0, 0xffffffffffffff17, &(0x7f0000000980)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="030c04000000000040000100000008001a00000000000800020000000080"], 0x24}}, 0x20000000) 16:27:38 executing program 0: r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x400, 0x100) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000000140)=""/179) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="cefaad1b0100000001", 0x9}], 0x0, 0x0) 16:27:38 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f00000001c0)={0x7, 0x100000000, 0x6}) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)) ioctl$int_in(r0, 0x800060c004542b, &(0x7f0000000040)) 16:27:38 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x41045508, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}) 16:27:38 executing program 1 (fault-call:4 fault-nth:27): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) eventfd(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 16:27:38 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) readahead(r0, 0x2, 0xffffffffffff6163) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) eventfd(0x0) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRESHEX=r0, @ANYBLOB="2c77646e6fe000", @ANYRESHEX=r1, @ANYBLOB=',\x00']) 16:27:38 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) fsetxattr$security_ima(r0, &(0x7f0000000000)='security.ima\x00', &(0x7f0000000040)=@ng={0x4, 0x10, "d9"}, 0x3, 0x3) ioctl$FS_IOC_FSGETXATTR(r0, 0x41045508, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}) [ 489.989539] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 490.003271] BFS-fs: bfs_fill_super(): Superblock is corrupted 16:27:38 executing program 5: ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, 0x0) perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000000)={0x1f, 0x1, 0x0, 0xb, 0x8}) rt_sigsuspend(0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_genetlink_get_family_id$tipc(0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000080)=""/11, &(0x7f0000000140)=0xb) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x20032600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a0f, 0x1700) 16:27:38 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12634840000000000000000000f3ff00"/76], 0x1, 0x1000000, &(0x7f00000000c0)="03"}) r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r2, 0x41045508, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}) finit_module(r2, &(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1) semget(0x3, 0x3, 0x200) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000280)={r1, r2, 0x4, 0x1d, &(0x7f0000000140)="bf545d4d23882913d8bcd8214c7cb3d937c040eeef4e8f3ffd107340bb", 0x4, 0x8, 0x7f, 0x7, 0xffffffff, 0x2, 0x1e, 'syz0\x00'}) ioctl$EVIOCGABS2F(r2, 0x8018456f, &(0x7f0000000000)=""/46) socket$rds(0x15, 0x5, 0x0) 16:27:38 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) eventfd(0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x80) pwrite64(r2, &(0x7f0000000140)="a7d4d0cfd592145656500d0e3c35a5ef1c811695639302aa290b8e4e613c5e5940bbc46775147626577018d48b2305c78d495b58cf8c7549ad8f9fdf8dea5b9a75bf487844a2cea0273f7fea7ef1ac392c29b359a1768e49576790332976d5e5d6d6e3ed913f1bcfbce996c187", 0x6d, 0x0) openat(r2, &(0x7f00000000c0)='./file0\x00', 0x2, 0x63) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 490.071505] 9pnet: Insufficient options for proto=fd [ 490.091110] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 490.110640] BFS-fs: bfs_fill_super(): Superblock is corrupted 16:27:38 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x8, 0x4) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)=0x101) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) getpeername$packet(r0, &(0x7f0000000040), &(0x7f00000001c0)=0x14) 16:27:38 executing program 0: syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="cefaad1b0100000001", 0x9}], 0x0, 0x0) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x10000, 0x10) r1 = accept(r0, &(0x7f0000000380)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000280)=0x80) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f00000001c0)=@req={0x9, 0xa5a, 0x3, 0x1f}, 0x10) prctl$PR_GET_TIMERSLACK(0x1e) [ 490.171109] binder: 24586:24589 ioctl c0306201 20000240 returned -14 16:27:38 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_proto_private(r2, 0x89e4, &(0x7f00000002c0)="82f10ad5bc4cfb45709b78168a0382c3d533468a0cf41064c417502eebff32c8c0d9c86a466ce37d907930188b44d9400c4598057ca8b71e0ebadb4429b70f1b2dd757c591e9") close(r1) eventfd(0x0) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0585605, &(0x7f0000000240)={0x1, 0x0, {0x7, 0xfff, 0x9dbc2ef0ac034611, 0x0, 0x6, 0x8, 0x1}}) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpu.stat\x00', 0x0, 0x0) ioctl$TUNSETNOCSUM(r4, 0x400454c8, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose='cache=loose'}, {@nodevmap='nodevmap'}, {@version_u='version=9p2000.u'}]}}) [ 490.224238] binder: 24586:24589 ioctl c0306201 20000240 returned -14 16:27:38 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r0, 0x41045508, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x100000001, 0x1, 0x7}) r1 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/create\x00', 0x2, 0x0) ppoll(&(0x7f00000000c0)=[{r0, 0x2080}, {r0, 0x2}, {r0, 0x20}, {r1, 0x2040}], 0x4, &(0x7f0000000140), &(0x7f0000000180)={0x2}, 0x8) [ 490.294872] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 490.328558] BFS-fs: bfs_fill_super(): Superblock is corrupted [ 490.403188] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 490.409936] BFS-fs: bfs_fill_super(): Superblock is corrupted [ 490.419939] audit: type=1804 audit(1565454458.713:122): pid=24594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir746591468/syzkaller.00Dvjv/22/memory.events" dev="sda1" ino=16546 res=1 [ 490.494403] audit: type=1800 audit(1565454458.713:123): pid=24594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="memory.events" dev="sda1" ino=16546 res=0 16:27:38 executing program 2: ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000240)) r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000040)='nr0\x00') read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:27:38 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = accept(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4}}}, &(0x7f0000000240)=0x80) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100080}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r3, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x24, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40050}, 0x8000) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) r4 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x8, 0x8800) getsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f00000000c0), &(0x7f0000000140)=0x4) eventfd(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) renameat(r4, &(0x7f0000000180)='./file0\x00', r4, &(0x7f00000001c0)='./file0\x00') 16:27:38 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="259209b6a18507e108473f91ece8a9bbc8ed9a108d7ac8e476aad4080b061b638794750f26ed53549b08c4a8c540618c6746d67092b532acc97547f543ee95ddc25476893fc9ceaca9a65d92da5ba41d5a837b2c0274bdcc7377cd0df0765b4632c800e835f08d0c8a7b7d7261740680c2e7ac80fba7ff88611adb2c5afd98680055c32fc1effc1886ca109dd08a5572da226fc35c15caeb276d0a7a4188ea25b245891d5b0cbcc9d19dd472de9d29cd010148badb966665b413b76db0ca93c60b", 0xc1}, {&(0x7f0000000240)="eadd870a66db19140cdfb0aa2dd711d84f3d2a61f4fa8d0df4381045394b031b9ba12907d8be5dcec3716e99ed2d3684e5a96ea84b8ab179563675fc0f94144027f5c73b7cb9eb80577fc1f7f9fa1810b043d809d602d878477efb0ea3b1ac3b783f3498389ae82d4a7902fac5d7b2f5636c93a34caaecf556f02ea4ab481e5197f92868212364ff24463886dc2e1a9a4df74268ba3c4fce09403540267a865231c553e330f38ef81447bf3df2c2b62ec8655152fc798873d07fec75b712b2c4c0aa59684baa9b5f6ed8d278c8e4b20b5d0739d7c9ce1f69f0d9898e25166c3e63ab4d4d2a46a2039800dd4872d6ceb33134c994eb1e1a874c165d6abcf04fd7fad8a7daa66f61641211658ba19ccddf6b4def5d444118999ecd56c349ed47a4d895efcf0395e19708da4dc6c1dc7f3e709a0f0aa74b9a0b17b795d6e7b6be28ae46141a0d85889710a9c233ec181bd7de966739937f359cae352991a5544a03c6bdbd6798f5ecccae09e7e8ebf7d8316a4aa633a71380737f5798dc7992bbcb4dc438304fc88aa4b76a6b5e783eaa79327f7e53048538d6ce5a085e19e6e5bb2054d84baff9cd3bb7b2fcfd2dc08b13cdfaaaca8d04fc9afe30ab46d267d2dd1b1bb9ed5ac1224eb3320c53bc8d82447af25723de93a0df4d03b595cd3f6df1d52cb3e37d2660fac494f6e312a1436eb32078c0c5f7539379f3470f1172be04a3bf40541068907bfc52971f5269714b7ff96008f4819bbc62ab7a65e165cb8ece6765752854dfe824f33f31e6b9b1a4b9a281163d0d0f2220f3ffff0c4afada4b2c63e0a87bbd79a8418597d82f7199bf15acc82ec4f33862a36fcdce64ff06b466a1cd14ad93427c5ee05769b72d9a40f01eb1622502e004be4e2034ef1273d294527ef204e144e4eef18509b017a174bc6c83bb0141e1da2d677af38d7ed16ef9bbfb0df0058f569051025832f695fef95daf4e887215bab2c19faedafb03520193e26575314613012a701e845c3549afbf069747b7793ee1d6b89cdbdf193da35b78474292c426868a92c3e7dabbe817946d1fcdf4693bf9d41d5e98f474330604a8b453ef68da383139d2c8a18669f4123dcd98db61fbe8c84f32042e31f5d962acb390e009953523434993712996083e2e4348bdcfc2ad81654852f7144f06f0ab5de011a723fe3b72d5dafd2c0f15c04fffc203099005ab418727076b7266ef52388f29054ac72f116a9b446b53a4c3e50e2c47320fd2222a45b05b052f2fc0224743bd0bbb51850ffdb32d820de29ef9c98c10f9fb7ac5d83cc8d8c5e788d67a094499528a9d6053920e645d67d5334e7a438cb4c57f21f757a335bd53bc60f6a53b54201ea29bad97860c664ef8353af6e5e9b19eabdda402d94faaf981e00fce22eb6fe4a9404ff646541199bcf75ffe8019611e2ee4a478a8a3fa10c1634467ed09ac1c37f702dde9abc16fded091acb0edee98857f03a0a4a5bda222e26cffefe68f93083c85dcb449a9244cfd403f53702e0d4bcaf182b785465549ebbc55a3438263b89193068bc0aa34c7c7b5a3b0738b9b6a0d4ce594dea0eb5069d0b78f3eff5c2825feabf9728765d36fe4d4d44c8bb0c52d1076352913d3b919eb3aee156b254f0408e3f65515a7b046fe305666ddfeba51925af78e79af71c246758706b93a80119d08ad6298da9451043ffc7dfcf6fa6b2fb8921519c309a347fb0e860813a5d68aae843d75ad716ec21ba71c59df6dc3d09caafadffaa077273fd82acd9f8f31e7541a7bc36666059b111004c69c4b2433dd7517c30b54b70450040f6ff170303cd66e3da2f36d71b1ccd902c45fddd7a5dcd9ecfec302c03507def701efc3f69d87fddaef6c612979b4b76925716ac0d960bcce874d7fc54583d21896b598dd8dd85c736d5ee9b70b894a0d7e7c38d5ef2cfb00f4b1386f7b0992194ec4cda3e014861a4895fe8d376993f03ae825775702d92a6860c87f2275b5dee1c0d40876a4e75ec01b12e85c33f7bdd719a7b44c5adb0aa41b985ba3de41fe89db392d276c57239d8f6fc0c109799197bee6c299c41019d5fecae68a946801c8c4250bd5cafcfe68bd86efb174434096db36d01b3b0a896da56e94b506d9b2d7aa657cc084ca2d08c1989a41b44fd1254864686eb02ddf634b3de10ee0aa628f63fd9fb74241d27f993ea33248dcb9d4ee136887e00b2b905e546416ec21fa2066fa8a6f2ce93f3bf7f83cb61bf08f95adcd67f877d6a8d4714c70f79c9f264dceb2bab720b5cd684344dfc3c59c3337c4993c55357c56832fc12d1ff893f62ab6733ab3d8d8bc6fd282ca1c2bf781b2d443d14485ba43bc6b776b8d275023844225aa540c4c834eb55d08bf76e5e4eb2c8ac58b2e292eb30907ce3e0077792190aa3bbbd71b853f6ce34efe5451cc9af4e98612bb4bf80feef84078514778edbfe4e46d9237977ea86eaebb5ee1f4b28df136820af40fd122d67229a08aae65e5e03fb311901f311dec6cc40b6cb7b191fbf7d6b81243dc7983df0fc8ba090ba65901701c12c5baf79d42200a5da65989cf2c574a575a95893c869f40cee5cc7ac59d170c1d81d902cc167fbe087ada8d2acb271927c83adc6e1f7c8f46be2e25deb5bb12f29a0f3b76e88108a066c398f3e6972c3878d8bcfb492fc7d40c25a8f5d613c4721e4af1a073faf8fa5755088e19178dc5d6807193b7d2fa23f97075cae1594260a9b01e94f11f44907595ef02ff0b10dbd3d0ce7aa28c928f7b99840a189ee8a2978c9dc11258880ef5f659669967b6d70f3778dc5e58916ea0916898ca9b98d5938d0d7b2faa0c42816112363ce747bc9ff747289124713cc2b5879668db6a69b42ae30a33a6205e61c70d9a2c998e1b353bc979904a050af692eabe22642edcb0d24c3a45e9885952c8f168f2c58035e7c484de27d7890c256a7e95a4f65348c0181c78eefae28064c1034ae0d921958a274896811c5970df253f0aea4ff1472f89d376afd3cc606c06928d4d65e8f256e64c1c84c82c6b2fc9c038aa28d9ffb812175f2d910c80a9fb38117db61ff0037d9e55b65f1bf21bbd5093fd4500cc00ce78ae4ad3c389b9a63edcc3582fea341bfc8f8c8dbe6bdd4447a9b91fc0de431714ad3d6729c5c74032c15f4d1a3e25c64ecbe00aeb7f38ab699419723f7347e2b942f88a4f122174d439dd4f55dc92fe05790956fa2fc6c487bd8a4933ca0b55554fe808095528ef404c219604981dbe31b148331d9a7ff272485504b5145ba21e1878e59cd2a5eb7c71d0ddaf26ec9ecb8db39731014711acd6d684fd18b49032339985b87ebfb25bb517afeb6219e2ee8fa18e8490e64aa142fef26a40c7a814b45a8d891021712137e1a3623424a90db285788ed56c126093fe6977aeac4d838f3d8f25d3c4b899ec8ff4803395414e9dfe6d5ff24d24c0d52889d3a1c90549b5d4756896cca9e71cba176cc806dd3c982bd91a82b8de85f398d54bcaf96f91e411942d242e76372d41e65739b600125ddd053c35ea703608d423c038891667c1c5d90542d5403982aba63816f4b9757115f3ad4983963eb6921fafff8cb192f6984ee770c4b5c786c89b24079adacff7dc7a9885efacf958ea09389c24bb80440ad1421390d9580caf0cdcc54cd37e7c7009543c640d83460c69b343b3fa1afb37bfd9b3635a48e9bd1d419d0ffbb9c4570ac27a334648c49181199f8dfced2236c2ece658f3e4cedc8d0da07b9021a4ff60987fa30c30439b0f7f130770e4539c0ed1e19d5d7b52597e9f5f72312baa66c69c4a3e434e3de2e33c414bb1ba3c98e0eec4b3506ea0af4a1f5ec9119ccbd22ee548bb0cb4d26bab5e9c52d953ec6cf73986894a6cd25981c8a1b0468c16ac3dff5ceeeeaee2561ae50f4bce6040efe986e5302281b3bef413c3b6276b1e21e1cc210026d337c8ac7339e46c67c045d87c67efc273010fc209e41a88401e8357b9c4b40b5e81a58979681eaf870d5f053f5fc5226e58a504485e637386614ef5507abefa6e727fef8023a705167706c01c75b13847609662454641b973235132ee9f77ea17d332f1e74df2644ba1cc6160ea6a73926a5a961a365ebfae3555535d6cd8cb3b3ad291a2684299a9998a9c333d6a1f7d01214b366bb1d2fd97eacd1018f24a3451d7579754f0a564c5301e455bfd9af965eccd4656243a415bcb1d71d40e54936d921a8ae606ddc6f6585b3e07badc439676cddf82465f8cd964facca599e9de6a3cd02f75ef33d5c9a6d211c41587db3dd7d74d7a519a6b5eae4fdbd409f0f8aa3d9296ddc9ffdd4093897899cbe8428e4e35757a16210593995f5a344574b50cd75b8c0354ac6d51b3b17be83aec399f67fdc23068310d64139b3a2acffb2a437c663dd174ca344b3a543826bbf87c1a18b70574dd1d762b6ab409a00cefefd9804661d1f7d4af0b7138a2b3553e70e06e57f88227c15c281c64e64f9763cb7d7393323ef1de03b8069867ee4631d7eb47af56ee3cc01619a3ded9974bee668a6bd58eea65ccce3556c38073733b33f26e18f4a650a969bccff29978a1465e8ae7056dd352115c771eb803cac8f2236ffaa0ba06772882c657f1dbe114ea20dfa6f5e1e7f32ab228e836db6903143b37e9dc30a1a61ade3b90421d4f0764c5be211418992c0bd7033f9c138f247891a8f45cf15fef66caaf6e79d234a57fbbad39add1c754690e718ad3e5e37fb2470e8d9ffc3c49e0c31a8fb30d6ad7e9cf8fb94d0d0efec871fc4e99806b4d51afe937902af3f9dfe9562d0676384c8f2f44c68cf0eae145ddbb03e61cf86280f1fe9c892a7c5a37f332622bfd57bfb4c01669e7bf1732afcfbb2d5cc3ab7105bc7182bcf195b2783f52ad571225e8b4a356dac7d2fef352371ddabf538ad0924ffdecb01cd0a3d9f01f674563f75e8a0e65e35665e60b9c4b351d30dd03ec34b0b920013ccb930046b2cb7b24dc95042cf5009c09fca020c10c628a2e460192ec422adc6192baf1c29df6f84fceb33765128f803121470be00e5ad59e1aea01c9b28b676a3dd46e67a220b17121e3b7e524c27e43f83cb65c230aac818c10e915317b19301827e043736b57797ecc5d1c83dfbd14ec701eaa69eca07723f2b226a66707c85ea86a271f4b2a6d8a5b45fbec7ccd6ef3f3d61f7ce0a59f41208e1d7e793c06070ce6d8771a5e1b626d178cc859288d7f29c889a6e4de133843f85427132b1828483f14e256678693a79c4838d7c08e6660e6c479a7e57dce1e64cfbc0ee03cb01c6a7da2d2e45f607abf6bcf444e8213a452e4625809f8b836ce6a7cbddcd98da867c46799037f7466b7b2244d53402ea997b94d4b32696b0e6def73a4578b45bdb63a64ea3b227934671c5718b9c6c75f88261860766bc209e729d42b832782cab0c7af01f34e3f60488bb1b8f93abc4e31e6865a247c39130627e0c47c85ba20be7cb414e58e957731c8bc275c002443da092ba947c07d9308950560105fbb064e5a3bab09f07f87b77047ba80a1f56a7f6d67bb5eb99203eceeef496e2c5e5abe858ef6b2d945c1db3c572b4b035a711a57624b00419b14b4261a685665d65fece21859f249eb2113880e75213916f1b93c627bd7d3d4e5568680c901b48745493cf1801d1eca5e4ea99548ffcb1ef5f9258189eeddc1e06bbd07596ecbdd4b9885478d5661b76cf6e5d3647cf30b3c7722f1c35daff07a232934e03ee9f2a6e9e967a55e585220b1c3ca3b77567e98f5d315243ec5f20c8465080734896aa04f", 0x1000}, {&(0x7f0000000000)="c36dc94c184d0d2a906a321e16e5e5e0def73a741101acb3f4c5cebd95e4b1027f01113d40fc287dce7825dbe2cade3e432c8f286374f39888efbb150577ff23f81574b5f81a24869131a6c6e65db4104924da805169fcaf24bd7663d2", 0x5d}, {&(0x7f00000000c0)="2d809d4ae810b06e8c666914b6e2903a773eea2ed70db8705c", 0x19}, {&(0x7f0000001240)="b48dc3b9c47f0ef8303806d77c42d6f50a55ceb8d1153b9d48b9ef153d80e18018d9888ce9622e1ae043024e37f5a75e65c61c971f5f3f597ccc23", 0x3b}, {&(0x7f0000001280)="d704cd7140df", 0x6}, {&(0x7f00000012c0)="d96c331730e6eef4a5d43e6925a18ea5b0c01ef9ff7ca53b4b505a79594af1568dc25b00f46fa449d96a62914d222c76b7ef6ed1ab782772e91697a6f9839e3fb27853a9578a482ebd84", 0x4a}, {&(0x7f0000001340)="567ca498b7940ae9041e139ae37d7fe85f525ef126364e00f3236e6576e32fe46ceb0f7e2db4a17f081436dc1546b51960bd60f744ba8cac5f504f433c1ed8758fba1f5cdfcc45a8ad13fc568e965ea85e8985220c0321f5eae10ca749597db3956694a371c8d52cf3468728906bf776c80db61cf79334157080a60544df370a7a4112168e369916363749254f4501d8a9519df20d9074", 0x97}], 0x8) ioctl$FS_IOC_FSGETXATTR(r0, 0x41045508, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}) 16:27:38 executing program 0: openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x240, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000180)={0x0, 0x5, 0x3, 0x4, 0x1f, 0x8}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000240)={r3, 0x100000001}, &(0x7f0000000280)=0x8) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) r4 = creat(&(0x7f0000000500)='./bus\x00', 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) io_setup(0x5, &(0x7f0000000300)=0x0) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000480)) io_submit(r5, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r4, &(0x7f0000000000), 0x377140be6b5ef4c7}]) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x1000000000000237, 0x0) 16:27:38 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@norecovery='norecovery'}]}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x420000, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x0}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f0000000180)={r2, 0x2}) membarrier(0x14, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) [ 490.539967] audit: type=1400 audit(1565454458.793:124): avc: denied { setattr } for pid=24581 comm="syz-executor.5" path="socket:[79224]" dev="sockfs" ino=79224 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 16:27:38 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000200)={0x1000, 0x6, 0x6, 0x7, 0x3}) r1 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x501802) getsockname$unix(r1, &(0x7f0000000000)=@abs, &(0x7f00000000c0)=0x6e) ioctl$FS_IOC_FSGETXATTR(r1, 0x41045508, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}) setxattr$trusted_overlay_origin(&(0x7f0000000140)='.\x00', &(0x7f0000000180)='trusted.overlay.origin\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3) socket$inet6(0xa, 0x2, 0x5e09) 16:27:38 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) eventfd(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x8, 0x40) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x7, @local, 0x200}, 0x1c) socket$kcm(0x29, 0x7, 0x0) [ 490.658092] XFS (loop5): no-recovery mounts must be read-only. 16:27:39 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000000)={0x18, 0x1, 0x0, {0x6}}, 0x18) [ 490.781091] XFS (loop5): no-recovery mounts must be read-only. 16:27:39 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x8, 0x4) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)=0x101) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:27:39 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ffb000/0x2000)=nil, 0x10000, 0x0, 0x8c, &(0x7f0000ffb000/0x2000)=nil, 0xaeb}) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) io_setup(0x401, &(0x7f0000000000)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x34}) prctl$PR_GET_THP_DISABLE(0x2a) tkill(r1, 0xe) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 16:27:39 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x22800, 0x0) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x4) msgget$private(0x0, 0x6) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000038c0)={{{@in6, @in=@loopback}}, {{@in=@multicast2}, 0x0, @in6=@dev}}, &(0x7f0000000240)=0xe8) getresgid(&(0x7f00000039c0), &(0x7f0000003a00), &(0x7f0000003a40)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000003a80), &(0x7f0000003ac0)=0xc) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000003b00)={{{@in, @in=@broadcast}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000003c00)=0xe8) getresgid(&(0x7f0000003c40), &(0x7f0000003c80), &(0x7f0000003cc0)) getpgrp(0xffffffffffffffff) getresuid(&(0x7f00000040c0), &(0x7f0000004100), &(0x7f0000004140)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000d80)=[{{&(0x7f0000000340)=@ipx, 0xd8, &(0x7f0000000640)=[{&(0x7f0000000200)=""/135, 0x87}, {&(0x7f0000000600)=""/48, 0x30}], 0x2, 0x0, 0xfffffffffffffdb3}}, {{&(0x7f0000000b40)=@xdp, 0x80, &(0x7f0000000c80), 0xd9, &(0x7f0000000cc0)=""/164, 0xa4}}], 0x2, 0x0, &(0x7f0000000ec0)={0x0, 0x1c9c380}) getegid() fcntl$getown(r0, 0x9) lstat(&(0x7f0000004180)='./file1\x00', &(0x7f00000041c0)) getresgid(&(0x7f0000004240), &(0x7f0000004280), &(0x7f00000042c0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000004a00)) getresuid(&(0x7f0000004a40), &(0x7f0000004a80), &(0x7f0000004ac0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000004b00), &(0x7f0000004b40)=0xc) getpgrp(0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000004b80), &(0x7f0000004bc0)=0xc) getgroups(0x1, &(0x7f0000004c00)=[0xee01]) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000004c40)) geteuid() 16:27:39 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r0, 0x41045508, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}) ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000000040)={0x3f, "2baf2b6af3df53c9e45c4dc2c036c9f09eebca7c9ce3590737a9ecf7d612e032", 0x1}) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f00000000c0)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000000)) [ 491.127967] audit: type=1804 audit(1565454459.423:125): pid=24659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.0" name="/root/syzkaller-testdir876699280/syzkaller.vQHxh2/512/file0/file0" dev="loop0" ino=248 res=1 16:27:39 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x9, @remote, 0x5902d5a6}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x12}}], 0x2c) 16:27:39 executing program 5: syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x4000) r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x4000, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000400)) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0xc1105517, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, 0x0) 16:27:39 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="18010000", @ANYRES16=r1, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x800}, 0x40004) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000140)={'veth0_to_hsr\x00', 0x4}) ioctl$FS_IOC_FSGETXATTR(r0, 0x41045508, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}) 16:27:39 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xa0000, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x91) 16:27:39 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@ipv4}}, &(0x7f0000000140)=0xe8) getgroups(0x2, &(0x7f0000000180)=[0xee01, 0xee00]) fchownat(r2, &(0x7f00000000c0)='./file0\x00', r3, r4, 0x500) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) eventfd(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 16:27:39 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:27:39 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r0, 0x41045508, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x1b4, r1, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x4}, @TIPC_NLA_LINK={0xcc, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x30, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffffffffffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x800}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffffffff698}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x44, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe92e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9e1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x101}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040094) 16:27:39 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) eventfd(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="7472616e733d66242c7266646e623df4b248b5e434ab8480d4e2fe0532daa9faebf5146bd06a94ae85aac11310e58900"/62, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) [ 491.321294] input: syz0 as /devices/virtual/input/input9 [ 491.409188] input: syz0 as /devices/virtual/input/input10 [ 491.431007] 9pnet: Could not find request transport: f$ 16:27:39 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x8, 0x4) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)=0x101) 16:27:39 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) signalfd4(r0, &(0x7f0000000040)={0x1f}, 0x8, 0x800) r1 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r1, 0x41045508, &(0x7f0000000080)={0x11, 0x2, 0x7, 0x0, 0x0, 0x200000000000000}) 16:27:39 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 491.461386] 9pnet: Could not find request transport: f$ 16:27:39 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x14}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000240)={r1}, &(0x7f0000000280)=0x10) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r3 = shmget(0x3, 0x2000, 0x8, &(0x7f0000ffd000/0x2000)=nil) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x1000) syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xff, 0x0) openat$cgroup_int(r2, &(0x7f0000000040)='memory.swap.max\x00', 0x2, 0x0) [ 491.576069] input: syz0 as /devices/virtual/input/input11 16:27:40 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, r0, 0x0) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) r1 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x24, &(0x7f0000000040)={0x0, 0x0, 0xe, 0x3, r1}) 16:27:40 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) eventfd(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 16:27:40 executing program 4: accept4$unix(0xffffffffffffffff, &(0x7f0000003340), &(0x7f00000033c0)=0x6e, 0x80800) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8, 0x802) ioctl$DRM_IOCTL_AGP_ENABLE(r0, 0x40086432, &(0x7f0000000040)=0x4) ioctl$FS_IOC_FSGETXATTR(r0, 0x41045508, &(0x7f0000000080)={0x1, 0x0, 0x3, 0x0, 0x0, 0x200000000000000}) 16:27:40 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21}, 0x10) setsockopt$inet_int(r1, 0x0, 0x17, &(0x7f0000000180)=0x3, 0x4) setsockopt$inet_int(r1, 0x0, 0xc, &(0x7f0000000140)=0x2, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="7525820aedb8", @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}}], 0x40000000000011d, 0x60, 0x0) 16:27:40 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:27:40 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r0, 0x41045508, &(0x7f0000000040)={0x1, 0x4000000000000000, 0x0, 0x8, 0x0, 0x200000000000000}) 16:27:40 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='io.stat\x00', 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000280)=@fragment={0xdc, 0x0, 0xfffffffffffffff7, 0x80, 0x0, 0x8000, 0x66}, 0x8) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x40800, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000200)={0x0, 0xfb}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f00000001c0)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x88}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x1}, 0x10}, 0x70) [ 491.874545] input: syz0 as /devices/virtual/input/input12 16:27:40 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000140)) close(r2) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x0, 0x2) eventfd(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 491.945536] audit: type=1400 audit(1565454460.243:126): avc: denied { map } for pid=24756 comm="syz-executor.2" path="/dev/dsp1" dev="devtmpfs" ino=15274 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sound_device_t:s0 tclass=chr_file permissive=1 16:27:40 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x8, 0x4) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)=0x101) 16:27:40 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:27:40 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r0, 0x41045508, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}) delete_module(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x800) 16:27:40 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) getpeername$llc(r1, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x2, &(0x7f0000000040)="0516a7c4ff3b27517ff070") setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000280)={0x0, 0x800000004000003}, 0x8) [ 492.194531] input: syz0 as /devices/virtual/input/input13 16:27:40 executing program 2: r0 = syz_open_dev$dspn(&(0x7f00000002c0)='/dev/dsp#\x00', 0x1005, 0x40) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0x1f, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={r1, 0x9}, 0x8) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:27:40 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) eventfd(0x0) recvfrom$unix(r1, &(0x7f00000002c0)=""/249, 0xf9, 0x40000000, &(0x7f0000000080)=@abs={0x0, 0x0, 0x4e24}, 0x6e) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 16:27:40 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0xd9d70000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x6, 0x0) r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x9, 0x2) write$FUSE_DIRENT(r1, 0x0, 0x0) r2 = dup(r0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000700)=0x5) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x800, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000005c0)={0x0}, &(0x7f0000000600)=0xfffffffffffffff1) fchown(r0, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_RW_HINT(r2, 0x40c, 0x0) syz_open_procfs(r3, &(0x7f00000000c0)='autogroup\x00') ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000300)={0x0, 0x1, 0x2}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, 0x0) open(0x0, 0x0, 0x0) creat(0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) ftruncate(r4, 0x2007fff) sendfile(r2, r4, 0x0, 0x87ff7) 16:27:40 executing program 4: ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0x3, 0x6b1, 0x80000000, 0x4000, 0xffffffffffffffff}) tee(r0, 0xffffffffffffffff, 0x80000000, 0x8) r1 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r1, 0x41045508, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x55342a3c7f0b7517, 0x0) 16:27:40 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:27:40 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:27:40 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0xc02) ioctl$FS_IOC_FSGETXATTR(r0, 0x41045508, &(0x7f0000000080)={0x1, 0x200000000, 0x0, 0x0, 0x0, 0x200000000000000}) bind$ax25(r0, &(0x7f0000000000)={{0x3, @bcast, 0x4}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @default]}, 0x12) 16:27:40 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) eventfd(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 16:27:41 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x8, 0x4) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)=0x101) 16:27:41 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x80000000, 0x80) syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r0, 0x41045508, &(0x7f0000000040)={0x5, 0x9e52, 0x800, 0x0, 0x3, 0x200000000000000}) 16:27:41 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:27:41 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffeaf, 0x0, 0x0, 0xffffffae) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x73, 0x0, 0x0, 0x0) r5 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x1, 0x44301) ioctl$SIOCRSGL2CALL(r5, 0x89e5, &(0x7f0000000240)=@null) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)={0x208, r6, 0x400, 0x70bd2a, 0xff, {}, [@IPVS_CMD_ATTR_DEST={0x48, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9da}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e23}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x10000}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x19}}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x8}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x31}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x7}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, [@IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1000}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xde3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x40}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x74, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x9}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netdevsim0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x78, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x84e}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6tnl0\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3f}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x20000011}, 0x80) clone(0x8000, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000440)='?S') ioctl$KVM_RUN(r4, 0xae80, 0x0) memfd_create(&(0x7f0000000080)='9p\x00', 0x3) mkdir(&(0x7f0000000180)='./file0\x00', 0x100010108) close(r1) eventfd(0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cachefiles\x00', 0x400, 0x0) ioctl$EVIOCGPHYS(r5, 0x80404507, &(0x7f0000000340)=""/232) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESHEX=r1, @ANYBLOB=',\x00']) [ 492.846586] 9pnet: Insufficient options for proto=fd [ 492.933346] 9pnet: Insufficient options for proto=fd 16:27:41 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8000, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80605414, &(0x7f00000001c0)=""/180) r1 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r1, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r1, 0x280000040045010, &(0x7f0000000180)) ioctl$int_in(r1, 0x800060c004500a, &(0x7f0000000000)) 16:27:41 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r0, 0x41045508, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}) getsockopt$inet_dccp_int(r0, 0x21, 0x6, &(0x7f0000000000), &(0x7f0000000040)=0x4) 16:27:41 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:27:41 executing program 0: pipe(&(0x7f0000000380)={0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x7, 0x0) write$binfmt_elf64(r2, &(0x7f0000000040)=ANY=[], 0xffffff4b) splice(r0, 0x0, r2, 0x0, 0x20000000003, 0x0) 16:27:41 executing program 1: r0 = socket$inet6(0xa, 0x80000, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0xff, {{0xa, 0x4e23, 0x0, @mcast1, 0x800}}}, 0x88) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r2) lseek(r1, 0x0, 0x4) eventfd(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 16:27:41 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000000)={r0}) ioctl$FS_IOC_FSGETXATTR(r0, 0x41045508, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}) [ 493.183254] input: syz0 as /devices/virtual/input/input17 16:27:41 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={0x0, {0x2, 0x4e20, @loopback}, {0x2, 0x4e23, @local}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xe}}, 0x20, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='veth0\x00', 0x64199e02, 0x5, 0x800}) ioctl$FS_IOC_FSGETXATTR(r0, 0x41045508, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}) 16:27:41 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:27:41 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)=0x101) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:27:41 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) eventfd(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="3c773576995b7f07df600da57ecf34c8d3dbb01f43e6fb560ac2da01157d5ade09c9d5c8dabeb719fe3cd0fd26ac6300bab04fd38618632195789102559accd0fdd0455566ae36d0e8cb4d7dd3468886e9d1bf783c4b90d531b10035ac9d38040948ef52e2072ea3613a5fcbf14ec46980dafe80215dc4f59a9ae6", @ANYRESHEX=r1, @ANYBLOB=',\x00']) 16:27:41 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:27:41 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) munlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) ioctl$FS_IOC_FSGETXATTR(r0, 0x41045508, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x20, 0x70bd2c, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) ioctl$VFIO_GET_API_VERSION(r0, 0x3b64) splice(r0, &(0x7f0000000000), r0, &(0x7f0000000040), 0x4, 0x0) setsockopt$inet_buf(r0, 0x0, 0x11, &(0x7f0000000140)="d2ec6975493eea517ed80534ed403a43c047cd26aa8351f0d9dfd146381e0f07e43ecebb867ff484a9d18834fba5b3032fb757f664690aaa8cba0258518d55352b1c5829bd6f562763557d0eb850c1", 0xfffffffffffffeee) [ 493.384097] 9pnet: Insufficient options for proto=fd [ 493.417024] 9pnet: Insufficient options for proto=fd 16:27:42 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x8, 0x44800) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) 16:27:42 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:27:42 executing program 4: r0 = socket$nl_crypto(0x10, 0x3, 0x15) connect$netlink(r0, &(0x7f0000000400)=@proc={0x10, 0x0, 0x25dfdbfc, 0x80400}, 0xc) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x802, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/qat_adf_ctl\x00', 0x2034af72eba47fc8, 0x0) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f0000000480)={0x1ff, 0x2}) fsetxattr(r1, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f00000000c0)='\x00', 0x1, 0x3) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/118, 0x76}, {&(0x7f00000001c0)=""/230, 0xe6}, {&(0x7f00000002c0)=""/1, 0x1}, {&(0x7f0000000300)=""/184, 0xb8}], 0x4) r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r3, 0x41045508, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}) [ 493.786683] audit: type=1400 audit(1565454462.083:127): avc: denied { connect } for pid=24905 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 16:27:42 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x200220, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000600)={'TPROXY\x00'}, &(0x7f0000000640)=0x1e) socket$packet(0x11, 0x0, 0x300) pipe2(0x0, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8020}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(0xffffffffffffffff, 0x111, 0x3, 0x0, 0x4) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000180)={0x0, 0x6}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, 0x0) unlink(0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x1600, 0x3ef, 0x2000000, 0x3f00000000000000, 0x100000000000600, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) prctl$PR_GET_FP_MODE(0x2e) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000040)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @local, @local}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0)="60b7fdfefe5f021ce1eef846f2e3402518b4878718dba7bc53eaaec76281255a6d32f40eb26b15108f75cf531c785ec46fd4eca035aa274e01456277d142de586e0300f3046a957353d67c0266a97601e4a538a6cb7463b32137efa8bc601828341d945dfff47e0ade421675a0c3076bbd039ec4060f05965c5035356f520e2899008659e1fcbaca361da5c7ca5faa66b64f541c581a474eb2dec05831a3fc5c10535733ab4534bac96e6d46729211453ca25db42097a9ac0713ba06ab0cadc8a36dc2c6e631ed26b4502f219060a9cdad00000000", 0xd5) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x3f, &(0x7f0000000000)=0x100000001, 0x4) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x800, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x200000, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000200)='/dev/snd/pcmC#D#c\x00', 0x80000e23a, 0x204002) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/hwrng\x00', 0x0, 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dlm-monitor\x00', 0x121080, 0x0) lchown(0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000240)=0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000280)=0x0) kcmp(r4, r5, 0x4, r3, r2) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4008040, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) 16:27:42 executing program 5: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 16:27:42 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4000, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)={&(0x7f0000000080)='./file0\x00', r2}, 0x10) close(r1) eventfd(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 16:27:42 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r0, 0x41045508, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e1, &(0x7f0000000140)={'dummy0\x00', 0x6, 0x4}) 16:27:42 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000001c0)={0x632c225f, 0xff, 0x5, 0xffffffff, 0x4, [{0x8001, 0xd6f1, 0x7e61, 0x0, 0x0, 0x1800}, {0x4, 0x9, 0x2, 0x0, 0x0, 0x400}, {0x5, 0x8000000000000000, 0x10000, 0x0, 0x0, 0x300}, {0x7f, 0x7fff, 0x3, 0x0, 0x0, 0x100}]}) 16:27:42 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)=0x101) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:27:42 executing program 5: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 16:27:42 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000000)={0xf5, 0x10000, "43aa9a67105a91ebe664c0d96fb9d9bf17234ea13b536086", {0x8, 0x2}, 0x424}) ioctl$FS_IOC_FSGETXATTR(r0, 0x41045508, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}) 16:27:42 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) eventfd(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c2e1f246b3b1d", @ANYRESHEX=r1, @ANYBLOB=',\x00']) chdir(&(0x7f0000000080)='./file0\x00') 16:27:42 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)=0x101) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:27:42 executing program 5: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) [ 494.193872] 9pnet: Insufficient options for proto=fd 16:27:42 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r0, 0x41045508, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}) ioctl(r0, 0x6, &(0x7f0000000000)="a0348085c2debe70d3e8857dcbfc0fe6ac51a2bdef0fe65e45f2e7361f") write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r1}}, 0x18) [ 494.276256] 9pnet: Insufficient options for proto=fd 16:27:42 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$RTC_UIE_OFF(r0, 0x7004) ioctl$FS_IOC_FSGETXATTR(r0, 0x41045508, &(0x7f0000000080)={0x1, 0x82, 0x0, 0x0, 0x0, 0x200000000000000}) ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f0000000000)) 16:27:42 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:27:42 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)=0x101) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:27:42 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000240)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) r3 = dup2(r2, r1) accept(r3, &(0x7f0000000340)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000003c0)=0x80) fallocate(r2, 0x0, 0x2000421, 0x1) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000100)='hwsim0\x00', 0x10) write(r2, &(0x7f0000000280)="2f06e09f1fcd52b7bcf714e6306d5504ac7b9eea9f93c755414ed79e96855637e61972f36392c2b642db37218caf9b3c022b3d38d9e9fae79c2b1dfbef7509602c6315417156fe7782937474a823baefe6ec81f57800488b520b9d497f2480764da7c9fa6297c0be2cfb16c8623767aef79d15e2dbef7dbebb0944e1778e6381c7f4a60a5fb94cd5c18cf538a91bc7637a722b046b9292c73a8a1df5e3d34c99e0ca5698ced17c98", 0xfffffffffffffe83) sendfile(r2, r2, &(0x7f0000001000), 0xfac) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0) r5 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x0, 0x4000) sendfile(r5, r2, 0x0, 0x7f) setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)='trusted.overlay.opaque\x00', &(0x7f0000000440)='y\x00', 0x2, 0x3) ioctl$LOOP_SET_CAPACITY(r5, 0x4c07) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, &(0x7f0000000080)) 16:27:42 executing program 2: ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f00000001c0)={0x7, 0xcd4a, 0x1, 0x0, 0xffffffffffffffff}) fcntl$getown(r0, 0x9) r1 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r1, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)) accept4$llc(r1, &(0x7f0000000200)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000240)=0x10, 0x800) ioctl$int_in(r1, 0x800060c004500a, &(0x7f0000000000)) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req={0x0, 0x6, 0x2, 0x2}, 0x10) 16:27:42 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_dev$midi(&(0x7f00000001c0)='/dev/midi#\x00', 0x81, 0x1) setsockopt$ax25_int(r2, 0x101, 0xa, &(0x7f0000000240)=0x1000, 0x4) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000000140)={0x6, 0x899, 0x3f, 0x2, 0x2}) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f00000000c0)={0x7, 0x1, 0x6, 0x5, 0x71f0a8e4, 0x5}) eventfd(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev, @in=@multicast2}}, {{@in=@empty}, 0x0, @in6}}, &(0x7f00000003c0)=0xe8) 16:27:42 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:27:42 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r0, 0x41045508, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2040) 16:27:42 executing program 3: read(0xffffffffffffffff, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(0xffffffffffffffff, 0x280000040045010, &(0x7f0000000180)=0x101) ioctl$int_in(0xffffffffffffffff, 0x800060c004500a, &(0x7f0000000000)) 16:27:42 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) r1 = accept4(r0, &(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @local}, &(0x7f0000000100)=0x80, 0x80000) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r2, 0x2, 0x70bd2d, 0x25dfdbfb, {{}, 0x0, 0x4108, 0x0, {0x4c, 0x18, {0x5, @media='ib\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x2, 0x1, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) 16:27:43 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:27:43 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000001c0)={{0x809c, 0x5, 0x8001, 0x1, 0x200, 0x6}, 0x20}) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000200)={0x5, 0x1000, 0x40, 0x9, 0x1}) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0xfffffffffffffef0, r1, 0x300, 0x70bd2d, 0x25dfdbfc}, 0x10d}, 0x1, 0x0, 0x0, 0x80}, 0x4041) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000300)={0x0, 0x7e, "2ade6230738a6e9414f2064e49dbd51f5ff333834dc9fab3c16a5099f3f776138a1eefe6bc64516e369ff21bd6547651f093092b35c02594e626412c0f803c49a0678b9262276a3649c2df57d8b240b42d0e69aa9bb722e53aee8424ce32e66b7ef46eb7adfbc6fd726e85638dae3da57e13b8c96259a6ffe153c55c1c1d"}, &(0x7f0000000000)=0x86) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000140)={r2, 0x1, 0x101, 0x4}, &(0x7f0000000180)=0x10) ioctl$FS_IOC_FSGETXATTR(r0, 0x41045508, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}) 16:27:43 executing program 3: read(0xffffffffffffffff, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(0xffffffffffffffff, 0x280000040045010, &(0x7f0000000180)=0x101) ioctl$int_in(0xffffffffffffffff, 0x800060c004500a, &(0x7f0000000000)) 16:27:43 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:27:43 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800c018}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, r1, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x32}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}]}]}, 0x48}}, 0x40) r2 = shmget(0x1, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000300)=r0) shmctl$IPC_INFO(r2, 0x3, &(0x7f0000000140)=""/191) ioctl$FS_IOC_FSGETXATTR(r0, 0x41045508, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000000)) 16:27:43 executing program 3: read(0xffffffffffffffff, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(0xffffffffffffffff, 0x280000040045010, &(0x7f0000000180)=0x101) ioctl$int_in(0xffffffffffffffff, 0x800060c004500a, &(0x7f0000000000)) 16:27:43 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={0x0, 0xcf47, 0x10001, 0x7f}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000200)={r1, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x401, 0x7f}, 0x90) 16:27:43 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) eventfd(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 16:27:43 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x177, 0x4) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000180)=0x400, 0x4) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000040), &(0x7f00000000c0)=0xc) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) recvmmsg(r0, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x4}], 0x400000000000012, 0x203d, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000004340)) recvmmsg(r0, &(0x7f0000004140)=[{{&(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000240)=""/202, 0xca}, {&(0x7f0000000340)=""/88, 0x58}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f0000000100)=""/42, 0x2a}, {&(0x7f00000003c0)=""/136, 0x88}, {&(0x7f0000000480)=""/125, 0x7d}], 0x6, &(0x7f0000000580)=""/136, 0x88}, 0xbae}, {{&(0x7f00000016c0)=@x25={0x9, @remote}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000001740)=""/88, 0x58}, {&(0x7f0000000640)=""/30, 0x1e}, {&(0x7f00000017c0)=""/141, 0x8d}, {&(0x7f0000001880)=""/217, 0xd9}, {&(0x7f0000001980)=""/215, 0xd7}, {&(0x7f0000001a80)=""/37, 0x25}], 0x6, &(0x7f0000001b40)=""/242, 0xf2}, 0x9}, {{&(0x7f0000001c40)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001cc0)=""/121, 0x79}, {&(0x7f0000001d40)=""/170, 0xaa}, {&(0x7f0000001e00)=""/132, 0x84}, {&(0x7f0000001ec0)=""/140, 0x8c}], 0x4, &(0x7f0000001fc0)=""/47, 0x2f}}, {{&(0x7f0000002000)=@xdp, 0x80, &(0x7f0000002080), 0x0, &(0x7f00000020c0)=""/63, 0x3f}, 0x4}, {{&(0x7f0000002100)=@sco, 0x80, &(0x7f0000003180)=[{&(0x7f0000002180)=""/4096, 0x1000}], 0x1, &(0x7f00000031c0)=""/154, 0x9a}, 0x9}, {{&(0x7f0000003280)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000003900)=[{&(0x7f0000003300)=""/203, 0xcb}, {&(0x7f0000003400)=""/118, 0x76}, {&(0x7f0000003480)=""/142, 0x8e}, {&(0x7f0000003540)=""/225, 0xe1}, {&(0x7f0000003640)=""/75, 0x4b}, {&(0x7f00000036c0)=""/188, 0xbc}, {&(0x7f0000003780)=""/7, 0x7}, {&(0x7f00000037c0)=""/12, 0xc}, {&(0x7f0000003800)=""/71, 0x47}, {&(0x7f0000003880)=""/103, 0x67}], 0xa, &(0x7f00000039c0)}, 0x6}, {{&(0x7f0000003a00)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000003d00)=[{&(0x7f0000003a80)=""/94, 0x5e}, {&(0x7f0000003b00)=""/51, 0x33}, {&(0x7f0000003b40)=""/19, 0x13}, {&(0x7f0000003b80)=""/182, 0xb6}, {&(0x7f0000003c40)=""/70, 0x46}, {&(0x7f0000003cc0)=""/64, 0x40}], 0x6, &(0x7f0000003d80)=""/190, 0xbe}, 0x2}, {{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000003e40)=""/160, 0xa0}, {&(0x7f0000003f00)=""/60, 0x3c}, {&(0x7f0000003f40)=""/242, 0xf2}, {&(0x7f0000004040)=""/30, 0x1e}], 0x4, &(0x7f00000040c0)=""/86, 0x56}, 0x1000}], 0x8, 0x100, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000004380)=ANY=[@ANYBLOB="02000000d955bc00d47bf1572456d72b37b57da52888d7401656cf532a9c5f6cd85525ceab4e980a64845085d4fa270660f5b0ced78787308b71987363cd3fab3ce6db8189fc6a1c4a58194715c6e1b2f9b7fc62d9576f6afa9d884a0000cd08a4a3d9e71d"], &(0x7f00000039c0)=0x8) 16:27:43 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:27:43 executing program 3: r0 = syz_open_dev$dspn(0x0, 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)=0x101) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:27:43 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x7, 0x802) ioctl$FS_IOC_FSGETXATTR(r0, 0x41045508, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}) ioctl$RTC_VL_CLR(r0, 0x7014) 16:27:43 executing program 3: r0 = syz_open_dev$dspn(0x0, 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)=0x101) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:27:43 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:27:43 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r0, 0x41045508, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x20, 0x10, 0x2, 0x45}, &(0x7f0000000040)=0x18) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000000c0)={r1, 0xfffffffffffffffa, 0x9, 0xffff}, 0x10) 16:27:43 executing program 3: r0 = syz_open_dev$dspn(0x0, 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)=0x101) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:27:43 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x0, 0x2) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000640)={0x47b22fb5, {{0xa, 0x4e21, 0x100000000, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x6}}, {{0xa, 0x4e23, 0xd5, @remote}}}, 0x108) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)=ANY=[@ANYBLOB="94010000", @ANYRES16=r1, @ANYBLOB="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"], 0x194}}, 0x10) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) recvfrom$inet6(r2, &(0x7f00000000c0)=""/117, 0x75, 0x101, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @loopback, 0xa74}, 0x1c) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40800fffff8, 0x902) fsetxattr$security_smack_entry(r3, &(0x7f0000000180)='security.SMACK64MMAP\x00', &(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x15, 0x2) ioctl$FS_IOC_FSGETXATTR(r3, 0x41045508, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e24, 0x1b, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x6}}, 0x9, 0x5, 0x4, 0xc2a9}, &(0x7f00000005c0)=0x98) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000600)={r4}, 0x8) 16:27:43 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) eventfd(0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x12000, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000002c0)="ced42f9ec709443d2fa32cdaf8e35f50426da1689f798825291557485cfbf0073a64ac8bdbb4545916361501d4b9a5b7787d6b8d3e588d06f580a961c97d14a6bb4b4c89cbdf4f37c7ff484f0eb1616a09271b57695c410a0b008d3fd463ee37b87001994e42727e02aaa6ac3cb3465596cb691da9b6cf9ca35fe182bd71624288db11688b3d16ef00f398d0ff1a6fad8df61bdadfd382340982", 0x9a) r3 = socket$inet6(0xa, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000140), &(0x7f0000000180)=0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="0f00"]) [ 495.732749] 9pnet: Insufficient options for proto=fd [ 495.765424] 9pnet: Insufficient options for proto=fd 16:27:44 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)) ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc040563d, &(0x7f0000000040)={0x1, 0x0, 0x101, 0x2, {0xf399288, 0x9, 0x0, 0xd0}}) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:27:44 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:27:44 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xffff, 0x2000) ioctl$FS_IOC_FSGETXATTR(r0, 0x41045508, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000100)={0x0, 0x6, 0x6, [], &(0x7f00000000c0)=0x1}) acct(&(0x7f0000000000)='./file0\x00') 16:27:44 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x0, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)=0x101) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:27:44 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x800) setsockopt$nfc_llcp_NFC_LLCP_RW(r2, 0x118, 0x0, &(0x7f0000000180)=0x9, 0x4) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$KVM_SET_TSC_KHZ(r3, 0xaea2, 0x8) eventfd(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRES16, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYRESHEX=r0]) 16:27:44 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:27:44 executing program 0: ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'lo\x00@\x00', 0x1801}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffb000/0x3000)=nil) sendto$inet6(r1, 0x0, 0xfffffffffffffd1e, 0x20010000, 0x0, 0xe6) setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000000c0), 0x4) splice(r1, 0x0, r0, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) symlink(&(0x7f0000000040)='./file1\x00', &(0x7f0000000000)='.//ile0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f00000001c0)='./file0/f.le.\x00', r2, &(0x7f0000000140)='./file0/f.le.\x00') renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, 0x0) 16:27:44 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x0, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)=0x101) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:27:44 executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f000069affb)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00002b4000)={0x2, 0x0, @local}, 0x10) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x2301) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={0x0, @default, @rose={'rose', 0x0}, 0x9, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1f, 0x5, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) ioctl$VIDIOC_DBG_G_REGISTER(r1, 0xc0385650, &(0x7f0000000040)={{0x3, @name="c17f9084385e5d63e23f08776ba687b7d41814acf17b9315f0233594c27316ff"}, 0x8, 0xae8, 0x6}) ioctl$FS_IOC_FSGETXATTR(r1, 0x41045508, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}) 16:27:44 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 496.411856] 9pnet: Insufficient options for proto=fd [ 496.465233] 9pnet: Insufficient options for proto=fd 16:27:44 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x0, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)=0x101) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:27:44 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) dup2(r1, r1) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x80040, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000240)={r3, 0x81, 0x6}) r4 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x2, 0x2) epoll_wait(r4, &(0x7f00000000c0)=[{}, {}, {}, {}, {}], 0x5, 0x3ab1) eventfd(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d59b41d8dac73887e224993b4cec612a1c024513143a666b23a0ab4aa6de7881220b2980b1f5d38b6e63048fb18c4d70e1fa67e0035fad7840fcf7ff24431f13fdd81d6ac89f7559c522bb390c20e5cc906ba24a0ada80d7c56939fc891e4bcbeb22eff383f9a75635932492060b259edb2b02ccc9d9b172585c970c353457c2461f955acb48ba8", @ANYRESHEX=r0, @ANYBLOB="7904bc1438083c4ee7f3cc8100981e702b1ed9eba6eda225aedfdea3062a0a9c755d5dc41b40a7e7fdbbdd6ed059aa06a9631d0f3eb9cc684cc8b2707732d03172cbee279e1bab17887ef7240d36a4d889a9571127534be3e6833f4d575e8f7ba93adb822572d43e97a6967b24fff2aead8931d7d72e765c7cc3a9baa5a6a341ca230cd5f34529ba7cbd41e9e637c719428abcdaf2b672483bbc7596af61cc1a309c4216bb7bc3fd4b510a50a35d4e5aa461914084ca5244c1d2ea032177317c1bd9308098fa170eca888c5f920bd4fa1c2d6399fc78b4235de950a3e397c04e7babbbfec8c1905e51b30b6eea256b7d115bafaf2ccd450c", @ANYRESHEX=r1, @ANYBLOB=',\x00']) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000280)) 16:27:44 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1002, 0x24400) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)) socket$pppoe(0x18, 0x1, 0x0) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:27:44 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:27:44 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(0xffffffffffffffff, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)=0x101) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:27:44 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000), 0x4) syz_open_dev$mouse(&(0x7f0000000280)='/dev/input/mouse#\x00', 0x80, 0x10000) ioctl$FS_IOC_FSGETXATTR(r0, 0x41045508, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r0, 0xc0305615, &(0x7f0000000240)={0x0, {0x6, 0x5}}) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40100010}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r1, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0xc32a}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x2}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = getpgrp(0xffffffffffffffff) syz_open_procfs(r2, &(0x7f00000002c0)='timers\x00') [ 496.657862] overlayfs: filesystem on './file0' not supported as upperdir [ 496.668101] 9pnet: Insufficient options for proto=fd 16:27:45 executing program 0: ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'lo\x00@\x00', 0x1801}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffb000/0x3000)=nil) sendto$inet6(r1, 0x0, 0xfffffffffffffd1e, 0x20010000, 0x0, 0xe6) setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000000c0), 0x4) splice(r1, 0x0, r0, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) symlink(&(0x7f0000000040)='./file1\x00', &(0x7f0000000000)='.//ile0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f00000001c0)='./file0/f.le.\x00', r2, &(0x7f0000000140)='./file0/f.le.\x00') renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, 0x0) 16:27:45 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r0, 0x41045508, &(0x7f0000000000)={0xc79, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}) 16:27:45 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x20001005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x1, 0x590, 0x80000000}}, 0x28) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)) ioctl$KVM_SET_SIGNAL_MASK(r0, 0x4004ae8b, &(0x7f00000001c0)={0x64, "e8947bb22bd176a845f622edea45ca7912243abcc6fbf57336ddafa4966818bd71477e9d4fdd781cb4b1335aff64a0108b285a820e9a210af53ba70adcd798c9dcc7ab342d6bd6118d46e1cb5e0fe2e13f1c6535a32aa71ad12b733e5e4c9e3a249688af"}) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) fsetxattr$security_capability(r0, &(0x7f0000000240)='security.capability\x00', &(0x7f0000000280)=@v1={0x1000000, [{0x5, 0x7}]}, 0xc, 0x2) [ 496.728738] 9pnet: Insufficient options for proto=fd 16:27:45 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:27:45 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) eventfd(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 16:27:45 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(0xffffffffffffffff, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)=0x101) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:27:45 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x800) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000400}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x1f0, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffffffffffe0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_LINK={0x24, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_NODE={0x38, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xe177}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xe0}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x64, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x478}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x101}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80}]}, @TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6f7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfbd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40041) r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r2, 0x41045508, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}) 16:27:45 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:27:45 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x1000, 0x1}) 16:27:45 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(0xffffffffffffffff, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)=0x101) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:27:45 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) eventfd(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7762d8dcdf16e3a0a06ef5a8a7646ea32b", @ANYRESHEX=r1, @ANYBLOB=',\x00']) 16:27:45 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4c, 0x2) fsetxattr(r0, &(0x7f0000000040)=@known='system.advise\x00', &(0x7f00000000c0)='@trusted\x00', 0x9, 0x1) r1 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r1, 0x41045508, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x8000000000000, 0x200000000000000}) syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0xffffffffffffffff, 0xa80) [ 497.026029] 9pnet: Insufficient options for proto=fd [ 497.065778] 9pnet: Insufficient options for proto=fd 16:27:45 executing program 0: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80000, 0x20) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000080), &(0x7f00000000c0)=0x40) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) 16:27:45 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:27:45 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r0, 0x41045508, &(0x7f0000000080)={0x1, 0x2, 0x101, 0x0, 0x0, 0x200000000000000}) 16:27:45 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, 0x0, 0x0) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)=0x101) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:27:45 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) eventfd(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x4) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) [ 497.223096] input: syz0 as /devices/virtual/input/input30 16:27:45 executing program 4: syz_open_dev$sndtimer(&(0x7f000000a040)='/dev/snd/timer\x00', 0x0, 0x10202) r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x100000001, 0x101000) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)) r1 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) sendmmsg(r0, &(0x7f0000009dc0)=[{{&(0x7f0000000140)=@rc={0x1f, {0x3ff, 0x101, 0x7bff, 0x7, 0xe1c, 0x2}, 0x1}, 0x80, &(0x7f0000000580)=[{&(0x7f00000001c0)="8274f408cffd16e948006402fb443bcc3eaa1c39a21c28b1d25cb1e30bc3cf5d61556762c92ae833749e03fafc474fd42a595e8889f922fb8dfbf79c06e4c0f0a6a76e8810c2a5adbc39297f8132c5486ad8d0fbff2493e7d647740145bed19b8aefbf0d737ff320dbffe32ea072e4a04f381f57d1ca2260abe3b1d0dd00ef6a1c2ad88bd5b8c2179edf363bcab24920dc6e54cfc6435a538c", 0x99}, {&(0x7f0000000280)="0aa6460508538a6f5ee5d856364506e4862d66de0a91b14fb15599ebc86773511984696016e620475c47d67a45d610d8f57aca80d5b40bc80d0533b5d706e32bd157f81ae9eff95a94d8488c26ec154c11fb141a62e51ae9588abcda5b449210fd47911a5b3c409f4a6c9b887d5ecb19e678365131fc058bc42e3afa490d0dc52ed285dcec", 0x85}, {&(0x7f0000000340)="b8cbeb039ec344103e28d83058c318d0886bcf0fdb2e8dd6080e42c23453", 0x1e}, {&(0x7f0000000380)="d1d5f31c6a9a84f274c09dbb8872f6908ad762d23ef822b05e58ae51ade88d2081480b5b8b77f53afc24df3840cd75887345c11123c928558d162d639a7f12138adf1f787a", 0x45}, {&(0x7f0000000400)="6c62ef266e4828a5d650767196b09b60f842223b13c196ce65ad8e386381b500a965d158dd1680db4a7ee8f521714897c1aef6b12716ca793f59376069d248bcae0ff6780cf49fb27ed12455", 0x4c}, {&(0x7f0000000480)="d1b3f5ffa652cc608391aca7c776343ffc84355938b1122b9d08c9d5bbc9d2871bdaa02fe226df20ee2507c2484386479deb71e69c22fb90081f3a4e902f143c5327ed7eab4434c5f7d660d93f8206177219d621e0f5a84444967ba2490a01c069a5cfa70de05e6eb48428aa35db4227afea737fd0ffa320b0bfe58c3b9a452ad7710e4312af9141f4a67420623641f367ec2a96586ee68aa948321a670c6f83b909598634a0a396a071a6b960141dc66fa4624086c122080b35856d1a7016c0f60c5c099795f758ea4a830caf9a1532cd2640acfa0c0fc0bb", 0xd9}], 0x6}}, {{&(0x7f0000000600)=@x25={0x9, @null=' \x00'}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000680)="c118ea8a00cf6a5ae8d94f12bb7b61fd2fd07ee8959ba0051a123ab049ac182c215097c958749670048c0ea78c1bd4d26efa2292a3dee538100ffc3fe5428a3eacc3207011755f001ac1ae58b482b8abc0937690758811d029bc959fcc064b87ccbc6958d8de9a7f24a00809b71da7c233b70c41cb2b8b37e023add86e6a33c010da4f3c1c8d23a18e5e5612bc7dc0318d28c9b6f9715e84eec7ec3f6e4004cebc109eed8c4c4763eb07b42ba30dc34040173b556f2ea1bd2e70fc6fc6edc8177c758d9e56944bd0deac1dadab913ab2494c702b016f8182e8eeeb26d5b2679693abca68dae129a2d7b5f40934b6a9", 0xef}, {&(0x7f0000000780)="8c87e2c2ad554ba8bdc6", 0xa}, {&(0x7f00000007c0)="925ae2992f41036da8104da29fc398b17e308e8d73fd46917b7db201a59fd1a9c598aee2917275ba187fd424861cac9c3f9a69793da0a9ea0706b4276fa0ce3d0fe62f91f1f7516c1e9c92c4fde94a13e21bc344fcba8f5e55228c094519627869d2d75eefd0cebf7239fc05524ddcfdc394c15c1bd7a903ef52027ad9bcad1c4d15ff1790d377d252ae1562a95ca4c46c722305ec45e662de6b61e672ec5caca3576d48b7db0033a7c8750f892ae026a0f1b8a0a60cc69bd893ff440752908c6e8474dd322bcf08e04035876e899c0ea90c24b9d1", 0xd5}, {&(0x7f00000008c0)="94dae06c86537a394892a7bb24af291ab65d2a159a104831379536cb7b27c06e643d1cdfcb7b43f9bcc7234b802e57e30f8b8c9c25b2", 0x36}, {&(0x7f0000000900)="01406d4277731ed5b57fd05ba81c1ee51ed3242de4a4fff1909b78714a02113086bbb7eec7f8e2d58996941a9279", 0x2e}, {&(0x7f0000000940)="92c1648723b69aa21ce6f596e17b381cf5ef4c5445d542cb005938cf2e3ad4fa064d45cc24e9462e729fc4c17b60a73a50bff38a71d3da8474ac4ffe65081e132c8bb5906d1a077b61a907f590808b483892ba6eb9b0e362aa5448ebe7e2702f92931662a5e67da019b99af5a5086d37cdfebd40edd15d635d14dc907568f35d5a117885a646bf789b09fb24fa52c02691b6a85db707e904ee0df6d9bc5c1f835b61d55f5973c5f331f3280413acc7705b5eb4960eae097e4a6a84da1517ee48342457c76e23596cf14882d93e8339d30278baaf", 0xd4}, {&(0x7f0000000a40)="8087fc62127bd239a38edfc3d7c344fc81d2", 0x12}, {&(0x7f0000000a80)="e3cf68328efe269d6626e7e07bc24e23b198a4db502391cff09bba8a7da0c9d03c91473e611aa426357801425fe2771b6b73d51bb524304fc1ede58f6d9f1cd080ad6a6388794b8b5da067f830173e956b40f9561ce23268458953afa8fac9fb9aa5a3878c692b5e7a7520bca2d149d632a066bada298a0cdbd84c7526a73d93ffcafd33738f4ea6c0fa080aaa5fd3fd6d0fda4595bccf8cff5f0a5a69b062b88d38fcb4b976e922889699c1f375c6a9414868c03d218a1f3009b5fe66976a9a9d29ce438948a7bcc137df26d9a3e085b1b70334b91339b5c9b5767e8dd3946501b509a7e8da301e6246b759b0", 0xed}], 0x8, &(0x7f0000000c00)=[{0x1010, 0x117, 0x9, "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"}, {0x48, 0x10a, 0x7f, "0b501c92b262c43b93bf4acb2d0b2a8ab63c218d191e9e1eec3fd00579ca6c599129ce7bce7cdc349f061ceecc26494dcd"}], 0x1058}}, {{&(0x7f0000001c80)=@generic={0x4, "e6de1b11678195857a67e64e76dd6c5df1f770c10138de76822ff3dc3983bd97cbf8f9892dbe66ddc2c2a398fe0a470d7b52d7bd45f5a02ca7fbac365c4b7632d2205d6588d9359d44df4367ed4f8f74ef963e46f3f1d196952914e3ecc64755f84c2e2afa841b23e22819dc78bd966896a7c4a0c268e80d455ba9595eaa"}, 0x80, &(0x7f0000002200)=[{&(0x7f0000001d00)="eac42878ddf46972661051e94af232ac5aeba8d3b045ebc55d16dd352636000e02b0357c5042f922ef1bab5b33cf016ef3e4bd368ef8eb7bc5f7237ede10d9d631e833b2381ebed9bd1a24ee59b98ffa0c24604a100c9b6ceed955da39c3ad7a034629782b46e97a117d3684591d32493c3326a6ffc42d4a097718afbc530ef2c2c1da45f9d31c0e807d2030556f7e2123891cf9fd931d688b6e8cc78484313c7674eeb879fb466f0dcd4536cb80cebcd9fe8f03041a41b153819ed8eb4a9bb7ed0fcd40e09fb697e799f1aa947d8be360742c06080e92b90794140a9f8d4bb997", 0xe1}, {&(0x7f0000001e00)="aee299ed95aba74e39b95ab994972b3c3b7e4154e94c863a495788e16ab7edc12fb6b0c9a41b6becab66c214c8f1f3738823f8c578ff22", 0x37}, {&(0x7f0000001e40)="3384b4184cbdd6cd20af6778c901445d6fee9eb942dc83882b81b6a8f4771aa297a933b1d651d20883e1535fe3b13832593745dac36cd79a76c3cfd7b02bd7341d8f4154d90857b7a25bfa1de81b81eca8e713fb3b49569ad6c77044d8d13a4dbc14817dc7017c835bf2914638b16b2b6037", 0x72}, {&(0x7f0000001ec0)="c715d46a31e02e50b9a97fa1998954946d158f467f2dc7014b1150b23c66002a2ada0715640d2cba8406d0fa98293390b8d180e8be8e8821a4f4da16c201", 0x3e}, {&(0x7f0000001f00)="99fdcaa4fa67c2a99073999d4ae20ab18070f5e02fe40071fb97fd0dbbcf5c76baded6762719683f1932b3e4e752fe09fefd21d952f49493b59c2e462760571a692b63e725ef929ebfccc3279ca12690b7676660b2c88f", 0x57}, {&(0x7f0000001f80)="b07a78a5e9e35200e1039c2ec01ef9908b9ae923d566beaba207f9733f5c0dc167386c9b99e3972db2dd3ffd7eae5a121344fb6e53a060400ddcd320c0fb1e09e0777aea278a4d427d0071d7520f5282fbaa9848788c8b50bdc6e21b9f0ba03bbcaff83eb356f967", 0x68}, {&(0x7f0000002000)="b4c416c14501921ffd5077e5d3ae274b041da973397aadbee99fa579b1fc345883a13b0fbfcab58290785571c48126e244b014a2391936cc50d9907dffcbf235a638def803cdd983dc80d62ab60b4b211a9718180e94bc2667db07449dd9804fbcab85f62cd47381a987d671004de4436c4f34bfe8ef8ce37655022340ae745bf0cc7fdd51541c56f4a037b920c24a811699261c4baf249cc9a72f9f4a216ef4c6d22e23042148f878dc98c5eced77ae437cf9d8534a1f31145f10e4ffff8c5480ad89b496a3d1ef595dc89a48f656f8abea2a151d27dc35efe2dcc3590685dcf5ea936d528e9490c7", 0xe9}, {&(0x7f0000002100)="6df2e4783bd9966cc2719964da25fc14b7d1736fd693b9ae38e5ef60cf90865e7d485280cd65fc491a7c476de26927115c977dfffb30f5de90c8bb0197f2f65d1b0cf652419e2328b7a7ddb1bed9cff0488bf16abb16eb", 0x57}, {&(0x7f0000002180)="9bb393515614d8f15c386d58a30a583a9777c1a495ab94e7eb7972d34197b9a81d11bbd4f1978a1d06485107bdd5a8693b74acd462dd86655b10fef15605b98019bf732f27830cfe3dfc7d94c1", 0x4d}], 0x9, &(0x7f00000022c0)=[{0x1010, 0x0, 0x3, "b144c02a99b5e8fa06a77a28a0952a5153f538cec62111dd1754ee97769c6314901783962c8b3832712f1d5e0e05d95280e8146325e2dcca324774c7f3fd2f1c458a49aaf6d845c47d5c809a442ab9b84e6b8ca3fb1ecc063a7aaafafe39718e13385ad227f75c5abd3a40e3a7b6bfcbe6ae33a07b1570518bfab327b3115a8850fe7cc00f5c5f78b6c183ca681e386a9ec0f74ffebe0843a628213f39da1b7ecea450f1a623623f262a4a6520ad0e6e0d0ac6b7271e0e46d967e94bbd13fadb11fd8319e90bea5a94c739896959bc32f0961c477a11676607b1604ea293bf7689e98c167d9f5deccbec0246265ead47a0c112938f1eef4c699904ad264ffe34e4355c8dc427ce9631d70a76f040cfe5d6495cd8392e720e62e1afbec67916790dff7a2efa9a9493869f2b6097c480a681df4b427e1c181ba8c732419ebd7a35424c68f2b479ff33bfd37e2de7b547b033dfb166f5a6fde28d258b20e46699ad7f209ab0a81d66c57e17126fe7ebb020d29032322672178e6f1d4b24e3a742144c9337e7361ee760abe9c34d6faa6753343a2991de37389568989d46236ea41460885364a18d53980a4e2679ad2bbf94b9a73bbcb418bdc61a4b265e1df2207d45a0c375ef0c0e6f1569ed48c906667aa977facc346653573dfeef4ae600d6bb2e208bfad742cd68fef9a8be6aaf8a12b8280db5cd257d0faaa5bcf28eb2501802b6ad74f2ddb9a3e0bbef188618ab37a13cd966e5ffbf4558d56db60bd72b4957aa8af392e14c83c937d24649e3805eca14bd50d664d5093f5b0108e7fd2091a5723550fbff35d88fd8eeb64d9dfa77b3d70dc3e6c8cf56670b0db3b2ab72f9f4f3094b1bdda00389074d2cb50fb7eca3b7ee60d1bafa7d196dae890c4a00403755265fbe5ea489be8d7b592abdf9c2fd60f75dca13e919a71fb0b74a9ec6acde7ee41f6a23fbb6f1e833e271dd27f280ec2c4e836e938e12b44824b21ebad2cd147a63b411727a015a2fce15ddbe062c78413f8b605e9a69c990a15a238fb67825370a2993df0918c0c857691e6b747b25708ab9e08673912039e199862e59b7081ab3d82f65a339f40bdc9f9c205d22c96dd4930023930bca06ad2c80f4bd342555c272d059530c915fd70fc8091be073f10505f94853342a8575da095a0a48572b3bf03451a1f541a127679444c053b706c46feb4c9f71938615054cd1deac0f64d2eab55e012e7281fef48191484250cc43798eec02e439c614a6cb88c4eb1ee5e9fa664e811c45ce464e8cf1821f8398a47bd6794d50f0ce1a17a4f23c0f6652acd7c946a8ed264d986d914ffa8c90e4dac5670688dc7d0817480a8ba7131a9cd56ce93412a625243010633e8d62ff47a0d5cc9fe2984c7f127558f10a9a6460775e72c009832c16004bc177c3f1a1b71641622947a2b607ecc60e33cbfdcf8a12170d7890c2b799e60d581ae801f2c5cfcb95f67fef5f5328cec01a66fde63f5de0a16f39fcf813d0b392fa9d342ef28928c6289751fcdc45d8e683383c6b6ec948d262464ddce9ef25641c1233550cf8606d43fb46b2332fdab7ac4777002cf8a1298f2d5b61ab0d2db183721a85764ad1a9fab7d79c288dd61fcbe9f3cd445f25c512b539b77f10f8262953d9a96ebc4ed06f8ddd1e4db5436f1d96f555d394a4b1ae08253ea61cb7111ca5131d293974a61faeb4fadaff44df8b44ed96db00b7666a908f2aa9bd2600f72e5f027a6e9066674e8055af307b11a375e3895e05fe79555d7013a5aad06f1bef6b92c12a8b478c682934e3609e126e5542d5c1223a3c191a2fd59978c9ee01b3b82a1d0d81ab9b8b450adc4c05c82be7fc7b567ae03e10f7da1e2e69068cc746df3e25cabd3e3bd8028d9a6df3434873c36c381b1d07d041571a544564435bff5dadf627a9ce46f36787be827653bed31b4d09e428c6117cf0528ed3ccfb14cf11e5d4bff9c5bd9af7610ed78d226eb8987047e81b2bfd074836733855e03bab5de5d249596d1946e0bf2d5919523172aa04e45ef09f7165cf7e46b54a8830704efc1a437ff050209bac53ab6889f0c8b578ef14eed3a84e2035f9ce81d628cd95bad9558ea4684fc9553e4f89afc4e34c45eb75d4dee884934e9bfebd6c94c3f87b2edadc78c6a54e3f2ebc4fc2ab2a55bd3e99f4d2f0798f76cd50f2ee0cfae526af878940c4f59838ede283549515cd55ff8af7b5bd41b16a3bedaf43558ee7431b2b468021a8445a31a4c1f89761aa3fb6843c7e48bf05188de52f6b0739157b82797e464e72f85e071a54970e58cee8bf0e34225e08ab016dcbda903bbfc6e01cd47a1f4500dc447b5d93e76112b55043b46168feba930b32c26a88c0a2e78afa6faf43c24f03247c4b1fd9187817cbae1a1cbbb46723c9ae53be356564c7b6fd44cc339bb81703ae206cf6d0a7717af5bc6d0f1dab8147b9815cecfc0b4e2bc2c1bee98a7fea49c3cfee4cbf1b9bd919fe1ba05aa20748653676b3029d8cbb013945436bc5a2e103df6ddb038919cc0fd28b8b80ece4f55be6ce6b68bf477ef7b23f1380a4746975112f7d32fa91c12767edf4d0531f41f613e27a83f51747c390f05e033e97619bb6fe53b93917464919a49bde91bce9040113dce702f36c6a42ccc9e771f3e9792cf79dc0490fd79dbcb697617e4791d6d009554ac783ecf540bad0aea413884d73940678383a1c5bfd138b17201f0bad81ea5b2e4051db1b00f39c4100472d792505b2fc830f20a617767f841a69576ae08e7ad976250ef358e963af1beee24b24a77d0980b2d09b250addb08c0aa6d67b1b81c6e18d453aee812aa9150d901f47a3cba4947b9514ddedbbf0d2b65d8218af2af81d006e23736c35e73a6134a27f88a725aca1701af1d9b6a93b44e8964e679d4c528533108fc2dbab1c9838a0c46fbf341d373693e686e862a1da6d38f7e7584bc7b46a17b60b56449aa95d917fc2a65dd03a03bc976ed9e2968c325f58239217b2b4462025916b412cd0eba653c4bf063dc032055e14bc4276e8c0396c1b0498a670bf5e27fd7a8df9b635735a259f6a171c8376ecf577125f0e4f75fdb6ea94607b5547a17d34345b7a51af6e7981bcd980085f587f3b5c4719d513a8910dec12ff919a245ec5f17c787072be789dd3a85ee41c277a486c5a1d5cad26b5e33ccf61cfa5164550de8dd085036a627c947b32d0fa9b5680e43c203f5289cf636e8c1f7505c321b00bf3f732a9a1f2c7a20fe9af89402e219c0b04108861b5ee0bec639eb5e625746ec03ef30803443745bdcc7aef7d9ee0872c6452b9fdb06cca8248faf851cf10674ceb9d3c2643a773e7a1ce69325765f94be20e930732c544e98b3c3d01dbda9e85789011cd33271c307fc318abb0125726212cd175bf2c7e4ebbb7e545729561b7e05ed269ea4dfe296898264c1bceceac3bad4856d4a994825fe013674bf9b5a9c1a90574507023aca6c46fec3d5bc6f0457e52c24a6084b045ea4a2c2166ad503092020a465256fbe99d4e50bcc043390e4f417b14c26456945325d6f728ec7fe26acf422c2e1b76ebbcccb8a15d70fe987e06eec591bde6574dd1ed3898812c6a9a65583ccce77dacc58d7c43a6ca744a6113371bcb3dc81edc0772a3dd3d8aed4f352fdebe6ebdbdffc4c0c4d6007966156e23850b19d202076971a847f595bc84995dc9550046185dd8e50dbfe31daa6eb6eb513cc47455c441d5673ea05b80858e1cae5872e65aa52e16b88415e36e0ede796a7f79a2638f52db875b2ff05ec2f04134f349b6844f9e6b2dd4373c241855bac23515b3937f4e32a25f68770acc2c0bfd3179cf851c7881402e9042db200129076722d7f3c7ea01577f8897dcecd21782519d44e34b495ee864dd95116aff1d0edef8c7ba47c44cca4abafa6e82a9671a7fda81d90b401b4e0988facf5868862cc18f97cc335e4aedd6b9eb4f48ec8070826a3deeb7a5512994df9b017d42f66528dee70e46eaec41352343e5bd1f8bd5ef739bad3a0382ba0f385ae79b76eb121a8ed08d62150a11a363d1ff6a7fd1a019864ba3fda2bff28c8416d50f0d69c137e120bc1e20f99518b3da50540fa9b3f44cad23de0570f6034aa46b08e7430aba44d685108c548a274553d6761123b1b03d461d530cf0bb0f88934317c0a1aeff7692b17ca06d7c952122d9603f9961351db782fdb2a5989bab4b869ed45fd1411b040bc21d535cdfb308d2edee35502397a19b0c739a13afa5a9c4ae619143019f59fcc890bbf44a1bbdf3e3d4e96b0d07615fe194e01a98f7f5a7b7d87e11ae013a61ed728b1404b249a4d4ccb8f64f6e365c3b1f9ba6b4c7fe69a20b37e0f433b02838e3c7b7d6e40f2e04888948bb24c7845d96a7ad856f31932738344e3a4508efd211fbaba78f1ac4b6dda31a2d91798d591bb76781a1fc4f065845635dffdd9975eada5873b8eeb03a674a35a8b48de54a9a649f5f8dfe3b638b2b75f1bc6a8a2b51a84e338e37f4a138c502797801d549d0502a8aa0ab68459a962eca83404d86c5b438b1a44517dc7589f7af458eef8962ad2d5fb2cc90904c91d526aa727cc4d219e438f72bd114ba83b7432776aa3ad8d6d872c22116b16759b5cac6fb30eee7faf643a0036cb5f095848cb724a89a34be902b863fd6489e961e81c09be0ad14363f831001c2d4c3d5b08a7e8656d96fb3baa4478e6aa6fed320192761fd463d771a2e4ba3ea3cb98d887e3917fb7297cb2b956cf6792d2197674183de0f48a961f1677fdeb33c8f52b329bb1f132fee600533a25e732d3c0a65a9c55eadeba3098d206df1443b86c9c8cd9bee953fc6146f370eba6cf331cd721390c3d4d036dc99c2a273bb5bef611ae88c6aa58ead0bb8868d75d26a8d4ae0904a0564eb53e1f48d5c9f16e8173bb0b516263df046b741bcc77955254636c1d9cf02ac1083f7c6e1390220a039008522d4ce518134c91d2edd6234b858c43dfc19ad86368e63fd1ec5999828d41809f211e34f3ddea3097fd6e31b2c569e95fa1e68a14908b053b14e60a016e2ffcc3c3843989253acd2ebce969f96339417cc8f8a49742dcb936eac1a7c59db4ef7b8bac26d70e15127bfd80f514ccdfc8e28d835df8c2d8c1646535fda4e168da46fa2e2c0a328c4f9e85d26958cbba101b4631c0c86bb0365b87d46333fe63359d3df2199cd874abd551fd6934f7367bdfc7dc42778067eea54473cbff47c7a8996db14206a77e36108f4359bf3903e9b60f17c3db78958b348a1522cb00ea778720ad75f80a3bb63968aaba56f2e7a98b093af9c28ca9e2bfaab77b4bc6f7bdf7567b44c4774235653df7566accbaff1418c5ef9a22982fdac65d1046c7e5b3eb6feeff65787b8ee9ec92ede33bf03e28c325e6914f21754aec5eec090b64e4dda890ef203f7360f057edff0eda7b82676aeb4076bac37e5c9179fab5919ebd83f4239c4214a063d5690c3cbe3b29119bdb4ebb0556bd794c7c344c441e15289464c80d0134bbdb79c8629a878e4350e650b8390d4da684709e920fa59626b2b803bb9f67b3a75a7ac47e8ec3113064c8135dd67d745a17809f80a134dddfce5f7137936bf443213564ac069e08be4bb0c75eb5dcacb684be1e6a8722b464367577f05ab2b178f8c55a6147f68ba73503dd0b8c2038931dcd087cfe72c38f648349e28ef623c39d53ab5186ae589e18f6f383b8483230de6f9c69bd1550de6977eab31eca7aee2098a22383c91b75fec88bc62da4a387b464a3de017f66e6fb8f9b36f"}, {0xd8, 0xf01bb933ec32e78c, 0x6, "77271cdd361e75fabd1749089e7f2aed2ddafa44ff353c34c966c32c4b57031e57e7f2ecc8705385472403ef28eba0fbbb842aa103298ff975576aabde711bdf764da8afedcad9c49e6f06fc27408b78b07146a8a315e381ad5415a089b62eee7937ba0a852d2347cee354c6c341c8800bbf0744a34d48286c6151194a56e04a6b24bd2df306644b5a7966b6240f806e30535eee358f868ec551a8077c342ecc47f8ca748c8c672e7d480a9bda54669c1447305e6a85494d4786fba71b1e5a93f6f3c6f9c5a0f6"}, {0x70, 0x0, 0x3, "13786b8459a5fc668415da2f628e6193a94689fae9e97600612aaadd4ee94a392fd2f6601ce37e069c12d0f5e34f4570071f4ba94f97194ef72e8093dbd78381a6ec8ed1297d92985111f7be6e4b4bd9df6f66593ea25fbf3176cc9431b8d6"}, {0x48, 0xff, 0x404, "ce5caaa3de47b6890b171ca74e231c596b6e28692d51d7b6a1f0c110d3a4ede5ed14e8439e2620fbb00fc11b66766bb54be3"}], 0x11a0}}, {{0x0, 0x0, &(0x7f0000005700)=[{&(0x7f0000003480)="cfa678298524741892a6f35999c973f2f5f9b920bc342496de8b3833d3b2713efd07512203f6ff905f9df3b57c955ee17e0a69eed6cf3ac802d59699f7c734836a08c7ddd6298ff2880c676ce8957d0dc541caebc6507e05bb68fb5779ed073f3084e428f57ed8dee05598cb1b1fed56e1247164b265fc82a28dd5a5fb00c68ea61401068cb6d1be5db7a3be896ca2af221f6cafe26d99a0dc0f883cb83cbd7398b2d4532431e398fec16165111625c955aca09f7e4ad89290c45831715d1b9846e65041c8bc9805d1c26f354be5cb48bc2e587352bd23ce49c4ca1a5bd7fa26d8bae34f7b694b366c71369f91492e0dd417eb7f", 0xf4}, {&(0x7f0000003580)="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", 0x1000}, {&(0x7f0000004580)="b15ea8a63455f32c7a887655fc8ee248aeedbfe93bf1eb7fa363ea58a7f9ee8a8d20415149487dce1e5c5b4055bf82a77965f25e5e3640384dff42846f7c673fa67c2af37a1484f0e09bedf536fa8d8882a04b3f48e99f08b5675e5312dcb2a016339309fb3fd8447c6dfb7d5333a86da63a60f9ac0babab21960329ba3f", 0x7e}, {&(0x7f0000004600)="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", 0x1000}, {&(0x7f0000005600)="003caf4df4498f80afec20299b593d1b6ec65fcc4335dcde1283239611704f960cf13f71433ef4a419d90f889361c30d92bb335e5543843bc4c525a5fe1f2f85c1d51c17ccc989c60158889290ff4926533c37bf777a8a6b2e4caec6c688fb69aa101bde29fd401593e6781335a083f521aaaa2aebb4a17f720d548c942c5dbba2aca04b51409e01d3c0da5a7253ef6a3ed707f9a9234fe0faaae639d4cfd3c1593c96efe5dc03e7cce4f452f82e1e02a93ef65629126d760de9648f4d3c476af4e88e308069cc107bf5", 0xca}], 0x5, &(0x7f0000005780)=[{0xe0, 0x1318ee6923615ad3, 0x3f, "1ba74ed9e822d69b810b039039068b5cec822b58adbc41efdc3b75b215883c243ff592bfdf3fc09ce1a29dde78fcafefb89dea7c60eb97a7cc77542389d8eba0c872907f1b04c139baf0fde6a37bd95a1073ffc8f825b6ed3f162e4ac620e5f236b95494fc1b4233f19be3f11a12ec2c4304383bca8a8505acea67e6d48e6f0445a17361d7c4b945708de75fb499dd16397e8c34590db13ea3c49181d3dbd0307ae22381103f98457d501dc1efe77fa41f714058ebdab8e529db8d2bbb5818f405bb2a836283d7ce60769cbc99"}, {0x1010, 0x103, 0x1, "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"}, {0x80, 0xb5151edabd072765, 0xe8dbb4c, "cd6204ed63ae5177629f86475c51c49f904503dc155841d6e2a39cf2431d5e54e80d66255220da90da0ba12d939d7d8e736ac8be0dd9872d7caf4f07f130c8ad52d6a3f5d46faa61b65e720f9a64700f533bcef2a547f27e00201e9a97386ebb35e4d93bc7997b7b6ca654b18a"}, {0x30, 0x6, 0x3ff, "2dde2138e75fbad80104b90ffef3518ce01ca6b6ed33b515cc953d"}, {0x100, 0x13b, 0x7, "8c805e2b6b6a53bd5f1e525c7b9c186ad2d1f805a66af11bf960b6e3d0fe1e541aca952c511c4c4e9ccbe1ebc12f62a84b7e1708c7f05137334f1cc49cc7b84e4ad0ccf40fe83e82562cf7723bd68794e9ce7134386acbe0fe5a522e7f3ad3268f78b7ce8c60db08922e3433ee5e499be72faa4209dd48de3dcd3d606d2fbfb7889e7713dbd9630069899f80f174816e7f9bf8aced6a25959f226f4e5f0fec7568f55c996f579ee36d72a91ea6bbf18acb10abf05509db42deacbda459251c13beb5f6a7b68e089d9c160a75383a69fdc07935949859c5e5000d3a294d8aca3683b4021cede69a5aab1675"}, {0x1010, 0x102, 0x6, "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"}], 0x22b0}}, {{0x0, 0x0, &(0x7f0000008080)=[{&(0x7f0000007a40)="31a4a901283bb3ae0c02ce3ce7338a56438b0893a6fafbc07b11587a903f982d9f32c7a84b3010ebbc6526d4ab584542be0522a7b3a1940a3b61eb04db42d582c2faace00ff78f6b1b9e5d1f236a235abd43f95a45254e8a6f0c87f5fb0b7ba10b4532f1ad1b2c488b608b48ca1e7d7b94bb2a81c8566febc2e882c5a05f079d6122e97a2458d8646f1126d8df52b7e12aa8cc37ba0af632128346678ea8086a087142ecfc91c057de9e73fdf18de0f204d07b2d57adf925d2c909604f592ebfa154696205c271b9298264df622aa35f039dc5b178cdf4", 0xd7}, {&(0x7f0000007b40)="c79739b188b66c3e50527b0beb09e85b8f400f6227d764f076f8e761033fafc75ea22bb5c028ea00617c9a4aa4d09a36d9d8fcb83de68f336aef707d7c8113b061edac4ece94340fb25d9a4ee82ad2a088525c9a4c39629172ddbfd1c09da17fb7e13d86281ec49dcf9b7f79ecb99f4638a469ce59b73d852aaff30d17947af62ab6", 0x82}, {&(0x7f0000007c00)="3b0bb03a266f92af8a13555cfc7f955bda7aa656c27daf15f6a82e1bcaa9508b8afe74afc7c83b637746dcb65f63c1bc1322903e6f0bffc976187d4d5c97211981d6fe89bef44753352431a6f65129d8be2f9e07ee1a01aad2af25a3537e82c1eb443922f49dc726e666264630fe01a2bb24585e6a1b0b092686967c94cc532db8767dceda8eca720cc8ef7e4f0e07ee40f6a160ed4c6b515ee37b9b1bfc", 0x9e}, {&(0x7f0000007cc0)="feb7ad582644e2029825fd74c8ba90a7efc3d7484d857f0f4015518f583cab7c0296a380cf1f41959120b3e3b332470fd34a57dc98b251f57e4636eba023bbdf78677ba0c46a31dfc84e953efc6d6d4cc6a123d9f90e39bc2b3560e97b83a68a5ce78752eaa7bc2497493312ea1017e2c61343e0206a522a9b6cd0ed3c17c2fb0c424fa1f28d9bd25ccf03c723ee924a90211b62695c469ed832e192a1", 0x9d}, {&(0x7f0000007d80)="0dcf714d669a6ae515759d71c6bb7bd6c5d058cee342d2c241ac27a101cdcbe4036190b50a474936323b6d6d72fbfe56a76ebaea4a0cb3e8cee8ebe68f069e03de0ed382c3f4707838ac6e5be68435586043b488e485fc858f0f570df71672f6b1398d5c7e0dc330fd56798ca8dc72376d7ae405062069b4cba1854ccef7", 0x7e}, {&(0x7f0000007e00)="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", 0xfb}, {&(0x7f0000007f00)="b6708f6e81cd2c06d0db12d2834e70b39e8a59c342e814e5c43f0e3ac107e7b4122ce8a2d6e6c1cfefa696a8c6f4837cdf55ae10ea3e39e29fb4ec2882c58064f9d77d4687a7e4ca4306a39bba7c8464861c24716c43a3ad20e9449367984e366ccc6247a61711fdbaf087dcea12a8c978964855099080ff136c010f5e4f4467c98c0820e478a492f48be752adaebb98d3f90b39b6a91512401b46fb53ce07844c688b8b6a0d18a2c62e0f5217344946bc9bcae01732b3bd6851e88ce4bff958b488d9fb169b00f2", 0xc8}, {&(0x7f0000008000)="1529055048161de5b99fdf6c4d5c2ca618e987eccb2790066ae379ed7380fe93f7cfc1f8d7cadbafb8e5eaa2fbfccdded7077602b4d803266e32f0a76012aec20d1cf30dbf70252b79b98e8015d5b9c7f9628aec7491ac5edc8736588d1d71ad6921453c3f1455", 0x67}], 0x8, &(0x7f0000008100)=[{0xf0, 0x10e, 0x7, "677a2e18e30a8ff70269dff52d79d15f37b7d273bc834da7119996e48bf06ab1f6b65fdf42017c2b814c3fc5def84d6334fd5134157e95693dc81514a8747127fa5c179c341b3d8d4bb95020f2475d264a6437b8ec6b22ac2385391b7da8476a4513e6fc17c95d5489ea044529a29d0c383e42133f835bd136e777bf65efb3d1da9538350ca80f20c7d9888c1015146d101ee533a7e76ec9c63d43ae72a8637512a83076da8096f5f551336d03f179e3776ecf5f106bc661a8d24fc02bb82934b77f5ecad2771978b787139a75860e641e483e322733d4522f99c460"}, {0x70, 0x119, 0x6, "afa067127ada5b0016a2aea3ae09ae2a3d5e14a1e183a37ab4e5214b4896fe568941bf1604fe9504a7db6fb00810e83f8b68b9d775bf7fa024893a28ee2861e23e5179aee174a9b70f3eda659541b9a284e99111468b4e00a0ff35"}, {0xd0, 0x10f, 0x5c54, "6e69f5a3d9b1c5ac1f5a776fea6e3d49750dde8b433cb5ff74130677668bdcb63725cbcfcb2f0a6d840d0101a9d349d9913beb43a40ba55ae59a6ccef1d8ff9b4f015b9a522c818a16389020da45899b6f6458d5daaaed538b60135cbac82a011f561e0ee6a13caf9129ac07366d796857bf8168c3d75bea7a78de046e005e1243ec737b741a28aae9aacc3520d8fc275a4507bcd3d0172d3eced444ca5b2c76ddde1c6290276f7ffb8f0cb56fa68173e99d8f79cb3f0f190db64b87"}, {0x58, 0xe9a7869b742dc157, 0x8, "b73c74e3bb12d1dc6d0b1dde23880c3657727c1019e924828dbd1896fa981354db9bccd18f839a3ba319992b4ff642a0952aba411e2fb738b721e53c752c9c0bab5e48499d99"}, {0x108, 0x10a, 0x6, "94cf3c165ce14fe09bb71ad445965eb6f9394c1c249f0e4b17cd20e91c822faa720beaaf8f4d416fb24127f470e894d92023f04fd834e40580730c77fcb7b1ee609dc8a3844a70fb37d1f995afbd0d9297597638839995d546d3488a9b32f4e2b9050de5b3960c7b971b0663f8c0aad717de464cafc67b2d664ec514c608b4aa27d1ba0a71a6bdade8113cc85626a20678ff9c0795118878cdd5d953f1c4930602ef16f0845ee8dcaa73edcd14fd492b4f7be06f5e1ed7e20acfc57f2d5d56e0f6bed0b42c6bcead47627b6f3c2662ba346a2bc4aba9de4ad85b59d791a0845f6f037c03df4c69de9b5145c83dda58a56c"}, {0x100, 0x115, 0x8, "9d4231840b2bf394ec1e5e4d9b2e30132bccfbd880ba312038f5edd1a0ce81c04054fd33bebf99378ac6ca0514b702270cfb4eb1c4e84df7f57cc1d5d88f6f52415c0cb613ceb00c89478805a390c2efdc021bd669769b80f740136fb8ae44added721f2fac2920c6c7cafea24718c7df914596762ff503d130ee75c6955552857f1a69ccb5032fc79b31ba19e7ac9b64f20af193435353d0a4a2a4ceb47495776949d30d18f5a045fb0634fdab37aec2bf861d765cfb59319c2f8bacb614501336f35d8d5a416c9f4be74cd1e35f44ebc38faa2787f8be0689dea4c43cad4a2a8832c0ff779e8723800097505"}, {0x80, 0x84, 0x100000001, "9288b84ef2eb5285efd442091968be7a9340c67d02ba6e7c637b3a47a952e22f08d0da711f789c3b3109f083e5b712a49d480fd7f5225c3ed8d74f9546139b34045b554da04f5b1cc1384a44f4647e77b2379bf08d114790387dd139531e790f54d2e5213110e01f3aac"}, {0x38, 0x110, 0x9, "624f53665e81236d7fa9f3fbde28901cbd353c3fad6615978811d50b3beda25c28"}, {0x1010, 0x10a, 0xffffffffa2dfb444, "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"}], 0x1558}}, {{&(0x7f0000009680)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x0, 0x1, 0x1, 0x3, {0xa, 0x4e24, 0x3cc2, @rand_addr="d2f893db60aa79453de6715f066e355f", 0x6}}}, 0x80, &(0x7f0000009980)=[{&(0x7f0000009700)="ed0ffd5d6309b225c62bc0264132b3c5b454325dff4348e68d34c60443abc5025369a4478633df6c560dc3b2d5a80e78eeae918760e6fd9d1f5d9243ba1d3d51b03bb886f90635f03efaff649405bf23b58acf09d0aa2f504c71a5bc9fe491cd38d7fc3c6d98dfe62e2a9d5d000f059da49cc2b1f61138f37a46e60ba5dd714c1c2a6106f1dfede6233393217f388c579d19ca4d491a", 0x96}, {&(0x7f00000097c0)="5cc6217942958562c16a49e5c0d448cb14af7ad90a9aaabd01d0560111973170468fa404428b46efbe82b926f1d5e0c5629b1aebc969cefdd881c2f8ca7426cdfc1c10a95b26d44e3995ecfc0ad868c9007fc2777163de8d701be989b80e5250e13bb338bd5e05880a75043ee4d1b08f40e231427f6669248952", 0x7a}, {&(0x7f0000009840)="8246a2822093c2d253209636ff583d9dce44aba4d817e27ef6c78d026e5538dc3327837e5d630994c4ee824e08bf9159e28cd4886712439a2c5f4d44e22c6dde65142c165234bddcf03426345a2d527d042f380d16414ead68ad1ee9f22acb7c9bcd6834d50db5a143ff9595e71815f6f5637b6efe74806e8b72005676b5415c05dc3d6cae9210fbf35f28d1303c47c8c05c4dd32c425f273a8f3e9f80cbef8b9eaed1130f69d36ade910a4ecb9702", 0xaf}, {&(0x7f0000009900)="9d365fdde64fa0be5d28a59857001ac5742b636c4bc44e0b8b164f8680474a8095eae9e53c78dfb943a1e79304cf18f1c6154f5e055b7e2b1c8da5998499f59e09ffe02ea43bce184c4fbdae5300c5d6bbe2e296327dc72fcfe2d3e864d507e4c701b120bf3ac9bcb71da0170d20adae8fc805532742f7cf212ae23c", 0x7c}], 0x4, &(0x7f000000a1c0)=ANY=[@ANYBLOB="f80000000000000003010000000001005476f4f14a67adf1318c8c7f311a6e4aa2463620042b3fed3d936671a1a58858925a709b639263fe1259ec13afbb17c330785daae8f1db2be7abb5c31a32ae271d48fe139315c00eb2b892bdbf3cada4e1d544ea5e7a583dd14297b13d63bff8da01000000000000dcee64cf72cdd96f60596826573d9acb5fde8ab9701078d907832dcd00c1a83a14e9c2834105bb589bbce9bf2f967845e73ef8084c2a70b1562362e3a5d81beb25556398a0861fc4dd5b0c6228d1fe427aadeacd0fd918e4057690281fad9acd2c3eef77ac32c136edcb2cf169a0053b2dece3a7ab1bca66e599a3e5e3cfcdd89e1613e0a5ccf8703082bdd6cf08e49f28e18a3957"], 0xf8}}, {{&(0x7f0000009ac0)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-sse2\x00'}, 0x80, &(0x7f0000009c40)=[{&(0x7f0000009b40)="17f64d099c22e68877af0e8b7cc58b", 0xf}, {&(0x7f0000009b80)="3d136bf540e1ff0ef61217c53b545ab5d5e6925ac6a2daa78f22730bf2e855a4c17f48f5b866a6ae6081ff66b99137db87b1cff73fdf0f363c15f4d7e3db3d", 0x3f}, {&(0x7f0000009bc0)="685591d26c70388ef03f7ab19d81b6e6afa1e0a0689d2820f5", 0x19}, {&(0x7f0000009c00)="0c818fe64a4e218a795b29718e1e880545dd43252d7eeba5511ae334", 0x1c}], 0x4, &(0x7f0000009c80)=[{0x90, 0x1, 0x0, "25b2bcd99d1815e616b79e9d8c58c1f8c27347cb9c135f7470f37e2125aaa79b5dde983744bd5691aa6061e36c98099e6b8962613de2fb79da58f287eaf715df64934831108af884e5c41a98679d45768a3410efdfe67c6760e4baee56b59cc44791afa7d6db57d62513fc5991bfc9c94ed35ba052b9dde00e6c3bd7"}, {0xa8, 0x3a, 0xf251, "05ebdfeaffee25b6539353a0a972833a93209d5ebc8a2654f1d322b73778a9e41efd9c2ea85f81413a2f7648547c9fbeefa5ee6ed83b8f3d37cfb2fd68a0c14bf703bd8dcb50406b3f1124117fd52ddba0ec484d59cfb4ac7584d98b5723d51c6b534dc96798bdd8ffbf2d8d9e6f9e96c8e27d08502d3d21f2294bb5d78cd2c35253f17806e95932e9ccee87c4355ee4294bb45e9a0a79"}], 0x138}}], 0x7, 0x20000010) ioctl$FS_IOC_FSGETXATTR(r1, 0x41045508, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}) 16:27:45 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) recvfrom$inet(r0, &(0x7f00000002c0)=""/73, 0x49, 0x2, 0x0, 0x0) eventfd(0x0) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x40c441) write$FUSE_OPEN(r2, &(0x7f0000000100)={0x20, 0x0, 0x1, {0x0, 0x8}}, 0x20) r3 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x40000000000000, 0x40000) ioctl$TIOCGDEV(r3, 0x80045432, &(0x7f00000000c0)) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x10ea6e24d56e0181, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="51cdc815bdbaaeba009226f3b25ffcdcc768c045c809b2c437df737f607806885787e5bfd2e1e3b04e712ba52a8fab"]) 16:27:45 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, 0x0, 0x0) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)=0x101) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:27:45 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000340)={0x16, 0x98, 0xfa00, {&(0x7f0000000300)={0xffffffffffffffff}, 0x1, 0xffffffffffffffff, 0x10, 0x1, @ib={0x1b, 0x6, 0x4, {"335a3664fd87802eab46233bf10ecf0c"}, 0x8, 0x16d, 0x8}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000400)={0x11, 0x10, 0xfa00, {&(0x7f00000002c0), r1}}, 0x18) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f00000001c0)={0x3, 0xc6a9, 0xff, 'queue0\x00', 0x8}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000280)={0x8, 0xffffffff80000001, 0x1, 0xffff}) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x3, @remote, 'ip6erspan0\x00'}}) fchdir(r0) 16:27:45 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:27:45 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, 0x0, 0x0) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)=0x101) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:27:45 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) eventfd(0x0) ioctl$void(r1, 0x5450) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000080)=0x3, 0x8) 16:27:45 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x100000001, 0x806) read(r0, &(0x7f0000000040)=""/5, 0x5) ioctl$FS_IOC_FSGETXATTR(r0, 0x41045508, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}) 16:27:45 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r0, 0x41045508, &(0x7f0000000080)={0x1, 0x2, 0x101, 0x0, 0x0, 0x200000000000000}) 16:27:45 executing program 0: prctl$PR_SET_MM_MAP(0x34, 0xe, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x9d8a4937149908e8, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0xc028ae92, &(0x7f0000000040)={0x5, 0x7ff}) [ 497.604330] input: syz0 as /devices/virtual/input/input31 16:27:45 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) openat(r2, &(0x7f0000000180)='./file0\x00', 0x200, 0x40) close(r1) eventfd(0x7f) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766b4c1550687b6e9c626b91c4a1caf27a82bd3706b", @ANYRESHEX=r1, @ANYBLOB=',\x00']) 16:27:45 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x7, 0x100) ioctl$FS_IOC_FSGETXATTR(r0, 0x41045508, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}) 16:27:46 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(0xffffffffffffffff, 0x280000040045010, &(0x7f0000000180)=0x101) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:27:46 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 497.723992] 9pnet: Insufficient options for proto=fd 16:27:46 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x0) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_SETHMAC(r0, 0x0, 0x4040) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000140)=0x1ff, 0x4) r1 = socket$inet6(0xa, 0x401000000801, 0x0) close(r1) prctl$PR_GET_SECUREBITS(0x1b) bind$netrom(r0, &(0x7f00000000c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r2 = socket$inet6(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000380)={{0xa, 0x4e23, 0x2, @remote, 0x2}, {0xa, 0x4e21, 0x6, @local, 0x6}, 0x80000001, [0x7f, 0xffffffff, 0x6, 0x7, 0x100000000, 0x2b, 0x4, 0x90f7]}, 0x5c) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e1, &(0x7f0000000200)={'ip6tnl0\x00', 0x2, 0x40}) r3 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) sendmmsg$nfc_llcp(r3, 0xffffffffffffffff, 0x0, 0x4008010) ioctl$VIDIOC_ENUMAUDIO(r3, 0xc0345641, &(0x7f0000000080)={0x1, "d23782293bfd0d63cd6322eb14d74ea93687829938495bacf66f5b82ebf6ea16", 0x2}) ftruncate(r3, 0x2007fff) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000340)={0x0, 0x5, 0x5}) sendfile(r1, r3, 0x0, 0x8000fffffffe) fcntl$getownex(r0, 0x10, &(0x7f0000000300)) [ 497.767112] 9pnet: Insufficient options for proto=fd [ 497.794751] input: syz0 as /devices/virtual/input/input32 16:27:46 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000080)={0x0, r0, 0x200, 0x3, 0x7f, 0x1d}) eventfd(0x2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 16:27:46 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r0, 0x41045508, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}) write$P9_RFSYNC(r0, &(0x7f0000000000)={0x7, 0x33, 0x1}, 0x7) 16:27:46 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:27:46 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000040)={0x18, 0x1, 0x0, {0xa71}}, 0x18) 16:27:46 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x8c02) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) mknod(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x103001, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000000040)={0x0, 0x7ff}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x989680}}, 0x0) tkill(r1, 0x1000000000016) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f00000000c0)={0x870eb1dbda45849d, 'veth0_to_bridge\x00', 0xffffffffffffffff}, 0x18) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x0, 0x0) ppoll(&(0x7f0000000340)=[{r3}, {r4}], 0x2, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ashmem\x00', 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r6, 0x4c80, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000400)={0x0, 0x4}, &(0x7f0000000440)=0x8) setsockopt$netlink_NETLINK_PKTINFO(r6, 0x10e, 0x3, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) unshare(0x20000) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, 0x0, 0xfffffd2d) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x1) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 16:27:46 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:27:46 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) eventfd(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="1a7766646e6f3d", @ANYRESHEX=r1, @ANYBLOB=',\x00']) 16:27:46 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$TCSBRK(r0, 0x5409, 0x9) ioctl$FS_IOC_FSGETXATTR(r0, 0x41045508, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}) [ 498.262770] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO 16:27:46 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(0xffffffffffffffff, 0x280000040045010, &(0x7f0000000180)=0x101) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) [ 498.316623] audit: type=1804 audit(1565454466.613:128): pid=25260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir876699280/syzkaller.vQHxh2/530/file0" dev="sda1" ino=16548 res=1 [ 498.364632] 9pnet: Insufficient options for proto=fd 16:27:46 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:27:46 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r0, 0x41045508, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) [ 498.395642] 9pnet: Insufficient options for proto=fd 16:27:46 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x40, 0x0) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000180)={0x50, 0x1}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r2) r3 = semget$private(0x0, 0x0, 0x82) semctl$SEM_INFO(r3, 0x9c2f0ba00a423587, 0x13, &(0x7f00000000c0)=""/49) eventfd(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x0, 0x0) 16:27:46 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 16:27:46 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x422000) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x7) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000180)={0x7278f719, 0x5, 0x79a, 'queue1\x00', 0x8}) ioctl$FS_IOC_FSGETXATTR(r0, 0x41045508, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}) 16:27:46 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000000)={0x3, 0x7}) ioctl$FS_IOC_FSGETXATTR(r0, 0x41045508, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}) [ 498.549581] input: syz0 as /devices/virtual/input/input36 16:27:47 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) poll(&(0x7f0000000040)=[{r0, 0x8}, {r0, 0x2}, {r0, 0x1}, {r0, 0x4002}, {r0}, {r0, 0x100}, {r0, 0x4000}, {r0}], 0x8, 0xffffffff80000001) [ 499.051269] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 499.052199] audit: type=1804 audit(1565454467.353:129): pid=25292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.0" name="/root/syzkaller-testdir876699280/syzkaller.vQHxh2/530/file0" dev="sda1" ino=16548 res=1 16:27:47 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000040)={0x18, 0x1, 0x0, {0xa71}}, 0x18) 16:27:47 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x85) close(r1) eventfd(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="7472616e2564e40a8c011e256e6f3d6206d1ccfaa613278d8a2a9fa44d8275cd3b2f8ba5de688d6729ecace28843925fb569d2677a2c0950501dd51175a1fc25bec1734a8a498d7a9ce7b2be32f520", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$selinux_context(r2, &(0x7f00000000c0)='system_u:object_r:removable_device_t:s0\x00', 0x28) 16:27:47 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x803) ioctl$FS_IOC_FSGETXATTR(r0, 0x41045508, &(0x7f0000000080)={0x1, 0x2, 0x0, 0x0, 0x0, 0x200000000000000}) 16:27:47 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 16:27:47 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(0xffffffffffffffff, 0x280000040045010, &(0x7f0000000180)=0x101) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) [ 499.088642] audit: type=1804 audit(1565454467.373:130): pid=25260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir876699280/syzkaller.vQHxh2/530/file0" dev="sda1" ino=16548 res=1 16:27:47 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x806) ioctl$FS_IOC_FSGETXATTR(r0, 0x41045508, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}) [ 499.188042] input: syz0 as /devices/virtual/input/input37 16:27:47 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180), &(0x7f00000001c0)=0x4) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r2) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x10000, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) setsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000000140)={@dev={0xfe, 0x80, [], 0x18}, r4}, 0x14) eventfd(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 16:27:47 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) ioctl$FS_IOC_FSGETXATTR(r0, 0x41045508, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x2, 0x0, 0x200000000000000}) 16:27:47 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 16:27:47 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r0, 0x41045508, &(0x7f0000000080)={0x8a03, 0x0, 0x0, 0x0, 0x6, 0x200000000000000}) 16:27:47 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) ioctl$FS_IOC_FSGETXATTR(r0, 0x41045508, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x2, 0x0, 0x200000000000000}) [ 499.332143] input: syz0 as /devices/virtual/input/input38 16:27:47 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x5452, &(0x7f0000000500)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = accept4$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @remote}, &(0x7f0000000200)=0x10, 0x80800) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendto(r2, &(0x7f00000002c0)="e7940cd309fe29bc7445e73c7752277cfeff761ecc88e2cbd47554d801ade3df80f7f806eb74314b341186ed3af17b57230153e6f7969250b6791df9ba945677f548a191ff71aa98b4c3c8d44c2ca1b586bfbc36d4dc1fbbdb340855fa635bc4012f9708315bb861000a68095fd7bab33589e247ac6fb457fd21d3eda5a0189b72a76bb9dc986f5a469b5c", 0x8b, 0x0, &(0x7f0000000380)=@tipc=@name={0x1e, 0x2, 0x4a904cdc8a0117f2, {{0x2, 0x1}, 0x1}}, 0x80) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248ac98c32c17d0400ffff", 0x10) r4 = accept$alg(r3, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vsock\x00', 0x400, 0x0) sendmsg$alg(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000780)="cd490298f833cebe2a4798e2b160f6d5e37482cc5e6dcb195cbbcd170fd6695cc14c2073c89f4ce924f28ebc0bb5c1797797d9bd7cb1b0184279bddd86ad764b9cdc46e92c95553de284b033f9f4283c5a1c0dab6ea01355551382b79ce09df13db2d36b22cf34b6480cb55319858f389d5a871602ba0f14378558c8b48625e449b5a7060d07737df019a2dd4395dc0e4a4c472accce6d3e659277125636975dd048252aa88a166de13c8358937b900c48e292f70b10397edd161d0c7d8e63ee35d02f568148254248e855f5f2cbc0fd3da51cdf9c9867f2c3", 0xd9}, {&(0x7f0000000880)='?@', 0x2}, {&(0x7f0000000940)="dbd20c12", 0x4}, {&(0x7f0000000a00)="c458e2cf7e076d7d583cbaf6a38870d6f00ba76db5a6c711fff763b0b06f2c5eceb27e0827fe0a33488442de1c515dabf3038030ccdb0b7e385b68c4e324fc075c6886b5d505f72e9f39073d88050d7efe24609f0d08c13e2b2b", 0x5a}, {&(0x7f00000013c0)="96383d712f07324dbd8a6af990d55c47423a9f8809939d46b5026ba6328116bf06becdce1e7c580c38d47f0106a7307add232689912daa54382c63ad511b038826e99c07d40fbc5773261d4521894f813219d590aff72467bf0d7fdc2c356267aefb20cd96b68cf36003174b381d0fa3d648310e32e6205d9b545d0062f26b0f2f2083f6193b597775fcfd93091a1ecf6c363be45fc8e02c754e9704ce03a463161902b5b6db001d8e911f299be54a4dbe4867ed3b6a380616653ec57e676280baf6511373643ae846b20ff492ee6ec0eaee0a74ebbefb978aec400378dbc3264294a59349f973fb8dd84823553b045c4a16bf7683ebc6f57b363ff1a14fa5384f957f1856817828b9c497c003c505ccdfb338f41a7b66826a15c49354a6592c74453d4d910db9d0eca73c1d752494524554784dcbf02a891d5af1e6941e2189b47b80652442128617305f222af9df832c911baf3e4824787a27788a40f6536fb13161b71215544e061c3c69fab76d620a3581bb7442f88a8fed87f31e452f196da30c47a9b1b6f000fb85063b4bcc6b884466d7a6baed061d2244ca66d99c1f62832855821910a20e7534e33aa05c63a15ffe8448b514c8dbbdbc92cb9ea73d29b8f99671b9689b2664f5c40fbe61ccbba45a3953664afd497f341310a64b90c449f50aa0910e66e5d9133c9bd47e5e37dea7a350d0abf6d16a2c02a2d58b0e5ea4db18595369cd63f88f7bab97f32ea825858bbfc3361eefcbc48e23b37575f93d81ea7323a3648d9d5e49d532c3ab8a1f3840cec2da94db6ae098853907b84f4db0e1d480c62f804cf92aeed2a626973279a5c6c4501b48555c8b5517a775bc6a034bb77095e203e42008609c3e96aa50b96a4ab05b095171c26eeb10767420d8049f37cd4f315e0eee8e9a4ebf0d3c942c9d745306ee1c64a8d7213fd3f254244c3ae66212602c3b676553b65bce393814d84da781cfaf8e5160189d080b5fc22d953bd4a975cbf309f4afdb427d865bc72c7d911703f0846458b77ace90ec3f9a7375acddbff946123e2d2f76b8c6ff2d54d280bd83b57ddee23f4037957739935d7f51ee3a87f094c7e8ed234a57c592178291598033a1be0de20e18ae24fa38f9effaac7cd1febf567d92745f6403b16da86ebb2d51cea0d6249959053f2fb3813941be676c238e35d38a9652cf0fc434cc9a764166c03d9b79930bf6bc164acf263eec09e0e0155f505be38629f45f1ec61ef3fff8c87875afbac9b3dbe79d4b78038048b18d8e38937f63bcc89926cf9062576d8b4ff483acbcd87388bdfa50e087da1d1f7c86d3d001c2008470d48a820bdb8c88a4c6a85ca7260cff9aef27eda1f587ebecf74b1786ff1341e07da2d8335e386252e62739dff4b02192a270dd338117ff768aa0a383e556d45316402e62b2fbe13d107918ca4ed83cef54b06de223ccf9e96019839ca3d9f476bedb139419c9f743825f668f2b4d02515c03d1eb2d80e42865cdcc44dad4527e348b5f3af7f5fc0512d0fdc92238a8590e51feb6d4a107650a3caaa3f790e3e7d30352e5388fd29926300b5f99f5f7ab271d873668d93af53ce8336dc1b41b41a10a935c5ddbd4a46f3913c6d0dcc4abded2416983819d56114ea8736553d214276c0d53985bb3912514729a38b20a787afb505792d8b98579e25653e36fa50262c01430a223737b07dcea78777e6a87bc8cfb18eede71a8ad27449a3ed15db8053ad749ab47f8ae5be35c8efa20eb4580b56f2764bd4751e18076f9ed31444d3017c4e4229e7ba74dace077763a7b208efda340c3df3749a364307398881050c7a257efb2d25a4a4979b68ba8029c220cfaafbc09e5bc0038323aa80db1a8ca7dd995e8ee1d0449801d489bd4c713edf2a9383df9f13c0e4440ff7382e837d6aee1d2bc3a891ee6484a7ce2386fca77455255411fbf8066600e1e2ea9f0bb89c2aaaee1b69c7bf9031ff64b1be6ae543b90043fd92eda94fbedcc872535e075198640fd97d44f3e2d36e70178a583859661adccbb047f41c6f99e08ec07c2cead4795c798f998f620f37661499f85f0d188ff003a820488da5737cdffa173c9a582aaee18e6a7e91e5de10d4d1ab8fa047d3d58925cd487e6ee62bf4bc2ba12151118c694f00c3cd58d3d4e6d76ee3e9d109e9f01411a027a1eada277faab50ab10097ecd4b84fef1000c568097220077b5434d769dbe529661ffb69eeae31ac4e42d0ef56c38a22871122f592e444b3b5b0d1600ed948fea24a02ef1a91b292d200ceb39db2f4d875c0a4e4cbed88c861cc3f68833727effcbe71fbb2de6895358e76e0a170302c5c79e497bac42178c9495dc619bc5e1c6cf63d11f6e65e2e09bcbfc35d534ec65f9b7eebfce8eeec7173d159e9f3a5a7ad8d9df925c8c5689e847e55b8d9ea672d15937fee3b2e9eb357efea0d3efd4de5361381664e126fa65e55ddc0f2773c2ed1d08aac34c519be7ec2d70b53db838c6d04661202ee06712d1d6b445edfa9b58889a71553b340d6568ab9f4e75861f2be020bd137850feb24141c274bc21de65972521e28167dca629f75d3ef43125369b4b28dd50273a4fffef946e4b1935f3f0f9d78a3064cf330c92cb3cbd19239e6a00609d7c7462003f2fb47b95e13cca9b16686dcaa927d161cfca7124d3b2b8d0a2d65d0e9f2edd0b76c8e37ebcf7b6579022574ff2830315f053c7183b35006facfb2377bff1217c84f965e445fe0e6a3899335b578c18d9c4ed71e4782d646c39d7f7a43cd09ad4789fbc8582a4f6ba114e5cd4d1a9de2a67a5dcf3feb490000328b96c75949a16359a1cccf2f3d59f7d1ec4b91cb7ffa5be8bb6a322618e75433d8a3865d8dce48402bff36aef1fc749ebe4a6c44215de8cda3386b4f43a6175a23424e87ca32c01a43744967a958d29bf42034ad8feb27bc3c6fd9779153296c695ab27ea879541dd0428128e0644e965e0d855a578a8914b69f6320798b23bbb919d4575e8faa183d87992a660ecd8764fdb1a84019f4071cf7e1000ea6d121013be76ba304f2e1b4e6f16d3be0f503af95e8655722b81138735151df76cf67a067113d7b1110a5c8b6a40ad4730c8db3f6eb31aff387c728df5ce6a9e3d5ce1b45d89789803129f1dbe6cd537b3b9f7af832a5894905cac123b844e8c16763f34e6272a904d357ea8deb9c653da7bb06bd1f909297677d060fd93c257a6bfeb84a799b782fbda94c0a3091b187d3512cb79007d16f283233c196d42c9fe5aa6773a2fad89fa3a1979daf9864e725f59541d0f1efaa2cdd4930c23eadbcda38ea069feafbd5b8e8aea3ac085971ddc5a13e7470ed6b405f61abd60d85f4da50993c13f67764e5cd63963918a90322491f7c6aaabdd9399eff95f98be8781aaebef9fdaccc54262b52ef05c75970f8ff5927b9b1ce327ad6c0f80954c6e09372d8b2098d55461c0f05fa16b080df04380aa6a4146e344dd471aa48dde1848916657b3d1b35a2eedf8076f319805b5a6caac5d845ad967cd84c4f07024a5d98a17064fb208640a58402ace333aa51c39cd8e276a2a3f80a1fc97e414b93600d59f282ac31a86ae70ddb5a6fba22d8f3ff247db33b19147e84b7938d06d8851542cb708499a518f9140a9bfbe63fddb4db67a49e30ed7f0a0160c778e8986519b19c6cab2aa34303de9a18600f88958ec6847bd20fe547ce7452e0d9b4ffadb5b679379bf24f35bb7c5ea85ad7fa0a83989af580454460229905ced58cbec06d458b5e0424ed7de37d1348fda2e4cb040edef3978d97f400629b3c56a72a72ed524a0b96522b22505b194210e9c91576f1805e0c6107ee5ad29e691a803bb49acd51df0df2a4184c7b6c0ad4beecbf0bee0427138d2539ba0bc7718701b0518c6ba882217b5aa08831cf3dbc42f33f61483758ca42533e51de07540ec2aa79b973f3fa1fe1b3c49dd2d67d7915ceaffdb150edb45c2520320fed384109adf8a71f350d154cbb5a3e6060ae50e0721424804b0e261dd2aae3ba47b2e0e4b79731a829da273745b0c6f48f5c53ee264010206ebbfd4dc21ac009de63448579e4944700fe175a3f92e11a7e83729b3cc2fed26e093f7d617777ff4df57c8767efa4fb1c4df058d4f811ba26a5573a63e4c5f2976c5fe3df0a5b3cbdd577ab6fcf03fe156ede936340ecbf164734b01908488e90be8c83cd7b81b206ff5fa6eea366102d945483c5fdabbe68d781c3935e0daa39bc89bbdbdda73c016596bd26f76dbae7f1c3dfd15b550ceadd48d072a940d5835243ffadd5874929c892833396b239fa40d62f986f3d67d81e049fa1beb1c41aa81e7e25f1991f7d2f4b6a9a47b6533c8df8e9ff03ffc286d041c154f85541d50d52b2e338327abf67a0ab3e1ab594e5463eac5e783ee6573af69b367b240a8a907ccb2f5fc09062d097f74e339a12a30aed95a8a9189b643e2d675e6de3c8c4c429206eae27a8adfb9a5b105215ca42f292d4865a9b728b39dbbc552cbb1c9faa8eddd7eef97281af9dffaf7d96626f4286f326d2e8f5451de50040fe858879f77eb3db31b53f9feffc245dcebeb1b62cb0dbc978e7d05a61c759a1723c0115bdd998e3f886b18d4e54409400a389083dd17729cf5aba850f087b883b063cae7f8f6bc3e1bdf04941746353500b9ae129a46f11fe30a09b4ab25b98aa883297f6a1ee0df341dbd0f2ae40443c7c03a318aab286627d051a51de38299625ba7a500b2e23a91fc7340dd20222e153fdd3f678ad636b69f1b86baaa3ea9f52ecedbf9881eaa056364a55fda104ffef28049a82308fcd22970ddbe666973be4faf0576702c5eaa8f5c3a537cb5ff58d18c5da00e47aad1e88470eec0c6f44d260d86900758f7a04d3357c1e935386c4e4e6b6d1c48e9ed388ded58dc44fcfadf51e5c80490de6ecb76889936ee4d53586768141ae56cc4c23c3127b38f75ca12ccae59a1243316825c5d6e93f39566d485f0606be80f5a2bd6", 0xdd7}], 0x5}, 0x0) recvmmsg(r4, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/84, 0xfffffee4}], 0x1}}], 0x1, 0x0, 0x0) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:27:48 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x800, 0x1) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) r2 = dup2(r1, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132224) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000100)={r0, 0x7, 0x8, "b745d48a0997402fa065874b6e83edf2135b4936e793b710f1bc1443e2be633a87db5ffafdb6d0122448bc16a88baca0cf11d077161fdf73b231406a96b3ec79fc3f855b30dccad864250d454fd64f1a7cf301944b89bc92f7f3522ec8ae994438fc89a182b1611d915eb7f0d638746448b0380e53922fba448e9118ada91587fa30d6effd4ca0583a61e765070ad13134249f533f3c78652baa661a67dcac81ca001eaec0eedd897f9a9ccfcbd0e97428a379dc0497a6a39eb2c938583d69773077a1cb885b1a5bbf056f40b960757f174d7dc16929b99fdcf00daf2367c293ed45fd612d9b1b054421e9ab5bb496"}) clone(0x4002102001ff5, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x6fc, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_buf(r2, 0x29, 0x0, 0x0, 0x2ed) 16:27:48 executing program 1: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000800)='/selinux/checkreqprot\x00', 0x40, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000840)=@gcm_128={{0x303}, "17c7d0e784340d90", "013da92f478de4092c21f72d86ee5909", "9e3f1fd1", "6d71b8243d13fda3"}, 0x28) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x1) eventfd(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="04000000004db7aa64ab600000000844dec5be0703bc4d847601f49de100de79650aee279c31476f907d74cf8fa80bd7a67db123341906f636d2"]) 16:27:48 executing program 5 (fault-call:3 fault-nth:0): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:27:48 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x410200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x10000, 0x0) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000000100)={0x2, 0xfff}) timerfd_create(0x3, 0x80000) accept4$tipc(r2, &(0x7f0000000380)=@id, &(0x7f00000003c0)=0x10, 0x80800) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000de366839f7f6c2061b9b756f00"/31], 0x14}}, 0x0) write$FUSE_IOCTL(r2, &(0x7f0000000200)={0x20, 0x0, 0x6, {0x1, 0x4, 0x1000, 0x7fffffff}}, 0x20) ioctl$SIOCX25GSUBSCRIP(r2, 0x89e0, &(0x7f0000000580)={'rose0\x00', 0xeffffffffffffcd6}) r3 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0xb469, 0x200) ioctl$SIOCX25GSUBSCRIP(r2, 0x89e0, &(0x7f0000000280)={'team_slave_1\x00', 0x3, 0x5}) setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8fd0000190011040000510000000000000000000000000000000000000000000000cf7de0fcce5b58ac00"/55, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000031080000000000000000000000e2ffffffffffffff00"/103], 0xb8}, 0x8}, 0x0) 16:27:48 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x0, &(0x7f0000000180)=0x101) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) [ 499.809614] 9pnet: Insufficient options for proto=fd 16:27:48 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = eventfd(0x3) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000040)=r1) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x108) ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, &(0x7f00000000c0)) 16:27:48 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) r2 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0xd1, 0x20040) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r2, 0x110, 0x4, &(0x7f00000001c0), 0x4) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x400, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r3, 0x5380) r4 = eventfd(0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) poll(&(0x7f00000000c0)=[{r4}, {r5, 0x8751953084589451}, {r4, 0xa000}, {r0, 0x1000}, {r4, 0xb4224f6169664bff}, {r4, 0xe10c}], 0x6, 0x7fff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 499.833515] input: syz0 as /devices/virtual/input/input39 [ 499.855107] FAULT_INJECTION: forcing a failure. [ 499.855107] name failslab, interval 1, probability 0, space 0, times 0 16:27:48 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0xffffffff, @rand_addr="0d1623e13cf2b895298616a1483f5846", 0xffffffff}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000000040)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x44e20}, 0x1c) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x4000010, r0, 0x23) r1 = shmget(0x3, 0x4000, 0x1, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_INFO(r1, 0x3, &(0x7f00000000c0)=""/90) r2 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x1, 0x20000) ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f0000000180)) 16:27:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff44}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="020a000007001300000020000000854105001a000000000000d74619ed0004d89524429adc542c0200000012aac700"/56], 0x38}}, 0x0) listen(r0, 0x2d) r1 = semget$private(0x0, 0x4, 0x8) semtimedop(r1, &(0x7f0000000280)=[{0x2, 0x0, 0x8330622dbd119604}, {0x2, 0x1cf5, 0x800}, {0x7, 0x5, 0x1800}, {0x3, 0x1000, 0x1000}, {0x0, 0x5, 0x800}, {0x0, 0x8, 0x1000}, {0x0, 0x7, 0x1000}], 0x7, &(0x7f00000002c0)={0x0, 0x989680}) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000f2de1eddb4dae4ca290d57b397000400000000000000000000002100000081000000000000000002010000000000000000000200fd000005000500000000000a004872bbb6896209000055781309e339be59"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) r2 = getpid() r3 = syz_open_procfs(r2, 0x0) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000240)) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0x5) [ 499.921772] Unknown ioctl 21376 [ 499.948222] CPU: 1 PID: 25381 Comm: syz-executor.5 Not tainted 4.14.138 #34 [ 499.955374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 499.964829] Call Trace: [ 499.967438] dump_stack+0x138/0x19c [ 499.971090] should_fail.cold+0x10f/0x159 [ 499.975255] should_failslab+0xdb/0x130 [ 499.979242] __kmalloc_track_caller+0x2ec/0x790 [ 499.983923] ? pointer+0xb10/0xb10 [ 499.987482] ? kasprintf+0xa2/0xbe [ 499.991035] kvasprintf+0xa7/0x110 [ 499.994586] ? bust_spinlocks+0xc0/0xc0 [ 499.998564] kasprintf+0xa2/0xbe [ 500.001926] ? kvasprintf_const+0x170/0x170 [ 500.006256] ? save_trace+0x290/0x290 [ 500.010059] ? save_trace+0x290/0x290 [ 500.013858] ? save_trace+0x290/0x290 [ 500.017655] ? input_default_getkeycode+0x4d0/0x4d0 [ 500.022706] input_devnode+0x4c/0x90 [ 500.026447] device_get_devnode+0x170/0x2e0 [ 500.030797] devtmpfs_delete_node+0x9b/0x170 [ 500.035311] ? devtmpfs_create_node+0x220/0x220 [ 500.040012] ? refcount_sub_and_test+0x8d/0xf0 [ 500.044682] ? refcount_dec_and_test+0x1b/0x20 [ 500.049250] ? kobject_put+0x6d/0x80 [ 500.052962] ? klist_children_put+0x44/0x50 [ 500.057307] ? klist_put+0xc6/0x160 [ 500.060924] device_del+0x799/0xaa0 [ 500.064541] ? __device_links_no_driver+0x220/0x220 [ 500.069548] ? mark_held_locks+0xb1/0x100 [ 500.073688] cdev_device_del+0x1a/0x70 [ 500.077576] evdev_disconnect+0x42/0xb0 [ 500.081578] __input_unregister_device+0x1eb/0x480 [ 500.086497] input_unregister_device+0xa9/0xf0 [ 500.091070] uinput_destroy_device+0x1ce/0x220 [ 500.095644] uinput_ioctl_handler.isra.0+0x129/0x18a0 [ 500.100925] ? uinput_request_submit.part.0+0x290/0x290 [ 500.106284] ? __might_sleep+0x93/0xb0 [ 500.110162] ? __fget+0x210/0x370 [ 500.113627] ? uinput_compat_ioctl+0xa0/0xa0 [ 500.118039] uinput_ioctl+0x4a/0x60 [ 500.121683] do_vfs_ioctl+0x7ae/0x1060 [ 500.125581] ? selinux_file_mprotect+0x5d0/0x5d0 [ 500.130339] ? lock_downgrade+0x6e0/0x6e0 [ 500.134481] ? ioctl_preallocate+0x1c0/0x1c0 [ 500.138876] ? __fget+0x237/0x370 [ 500.142319] ? security_file_ioctl+0x89/0xb0 [ 500.146713] SyS_ioctl+0x8f/0xc0 [ 500.150070] ? do_vfs_ioctl+0x1060/0x1060 [ 500.154238] do_syscall_64+0x1e8/0x640 [ 500.158122] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 500.163003] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 500.168191] RIP: 0033:0x459829 [ 500.171361] RSP: 002b:00007f03e509fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 500.179058] RAX: ffffffffffffffda RBX: 00007f03e509fc90 RCX: 0000000000459829 [ 500.186329] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 16:27:48 executing program 0: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, "c0c814a55b6300d28afc61ac7dd1ffb869b761e8e53ee36e4be89e9fea175523e4468dec44bf8b5473c7a5062b4ede67dcb24cb9484ccfff2b3a70befc56e8ab2eee3483f5bf78c16beac035b700eb84e2216f268d02b717d2046c273814475b412437f7dc08a13a55d3c02132999dfd9fe80b750eff4d7c1da975b3835602728ae09e72527fcee19377e29c6c19e1ccce0f75e0e54001e3e83e473fa3d37eca8be1b3de565571e0e84f310c11fa8616068113b038aaa5c69967699fc2aa41c6f26fc22cf68e3577242c9b4ca20fab9de5885e0648fbd7af089b05f38f152d2f8144461608733c567b6dc5d2a07022c3764565c85abcfd99dd7a85e58939278235d50e8b321be7dbaa5141e097c28364fad2f713d666ca94f4e429687fcabb72aceeaf8abe5b506d98dc393b6e97492d785ead0ca2953f92c4d2b2c9f616e3d98b36be55a923fc5892413f7a3b615cec89b52e0ecdcee0aa5af72bcbb91b4bade7435dd8b529feaf13f8b48fcaca5952235d2e909f8831d8ca05a005a3f6c581f388e0c1879b41fe63ef3d122bd0c5acd4fb07b96797918791075ae7383bb1bbdea574b31301ff37ecc45671ee2e7fc55bf6244025d1fd82dca56a42a23aa826a0b1e102bd87893ddc05649304eb1866c796e46e0d57f552bd572891ef892918bb2e7f2c6bcf68f388ea0c50f48c06de1b46b1434cdf25ca1288ebabe2a33d1c6effb77f91ef75471e93952caeda8ac2b2677e46d62b8366922d093832bccb949e177b4417864812d22972d81d89158288b5318d017329d4e8f66273abf74c434f318ebf32c7629342a85336387231b1e579d57cff0b125bef9dddf0fc33f71cb59d5a8972cda06ba6bba4a89cb8d3b465492c431698984998b2979ea61fed3d99b049724f2bdda5a0700ccb28825da1343f41290e569a6d38d4ae3968147cf39b097efd78e058fc71523c12e724bf93dc4ecc02b5cb18d13b59ec8f85368ac1ea93ed0149c60c53569dc69cdb3f37470eab26ef010b03a7e651b9e8e9065da347660836eddb3988c9a0f394aad055f727310f646d6cb35131d02aaf24735792bfce250798bebf0d1a4495fca568b9449e81afef2937b50faf873257d7efa07d31759474d50ca2a7922e79ab47dd59b11dfd1ec43fef3551aed81d01ee4ab997c6cecc39013dcaa442aec803e4cebbc288b4f9e87b30613f0ec88ddc6f60f56787f4040897e6e6bdac317d74b27f97f2efadb031f03c61954fd0232373582b7fa315d3eb9f67053126d2ed0636f04d669c47bdeb078fbda177533902e20b5ce9d8f395ea4c0aaf2cae774fe99bc40105a9ca184bcb598ab2f49c1df62d32d1a6d73a26812cb47a2ccaf0e9b759df89ad1e18238d897b9fd658f6786a92a0c12bd0ee6dad8a430a67962363e5b9afb3329e4f1f6fcd7e63cb8f24872bcf5b8c349d9ce423666ca39f16884219dea338b388e40f4ad996419cb3858637364d8e5af67f846d77b2749115131a3642ef56681315e4a2cbca5e60febabf693570f515e09c2a8994a8e2be3cba28118ef429d4de781118182607dd2c2d5aaba621ea29c140338bd8f1787fd2a3f43bb7fa22a8ce053adb331a4c78eab569af317e14360a6bf1c8b7394f34bfc1a941ac88dab334d5a2d45fc83bee28884698fd82339c972a06efb369220049ca89727513bd4262ad6f94f55f659ec98b684b1d92e1b6a303548a196cc5316e9845baaf01e737ef047d3d1ac4fe13de618e8fd6471c225e688b73b866213f4765c1a1ecf041f66a11177b0425b0423c455dccfa35a34f3b1c4c9850267bd41dcc366f4f8fef6982699e9aee7f3edff90217c84f6865234676e65911e5e99739792161766e959d061d6e86797b595ae3cffc043da0929dce1b4bd27e04532800f14f69398a681d46f00197f547fa138e676a4c84e586e9a2037faad7d7342221c229ff13606688ab70305dc28d01270604fbcb2b5777541e637a10e7d6c2dfa76461b18c8b303234282f31b7ed8afd0cdcc3978c6520a182000ea312296c7d9df08c2a67b944bc519113822014a831c8d6a7f8d26a7a443666b6077bdc1c11cf47001bcbb484d163543445c77a02140191bbb813da818b4dc3ef1ca420f624e5cb67c48024aeb8691b549202750899938067a3ad49da19e9fffc6486b3525fba8b2ff991fb3b4c1a536818f2dad96f713ac264a22136c6a3a9eacb4f69ab08cfe2b971a7d916833c6a0370d4b0bc428db2e4b4013899668b73caf9c983e2f07e46b4b5b4f0d231edee8b1951e1d0e34c881d1fc5c6be05b92b13680398e7109bd18048f0bd980fceb24e59411873e7a8a7f95f4da2ba5c082fdda710361e163a213a3dbb82c08a69020545da4636c09a67cd962182a011cf5eb1c3d999abc7b834ee518bb53afe19941927ca190699abf79c334c52e206fc851deb7398947ad5bd125ef3f51349497142e921c85506c739f6319ae0eb8e3c551ceb7e16afc2d6aad36841ed8eb560ef984ee5e00f1ead2c646546b3c145e3700b07fc257551641cf3dcb76a8b3cc75994f2c3eb521cea22d64c8b72b2de506fde8185b70b4707b7f571668a5925ca21e605904d7c896a5d7290b9c4fc75ecc7ddbbd7f6f003a74f53d1a5432e0377a3efce1e7ac61e36dc13aeea57400d4d3986db3fccb6edaf83f86daeb42f416f58c502e74178e013b399d0b155e0df86b40b5f3f2ab0ad61c90870cee340c07977b55622699101e5372677dd4e208fa6b5d4834a2d6f37b2ead107218aa0e702d1f6a60bd4ad3a2e22807237129fdc02993ef1fffe3c285bd4f7b093b2da8d772ce2df7874bf9b7fd0893eb66a4931acc38129ffe4a8fc6b28ea83bcca1220b66c86d4d90914bb9e9a425fce618f11b66f93aa78515eac0f3956cb1e8b6f12d7f6f22c1ca5563e280b15c64732aec2a37d6010cee0fd2263ea3ea2011043153284b4a5fc87cc0dd8c36f084ce715a6e9ba3e8b2586726255d122f2b5677d6590405ae031df8f83840ef3011a7f5d18037407758270d980aa65d5a4aa26a35a61b65178b6183b282771e89a8fe47bd3ea5a23146b924a47c3cc2540a9c8d91d4a8924e010fb6d3e60457e0aa86749cc3444707fda055a0f489aecda68af7f0d7d31cf25641a10bcc0d00996cddf9059121639fa3ff2e5490bae6b702fcf226d8e50f27f0973e5e4cf543445524d0fe3bd55d3f215978bfabcba0d44c076f5b333b2095c70f6a5426338bf0c065ddce27f6730606d84d1ccef8cebcd15085fa8a5d0975dc47eeb09a4ab6da21d01916c97f4e266c4b01f2bfb3b6a08bb5a7cf834e56782d824e7c55b591cd883ed9e806a4f7033bbab49a2b8ab2cb0f6da9d76968208236b35a51f8eba3769a676ad60d69c475706a630f3a078ebaa6ba5bc25719867cb61d48cc3a381b261165c04f3c93f37d72fc15f43df1de34e24e80a46f5d15fb362e71cb4a5365dde04a53dc5e42745fbd601ff148db416244dd76ac16f24138ef9a02491eb5b48d731a8bdcd46040d0ff11a07c040b83db84bfd21ffb1d818203cb7d3f8fca47f1dc510afa8219ab031aaba2147aed7c50228930e895a72abf55ca6997131e231ea92e0059b680735548adf2d572c3540e096a644deb3750e3b341bbeffee70ff22e0b4e56142e4c1965c01a646dd9b5b0055f88f08987ad45adb844b9ffc84792073048c28bcb60f2666802052ee45dcd9a2950d55ecf0234a3dcf67e83cfa0bfb1285eb54e6292d8075c9e1b459e48556f416898557c9c864fc5de459feb53e33dd1a6860a2d1a836ab5ff6efaee123b3715a7137787ee4345efbce38074e262f363a8ff400345c8539d44a7286c7291246810bce063f0877db6585842380b530a4aaef6e36779a95fed220cef6c1fff2fdd5031f83987dc3282d432f322852cc9dc6d00c59d5ed83b386ff97c521e528e59f2df932467ac02d17f8818c2de26d69725f42cecaf186fab7b6e10b1ebd9a9a12ed83cd382d9a6f9a9bed2736cb0ec0260057f5ec704d2e1a64caad59e02ff2022174b23564cb0942e6769b12e0ae4d65dc4c5e6b6ceaf2667e085909c93a9768b7bfdac612801c0bc3848bad51e2367f788cbd1c5091ce0e9c567528c72003712e91247d87f1ff60d3865fc687a35886822079392f8d151b89e09469bef98e59139c460a53805a93245148cbb9a6a010dadc87e9b1a0e0a89e87e433ff1c0ad4b125760858c8badff4d82cbd31cf88f3e2e16a4e960e1e0b5825fc0f2b21d660cf60069d43fb6a8a96c44fa922164f02c9cd5ebb6fad848871224d157777b5a70dc6deb988506bd03aa4ce22006ece23641221784250c22d2c8635a3512f45d433cf66e158eb261f48a23d54f5ef4358df3487da471eb5775bdba565ee170be126b2300d0dad050212606f2d77a63fa2ab430e62670e852b89944e611509415bee36bf0961c8918bd8b0eb8af45b1a9d0420c7101a9c5f4a63efb9cc8de7897b5e2b02cb5885ad8d0d8ac7754ba8d4e9d37175e614e3f3a6a7b122bbc6dd9ce78f1b9a4e940a1160bb85650d8932fe1a82d0525630ba017be5129625a45c3cae66c7cdaa33ee704791db81ef2e11a2f528974fa388cd929c934dbdb21425e6117839ab33b2926b036457db3a43083c3ec17231aed4ee5b607a45a5735c9470c03a424b43efcea953c078717344aeb1449c0dfa3a3ec224b542c16cf735466bdaf26b522aef1db547b14f07ebd4f5da34426a46007757be47ed3f643c47f2c4467762cd049d6f4cf8a78d04f8318bdedcee80871e91c0330499d88254555c456d9bde8a892394267eac15c230cf7e7ba19ebc01b1905c80476de3cea8258f6d0820d159f4aa8a37fb378b2685da4e0e89d253187219869f1157bbe4a8a43eabf65e86a6d9b21e25d91c43c3036914427833ed87073886719069148e2e47219bb5da5d9664d64dc5c4ff71c0e808dadbb53a23e41e3c02fd0c9e0704490f3283d1864d15d795882e6522f31445556cab6832f273dac0c7aef4e3f8c09a34d1624fdb087d852f2e827fb2c3105f1afda54b9dc12cfde3cf7747daa5ac70904e82636a13155303f9a1198d6e7f9dc7be394ebc5db9e8380e290e6cae5f320caa56aa94490789fce2e2540b3de8865396f58e14d61d3cb122f7bd1af5a27c6fe733eba3cc39106efc906ea967fb833e2480aa80bd56ccd9e5c25304e2b8135f1453af70059e599cb67bc8eaaa38c39768e74d3da8aba0135f0192d7ddf0149ce62f353b0360251f1f88b272c6e85b4ee4e0563a6de80de83749af6e6aa4d80cab7031aff3f7e8d0c9114940549f828a62be9fd6a16db001369728b4b93d4ecf91563ae03def3ca4e9900a97657c4ff1e41c5742fb3329ba882ed61645aedb22f2543b83cd4007e5d228697a48064acc32ece41f2d5ead3f31a9689249e8b4bb57ac0b136b6c60ec531708235b94db823344aafbb9b79e21959635664b2193c3add0b28767906b7ba4118e6548e9a23b49e9181dc6f7dc7857425c9ab1b1451bc4572fd060190d0b5a76b8368b68e72a212bd0f89d0778d293b1d32f155f30c9aafe7215d2e746ea8f2c73a30bcd8c093a489519b60616b15afe69074ee77fb65caf5faf0aad49106057a91fdcd622a07ac21eb5c221f2e65323228af41b3eb894517c34c4f60ba20fb6f6c4309a7357884c0eeeb0a4874550107f2d0ffdc412f86bdf712f96183b3932cfb4da3f179cde1a288df9af09c243fae8c67b0d208d9cdb7adde8d5e548e0624b19da4818ef656b88280a", 0x1000}, 0x1006) fadvise64(r0, 0x0, 0x0, 0x4) 16:27:48 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x1000, 0x10042) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x10000) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) [ 500.193595] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 500.208231] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f03e50a06d4 [ 500.215601] R13: 00000000004c4596 R14: 00000000004d8860 R15: 0000000000000004 16:27:48 executing program 5 (fault-call:3 fault-nth:1): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:27:48 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x5452, &(0x7f0000000500)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = accept4$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @remote}, &(0x7f0000000200)=0x10, 0x80800) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendto(r2, &(0x7f00000002c0)="e7940cd309fe29bc7445e73c7752277cfeff761ecc88e2cbd47554d801ade3df80f7f806eb74314b341186ed3af17b57230153e6f7969250b6791df9ba945677f548a191ff71aa98b4c3c8d44c2ca1b586bfbc36d4dc1fbbdb340855fa635bc4012f9708315bb861000a68095fd7bab33589e247ac6fb457fd21d3eda5a0189b72a76bb9dc986f5a469b5c", 0x8b, 0x0, &(0x7f0000000380)=@tipc=@name={0x1e, 0x2, 0x4a904cdc8a0117f2, {{0x2, 0x1}, 0x1}}, 0x80) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248ac98c32c17d0400ffff", 0x10) r4 = accept$alg(r3, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vsock\x00', 0x400, 0x0) sendmsg$alg(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000780)="cd490298f833cebe2a4798e2b160f6d5e37482cc5e6dcb195cbbcd170fd6695cc14c2073c89f4ce924f28ebc0bb5c1797797d9bd7cb1b0184279bddd86ad764b9cdc46e92c95553de284b033f9f4283c5a1c0dab6ea01355551382b79ce09df13db2d36b22cf34b6480cb55319858f389d5a871602ba0f14378558c8b48625e449b5a7060d07737df019a2dd4395dc0e4a4c472accce6d3e659277125636975dd048252aa88a166de13c8358937b900c48e292f70b10397edd161d0c7d8e63ee35d02f568148254248e855f5f2cbc0fd3da51cdf9c9867f2c3", 0xd9}, {&(0x7f0000000880)='?@', 0x2}, {&(0x7f0000000940)="dbd20c12", 0x4}, {&(0x7f0000000a00)="c458e2cf7e076d7d583cbaf6a38870d6f00ba76db5a6c711fff763b0b06f2c5eceb27e0827fe0a33488442de1c515dabf3038030ccdb0b7e385b68c4e324fc075c6886b5d505f72e9f39073d88050d7efe24609f0d08c13e2b2b", 0x5a}, {&(0x7f00000013c0)="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", 0xdd7}], 0x5}, 0x0) recvmmsg(r4, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/84, 0xfffffee4}], 0x1}}], 0x1, 0x0, 0x0) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:27:48 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x410000, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000440)='/dev/dlm-monitor\x00', 0x55163ef80a168961, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/zero\x00', 0x40200, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vsock\x00', 0x800, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) r7 = socket$inet6(0xa, 0x9, 0x7fc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x6) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x1f, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp, 0x4000010000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffdc1) ioctl(r8, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070") socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket(0xa, 0x3, 0x8) r12 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$TIOCGSID(r12, 0x5429, &(0x7f0000000800)=0x0) ioctl$sock_FIOSETOWN(r9, 0x8901, &(0x7f0000000140)=r13) ioctl$sock_inet_SIOCSIFFLAGS(r11, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x10}) ioctl$RTC_WKALM_RD(r4, 0x80287010, &(0x7f00000002c0)) setsockopt$IP_VS_SO_SET_DELDEST(r11, 0x0, 0x488, &(0x7f0000000080)={{0x6c, @remote, 0x4e24, 0x3, 'lblcr\x00', 0x1e, 0x0, 0x13}, {@remote, 0x4e21, 0x7, 0xffff, 0x7f, 0x2}}, 0xfffffffffffffd4d) r14 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0) write$binfmt_misc(r10, &(0x7f0000000500)=ANY=[@ANYRES16=r8, @ANYPTR64=&(0x7f0000000840)=ANY=[@ANYRESHEX=r13, @ANYRESHEX=r6, @ANYRES16, @ANYRES16=r8, @ANYPTR=&(0x7f0000000780)=ANY=[@ANYBLOB="8a340bbef6ff14625eaa30b3df4519592c397a60de8d2f", @ANYRES16=r14, @ANYRESHEX=r5, @ANYRES32=r7, @ANYRES16, @ANYRESDEC=r9, @ANYRES32=r11, @ANYRESHEX=r0], @ANYRESHEX=r0, @ANYRES32=r6, @ANYRES32=r5, @ANYRESOCT=0x0], @ANYRESHEX=r9, @ANYRESDEC=r9], 0xfffffdfb) close(r12) r15 = dup3(r11, r14, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r15, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x1, 0x40, 0x7, 0x1f, 0x6, 0x100000000, 0x8001, 0x7d, 0x2, 0x86}, 0xb) write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x0, 0x6}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYPTR64, @ANYPTR], @ANYRES64], 0x10}}, 0xffffffffbffffffc) [ 500.306992] input: syz0 as /devices/virtual/input/input40 [ 500.336839] FAULT_INJECTION: forcing a failure. [ 500.336839] name failslab, interval 1, probability 0, space 0, times 0 [ 500.376169] CPU: 0 PID: 25411 Comm: syz-executor.5 Not tainted 4.14.138 #34 [ 500.383407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 500.392775] Call Trace: [ 500.395384] dump_stack+0x138/0x19c [ 500.395594] Unknown ioctl 35090 [ 500.399031] should_fail.cold+0x10f/0x159 [ 500.399054] should_failslab+0xdb/0x130 [ 500.399072] kmem_cache_alloc_trace+0x2e9/0x790 [ 500.415115] ? lock_downgrade+0x6e0/0x6e0 [ 500.419293] ? devm_device_remove_groups+0x50/0x50 [ 500.424241] kobject_uevent_env+0x378/0xc23 [ 500.428568] ? wait_for_completion+0x420/0x420 [ 500.433164] kobject_uevent+0x20/0x26 [ 500.436960] device_del+0x65c/0xaa0 [ 500.440585] ? __device_links_no_driver+0x220/0x220 [ 500.445613] ? mark_held_locks+0xb1/0x100 [ 500.449763] cdev_device_del+0x1a/0x70 [ 500.453664] evdev_disconnect+0x42/0xb0 [ 500.457641] __input_unregister_device+0x1eb/0x480 [ 500.462604] input_unregister_device+0xa9/0xf0 [ 500.467211] uinput_destroy_device+0x1ce/0x220 [ 500.471800] uinput_ioctl_handler.isra.0+0x129/0x18a0 [ 500.476991] ? uinput_request_submit.part.0+0x290/0x290 [ 500.482370] ? __might_sleep+0x93/0xb0 [ 500.486358] ? __fget+0x210/0x370 [ 500.489818] ? uinput_compat_ioctl+0xa0/0xa0 [ 500.494234] uinput_ioctl+0x4a/0x60 [ 500.497863] do_vfs_ioctl+0x7ae/0x1060 [ 500.501752] ? selinux_file_mprotect+0x5d0/0x5d0 [ 500.506512] ? lock_downgrade+0x6e0/0x6e0 [ 500.510666] ? ioctl_preallocate+0x1c0/0x1c0 [ 500.515080] ? __fget+0x237/0x370 [ 500.518542] ? security_file_ioctl+0x89/0xb0 [ 500.522950] SyS_ioctl+0x8f/0xc0 [ 500.526848] ? do_vfs_ioctl+0x1060/0x1060 [ 500.530995] do_syscall_64+0x1e8/0x640 [ 500.534874] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 500.539733] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 500.544922] RIP: 0033:0x459829 [ 500.548103] RSP: 002b:00007f03e509fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 500.555816] RAX: ffffffffffffffda RBX: 00007f03e509fc90 RCX: 0000000000459829 [ 500.563095] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 16:27:48 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x0, &(0x7f0000000180)=0x101) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:27:48 executing program 5 (fault-call:3 fault-nth:2): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 500.570460] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 500.577727] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f03e50a06d4 [ 500.584990] R13: 00000000004c4596 R14: 00000000004d8860 R15: 0000000000000004 [ 500.604783] bridge0: port 4(team0) entered blocking state [ 500.612251] bridge0: port 4(team0) entered disabled state [ 500.664319] device team0 entered promiscuous mode [ 500.675343] device team_slave_0 entered promiscuous mode [ 500.692026] device team_slave_1 entered promiscuous mode [ 500.697731] input: syz0 as /devices/virtual/input/input41 [ 500.704461] bridge0: port 4(team0) entered blocking state [ 500.710670] bridge0: port 4(team0) entered forwarding state [ 500.719826] FAULT_INJECTION: forcing a failure. [ 500.719826] name failslab, interval 1, probability 0, space 0, times 0 [ 500.738327] CPU: 0 PID: 25429 Comm: syz-executor.5 Not tainted 4.14.138 #34 [ 500.745508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 500.745514] Call Trace: [ 500.745539] dump_stack+0x138/0x19c [ 500.745561] should_fail.cold+0x10f/0x159 [ 500.745580] should_failslab+0xdb/0x130 [ 500.745595] __kmalloc+0x2f0/0x7a0 [ 500.745607] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 500.745619] ? kobject_uevent_env+0x378/0xc23 [ 500.745634] ? rcu_read_lock_sched_held+0x110/0x130 [ 500.745645] ? kobject_get_path+0xbb/0x1a0 [ 500.745661] kobject_get_path+0xbb/0x1a0 [ 500.745679] ? devm_device_remove_groups+0x50/0x50 [ 500.745694] kobject_uevent_env+0x39c/0xc23 [ 500.745708] ? wait_for_completion+0x420/0x420 [ 500.745728] kobject_uevent+0x20/0x26 [ 500.745737] device_del+0x65c/0xaa0 [ 500.745751] ? __device_links_no_driver+0x220/0x220 [ 500.745763] ? mark_held_locks+0xb1/0x100 [ 500.745778] cdev_device_del+0x1a/0x70 [ 500.745792] evdev_disconnect+0x42/0xb0 [ 500.745806] __input_unregister_device+0x1eb/0x480 [ 500.745821] input_unregister_device+0xa9/0xf0 [ 500.745833] uinput_destroy_device+0x1ce/0x220 [ 500.745849] uinput_ioctl_handler.isra.0+0x129/0x18a0 [ 500.745863] ? uinput_request_submit.part.0+0x290/0x290 16:27:49 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x185000, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) eventfd(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x200000, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) [ 500.745889] ? __might_sleep+0x93/0xb0 [ 500.745900] ? __fget+0x210/0x370 [ 500.745916] ? uinput_compat_ioctl+0xa0/0xa0 [ 500.745928] uinput_ioctl+0x4a/0x60 [ 500.745943] do_vfs_ioctl+0x7ae/0x1060 [ 500.745957] ? selinux_file_mprotect+0x5d0/0x5d0 [ 500.745968] ? lock_downgrade+0x6e0/0x6e0 [ 500.745981] ? ioctl_preallocate+0x1c0/0x1c0 [ 500.745995] ? __fget+0x237/0x370 [ 500.746014] ? security_file_ioctl+0x89/0xb0 [ 500.746034] SyS_ioctl+0x8f/0xc0 [ 500.746047] ? do_vfs_ioctl+0x1060/0x1060 [ 500.746064] do_syscall_64+0x1e8/0x640 [ 500.746074] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 500.746093] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 500.746104] RIP: 0033:0x459829 [ 500.746110] RSP: 002b:00007f03e509fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 500.746123] RAX: ffffffffffffffda RBX: 00007f03e509fc90 RCX: 0000000000459829 [ 500.746130] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 500.746137] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 500.746144] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f03e50a06d4 16:27:49 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x5452, &(0x7f0000000500)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = accept4$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @remote}, &(0x7f0000000200)=0x10, 0x80800) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendto(r2, &(0x7f00000002c0)="e7940cd309fe29bc7445e73c7752277cfeff761ecc88e2cbd47554d801ade3df80f7f806eb74314b341186ed3af17b57230153e6f7969250b6791df9ba945677f548a191ff71aa98b4c3c8d44c2ca1b586bfbc36d4dc1fbbdb340855fa635bc4012f9708315bb861000a68095fd7bab33589e247ac6fb457fd21d3eda5a0189b72a76bb9dc986f5a469b5c", 0x8b, 0x0, &(0x7f0000000380)=@tipc=@name={0x1e, 0x2, 0x4a904cdc8a0117f2, {{0x2, 0x1}, 0x1}}, 0x80) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248ac98c32c17d0400ffff", 0x10) r4 = accept$alg(r3, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vsock\x00', 0x400, 0x0) sendmsg$alg(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000780)="cd490298f833cebe2a4798e2b160f6d5e37482cc5e6dcb195cbbcd170fd6695cc14c2073c89f4ce924f28ebc0bb5c1797797d9bd7cb1b0184279bddd86ad764b9cdc46e92c95553de284b033f9f4283c5a1c0dab6ea01355551382b79ce09df13db2d36b22cf34b6480cb55319858f389d5a871602ba0f14378558c8b48625e449b5a7060d07737df019a2dd4395dc0e4a4c472accce6d3e659277125636975dd048252aa88a166de13c8358937b900c48e292f70b10397edd161d0c7d8e63ee35d02f568148254248e855f5f2cbc0fd3da51cdf9c9867f2c3", 0xd9}, {&(0x7f0000000880)='?@', 0x2}, {&(0x7f0000000940)="dbd20c12", 0x4}, {&(0x7f0000000a00)="c458e2cf7e076d7d583cbaf6a38870d6f00ba76db5a6c711fff763b0b06f2c5eceb27e0827fe0a33488442de1c515dabf3038030ccdb0b7e385b68c4e324fc075c6886b5d505f72e9f39073d88050d7efe24609f0d08c13e2b2b", 0x5a}, {&(0x7f00000013c0)="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", 0xdd7}], 0x5}, 0x0) recvmmsg(r4, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/84, 0xfffffee4}], 0x1}}], 0x1, 0x0, 0x0) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:27:49 executing program 2: r0 = syz_open_dev$dspn(&(0x7f00000001c0)='/dev/dsp#\x00', 0x800, 0x8a000) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) [ 500.746151] R13: 00000000004c4596 R14: 00000000004d8860 R15: 0000000000000004 [ 500.764418] Unknown ioctl 21376 [ 500.838512] Unknown ioctl 35090 16:27:49 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fsetxattr(r1, &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000180)='9p\x00', 0x3, 0x1) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) eventfd(0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000240), &(0x7f00000000c0)=0xffffffffffffffae) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f00000001c0)={0x4000000000000026, &(0x7f0000000080)}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 16:27:49 executing program 5 (fault-call:3 fault-nth:3): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:27:49 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x88, r1, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x300000}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netdevsim0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10001}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffffffffff15}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20004000}, 0x10) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x40) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:27:49 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x410000, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000440)='/dev/dlm-monitor\x00', 0x55163ef80a168961, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/zero\x00', 0x40200, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vsock\x00', 0x800, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) r7 = socket$inet6(0xa, 0x9, 0x7fc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x6) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x1f, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp, 0x4000010000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffdc1) ioctl(r8, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070") socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket(0xa, 0x3, 0x8) r12 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$TIOCGSID(r12, 0x5429, &(0x7f0000000800)=0x0) ioctl$sock_FIOSETOWN(r9, 0x8901, &(0x7f0000000140)=r13) ioctl$sock_inet_SIOCSIFFLAGS(r11, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x10}) ioctl$RTC_WKALM_RD(r4, 0x80287010, &(0x7f00000002c0)) setsockopt$IP_VS_SO_SET_DELDEST(r11, 0x0, 0x488, &(0x7f0000000080)={{0x6c, @remote, 0x4e24, 0x3, 'lblcr\x00', 0x1e, 0x0, 0x13}, {@remote, 0x4e21, 0x7, 0xffff, 0x7f, 0x2}}, 0xfffffffffffffd4d) r14 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0) write$binfmt_misc(r10, &(0x7f0000000500)=ANY=[@ANYRES16=r8, @ANYPTR64=&(0x7f0000000840)=ANY=[@ANYRESHEX=r13, @ANYRESHEX=r6, @ANYRES16, @ANYRES16=r8, @ANYPTR=&(0x7f0000000780)=ANY=[@ANYBLOB="8a340bbef6ff14625eaa30b3df4519592c397a60de8d2f", @ANYRES16=r14, @ANYRESHEX=r5, @ANYRES32=r7, @ANYRES16, @ANYRESDEC=r9, @ANYRES32=r11, @ANYRESHEX=r0], @ANYRESHEX=r0, @ANYRES32=r6, @ANYRES32=r5, @ANYRESOCT=0x0], @ANYRESHEX=r9, @ANYRESDEC=r9], 0xfffffdfb) close(r12) r15 = dup3(r11, r14, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r15, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x1, 0x40, 0x7, 0x1f, 0x6, 0x100000000, 0x8001, 0x7d, 0x2, 0x86}, 0xb) write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x0, 0x6}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYPTR64, @ANYPTR], @ANYRES64], 0x10}}, 0xffffffffbffffffc) 16:27:49 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) eventfd(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB='\f\x00']) write$P9_RWRITE(r1, &(0x7f0000000080)={0xb, 0x77, 0x2, 0x80000000}, 0xb) [ 501.083953] input: syz0 as /devices/virtual/input/input42 [ 501.149325] FAULT_INJECTION: forcing a failure. [ 501.149325] name failslab, interval 1, probability 0, space 0, times 0 [ 501.160961] Unknown ioctl 35090 16:27:49 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x0, &(0x7f0000000180)=0x101) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) [ 501.192082] CPU: 1 PID: 25459 Comm: syz-executor.5 Not tainted 4.14.138 #34 [ 501.199282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 501.208833] Call Trace: [ 501.211436] dump_stack+0x138/0x19c [ 501.215079] should_fail.cold+0x10f/0x159 [ 501.219591] should_failslab+0xdb/0x130 [ 501.223570] __kmalloc+0x2f0/0x7a0 [ 501.227109] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 501.227123] ? kobject_uevent_env+0x378/0xc23 [ 501.227138] ? rcu_read_lock_sched_held+0x110/0x130 [ 501.243561] ? kobject_get_path+0xbb/0x1a0 [ 501.243576] kobject_get_path+0xbb/0x1a0 [ 501.243592] ? devm_device_remove_groups+0x50/0x50 [ 501.243604] kobject_uevent_env+0x39c/0xc23 [ 501.243616] ? wait_for_completion+0x420/0x420 [ 501.243632] kobject_uevent+0x20/0x26 [ 501.269520] device_del+0x65c/0xaa0 [ 501.273173] ? __device_links_no_driver+0x220/0x220 [ 501.275035] 9pnet: Insufficient options for proto=fd [ 501.278210] ? mark_held_locks+0xb1/0x100 [ 501.278228] cdev_device_del+0x1a/0x70 [ 501.278244] evdev_disconnect+0x42/0xb0 [ 501.278256] __input_unregister_device+0x1eb/0x480 [ 501.278269] input_unregister_device+0xa9/0xf0 [ 501.278281] uinput_destroy_device+0x1ce/0x220 [ 501.278296] uinput_ioctl_handler.isra.0+0x129/0x18a0 [ 501.304076] 9pnet: Insufficient options for proto=fd [ 501.305066] ? uinput_request_submit.part.0+0x290/0x290 [ 501.305097] ? __might_sleep+0x93/0xb0 [ 501.305106] ? __fget+0x210/0x370 [ 501.305120] ? uinput_compat_ioctl+0xa0/0xa0 [ 501.337164] uinput_ioctl+0x4a/0x60 [ 501.341140] do_vfs_ioctl+0x7ae/0x1060 [ 501.345031] ? selinux_file_mprotect+0x5d0/0x5d0 [ 501.349807] ? lock_downgrade+0x6e0/0x6e0 [ 501.353956] ? ioctl_preallocate+0x1c0/0x1c0 [ 501.358377] ? __fget+0x237/0x370 [ 501.361839] ? security_file_ioctl+0x89/0xb0 [ 501.366249] SyS_ioctl+0x8f/0xc0 [ 501.369600] ? do_vfs_ioctl+0x1060/0x1060 [ 501.373736] do_syscall_64+0x1e8/0x640 [ 501.377607] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 501.382453] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 501.387643] RIP: 0033:0x459829 16:27:49 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x9, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x9, 0x5}, {0xc, 0x2}, {0xa}]}, @const={0xa, 0x0, 0x0, 0xa, 0x5}, @restrict={0x6, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x2e, 0x35cc40ae1634f197, 0x2e, 0x30, 0x0, 0x2e, 0x7f]}}, &(0x7f00000002c0)=""/129, 0x5d, 0x81}, 0x20) eventfd(0x0) r2 = openat(r1, &(0x7f0000000380)='./file0\x00', 0x200, 0x10) ioctl$VIDIOC_G_AUDOUT(r2, 0x80345631, &(0x7f00000000c0)) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000140)={0x3}) [ 501.390856] RSP: 002b:00007f03e507ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 501.398562] RAX: ffffffffffffffda RBX: 00007f03e507ec90 RCX: 0000000000459829 [ 501.405822] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 501.413091] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 501.420368] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f03e507f6d4 [ 501.427722] R13: 00000000004c4596 R14: 00000000004d8860 R15: 0000000000000004 16:27:49 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x410000, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000440)='/dev/dlm-monitor\x00', 0x55163ef80a168961, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/zero\x00', 0x40200, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vsock\x00', 0x800, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) r7 = socket$inet6(0xa, 0x9, 0x7fc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x6) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x1f, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp, 0x4000010000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffdc1) ioctl(r8, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070") socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket(0xa, 0x3, 0x8) r12 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$TIOCGSID(r12, 0x5429, &(0x7f0000000800)=0x0) ioctl$sock_FIOSETOWN(r9, 0x8901, &(0x7f0000000140)=r13) ioctl$sock_inet_SIOCSIFFLAGS(r11, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x10}) ioctl$RTC_WKALM_RD(r4, 0x80287010, &(0x7f00000002c0)) setsockopt$IP_VS_SO_SET_DELDEST(r11, 0x0, 0x488, &(0x7f0000000080)={{0x6c, @remote, 0x4e24, 0x3, 'lblcr\x00', 0x1e, 0x0, 0x13}, {@remote, 0x4e21, 0x7, 0xffff, 0x7f, 0x2}}, 0xfffffffffffffd4d) r14 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0) write$binfmt_misc(r10, &(0x7f0000000500)=ANY=[@ANYRES16=r8, @ANYPTR64=&(0x7f0000000840)=ANY=[@ANYRESHEX=r13, @ANYRESHEX=r6, @ANYRES16, @ANYRES16=r8, @ANYPTR=&(0x7f0000000780)=ANY=[@ANYBLOB="8a340bbef6ff14625eaa30b3df4519592c397a60de8d2f", @ANYRES16=r14, @ANYRESHEX=r5, @ANYRES32=r7, @ANYRES16, @ANYRESDEC=r9, @ANYRES32=r11, @ANYRESHEX=r0], @ANYRESHEX=r0, @ANYRES32=r6, @ANYRES32=r5, @ANYRESOCT=0x0], @ANYRESHEX=r9, @ANYRESDEC=r9], 0xfffffdfb) close(r12) r15 = dup3(r11, r14, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r15, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x1, 0x40, 0x7, 0x1f, 0x6, 0x100000000, 0x8001, 0x7d, 0x2, 0x86}, 0xb) write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x0, 0x6}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYPTR64, @ANYPTR], @ANYRES64], 0x10}}, 0xffffffffbffffffc) 16:27:49 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x4000, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(&(0x7f0000000140)=@sg0='/dev/sg0\x00', &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)='devpts\x00', 0x20, &(0x7f0000000240)='/proc/self/net/pfkey\x00') close(r2) eventfd(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 16:27:49 executing program 5 (fault-call:3 fault-nth:4): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:27:49 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x5452, &(0x7f0000000500)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = accept4$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @remote}, &(0x7f0000000200)=0x10, 0x80800) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendto(r2, &(0x7f00000002c0)="e7940cd309fe29bc7445e73c7752277cfeff761ecc88e2cbd47554d801ade3df80f7f806eb74314b341186ed3af17b57230153e6f7969250b6791df9ba945677f548a191ff71aa98b4c3c8d44c2ca1b586bfbc36d4dc1fbbdb340855fa635bc4012f9708315bb861000a68095fd7bab33589e247ac6fb457fd21d3eda5a0189b72a76bb9dc986f5a469b5c", 0x8b, 0x0, &(0x7f0000000380)=@tipc=@name={0x1e, 0x2, 0x4a904cdc8a0117f2, {{0x2, 0x1}, 0x1}}, 0x80) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248ac98c32c17d0400ffff", 0x10) r4 = accept$alg(r3, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vsock\x00', 0x400, 0x0) sendmsg$alg(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000780)="cd490298f833cebe2a4798e2b160f6d5e37482cc5e6dcb195cbbcd170fd6695cc14c2073c89f4ce924f28ebc0bb5c1797797d9bd7cb1b0184279bddd86ad764b9cdc46e92c95553de284b033f9f4283c5a1c0dab6ea01355551382b79ce09df13db2d36b22cf34b6480cb55319858f389d5a871602ba0f14378558c8b48625e449b5a7060d07737df019a2dd4395dc0e4a4c472accce6d3e659277125636975dd048252aa88a166de13c8358937b900c48e292f70b10397edd161d0c7d8e63ee35d02f568148254248e855f5f2cbc0fd3da51cdf9c9867f2c3", 0xd9}, {&(0x7f0000000880)='?@', 0x2}, {&(0x7f0000000940)="dbd20c12", 0x4}, {&(0x7f0000000a00)="c458e2cf7e076d7d583cbaf6a38870d6f00ba76db5a6c711fff763b0b06f2c5eceb27e0827fe0a33488442de1c515dabf3038030ccdb0b7e385b68c4e324fc075c6886b5d505f72e9f39073d88050d7efe24609f0d08c13e2b2b", 0x5a}, {&(0x7f00000013c0)="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", 0xdd7}], 0x5}, 0x0) recvmmsg(r4, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/84, 0xfffffee4}], 0x1}}], 0x1, 0x0, 0x0) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) [ 501.543233] Unknown ioctl 35090 16:27:49 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) r2 = eventfd(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="1e5627d608d696df56b13f1449f984f9c8fe952eab1bd6ecbb4bc7dec03c19cf4e175cb6afba9b2039622459ff548c590a196ee1a62c4226dcceeeabb07df75e2c78680d7f6d1d6a2689d5d33a280a33f9aa2c40933e02b3fb00c8747cb2762bbd65df9c8e4430f8616ab0", 0x6b) [ 501.582332] input: syz0 as /devices/virtual/input/input43 [ 501.633961] FAULT_INJECTION: forcing a failure. [ 501.633961] name failslab, interval 1, probability 0, space 0, times 0 [ 501.666039] CPU: 0 PID: 25486 Comm: syz-executor.5 Not tainted 4.14.138 #34 [ 501.673199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 501.682564] Call Trace: [ 501.685170] dump_stack+0x138/0x19c [ 501.688812] should_fail.cold+0x10f/0x159 [ 501.692975] should_failslab+0xdb/0x130 [ 501.696951] kmem_cache_alloc_node+0x287/0x780 [ 501.701638] __alloc_skb+0x9c/0x500 [ 501.705267] ? skb_scrub_packet+0x4b0/0x4b0 [ 501.709600] ? netlink_has_listeners+0x20a/0x330 [ 501.714366] kobject_uevent_env+0x781/0xc23 [ 501.718676] ? wait_for_completion+0x420/0x420 [ 501.723248] kobject_uevent+0x20/0x26 [ 501.727038] device_del+0x65c/0xaa0 [ 501.730653] ? __device_links_no_driver+0x220/0x220 [ 501.735672] ? mark_held_locks+0xb1/0x100 [ 501.739823] cdev_device_del+0x1a/0x70 [ 501.743696] evdev_disconnect+0x42/0xb0 [ 501.747656] __input_unregister_device+0x1eb/0x480 [ 501.752576] input_unregister_device+0xa9/0xf0 [ 501.757162] uinput_destroy_device+0x1ce/0x220 [ 501.761759] uinput_ioctl_handler.isra.0+0x129/0x18a0 [ 501.766973] ? uinput_request_submit.part.0+0x290/0x290 [ 501.772332] ? __might_sleep+0x93/0xb0 [ 501.776208] ? __fget+0x210/0x370 [ 501.779680] ? uinput_compat_ioctl+0xa0/0xa0 [ 501.784079] uinput_ioctl+0x4a/0x60 [ 501.787724] do_vfs_ioctl+0x7ae/0x1060 [ 501.791606] ? selinux_file_mprotect+0x5d0/0x5d0 [ 501.796356] ? lock_downgrade+0x6e0/0x6e0 [ 501.800489] ? ioctl_preallocate+0x1c0/0x1c0 [ 501.804882] ? __fget+0x237/0x370 [ 501.808323] ? security_file_ioctl+0x89/0xb0 [ 501.812741] SyS_ioctl+0x8f/0xc0 [ 501.816101] ? do_vfs_ioctl+0x1060/0x1060 [ 501.820241] do_syscall_64+0x1e8/0x640 [ 501.824111] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 501.828955] entry_SYSCALL_64_after_hwframe+0x42/0xb7 16:27:50 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x40, 0x7, &(0x7f0000000680)=[{&(0x7f0000000140)="1876ed0dd2153a2ebe176578af9c8b39ce3a546a7036b3dbe8e9ece8329bffd6f8fe7c5a3e568444d0ea40fa", 0x2c, 0x63}, {&(0x7f00000002c0)="f247571a8982fa42c953c1d8b01e41cb836ef074eed9a2719738dd25808ac5b3647cd00b5ce5773e8e35e0fcdba6150c3160e049fd639edb32bdb2015071869c0514b0894250b76296accde645a1cba8990986619bff41532734047195881026c8fd6b5694a4814dff5f4cb5e147b83ec5cb5770c5bbd64df1ba14a18bc171dad55e66bf74a48dc7aed6db14df6505821fe659f8a8a2b96d66d8a0cb65b6904e7e5a838ab5ac7838264ce46b5a1192cd2d3bfe24b61bb8a0acfd557ce4e0ab1080586d5a0e694a9c429dd385", 0xcc, 0x6}, {&(0x7f0000000180)="68e4ffa84b744385cc40195160dadbc6dc761e43c34fef324adc8afc16f86caf5b8073bb5ed2d1c05fd9b2a9618e469d6b75cdd08adce28b97dba5e5df3ea3bdf64bb5c2f2e7b029883caab57c3093ab99992ca976f361e705e107cb9ce17f242deb6003dac9b97cd3aa18547208472e9decc29165b1ee", 0x77, 0x4}, {&(0x7f00000003c0)="4a198a72c4b64ae8e13e6457b45adab66d32912529aea5e89a8e584e416686d72f47eafd9272d9a6ae02737b137791d11c26c162d02a7d89e7d067e21fdb2bd4d84f196398436f729012729c2cdc8926c3504f9c080ed7c48eaea9a1fc95e600be6fcd8439a64036bb7a8f8631fd4d19f41abf61cfeb07b709b404368001e573a5b26caf9bc355b6b07e79b1ca022c1ddab327e5db5dd5c4dc50043a5d8478eab0ae010480523d6d7b2fc588df3ef8", 0xaf, 0xfff}, {&(0x7f0000000480)="b26e4fa30aab0bcc3f1dbe9560032572233583d6f372428f478604d7ef7eba5c14c9a0764a7dcbb65e52c3ff12db45022d3021594b770250bd680d1ad3929ed9a0b27b500557abf74c1718dde638d2c4f3f77eb3a5918d620765a20d6c07809eaab9ef83997fdd49a6e1206bc89a45ddc5bf0fe313f5cb03a73ba3d075d1010e86abdd19901fa8f2b165232501ab5c3a3ce821d869bce03f856192691bfbd91c3f76571367d57693ad25ec4fdd5c350cc8ff4432b2235ee46b1503710587a5a083715c", 0xc3, 0xffffffffffffffff}, {&(0x7f0000000580)="7a371cdcc1ccab3fc5a75ad744d96426113c62712b91c55ddfb74d211276d25cca9f48c4ad65a7b6bbcaac03d26d3a63ae7cb9788a52e68ad71bad6c3415e59747c5974b77182e52304f1a2b6439992b28dffd45c245a8bd5e26425e4906af6a04803bf3fde2e109bac7ab57a67d3ac8e243d52a3535770dac5662706eff18e881d63165709a008b2efa67e6f195b88de6ae7115b54f8bd3239984d03120fdb057cf5fef31c732f69a3815af71f5407a4c143f8ea7c4cba016aeb0d64a27d52604d34f9bbb8b5a56f66e0328f0204f52e6b6665d4b4337afe672846b2b5810d3", 0xe0, 0x10000}, {&(0x7f0000000240)="6d428be3c53f4b15fd8344d0", 0xc, 0x80000001}], 0x42, &(0x7f0000000740)={[{@shortname_mixed='shortname=mixed'}], [{@obj_user={'obj_user', 0x3d, 'wfdno'}}, {@smackfsfloor={'smackfsfloor'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '9p\x00'}}, {@obj_type={'obj_type', 0x3d, 'vmnet0'}}, {@fsmagic={'fsmagic', 0x3d, 0x4}}]}) close(r1) eventfd(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = syz_open_dev$mouse(&(0x7f00000007c0)='/dev/input/mouse#\x00', 0x1, 0x1) sendto$unix(r2, &(0x7f0000000800)="b1acc1413abf9d54bdf03404e26dbcd568c6604fd4466733cc4f552b1d64d231358dd016a648c6eb34b3f640be5a8861536038fd2d95466155ffcf4ee71b663e3f9507547f3e48348142a564fa00eceb4f", 0x51, 0x10, &(0x7f0000000880)=@abs={0x1, 0x0, 0x4e21}, 0x6e) 16:27:50 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x410000, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000440)='/dev/dlm-monitor\x00', 0x55163ef80a168961, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/zero\x00', 0x40200, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vsock\x00', 0x800, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) r7 = socket$inet6(0xa, 0x9, 0x7fc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x6) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x1f, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp, 0x4000010000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffdc1) ioctl(r8, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070") socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket(0xa, 0x3, 0x8) r12 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$TIOCGSID(r12, 0x5429, &(0x7f0000000800)=0x0) ioctl$sock_FIOSETOWN(r9, 0x8901, &(0x7f0000000140)=r13) ioctl$sock_inet_SIOCSIFFLAGS(r11, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x10}) ioctl$RTC_WKALM_RD(r4, 0x80287010, &(0x7f00000002c0)) setsockopt$IP_VS_SO_SET_DELDEST(r11, 0x0, 0x488, &(0x7f0000000080)={{0x6c, @remote, 0x4e24, 0x3, 'lblcr\x00', 0x1e, 0x0, 0x13}, {@remote, 0x4e21, 0x7, 0xffff, 0x7f, 0x2}}, 0xfffffffffffffd4d) r14 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0) write$binfmt_misc(r10, &(0x7f0000000500)=ANY=[@ANYRES16=r8, @ANYPTR64=&(0x7f0000000840)=ANY=[@ANYRESHEX=r13, @ANYRESHEX=r6, @ANYRES16, @ANYRES16=r8, @ANYPTR=&(0x7f0000000780)=ANY=[@ANYBLOB="8a340bbef6ff14625eaa30b3df4519592c397a60de8d2f", @ANYRES16=r14, @ANYRESHEX=r5, @ANYRES32=r7, @ANYRES16, @ANYRESDEC=r9, @ANYRES32=r11, @ANYRESHEX=r0], @ANYRESHEX=r0, @ANYRES32=r6, @ANYRES32=r5, @ANYRESOCT=0x0], @ANYRESHEX=r9, @ANYRESDEC=r9], 0xfffffdfb) close(r12) r15 = dup3(r11, r14, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r15, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x1, 0x40, 0x7, 0x1f, 0x6, 0x100000000, 0x8001, 0x7d, 0x2, 0x86}, 0xb) write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x0, 0x6}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYPTR64, @ANYPTR], @ANYRES64], 0x10}}, 0xffffffffbffffffc) [ 501.834130] RIP: 0033:0x459829 [ 501.837299] RSP: 002b:00007f03e507ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 501.845165] RAX: ffffffffffffffda RBX: 00007f03e507ec90 RCX: 0000000000459829 [ 501.852420] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 501.859671] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 501.866948] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f03e507f6d4 [ 501.874228] R13: 00000000004c4596 R14: 00000000004d8860 R15: 0000000000000004 16:27:50 executing program 2: r0 = userfaultfd(0x800) fallocate(r0, 0x1, 0x6, 0xfa0) r1 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) ptrace$setregs(0xd, 0x0, 0x7, &(0x7f00000001c0)="e8f6b77089955ee5e0f2cd08dbdac977fa86f922f119a9ffb4542a3f850a4d656f13c8fa990dee68319d21da32427b51c26352ac3839eb51639643d99f513bed783bb9f104e8fadbc05ad9a3b1cd8b7c655d0c7a212bef878677794d6bb2b17d56287bc49e7364e4a9c51c870454493861c066e809fb2cc7013f0a93d19a0bc8f926339b6c0190ba768fc6ee9a") read(r1, &(0x7f0000000280)=""/144, 0xfffffd9a) ioctl$int_in(r1, 0x280000040045010, &(0x7f0000000180)) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000040)=""/155) sendfile(r1, r1, 0x0, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_REQUEST_TABLE(r2, 0x227f, &(0x7f0000000280)) ioctl$int_in(r1, 0x800060c004500a, &(0x7f0000000000)) 16:27:50 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x280000040045010, 0x0) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:27:50 executing program 5 (fault-call:3 fault-nth:5): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 501.934983] Unknown ioctl 35090 16:27:50 executing program 0: openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0x0, 0x2) mlockall(0x5) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 502.015856] FAT-fs (loop1): Unrecognized mount option "obj_user=wfdno" or missing value [ 502.043929] input: syz0 as /devices/virtual/input/input44 [ 502.086735] FAULT_INJECTION: forcing a failure. [ 502.086735] name failslab, interval 1, probability 0, space 0, times 0 [ 502.120449] CPU: 0 PID: 25515 Comm: syz-executor.5 Not tainted 4.14.138 #34 [ 502.127587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 502.136947] Call Trace: [ 502.139530] dump_stack+0x138/0x19c [ 502.143145] should_fail.cold+0x10f/0x159 [ 502.147277] should_failslab+0xdb/0x130 [ 502.151233] kmem_cache_alloc_node+0x287/0x780 [ 502.155803] __alloc_skb+0x9c/0x500 [ 502.159411] ? skb_scrub_packet+0x4b0/0x4b0 [ 502.163715] ? netlink_has_listeners+0x20a/0x330 [ 502.168455] kobject_uevent_env+0x781/0xc23 [ 502.172775] ? wait_for_completion+0x420/0x420 [ 502.177348] kobject_uevent+0x20/0x26 [ 502.181133] device_del+0x65c/0xaa0 [ 502.184743] ? __device_links_no_driver+0x220/0x220 [ 502.189773] ? mark_held_locks+0xb1/0x100 [ 502.193951] cdev_device_del+0x1a/0x70 [ 502.197836] evdev_disconnect+0x42/0xb0 [ 502.201816] __input_unregister_device+0x1eb/0x480 [ 502.206734] input_unregister_device+0xa9/0xf0 [ 502.211312] uinput_destroy_device+0x1ce/0x220 [ 502.215877] uinput_ioctl_handler.isra.0+0x129/0x18a0 [ 502.221053] ? uinput_request_submit.part.0+0x290/0x290 [ 502.226436] ? __might_sleep+0x93/0xb0 [ 502.230309] ? __fget+0x210/0x370 [ 502.233753] ? uinput_compat_ioctl+0xa0/0xa0 [ 502.238146] uinput_ioctl+0x4a/0x60 [ 502.241763] do_vfs_ioctl+0x7ae/0x1060 [ 502.245635] ? selinux_file_mprotect+0x5d0/0x5d0 [ 502.250378] ? lock_downgrade+0x6e0/0x6e0 [ 502.254508] ? ioctl_preallocate+0x1c0/0x1c0 [ 502.258899] ? __fget+0x237/0x370 [ 502.262361] ? security_file_ioctl+0x89/0xb0 [ 502.266780] SyS_ioctl+0x8f/0xc0 [ 502.270130] ? do_vfs_ioctl+0x1060/0x1060 [ 502.274268] do_syscall_64+0x1e8/0x640 [ 502.278161] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 502.283004] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 502.297226] RIP: 0033:0x459829 [ 502.300404] RSP: 002b:00007f03e507ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 502.308131] RAX: ffffffffffffffda RBX: 00007f03e507ec90 RCX: 0000000000459829 [ 502.315396] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 502.322650] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 502.329904] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f03e507f6d4 16:27:50 executing program 1: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) eventfd(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 502.337162] R13: 00000000004c4596 R14: 00000000004d8860 R15: 0000000000000004 16:27:50 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x5452, &(0x7f0000000500)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = accept4$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @remote}, &(0x7f0000000200)=0x10, 0x80800) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendto(r2, &(0x7f00000002c0)="e7940cd309fe29bc7445e73c7752277cfeff761ecc88e2cbd47554d801ade3df80f7f806eb74314b341186ed3af17b57230153e6f7969250b6791df9ba945677f548a191ff71aa98b4c3c8d44c2ca1b586bfbc36d4dc1fbbdb340855fa635bc4012f9708315bb861000a68095fd7bab33589e247ac6fb457fd21d3eda5a0189b72a76bb9dc986f5a469b5c", 0x8b, 0x0, &(0x7f0000000380)=@tipc=@name={0x1e, 0x2, 0x4a904cdc8a0117f2, {{0x2, 0x1}, 0x1}}, 0x80) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248ac98c32c17d0400ffff", 0x10) r4 = accept$alg(r3, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vsock\x00', 0x400, 0x0) sendmsg$alg(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000780)="cd490298f833cebe2a4798e2b160f6d5e37482cc5e6dcb195cbbcd170fd6695cc14c2073c89f4ce924f28ebc0bb5c1797797d9bd7cb1b0184279bddd86ad764b9cdc46e92c95553de284b033f9f4283c5a1c0dab6ea01355551382b79ce09df13db2d36b22cf34b6480cb55319858f389d5a871602ba0f14378558c8b48625e449b5a7060d07737df019a2dd4395dc0e4a4c472accce6d3e659277125636975dd048252aa88a166de13c8358937b900c48e292f70b10397edd161d0c7d8e63ee35d02f568148254248e855f5f2cbc0fd3da51cdf9c9867f2c3", 0xd9}, {&(0x7f0000000880)='?@', 0x2}, {&(0x7f0000000940)="dbd20c12", 0x4}, {&(0x7f0000000a00)="c458e2cf7e076d7d583cbaf6a38870d6f00ba76db5a6c711fff763b0b06f2c5eceb27e0827fe0a33488442de1c515dabf3038030ccdb0b7e385b68c4e324fc075c6886b5d505f72e9f39073d88050d7efe24609f0d08c13e2b2b", 0x5a}, {&(0x7f00000013c0)="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", 0xdd7}], 0x5}, 0x0) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:27:50 executing program 5 (fault-call:3 fault-nth:6): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:27:50 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) eventfd(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) 16:27:50 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x280000040045010, 0x0) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) [ 502.638815] input: syz0 as /devices/virtual/input/input45 [ 502.663618] FAULT_INJECTION: forcing a failure. [ 502.663618] name failslab, interval 1, probability 0, space 0, times 0 16:27:51 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x8000, 0x80040) ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f00000000c0)={0x0, 0x5a8804f4, 0x1, 0x80, &(0x7f0000ffe000/0x2000)=nil, 0x800}) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) eventfd(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 502.699549] CPU: 1 PID: 25536 Comm: syz-executor.5 Not tainted 4.14.138 #34 [ 502.706687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 502.716044] Call Trace: [ 502.716174] dump_stack+0x138/0x19c [ 502.722378] should_fail.cold+0x10f/0x159 [ 502.726521] should_failslab+0xdb/0x130 [ 502.730487] kmem_cache_alloc_node_trace+0x280/0x770 [ 502.735587] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 502.741051] __kmalloc_node_track_caller+0x3d/0x80 16:27:51 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x20001, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000580)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init1(0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000600)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @rand_addr=0x1f}, @ib={0x1b, 0x0, 0x0, {"23ce0e9d9488c12f0a77bd74dd38fca2"}, 0x4a7, 0x6, 0xfffffffffffffffc}}}, 0x118) r3 = syz_open_dev$usb(0x0, 0x3ff, 0x200000) r4 = add_key(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000400)={0xffffffffffffffff}, 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r3, &(0x7f00000004c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000340), r5, 0x80}}, 0x18) keyctl$search(0xa, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) syz_mount_image$minix(0x0, &(0x7f0000000540)='./file0\x00', 0x756, 0x0, 0x0, 0x2020002, 0x0) add_key(0x0, &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0xfe5e, r4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$unix(0x1, 0x5, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) eventfd(0x3) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ubi_ctrl\x00', 0x640842, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="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"/360, @ANYRESHEX=r1, @ANYBLOB="026e"]) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x80000, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r6, 0x8905, &(0x7f00000000c0)) [ 502.745998] __kmalloc_reserve.isra.0+0x40/0xe0 [ 502.750675] __alloc_skb+0xcf/0x500 [ 502.754302] ? skb_scrub_packet+0x4b0/0x4b0 [ 502.758627] ? netlink_has_listeners+0x20a/0x330 [ 502.763397] kobject_uevent_env+0x781/0xc23 [ 502.767727] ? wait_for_completion+0x420/0x420 [ 502.772325] kobject_uevent+0x20/0x26 [ 502.776141] device_del+0x65c/0xaa0 [ 502.779781] ? __device_links_no_driver+0x220/0x220 [ 502.784978] ? mark_held_locks+0xb1/0x100 [ 502.789167] cdev_device_del+0x1a/0x70 [ 502.793056] evdev_disconnect+0x42/0xb0 [ 502.797024] __input_unregister_device+0x1eb/0x480 [ 502.801952] input_unregister_device+0xa9/0xf0 [ 502.806520] uinput_destroy_device+0x1ce/0x220 [ 502.811097] uinput_ioctl_handler.isra.0+0x129/0x18a0 [ 502.816273] ? __schedule+0x7c0/0x1cd0 [ 502.820147] ? uinput_request_submit.part.0+0x290/0x290 [ 502.825494] ? retint_kernel+0x2d/0x2d [ 502.829370] ? trace_hardirqs_on_caller+0x400/0x590 [ 502.834372] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 502.839140] ? retint_kernel+0x2d/0x2d [ 502.843107] ? uinput_compat_ioctl+0xa0/0xa0 [ 502.843119] uinput_ioctl+0x4a/0x60 [ 502.843134] do_vfs_ioctl+0x7ae/0x1060 [ 502.843149] ? selinux_file_mprotect+0x5d0/0x5d0 [ 502.843164] ? lock_downgrade+0x6e0/0x6e0 [ 502.851192] ? ioctl_preallocate+0x1c0/0x1c0 [ 502.851205] ? __fget+0x237/0x370 [ 502.851225] ? security_file_ioctl+0x89/0xb0 [ 502.851238] SyS_ioctl+0x8f/0xc0 [ 502.851247] ? do_vfs_ioctl+0x1060/0x1060 [ 502.851260] do_syscall_64+0x1e8/0x640 [ 502.851269] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 502.851285] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 502.851293] RIP: 0033:0x459829 [ 502.851299] RSP: 002b:00007f03e507ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 502.851310] RAX: ffffffffffffffda RBX: 00007f03e507ec90 RCX: 0000000000459829 [ 502.851316] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 502.851321] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 502.851326] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f03e507f6d4 [ 502.851332] R13: 00000000004c4596 R14: 00000000004d8860 R15: 0000000000000004 16:27:51 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040)=[@timestamp, @window={0x3, 0xffffffff00000001, 0x8000}, @timestamp, @timestamp, @timestamp, @timestamp, @timestamp], 0x7) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@empty}}, &(0x7f0000000300)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@loopback, @in=@empty, 0x4e21, 0x1ff, 0x4e24, 0x4, 0xa, 0x0, 0x20, 0x2e, r1, r2}, {0x1, 0x7, 0x81, 0x2, 0x7ff, 0x5, 0x4, 0x901a}, {0x989, 0x7ff, 0x3f, 0x8}, 0x8, 0x6e6bb7, 0x2, 0x0, 0x2, 0x4afe51bc32d0f06d}, {{@in6=@ipv4={[], [], @local}, 0x4d2, 0x87712e17c62f58b5}, 0xa, @in6=@empty, 0x3501, 0x1, 0x1, 0x4, 0x6907, 0x1000, 0x7fffffff}}, 0xe8) [ 502.912875] 9pnet: Insufficient options for proto=fd [ 502.990957] Unknown ioctl 35077 16:27:51 executing program 5 (fault-call:3 fault-nth:7): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:27:51 executing program 0: r0 = userfaultfd(0x800) fallocate(r0, 0x1, 0x6, 0xfa0) r1 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) ptrace$setregs(0xd, 0x0, 0x7, &(0x7f00000001c0)="e8f6b77089955ee5e0f2cd08dbdac977fa86f922f119a9ffb4542a3f850a4d656f13c8fa990dee68319d21da32427b51c26352ac3839eb51639643d99f513bed783bb9f104e8fadbc05ad9a3b1cd8b7c655d0c7a212bef878677794d6bb2b17d56287bc49e7364e4a9c51c870454493861c066e809fb2cc7013f0a93d19a0bc8f926339b6c0190ba768fc6ee9a") read(r1, &(0x7f0000000280)=""/144, 0xfffffd9a) ioctl$int_in(r1, 0x280000040045010, &(0x7f0000000180)) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000040)=""/155) sendfile(r1, r1, 0x0, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_REQUEST_TABLE(r2, 0x227f, &(0x7f0000000280)) ioctl$int_in(r1, 0x800060c004500a, &(0x7f0000000000)) [ 503.035763] Unknown ioctl 35077 16:27:51 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x80000, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x6, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f0000000140)={0x7ff, r3}) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) eventfd(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 503.058786] input: syz0 as /devices/virtual/input/input46 [ 503.082215] FAULT_INJECTION: forcing a failure. [ 503.082215] name failslab, interval 1, probability 0, space 0, times 0 [ 503.116427] CPU: 1 PID: 25565 Comm: syz-executor.5 Not tainted 4.14.138 #34 [ 503.123592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 503.132963] Call Trace: [ 503.135580] dump_stack+0x138/0x19c [ 503.139233] should_fail.cold+0x10f/0x159 [ 503.143388] should_failslab+0xdb/0x130 [ 503.147366] kmem_cache_alloc_node+0x287/0x780 [ 503.152088] __alloc_skb+0x9c/0x500 [ 503.155725] ? skb_scrub_packet+0x4b0/0x4b0 [ 503.160056] ? netlink_has_listeners+0x20a/0x330 [ 503.164820] kobject_uevent_env+0x781/0xc23 [ 503.169151] ? wait_for_completion+0x420/0x420 [ 503.173753] kobject_uevent+0x20/0x26 [ 503.177566] device_del+0x65c/0xaa0 [ 503.181197] ? __device_links_no_driver+0x220/0x220 [ 503.186223] ? mark_held_locks+0xb1/0x100 [ 503.190387] cdev_device_del+0x1a/0x70 [ 503.194314] evdev_disconnect+0x42/0xb0 [ 503.198303] __input_unregister_device+0x1eb/0x480 [ 503.203256] input_unregister_device+0xa9/0xf0 [ 503.207855] uinput_destroy_device+0x1ce/0x220 16:27:51 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000080)) eventfd(0x20) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) [ 503.212456] uinput_ioctl_handler.isra.0+0x129/0x18a0 [ 503.217750] ? uinput_request_submit.part.0+0x290/0x290 [ 503.223157] ? __might_sleep+0x93/0xb0 [ 503.227058] ? __fget+0x210/0x370 [ 503.231686] ? uinput_compat_ioctl+0xa0/0xa0 [ 503.236106] uinput_ioctl+0x4a/0x60 [ 503.240104] do_vfs_ioctl+0x7ae/0x1060 [ 503.244016] ? selinux_file_mprotect+0x5d0/0x5d0 [ 503.248871] ? lock_downgrade+0x6e0/0x6e0 [ 503.253030] ? ioctl_preallocate+0x1c0/0x1c0 [ 503.257450] ? __fget+0x237/0x370 [ 503.260927] ? security_file_ioctl+0x89/0xb0 [ 503.265343] SyS_ioctl+0x8f/0xc0 [ 503.268714] ? do_vfs_ioctl+0x1060/0x1060 [ 503.272873] do_syscall_64+0x1e8/0x640 [ 503.276767] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 503.281628] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 503.286822] RIP: 0033:0x459829 [ 503.290009] RSP: 002b:00007f03e509fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 503.297718] RAX: ffffffffffffffda RBX: 00007f03e509fc90 RCX: 0000000000459829 [ 503.305010] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 16:27:51 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x5452, &(0x7f0000000500)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = accept4$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @remote}, &(0x7f0000000200)=0x10, 0x80800) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendto(r2, &(0x7f00000002c0)="e7940cd309fe29bc7445e73c7752277cfeff761ecc88e2cbd47554d801ade3df80f7f806eb74314b341186ed3af17b57230153e6f7969250b6791df9ba945677f548a191ff71aa98b4c3c8d44c2ca1b586bfbc36d4dc1fbbdb340855fa635bc4012f9708315bb861000a68095fd7bab33589e247ac6fb457fd21d3eda5a0189b72a76bb9dc986f5a469b5c", 0x8b, 0x0, &(0x7f0000000380)=@tipc=@name={0x1e, 0x2, 0x4a904cdc8a0117f2, {{0x2, 0x1}, 0x1}}, 0x80) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248ac98c32c17d0400ffff", 0x10) r4 = accept$alg(r3, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vsock\x00', 0x400, 0x0) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:27:51 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) eventfd(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='tno=\x00'/15, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) r2 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x800, 0x2) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r2, &(0x7f0000000140)="6fc7c867d3e980db35b8f0fcd01b564d289e3a6aa976efc1621f9c300a0c388bd80e97849ad8e2b9eb7412b63cf7938de6266dc4bdee259178b9f16c02f70b679024bfab1480aeae8287f69330e68fe327672bda640b256b817bfeb997c42c66b82467", &(0x7f00000000c0)}, 0x18) 16:27:51 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x280000040045010, 0x0) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) [ 503.312283] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 503.312290] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f03e50a06d4 [ 503.312295] R13: 00000000004c4596 R14: 00000000004d8860 R15: 0000000000000004 16:27:51 executing program 5 (fault-call:3 fault-nth:8): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:27:51 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)=0x0) ptrace$getregs(0xe, r2, 0x800, &(0x7f0000000140)=""/179) close(r1) eventfd(0x9) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 503.439353] input: syz0 as /devices/virtual/input/input47 [ 503.465131] FAULT_INJECTION: forcing a failure. [ 503.465131] name failslab, interval 1, probability 0, space 0, times 0 [ 503.479023] CPU: 0 PID: 25598 Comm: syz-executor.5 Not tainted 4.14.138 #34 [ 503.486159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 503.495543] Call Trace: [ 503.498151] dump_stack+0x138/0x19c [ 503.501785] should_fail.cold+0x10f/0x159 [ 503.505984] should_failslab+0xdb/0x130 [ 503.509963] kmem_cache_alloc_node+0x287/0x780 [ 503.514543] __alloc_skb+0x9c/0x500 [ 503.518154] ? skb_scrub_packet+0x4b0/0x4b0 [ 503.522468] ? netlink_has_listeners+0x20a/0x330 [ 503.527213] kobject_uevent_env+0x781/0xc23 [ 503.531530] ? wait_for_completion+0x420/0x420 [ 503.536119] kobject_uevent+0x20/0x26 [ 503.539905] device_del+0x65c/0xaa0 [ 503.543518] ? __device_links_no_driver+0x220/0x220 [ 503.548554] ? mark_held_locks+0xb1/0x100 [ 503.552700] cdev_device_del+0x1a/0x70 [ 503.556587] evdev_disconnect+0x42/0xb0 [ 503.560574] __input_unregister_device+0x1eb/0x480 [ 503.565508] input_unregister_device+0xa9/0xf0 [ 503.570097] uinput_destroy_device+0x1ce/0x220 [ 503.574690] uinput_ioctl_handler.isra.0+0x129/0x18a0 [ 503.579881] ? uinput_request_submit.part.0+0x290/0x290 [ 503.585243] ? __might_sleep+0x93/0xb0 [ 503.589149] ? __fget+0x210/0x370 [ 503.592594] ? uinput_compat_ioctl+0xa0/0xa0 [ 503.597009] uinput_ioctl+0x4a/0x60 [ 503.600646] do_vfs_ioctl+0x7ae/0x1060 [ 503.604523] ? selinux_file_mprotect+0x5d0/0x5d0 [ 503.609273] ? lock_downgrade+0x6e0/0x6e0 [ 503.613407] ? ioctl_preallocate+0x1c0/0x1c0 [ 503.617800] ? __fget+0x237/0x370 [ 503.621242] ? security_file_ioctl+0x89/0xb0 [ 503.625638] SyS_ioctl+0x8f/0xc0 [ 503.628997] ? do_vfs_ioctl+0x1060/0x1060 [ 503.633132] do_syscall_64+0x1e8/0x640 [ 503.637125] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 503.642019] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 503.647225] RIP: 0033:0x459829 [ 503.650396] RSP: 002b:00007f03e509fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 503.658088] RAX: ffffffffffffffda RBX: 00007f03e509fc90 RCX: 0000000000459829 [ 503.665346] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 503.672602] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 503.679859] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f03e50a06d4 16:27:52 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) eventfd(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) getuid() [ 503.687116] R13: 00000000004c4596 R14: 00000000004d8860 R15: 0000000000000004 16:27:52 executing program 1: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) eventfd(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x10, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 16:27:52 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) r1 = fcntl$getown(r0, 0x9) fcntl$setown(r0, 0x8, r1) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:27:52 executing program 5 (fault-call:3 fault-nth:9): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 503.802193] input: syz0 as /devices/virtual/input/input48 [ 503.822623] FAULT_INJECTION: forcing a failure. [ 503.822623] name failslab, interval 1, probability 0, space 0, times 0 [ 503.845059] CPU: 0 PID: 25616 Comm: syz-executor.5 Not tainted 4.14.138 #34 [ 503.852206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 503.861555] Call Trace: [ 503.864132] dump_stack+0x138/0x19c [ 503.867835] should_fail.cold+0x10f/0x159 [ 503.871973] should_failslab+0xdb/0x130 [ 503.875954] kmem_cache_alloc_node_trace+0x280/0x770 [ 503.881069] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 503.886543] __kmalloc_node_track_caller+0x3d/0x80 [ 503.891481] __kmalloc_reserve.isra.0+0x40/0xe0 [ 503.896152] __alloc_skb+0xcf/0x500 [ 503.899769] ? skb_scrub_packet+0x4b0/0x4b0 [ 503.904079] ? netlink_has_listeners+0x20a/0x330 [ 503.908843] kobject_uevent_env+0x781/0xc23 [ 503.913167] ? wait_for_completion+0x420/0x420 [ 503.917738] kobject_uevent+0x20/0x26 [ 503.921546] device_del+0x65c/0xaa0 [ 503.925279] ? __device_links_no_driver+0x220/0x220 [ 503.930312] ? mark_held_locks+0xb1/0x100 [ 503.934454] cdev_device_del+0x1a/0x70 [ 503.938493] evdev_disconnect+0x42/0xb0 [ 503.942470] __input_unregister_device+0x1eb/0x480 [ 503.947472] input_unregister_device+0xa9/0xf0 [ 503.952061] uinput_destroy_device+0x1ce/0x220 [ 503.956642] uinput_ioctl_handler.isra.0+0x129/0x18a0 [ 503.961864] ? uinput_request_submit.part.0+0x290/0x290 [ 503.967223] ? __might_sleep+0x93/0xb0 [ 503.971113] ? __fget+0x210/0x370 [ 503.974575] ? uinput_compat_ioctl+0xa0/0xa0 [ 503.978984] uinput_ioctl+0x4a/0x60 [ 503.982635] do_vfs_ioctl+0x7ae/0x1060 [ 503.986515] ? selinux_file_mprotect+0x5d0/0x5d0 [ 503.991268] ? lock_downgrade+0x6e0/0x6e0 [ 503.995430] ? ioctl_preallocate+0x1c0/0x1c0 [ 503.999822] ? __fget+0x237/0x370 [ 504.003317] ? security_file_ioctl+0x89/0xb0 [ 504.007712] SyS_ioctl+0x8f/0xc0 [ 504.011100] ? do_vfs_ioctl+0x1060/0x1060 [ 504.015328] do_syscall_64+0x1e8/0x640 [ 504.019216] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 504.024061] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 504.029261] RIP: 0033:0x459829 [ 504.032464] RSP: 002b:00007f03e509fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 504.040167] RAX: ffffffffffffffda RBX: 00007f03e509fc90 RCX: 0000000000459829 16:27:52 executing program 0: r0 = userfaultfd(0x800) fallocate(r0, 0x1, 0x6, 0xfa0) r1 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) ptrace$setregs(0xd, 0x0, 0x7, &(0x7f00000001c0)="e8f6b77089955ee5e0f2cd08dbdac977fa86f922f119a9ffb4542a3f850a4d656f13c8fa990dee68319d21da32427b51c26352ac3839eb51639643d99f513bed783bb9f104e8fadbc05ad9a3b1cd8b7c655d0c7a212bef878677794d6bb2b17d56287bc49e7364e4a9c51c870454493861c066e809fb2cc7013f0a93d19a0bc8f926339b6c0190ba768fc6ee9a") read(r1, &(0x7f0000000280)=""/144, 0xfffffd9a) ioctl$int_in(r1, 0x280000040045010, &(0x7f0000000180)) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000040)=""/155) sendfile(r1, r1, 0x0, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_REQUEST_TABLE(r2, 0x227f, &(0x7f0000000280)) ioctl$int_in(r1, 0x800060c004500a, &(0x7f0000000000)) 16:27:52 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$SIOCX25GCAUSEDIAG(r2, 0x89e6, &(0x7f00000000c0)={0xc140, 0x2}) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) eventfd(0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 16:27:52 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x5452, &(0x7f0000000500)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = accept4$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @remote}, &(0x7f0000000200)=0x10, 0x80800) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendto(r2, &(0x7f00000002c0)="e7940cd309fe29bc7445e73c7752277cfeff761ecc88e2cbd47554d801ade3df80f7f806eb74314b341186ed3af17b57230153e6f7969250b6791df9ba945677f548a191ff71aa98b4c3c8d44c2ca1b586bfbc36d4dc1fbbdb340855fa635bc4012f9708315bb861000a68095fd7bab33589e247ac6fb457fd21d3eda5a0189b72a76bb9dc986f5a469b5c", 0x8b, 0x0, &(0x7f0000000380)=@tipc=@name={0x1e, 0x2, 0x4a904cdc8a0117f2, {{0x2, 0x1}, 0x1}}, 0x80) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248ac98c32c17d0400ffff", 0x10) r4 = accept$alg(r3, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) [ 504.047449] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 504.054704] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 504.061968] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f03e50a06d4 [ 504.069671] R13: 00000000004c4596 R14: 00000000004d8860 R15: 0000000000000004 16:27:52 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) r2 = eventfd(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x10000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@mmap='mmap'}]}}) r3 = dup3(r2, r0, 0xb5cf216426c8f63d) utimensat(r3, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={{0x0, 0x7530}}, 0x0) 16:27:52 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:27:52 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) eventfd(0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x400000, 0x84) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r2, 0x40045731, &(0x7f00000000c0)=0x120) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 16:27:52 executing program 5 (fault-call:3 fault-nth:10): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:27:52 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) eventfd(0x0) fcntl$getflags(r0, 0x40a) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 16:27:52 executing program 1: pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f00000001c0)={'bridge_slave_1\x00', 0xffff}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2000, 0x0) accept$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14) eventfd(0x1) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000180)={r3, @empty, @loopback}, 0xc) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) chdir(&(0x7f00000002c0)='./file0\x00') close(r1) eventfd(0x7) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000240)=""/104) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7faf646e6fc03dddc2f7f9d763f03aed25f3c918b2cf5a7a230000000000000000458a53b960afdf6c2766278dc065e63a72d5d2dfd0ced3f8bcec598b1b357adc19ea23dec14e286e58b8575a92267883965754ed6390d0494d2ddeec862e21e8a3bdb02158723a158e1304ff1595befcb80cf3016e82440c7d1213d85cc5adb56bf8a4d275da60198bdbb1eb6d244cb42f1c1f8d1fafc277ff00923fefa14e7e12f281b7d8d27055353464767b68878b03", @ANYRESHEX=r1, @ANYBLOB="2ce3"]) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x80001, 0x0) [ 504.256827] input: syz0 as /devices/virtual/input/input49 [ 504.283144] FAULT_INJECTION: forcing a failure. [ 504.283144] name failslab, interval 1, probability 0, space 0, times 0 [ 504.296160] CPU: 0 PID: 25650 Comm: syz-executor.5 Not tainted 4.14.138 #34 [ 504.303288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 504.312742] Call Trace: [ 504.315341] dump_stack+0x138/0x19c [ 504.318964] should_fail.cold+0x10f/0x159 [ 504.323199] should_failslab+0xdb/0x130 [ 504.323215] kmem_cache_alloc_node_trace+0x280/0x770 [ 504.323230] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 504.323245] __kmalloc_node_track_caller+0x3d/0x80 [ 504.323260] __kmalloc_reserve.isra.0+0x40/0xe0 [ 504.323273] __alloc_skb+0xcf/0x500 [ 504.332376] ? skb_scrub_packet+0x4b0/0x4b0 [ 504.332389] ? netlink_has_listeners+0x20a/0x330 [ 504.332405] kobject_uevent_env+0x781/0xc23 [ 504.332416] ? wait_for_completion+0x420/0x420 [ 504.332435] kobject_uevent+0x20/0x26 [ 504.332447] device_del+0x65c/0xaa0 [ 504.332461] ? __device_links_no_driver+0x220/0x220 [ 504.332473] ? mark_held_locks+0xb1/0x100 [ 504.332487] cdev_device_del+0x1a/0x70 [ 504.332500] evdev_disconnect+0x42/0xb0 [ 504.332511] __input_unregister_device+0x1eb/0x480 [ 504.332524] input_unregister_device+0xa9/0xf0 [ 504.332543] uinput_destroy_device+0x1ce/0x220 [ 504.409154] uinput_ioctl_handler.isra.0+0x129/0x18a0 [ 504.414346] ? uinput_request_submit.part.0+0x290/0x290 [ 504.419726] ? __might_sleep+0x93/0xb0 [ 504.423611] ? __fget+0x210/0x370 [ 504.427092] ? uinput_compat_ioctl+0xa0/0xa0 [ 504.431667] uinput_ioctl+0x4a/0x60 [ 504.435285] do_vfs_ioctl+0x7ae/0x1060 [ 504.439178] ? selinux_file_mprotect+0x5d0/0x5d0 [ 504.443940] ? lock_downgrade+0x6e0/0x6e0 [ 504.448095] ? ioctl_preallocate+0x1c0/0x1c0 [ 504.452505] ? __fget+0x237/0x370 [ 504.455982] ? security_file_ioctl+0x89/0xb0 [ 504.460398] SyS_ioctl+0x8f/0xc0 [ 504.463763] ? do_vfs_ioctl+0x1060/0x1060 [ 504.467931] do_syscall_64+0x1e8/0x640 [ 504.471848] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 504.476695] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 504.481884] RIP: 0033:0x459829 [ 504.485063] RSP: 002b:00007f03e509fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 504.492758] RAX: ffffffffffffffda RBX: 00007f03e509fc90 RCX: 0000000000459829 [ 504.500033] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 16:27:52 executing program 5 (fault-call:3 fault-nth:11): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 504.507306] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 504.514570] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f03e50a06d4 [ 504.521858] R13: 00000000004c4596 R14: 00000000004d8860 R15: 0000000000000004 16:27:52 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1009, 0x0) read(r0, &(0x7f0000000280)=""/144, 0xfffffffffffffd7f) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x3, 0x20000) sendto$x25(r0, &(0x7f0000000100)="7acec0", 0x3, 0x40000, &(0x7f00000001c0)={0x9, @remote={[], 0x0}}, 0x12) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f0000000040)={0x100000001, 0x10001}) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000240)={0xdf, 0x2, 0x1000, &(0x7f0000000340)="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"}) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000080)) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000200)={0x7, {0x6, 0x1225, 0xbc, 0x7f, 0x8, 0x5}}) 16:27:52 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x30200, 0x0) getsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) eventfd(0x6) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$sock_void(r3, 0x1, 0x1b, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="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"]) [ 504.588102] input: syz0 as /devices/virtual/input/input50 [ 504.597914] FAULT_INJECTION: forcing a failure. [ 504.597914] name failslab, interval 1, probability 0, space 0, times 0 [ 504.617703] CPU: 0 PID: 25663 Comm: syz-executor.5 Not tainted 4.14.138 #34 [ 504.624855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 504.634302] Call Trace: [ 504.636912] dump_stack+0x138/0x19c [ 504.640556] should_fail.cold+0x10f/0x159 [ 504.644720] should_failslab+0xdb/0x130 [ 504.648716] kmem_cache_alloc_node+0x287/0x780 [ 504.653317] __alloc_skb+0x9c/0x500 [ 504.657571] ? skb_scrub_packet+0x4b0/0x4b0 [ 504.657585] ? netlink_has_listeners+0x20a/0x330 [ 504.657602] kobject_uevent_env+0x781/0xc23 [ 504.657615] ? wait_for_completion+0x420/0x420 [ 504.657635] kobject_uevent+0x20/0x26 [ 504.679638] device_del+0x65c/0xaa0 [ 504.683272] ? __device_links_no_driver+0x220/0x220 [ 504.688287] ? mark_held_locks+0xb1/0x100 [ 504.692430] cdev_device_del+0x1a/0x70 [ 504.696323] evdev_disconnect+0x42/0xb0 [ 504.700307] __input_unregister_device+0x1eb/0x480 [ 504.702856] 9pnet: Insufficient options for proto=fd [ 504.705247] input_unregister_device+0xa9/0xf0 [ 504.705263] uinput_destroy_device+0x1ce/0x220 [ 504.705280] uinput_ioctl_handler.isra.0+0x129/0x18a0 [ 504.705294] ? uinput_request_submit.part.0+0x290/0x290 [ 504.705321] ? __might_sleep+0x93/0xb0 [ 504.705335] ? __fget+0x210/0x370 [ 504.737474] ? uinput_compat_ioctl+0xa0/0xa0 [ 504.737488] uinput_ioctl+0x4a/0x60 [ 504.745602] do_vfs_ioctl+0x7ae/0x1060 [ 504.749484] ? selinux_file_mprotect+0x5d0/0x5d0 [ 504.754234] ? lock_downgrade+0x6e0/0x6e0 [ 504.758384] ? ioctl_preallocate+0x1c0/0x1c0 [ 504.762808] ? __fget+0x237/0x370 [ 504.766268] ? security_file_ioctl+0x89/0xb0 [ 504.770686] SyS_ioctl+0x8f/0xc0 [ 504.774048] ? do_vfs_ioctl+0x1060/0x1060 [ 504.778193] do_syscall_64+0x1e8/0x640 [ 504.782084] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 504.787035] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 504.792302] RIP: 0033:0x459829 [ 504.795486] RSP: 002b:00007f03e509fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 504.803365] RAX: ffffffffffffffda RBX: 00007f03e509fc90 RCX: 0000000000459829 [ 504.810845] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 504.818122] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 504.825384] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f03e50a06d4 [ 504.832653] R13: 00000000004c4596 R14: 00000000004d8860 R15: 0000000000000004 16:27:53 executing program 0: r0 = userfaultfd(0x800) fallocate(r0, 0x1, 0x6, 0xfa0) r1 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) ptrace$setregs(0xd, 0x0, 0x7, &(0x7f00000001c0)="e8f6b77089955ee5e0f2cd08dbdac977fa86f922f119a9ffb4542a3f850a4d656f13c8fa990dee68319d21da32427b51c26352ac3839eb51639643d99f513bed783bb9f104e8fadbc05ad9a3b1cd8b7c655d0c7a212bef878677794d6bb2b17d56287bc49e7364e4a9c51c870454493861c066e809fb2cc7013f0a93d19a0bc8f926339b6c0190ba768fc6ee9a") read(r1, &(0x7f0000000280)=""/144, 0xfffffd9a) ioctl$int_in(r1, 0x280000040045010, &(0x7f0000000180)) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000040)=""/155) sendfile(r1, r1, 0x0, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_REQUEST_TABLE(r2, 0x227f, &(0x7f0000000280)) ioctl$int_in(r1, 0x800060c004500a, &(0x7f0000000000)) 16:27:53 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x5452, &(0x7f0000000500)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = accept4$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @remote}, &(0x7f0000000200)=0x10, 0x80800) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendto(r2, &(0x7f00000002c0)="e7940cd309fe29bc7445e73c7752277cfeff761ecc88e2cbd47554d801ade3df80f7f806eb74314b341186ed3af17b57230153e6f7969250b6791df9ba945677f548a191ff71aa98b4c3c8d44c2ca1b586bfbc36d4dc1fbbdb340855fa635bc4012f9708315bb861000a68095fd7bab33589e247ac6fb457fd21d3eda5a0189b72a76bb9dc986f5a469b5c", 0x8b, 0x0, &(0x7f0000000380)=@tipc=@name={0x1e, 0x2, 0x4a904cdc8a0117f2, {{0x2, 0x1}, 0x1}}, 0x80) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248ac98c32c17d0400ffff", 0x10) accept$alg(r3, 0x0, 0x0) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:27:53 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)) getresuid(&(0x7f00000000c0)=0x0, &(0x7f0000000100), &(0x7f00000001c0)) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000340)='9p\x00', 0x2080440, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@uname={'uname', 0x3d, 'privport'}}, {@uname={'uname', 0x3d, '/dev/dsp#\x00'}}, {@posixacl='posixacl'}, {@privport='privport'}, {@debug={'debug', 0x3d, 0x8}}, {@msize={'msize', 0x3d, 0x2d}}, {@msize={'msize', 0x3d, 0x955f}}, {@nodevmap='nodevmap'}, {@posixacl='posixacl'}], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x30, 0x64, 0x77, 0x35, 0x30, 0x39, 0x65], 0x2d, [0x73, 0x64, 0x77, 0x64], 0x2d, [0x66, 0x32, 0x35, 0xcc7eb9c00c2c05e3], 0x2d, [0x37, 0x35, 0x30, 0x63], 0x2d, [0x35, 0x77, 0x63, 0x37, 0x66, 0x61, 0x0, 0x36]}}}, {@uid_lt={'uid<', r1}}, {@permit_directio='permit_directio'}]}}) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x43) 16:27:53 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:27:53 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close(r0) eventfd(0x0) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose'}, {@cache_fscache='cache=fscache'}, {@dfltgid={'dfltgid', 0x3d, r3}}, {@access_uid={'access', 0x3d, r2}}, {@cache_loose='cache=loose'}, {@cache_loose='cache=loose'}, {@cache_none='cache=none'}, {@dfltuid={'dfltuid', 0x3d, r2}}, {@access_client='access=client'}], [{@hash='hash'}]}}) 16:27:53 executing program 5 (fault-call:3 fault-nth:12): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:27:53 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) eventfd(0x8000) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 505.023609] input: syz0 as /devices/virtual/input/input51 16:27:53 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000200)='/dev/dsp#\x00', 0xe9, 0x0) read(r0, &(0x7f0000000340)=""/144, 0x90) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f00000001c0)={0xa9, &(0x7f0000000080)=""/169}) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)) r1 = getpgrp(0xffffffffffffffff) getpriority(0x3ea6080f49f3604e, r1) r2 = getpgrp(0xffffffffffffffff) sched_setscheduler(r2, 0x5, &(0x7f0000000040)=0x2) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) [ 505.067891] FAULT_INJECTION: forcing a failure. [ 505.067891] name failslab, interval 1, probability 0, space 0, times 0 [ 505.086943] CPU: 1 PID: 25703 Comm: syz-executor.5 Not tainted 4.14.138 #34 [ 505.094126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 505.103577] Call Trace: [ 505.106178] dump_stack+0x138/0x19c [ 505.109847] should_fail.cold+0x10f/0x159 [ 505.114123] should_failslab+0xdb/0x130 16:27:53 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000040)={0x6}, 0x4) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) [ 505.118109] kmem_cache_alloc_node+0x287/0x780 [ 505.122719] __alloc_skb+0x9c/0x500 [ 505.126368] ? skb_scrub_packet+0x4b0/0x4b0 [ 505.130793] ? netlink_has_listeners+0x20a/0x330 [ 505.135667] kobject_uevent_env+0x781/0xc23 [ 505.140082] ? wait_for_completion+0x420/0x420 [ 505.144672] kobject_uevent+0x20/0x26 [ 505.148479] device_del+0x65c/0xaa0 [ 505.152296] ? __device_links_no_driver+0x220/0x220 [ 505.157312] ? mark_held_locks+0xb1/0x100 [ 505.161464] cdev_device_del+0x1a/0x70 [ 505.165359] evdev_disconnect+0x42/0xb0 [ 505.169416] __input_unregister_device+0x1eb/0x480 [ 505.174350] input_unregister_device+0xa9/0xf0 [ 505.178942] uinput_destroy_device+0x1ce/0x220 [ 505.183570] uinput_ioctl_handler.isra.0+0x129/0x18a0 [ 505.188776] ? uinput_request_submit.part.0+0x290/0x290 [ 505.194180] ? __might_sleep+0x93/0xb0 [ 505.198077] ? __fget+0x210/0x370 [ 505.201540] ? uinput_compat_ioctl+0xa0/0xa0 [ 505.205986] uinput_ioctl+0x4a/0x60 [ 505.209642] do_vfs_ioctl+0x7ae/0x1060 [ 505.213555] ? selinux_file_mprotect+0x5d0/0x5d0 [ 505.218319] ? lock_downgrade+0x6e0/0x6e0 [ 505.222467] ? ioctl_preallocate+0x1c0/0x1c0 [ 505.227075] ? __fget+0x237/0x370 [ 505.232223] ? security_file_ioctl+0x89/0xb0 [ 505.236731] SyS_ioctl+0x8f/0xc0 [ 505.240100] ? do_vfs_ioctl+0x1060/0x1060 [ 505.244266] do_syscall_64+0x1e8/0x640 [ 505.248156] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 505.253008] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 505.258201] RIP: 0033:0x459829 16:27:53 executing program 1: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(0xffffffffffffffff) eventfd(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) [ 505.261390] RSP: 002b:00007f03e507ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 505.269216] RAX: ffffffffffffffda RBX: 00007f03e507ec90 RCX: 0000000000459829 [ 505.276502] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 505.283779] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 505.291069] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f03e507f6d4 [ 505.298872] R13: 00000000004c4596 R14: 00000000004d8860 R15: 0000000000000004 16:27:53 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x1, 0x180) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000140)={0x7, &(0x7f00000000c0)=[{0x3, 0xa556, 0x0, 0x7}, {0x40, 0x8, 0x3a5f, 0x6}, {0x6, 0x7, 0x40, 0x7}, {0x7, 0x0, 0x80, 0x2}, {0x3f, 0x1, 0x18, 0xfffffffffffff000}, {0x10000, 0x8, 0xffff, 0x80000000}, {0xffffffffffff7fff, 0x3, 0x0, 0x101}]}) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) eventfd(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 16:27:53 executing program 5 (fault-call:3 fault-nth:13): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 505.332572] 9pnet: Insufficient options for proto=fd [ 505.398427] input: syz0 as /devices/virtual/input/input52 [ 505.412836] FAULT_INJECTION: forcing a failure. [ 505.412836] name failslab, interval 1, probability 0, space 0, times 0 [ 505.434931] CPU: 0 PID: 25724 Comm: syz-executor.5 Not tainted 4.14.138 #34 [ 505.442083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 505.442088] Call Trace: [ 505.442112] dump_stack+0x138/0x19c [ 505.442133] should_fail.cold+0x10f/0x159 [ 505.458075] should_failslab+0xdb/0x130 [ 505.458091] kmem_cache_alloc_node_trace+0x280/0x770 [ 505.458106] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 505.458122] __kmalloc_node_track_caller+0x3d/0x80 [ 505.458138] __kmalloc_reserve.isra.0+0x40/0xe0 [ 505.458151] __alloc_skb+0xcf/0x500 [ 505.458162] ? skb_scrub_packet+0x4b0/0x4b0 [ 505.494396] ? netlink_has_listeners+0x20a/0x330 [ 505.499143] kobject_uevent_env+0x781/0xc23 [ 505.503454] ? wait_for_completion+0x420/0x420 [ 505.508068] kobject_uevent+0x20/0x26 [ 505.511882] device_del+0x65c/0xaa0 [ 505.515511] ? __device_links_no_driver+0x220/0x220 [ 505.520544] ? mark_held_locks+0xb1/0x100 [ 505.524706] cdev_device_del+0x1a/0x70 [ 505.528601] evdev_disconnect+0x42/0xb0 [ 505.532601] __input_unregister_device+0x1eb/0x480 [ 505.537532] input_unregister_device+0xa9/0xf0 [ 505.542106] uinput_destroy_device+0x1ce/0x220 [ 505.546678] uinput_ioctl_handler.isra.0+0x129/0x18a0 [ 505.551863] ? uinput_request_submit.part.0+0x290/0x290 [ 505.557253] ? __might_sleep+0x93/0xb0 [ 505.561160] ? __fget+0x210/0x370 [ 505.564615] ? uinput_compat_ioctl+0xa0/0xa0 [ 505.569048] uinput_ioctl+0x4a/0x60 [ 505.572665] do_vfs_ioctl+0x7ae/0x1060 [ 505.576571] ? selinux_file_mprotect+0x5d0/0x5d0 [ 505.581778] ? lock_downgrade+0x6e0/0x6e0 [ 505.585930] ? ioctl_preallocate+0x1c0/0x1c0 [ 505.590326] ? __fget+0x237/0x370 [ 505.593799] ? security_file_ioctl+0x89/0xb0 [ 505.598216] SyS_ioctl+0x8f/0xc0 [ 505.601592] ? do_vfs_ioctl+0x1060/0x1060 [ 505.605736] do_syscall_64+0x1e8/0x640 [ 505.609618] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 505.614474] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 505.619649] RIP: 0033:0x459829 [ 505.622823] RSP: 002b:00007f03e509fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 505.630513] RAX: ffffffffffffffda RBX: 00007f03e509fc90 RCX: 0000000000459829 [ 505.637948] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 505.645231] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 505.652577] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f03e50a06d4 [ 505.659854] R13: 00000000004c4596 R14: 00000000004d8860 R15: 0000000000000004 16:27:54 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x30200, 0x0) getsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) eventfd(0x6) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$sock_void(r3, 0x1, 0x1b, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="f208a00f97e0237a4aa525f3b5613e8d47b381fcb9c9dfdab0b8d4c2ce015266f5efb82522fbf183bda144b85b0e534678671c3de686f324df66c2363bc6ae8817b76bc7c22023bf037ea2e4c37ce6ae6b7c437117d9ce240c9cbc23aeaa9b4d78a14e2585bc9108c775288817741b029c80aa702d8b5d8ad8437c64b73bb6511dc693e42fd0c37e8042bbd4405661f5acef9f1b63107b6e706816fdc5b8d8238a2aa017e7d45230649c9d33cec1f486fddaca76f7867d1c407fa039a24f153d405fca065954da9a1a46e021d5212bd111e104bc1d203b31655613296da5298f62853d758079ac1593f197c371213ffbc006a2a3ad9614613273a739e50404466fdc272db70abc624f84bdbb1a740000000000"]) 16:27:54 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) eventfd(0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='syscall\x00') getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f00000000c0), &(0x7f0000000140)=0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 16:27:54 executing program 5 (fault-call:3 fault-nth:14): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:27:54 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x5452, &(0x7f0000000500)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = accept4$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @remote}, &(0x7f0000000200)=0x10, 0x80800) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendto(r2, &(0x7f00000002c0)="e7940cd309fe29bc7445e73c7752277cfeff761ecc88e2cbd47554d801ade3df80f7f806eb74314b341186ed3af17b57230153e6f7969250b6791df9ba945677f548a191ff71aa98b4c3c8d44c2ca1b586bfbc36d4dc1fbbdb340855fa635bc4012f9708315bb861000a68095fd7bab33589e247ac6fb457fd21d3eda5a0189b72a76bb9dc986f5a469b5c", 0x8b, 0x0, &(0x7f0000000380)=@tipc=@name={0x1e, 0x2, 0x4a904cdc8a0117f2, {{0x2, 0x1}, 0x1}}, 0x80) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248ac98c32c17d0400ffff", 0x10) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:27:54 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:27:54 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'rose0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xa, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffffffffffffff}, [@jmp={0x5, 0x8, 0x4, 0x9, 0x2, 0xd2f7358bebb0733b, 0xfffffffffffffff1}, @exit, @alu={0xa263241537cd9bda, 0x1ff, 0x7, 0x1, 0x7, 0xfffffffffffffffc, 0x49cf4806696f3268}, @exit]}, &(0x7f00000001c0)='GPL\x00', 0x4, 0x7d, &(0x7f0000000200)=""/125, 0x40f00, 0x1, [], r1, 0xf, r0, 0x8, &(0x7f00000002c0)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0xa, 0x5, 0x6}, 0x10}, 0x70) syz_open_dev$mice(&(0x7f00000003c0)='/dev/input/mice\x00', 0x0, 0x105002) [ 505.819888] input: syz0 as /devices/virtual/input/input53 [ 505.844238] FAULT_INJECTION: forcing a failure. [ 505.844238] name failslab, interval 1, probability 0, space 0, times 0 [ 505.860750] 9pnet: Insufficient options for proto=fd 16:27:54 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x30200, 0x0) getsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) eventfd(0x6) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$sock_void(r3, 0x1, 0x1b, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="f208a00f97e0237a4aa525f3b5613e8d47b381fcb9c9dfdab0b8d4c2ce015266f5efb82522fbf183bda144b85b0e534678671c3de686f324df66c2363bc6ae8817b76bc7c22023bf037ea2e4c37ce6ae6b7c437117d9ce240c9cbc23aeaa9b4d78a14e2585bc9108c775288817741b029c80aa702d8b5d8ad8437c64b73bb6511dc693e42fd0c37e8042bbd4405661f5acef9f1b63107b6e706816fdc5b8d8238a2aa017e7d45230649c9d33cec1f486fddaca76f7867d1c407fa039a24f153d405fca065954da9a1a46e021d5212bd111e104bc1d203b31655613296da5298f62853d758079ac1593f197c371213ffbc006a2a3ad9614613273a739e50404466fdc272db70abc624f84bdbb1a740000000000"]) [ 505.877398] CPU: 1 PID: 25738 Comm: syz-executor.5 Not tainted 4.14.138 #34 [ 505.884603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 505.894097] Call Trace: [ 505.896703] dump_stack+0x138/0x19c [ 505.900464] should_fail.cold+0x10f/0x159 [ 505.904724] should_failslab+0xdb/0x130 [ 505.908745] kmem_cache_alloc_node_trace+0x280/0x770 [ 505.913957] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 505.919434] __kmalloc_node_track_caller+0x3d/0x80 [ 505.924397] __kmalloc_reserve.isra.0+0x40/0xe0 [ 505.929210] __alloc_skb+0xcf/0x500 [ 505.932858] ? skb_scrub_packet+0x4b0/0x4b0 [ 505.937188] ? netlink_has_listeners+0x20a/0x330 [ 505.941952] kobject_uevent_env+0x781/0xc23 [ 505.941964] ? wait_for_completion+0x420/0x420 [ 505.941981] kobject_uevent+0x20/0x26 [ 505.941992] device_del+0x65c/0xaa0 [ 505.942004] ? __device_links_no_driver+0x220/0x220 [ 505.942018] ? mark_held_locks+0xb1/0x100 [ 505.942032] cdev_device_del+0x1a/0x70 [ 505.942046] evdev_disconnect+0x42/0xb0 [ 505.942058] __input_unregister_device+0x1eb/0x480 [ 505.950988] input_unregister_device+0xa9/0xf0 [ 505.951003] uinput_destroy_device+0x1ce/0x220 [ 505.951024] uinput_ioctl_handler.isra.0+0x129/0x18a0 [ 505.951036] ? uinput_request_submit.part.0+0x290/0x290 [ 505.951061] ? __might_sleep+0x93/0xb0 [ 505.951071] ? __fget+0x210/0x370 [ 505.951084] ? uinput_compat_ioctl+0xa0/0xa0 [ 505.951094] uinput_ioctl+0x4a/0x60 [ 505.951106] do_vfs_ioctl+0x7ae/0x1060 [ 505.951120] ? selinux_file_mprotect+0x5d0/0x5d0 [ 505.951130] ? lock_downgrade+0x6e0/0x6e0 [ 505.951141] ? ioctl_preallocate+0x1c0/0x1c0 [ 505.994182] 9pnet: Insufficient options for proto=fd [ 505.994920] ? __fget+0x237/0x370 [ 505.994943] ? security_file_ioctl+0x89/0xb0 [ 505.994959] SyS_ioctl+0x8f/0xc0 [ 506.049313] ? do_vfs_ioctl+0x1060/0x1060 [ 506.053456] do_syscall_64+0x1e8/0x640 [ 506.057338] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 506.062189] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 506.067644] RIP: 0033:0x459829 [ 506.070836] RSP: 002b:00007f03e509fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 16:27:54 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) eventfd(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x200000, 0x0) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000140)={0x80, 0x9}) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4) 16:27:54 executing program 5 (fault-call:3 fault-nth:15): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 506.078635] RAX: ffffffffffffffda RBX: 00007f03e509fc90 RCX: 0000000000459829 [ 506.085923] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 506.093188] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 506.100467] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f03e50a06d4 [ 506.108076] R13: 00000000004c4596 R14: 00000000004d8860 R15: 0000000000000004 16:27:54 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x30200, 0x0) getsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) eventfd(0x6) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$sock_void(r3, 0x1, 0x1b, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="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"]) 16:27:54 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x10) close(r1) eventfd(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 16:27:54 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) eventfd(0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 506.199965] input: syz0 as /devices/virtual/input/input54 [ 506.224701] FAULT_INJECTION: forcing a failure. [ 506.224701] name failslab, interval 1, probability 0, space 0, times 0 [ 506.247222] CPU: 1 PID: 25766 Comm: syz-executor.5 Not tainted 4.14.138 #34 [ 506.262962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 506.272332] Call Trace: [ 506.274938] dump_stack+0x138/0x19c [ 506.277644] 9pnet: Insufficient options for proto=fd [ 506.278689] should_fail.cold+0x10f/0x159 [ 506.278708] should_failslab+0xdb/0x130 [ 506.278722] kmem_cache_alloc_node+0x287/0x780 [ 506.278743] __alloc_skb+0x9c/0x500 [ 506.278755] ? skb_scrub_packet+0x4b0/0x4b0 [ 506.278770] ? netlink_has_listeners+0x20a/0x330 [ 506.309282] kobject_uevent_env+0x781/0xc23 [ 506.313777] ? wait_for_completion+0x420/0x420 [ 506.318898] kobject_uevent+0x20/0x26 [ 506.322791] device_del+0x65c/0xaa0 [ 506.326525] ? __device_links_no_driver+0x220/0x220 [ 506.331584] ? mark_held_locks+0xb1/0x100 [ 506.335817] cdev_device_del+0x1a/0x70 [ 506.339709] evdev_disconnect+0x42/0xb0 [ 506.343779] __input_unregister_device+0x1eb/0x480 [ 506.348832] input_unregister_device+0xa9/0xf0 [ 506.353426] uinput_destroy_device+0x1ce/0x220 [ 506.358005] uinput_ioctl_handler.isra.0+0x129/0x18a0 [ 506.363201] ? uinput_request_submit.part.0+0x290/0x290 [ 506.368582] ? __might_sleep+0x93/0xb0 [ 506.372483] ? __fget+0x210/0x370 [ 506.375952] ? uinput_compat_ioctl+0xa0/0xa0 [ 506.380358] uinput_ioctl+0x4a/0x60 [ 506.384032] do_vfs_ioctl+0x7ae/0x1060 [ 506.388010] ? selinux_file_mprotect+0x5d0/0x5d0 [ 506.392769] ? lock_downgrade+0x6e0/0x6e0 [ 506.397006] ? ioctl_preallocate+0x1c0/0x1c0 [ 506.401413] ? __fget+0x237/0x370 [ 506.404879] ? security_file_ioctl+0x89/0xb0 [ 506.409381] SyS_ioctl+0x8f/0xc0 [ 506.412844] ? do_vfs_ioctl+0x1060/0x1060 [ 506.417095] do_syscall_64+0x1e8/0x640 [ 506.421067] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 506.425964] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 506.431158] RIP: 0033:0x459829 [ 506.434349] RSP: 002b:00007f03e509fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 506.442080] RAX: ffffffffffffffda RBX: 00007f03e509fc90 RCX: 0000000000459829 16:27:54 executing program 5 (fault-call:3 fault-nth:16): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 506.449353] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 506.456746] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 506.464101] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f03e50a06d4 [ 506.471650] R13: 00000000004c4596 R14: 00000000004d8860 R15: 0000000000000004 16:27:54 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x30200, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) eventfd(0x6) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$sock_void(r2, 0x1, 0x1b, 0x0, 0x0) 16:27:54 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x5452, &(0x7f0000000500)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = accept4$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @remote}, &(0x7f0000000200)=0x10, 0x80800) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendto(r2, &(0x7f00000002c0)="e7940cd309fe29bc7445e73c7752277cfeff761ecc88e2cbd47554d801ade3df80f7f806eb74314b341186ed3af17b57230153e6f7969250b6791df9ba945677f548a191ff71aa98b4c3c8d44c2ca1b586bfbc36d4dc1fbbdb340855fa635bc4012f9708315bb861000a68095fd7bab33589e247ac6fb457fd21d3eda5a0189b72a76bb9dc986f5a469b5c", 0x8b, 0x0, &(0x7f0000000380)=@tipc=@name={0x1e, 0x2, 0x4a904cdc8a0117f2, {{0x2, 0x1}, 0x1}}, 0x80) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:27:54 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)=0x101) ioctl$int_in(0xffffffffffffffff, 0x800060c004500a, &(0x7f0000000000)) 16:27:54 executing program 2: r0 = syz_open_dev$dspn(&(0x7f00000002c0)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xc}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x800, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48014) [ 506.581381] input: syz0 as /devices/virtual/input/input55 [ 506.641321] FAULT_INJECTION: forcing a failure. [ 506.641321] name failslab, interval 1, probability 0, space 0, times 0 [ 506.663303] CPU: 1 PID: 25791 Comm: syz-executor.5 Not tainted 4.14.138 #34 [ 506.671047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 506.680498] Call Trace: [ 506.683092] dump_stack+0x138/0x19c [ 506.686722] should_fail.cold+0x10f/0x159 [ 506.691024] should_failslab+0xdb/0x130 [ 506.694998] kmem_cache_alloc_node_trace+0x280/0x770 [ 506.700415] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 506.706044] __kmalloc_node_track_caller+0x3d/0x80 [ 506.710977] __kmalloc_reserve.isra.0+0x40/0xe0 [ 506.715646] __alloc_skb+0xcf/0x500 [ 506.719262] ? skb_scrub_packet+0x4b0/0x4b0 [ 506.723584] ? netlink_has_listeners+0x20a/0x330 [ 506.728337] kobject_uevent_env+0x781/0xc23 [ 506.732754] ? wait_for_completion+0x420/0x420 [ 506.737336] kobject_uevent+0x20/0x26 [ 506.741135] device_del+0x65c/0xaa0 [ 506.744775] ? __device_links_no_driver+0x220/0x220 [ 506.749908] ? mark_held_locks+0xb1/0x100 [ 506.754066] cdev_device_del+0x1a/0x70 [ 506.757951] evdev_disconnect+0x42/0xb0 [ 506.761936] __input_unregister_device+0x1eb/0x480 [ 506.766866] input_unregister_device+0xa9/0xf0 [ 506.771455] uinput_destroy_device+0x1ce/0x220 [ 506.776053] uinput_ioctl_handler.isra.0+0x129/0x18a0 [ 506.781266] ? uinput_request_submit.part.0+0x290/0x290 [ 506.786639] ? __might_sleep+0x93/0xb0 [ 506.790613] ? __fget+0x210/0x370 [ 506.794087] ? uinput_compat_ioctl+0xa0/0xa0 [ 506.798552] uinput_ioctl+0x4a/0x60 [ 506.802285] do_vfs_ioctl+0x7ae/0x1060 [ 506.806451] ? selinux_file_mprotect+0x5d0/0x5d0 [ 506.811216] ? lock_downgrade+0x6e0/0x6e0 [ 506.815376] ? ioctl_preallocate+0x1c0/0x1c0 [ 506.819799] ? __fget+0x237/0x370 [ 506.823258] ? security_file_ioctl+0x89/0xb0 [ 506.827655] SyS_ioctl+0x8f/0xc0 [ 506.831019] ? do_vfs_ioctl+0x1060/0x1060 [ 506.835189] do_syscall_64+0x1e8/0x640 [ 506.839072] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 506.843933] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 506.849114] RIP: 0033:0x459829 [ 506.852292] RSP: 002b:00007f03e507ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 506.860004] RAX: ffffffffffffffda RBX: 00007f03e507ec90 RCX: 0000000000459829 [ 506.867275] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 506.874541] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 506.881896] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f03e507f6d4 16:27:55 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x30200, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) eventfd(0x6) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) socket$tipc(0x1e, 0x2, 0x0) 16:27:55 executing program 5 (fault-call:3 fault-nth:17): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 506.889188] R13: 00000000004c4596 R14: 00000000004d8860 R15: 0000000000000004 16:27:55 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x30200, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) eventfd(0x6) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) socket$tipc(0x1e, 0x2, 0x0) [ 506.966611] input: syz0 as /devices/virtual/input/input56 [ 506.987900] FAULT_INJECTION: forcing a failure. [ 506.987900] name failslab, interval 1, probability 0, space 0, times 0 [ 507.000449] CPU: 0 PID: 25811 Comm: syz-executor.5 Not tainted 4.14.138 #34 [ 507.007678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 507.017135] Call Trace: [ 507.019737] dump_stack+0x138/0x19c [ 507.023391] should_fail.cold+0x10f/0x159 [ 507.027694] should_failslab+0xdb/0x130 [ 507.031657] kmem_cache_alloc_node_trace+0x280/0x770 [ 507.036746] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 507.042206] __kmalloc_node_track_caller+0x3d/0x80 [ 507.047391] __kmalloc_reserve.isra.0+0x40/0xe0 [ 507.052187] __alloc_skb+0xcf/0x500 [ 507.055812] ? skb_scrub_packet+0x4b0/0x4b0 [ 507.060167] ? netlink_has_listeners+0x20a/0x330 [ 507.065009] kobject_uevent_env+0x781/0xc23 [ 507.069516] ? wait_for_completion+0x420/0x420 [ 507.074099] kobject_uevent+0x20/0x26 [ 507.077915] device_del+0x65c/0xaa0 [ 507.081543] ? __device_links_no_driver+0x220/0x220 [ 507.086549] ? mark_held_locks+0xb1/0x100 [ 507.090880] cdev_device_del+0x1a/0x70 [ 507.095276] evdev_disconnect+0x42/0xb0 [ 507.099236] __input_unregister_device+0x1eb/0x480 [ 507.104154] input_unregister_device+0xa9/0xf0 [ 507.108744] uinput_destroy_device+0x1ce/0x220 [ 507.113314] uinput_ioctl_handler.isra.0+0x129/0x18a0 [ 507.118488] ? uinput_request_submit.part.0+0x290/0x290 [ 507.123868] ? __might_sleep+0x93/0xb0 [ 507.127856] ? __fget+0x210/0x370 [ 507.131311] ? uinput_compat_ioctl+0xa0/0xa0 [ 507.135715] uinput_ioctl+0x4a/0x60 [ 507.139388] do_vfs_ioctl+0x7ae/0x1060 [ 507.143306] ? selinux_file_mprotect+0x5d0/0x5d0 [ 507.148084] ? lock_downgrade+0x6e0/0x6e0 [ 507.152926] ? ioctl_preallocate+0x1c0/0x1c0 [ 507.158042] ? __fget+0x237/0x370 [ 507.161484] ? security_file_ioctl+0x89/0xb0 [ 507.165965] SyS_ioctl+0x8f/0xc0 [ 507.169318] ? do_vfs_ioctl+0x1060/0x1060 [ 507.173456] do_syscall_64+0x1e8/0x640 [ 507.177358] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 507.182284] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 507.187470] RIP: 0033:0x459829 [ 507.190646] RSP: 002b:00007f03e509fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 507.198718] RAX: ffffffffffffffda RBX: 00007f03e509fc90 RCX: 0000000000459829 [ 507.206455] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 16:27:55 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x30200, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) eventfd(0x6) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) [ 507.213836] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 507.221651] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f03e50a06d4 [ 507.228912] R13: 00000000004c4596 R14: 00000000004d8860 R15: 0000000000000004 16:27:55 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x5452, &(0x7f0000000500)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = accept4$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @remote}, &(0x7f0000000200)=0x10, 0x80800) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendto(r2, &(0x7f00000002c0)="e7940cd309fe29bc7445e73c7752277cfeff761ecc88e2cbd47554d801ade3df80f7f806eb74314b341186ed3af17b57230153e6f7969250b6791df9ba945677f548a191ff71aa98b4c3c8d44c2ca1b586bfbc36d4dc1fbbdb340855fa635bc4012f9708315bb861000a68095fd7bab33589e247ac6fb457fd21d3eda5a0189b72a76bb9dc986f5a469b5c", 0x8b, 0x0, &(0x7f0000000380)=@tipc=@name={0x1e, 0x2, 0x4a904cdc8a0117f2, {{0x2, 0x1}, 0x1}}, 0x80) socket$alg(0x26, 0x5, 0x0) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:27:55 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)=0x101) ioctl$int_in(0xffffffffffffffff, 0x800060c004500a, &(0x7f0000000000)) 16:27:55 executing program 1: gettid() pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x80000, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x100, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000140)=r3) r4 = eventfd(0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000180)=0x2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 16:27:55 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000040)=""/144, 0x90) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) fsync(r0) 16:27:55 executing program 5 (fault-call:3 fault-nth:18): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:27:55 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x30200, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) eventfd(0x6) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) [ 507.406404] input: syz0 as /devices/virtual/input/input57 [ 507.439636] FAULT_INJECTION: forcing a failure. [ 507.439636] name failslab, interval 1, probability 0, space 0, times 0 [ 507.464535] CPU: 0 PID: 25837 Comm: syz-executor.5 Not tainted 4.14.138 #34 [ 507.471691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 507.481060] Call Trace: [ 507.483703] dump_stack+0x138/0x19c [ 507.487429] should_fail.cold+0x10f/0x159 [ 507.491664] should_failslab+0xdb/0x130 [ 507.495729] kmem_cache_alloc_node_trace+0x280/0x770 [ 507.500824] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 507.506299] __kmalloc_node_track_caller+0x3d/0x80 [ 507.511309] __kmalloc_reserve.isra.0+0x40/0xe0 [ 507.515967] __alloc_skb+0xcf/0x500 [ 507.519694] ? skb_scrub_packet+0x4b0/0x4b0 [ 507.524023] ? netlink_has_listeners+0x20a/0x330 [ 507.528779] kobject_uevent_env+0x781/0xc23 [ 507.533103] ? wait_for_completion+0x420/0x420 [ 507.537711] kobject_uevent+0x20/0x26 [ 507.541718] device_del+0x65c/0xaa0 [ 507.545338] ? __device_links_no_driver+0x220/0x220 [ 507.550342] ? mark_held_locks+0xb1/0x100 [ 507.554490] cdev_device_del+0x1a/0x70 [ 507.558396] evdev_disconnect+0x42/0xb0 [ 507.562365] __input_unregister_device+0x1eb/0x480 [ 507.567281] input_unregister_device+0xa9/0xf0 [ 507.571850] uinput_destroy_device+0x1ce/0x220 [ 507.576454] uinput_ioctl_handler.isra.0+0x129/0x18a0 [ 507.581665] ? uinput_request_submit.part.0+0x290/0x290 [ 507.587096] ? __might_sleep+0x93/0xb0 [ 507.591724] ? __fget+0x210/0x370 [ 507.595279] ? uinput_compat_ioctl+0xa0/0xa0 [ 507.599700] uinput_ioctl+0x4a/0x60 [ 507.603351] do_vfs_ioctl+0x7ae/0x1060 [ 507.607445] ? selinux_file_mprotect+0x5d0/0x5d0 [ 507.612194] ? lock_downgrade+0x6e0/0x6e0 [ 507.616346] ? ioctl_preallocate+0x1c0/0x1c0 [ 507.620752] ? __fget+0x237/0x370 [ 507.624196] ? security_file_ioctl+0x89/0xb0 [ 507.628619] SyS_ioctl+0x8f/0xc0 [ 507.631973] ? do_vfs_ioctl+0x1060/0x1060 [ 507.636208] do_syscall_64+0x1e8/0x640 [ 507.640096] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 507.644962] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 507.651529] RIP: 0033:0x459829 [ 507.654703] RSP: 002b:00007f03e509fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 16:27:56 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x30200, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) 16:27:56 executing program 5 (fault-call:3 fault-nth:19): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 507.662433] RAX: ffffffffffffffda RBX: 00007f03e509fc90 RCX: 0000000000459829 [ 507.670307] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 507.677606] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 507.684959] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f03e50a06d4 [ 507.692393] R13: 00000000004c4596 R14: 00000000004d8860 R15: 0000000000000004 16:27:56 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x30200, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) [ 507.772931] input: syz0 as /devices/virtual/input/input58 [ 507.792471] FAULT_INJECTION: forcing a failure. [ 507.792471] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 507.804535] CPU: 0 PID: 25856 Comm: syz-executor.5 Not tainted 4.14.138 #34 [ 507.811665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 507.821328] Call Trace: [ 507.823944] dump_stack+0x138/0x19c [ 507.827587] should_fail.cold+0x10f/0x159 [ 507.831858] __alloc_pages_nodemask+0x1d6/0x7a0 [ 507.836539] ? __alloc_pages_slowpath+0x2930/0x2930 [ 507.841666] cache_grow_begin+0x80/0x400 [ 507.845731] kmem_cache_alloc_trace+0x6b2/0x790 [ 507.845748] ? mutex_trylock+0x1c0/0x1c0 [ 507.845763] ? devm_device_remove_groups+0x50/0x50 [ 507.845780] kobject_uevent_env+0x378/0xc23 [ 507.864132] ? wait_for_completion+0x420/0x420 [ 507.864157] kobject_uevent+0x20/0x26 16:27:56 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x30200, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) [ 507.864168] device_del+0x65c/0xaa0 [ 507.864182] ? __device_links_no_driver+0x220/0x220 [ 507.864204] __input_unregister_device+0x381/0x480 [ 507.864217] input_unregister_device+0xa9/0xf0 [ 507.890899] uinput_destroy_device+0x1ce/0x220 [ 507.895496] uinput_ioctl_handler.isra.0+0x129/0x18a0 [ 507.900729] ? uinput_request_submit.part.0+0x290/0x290 [ 507.906209] ? __might_sleep+0x93/0xb0 [ 507.910200] ? __fget+0x210/0x370 [ 507.913669] ? uinput_compat_ioctl+0xa0/0xa0 [ 507.918367] uinput_ioctl+0x4a/0x60 16:27:56 executing program 0: pipe2$9p(&(0x7f0000000000), 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x30200, 0x0) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) eventfd(0x6) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) [ 507.921996] do_vfs_ioctl+0x7ae/0x1060 [ 507.926010] ? selinux_file_mprotect+0x5d0/0x5d0 [ 507.930783] ? lock_downgrade+0x6e0/0x6e0 [ 507.930795] ? ioctl_preallocate+0x1c0/0x1c0 [ 507.930808] ? __fget+0x237/0x370 [ 507.930825] ? security_file_ioctl+0x89/0xb0 [ 507.930836] SyS_ioctl+0x8f/0xc0 [ 507.930845] ? do_vfs_ioctl+0x1060/0x1060 [ 507.930859] do_syscall_64+0x1e8/0x640 [ 507.930870] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 507.963886] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 507.969097] RIP: 0033:0x459829 16:27:56 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x5452, &(0x7f0000000500)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = accept4$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @remote}, &(0x7f0000000200)=0x10, 0x80800) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendto(r2, &(0x7f00000002c0)="e7940cd309fe29bc7445e73c7752277cfeff761ecc88e2cbd47554d801ade3df80f7f806eb74314b341186ed3af17b57230153e6f7969250b6791df9ba945677f548a191ff71aa98b4c3c8d44c2ca1b586bfbc36d4dc1fbbdb340855fa635bc4012f9708315bb861000a68095fd7bab33589e247ac6fb457fd21d3eda5a0189b72a76bb9dc986f5a469b5c", 0x8b, 0x0, &(0x7f0000000380)=@tipc=@name={0x1e, 0x2, 0x4a904cdc8a0117f2, {{0x2, 0x1}, 0x1}}, 0x80) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) [ 507.972276] RSP: 002b:00007f03e509fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 507.979980] RAX: ffffffffffffffda RBX: 00007f03e509fc90 RCX: 0000000000459829 [ 507.987252] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 507.994518] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 508.001787] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f03e50a06d4 [ 508.009049] R13: 00000000004c4596 R14: 00000000004d8860 R15: 0000000000000004 16:27:56 executing program 0: pipe2$9p(&(0x7f0000000000), 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x30200, 0x0) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) eventfd(0x6) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) 16:27:56 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)=0x101) ioctl$int_in(0xffffffffffffffff, 0x800060c004500a, &(0x7f0000000000)) 16:27:56 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) eventfd(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@multicast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@remote}}, &(0x7f0000000140)=0xe8) r3 = geteuid() stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x1, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_loose='cache=loose'}, {@access_uid={'access', 0x3d, r2}}, {@access_uid={'access', 0x3d, r3}}, {@version_u='version=9p2000.u'}, {@fscache='fscache'}, {@afid={'afid', 0x3d, 0x9}}, {@msize={'msize', 0x3d, 0x9}}, {@access_uid={'access', 0x3d, r4}}], [{@hash='hash'}, {@context={'context', 0x3d, 'staff_u'}}, {@subj_type={'subj_type', 0x3d, 'system'}}, {@smackfsroot={'smackfsroot', 0x3d, 'trans=fd,'}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}]}}) 16:27:56 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x820000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x17c, r1, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8c1}]}, @TIPC_NLA_BEARER={0x64, 0x1, [@TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'eth', 0x3a, 'ip6gretap0\x00'}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}]}]}, @TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x800}]}, @TIPC_NLA_LINK={0xe0, 0x4, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbdcf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x286a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2562}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x85}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x21f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffc}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x332}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)) inotify_init() ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:27:56 executing program 5 (fault-call:3 fault-nth:20): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:27:56 executing program 0: pipe2$9p(&(0x7f0000000000), 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x30200, 0x0) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) eventfd(0x6) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) [ 508.219727] input: syz0 as /devices/virtual/input/input59 [ 508.245640] FAULT_INJECTION: forcing a failure. [ 508.245640] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 508.258460] CPU: 1 PID: 25897 Comm: syz-executor.5 Not tainted 4.14.138 #34 16:27:56 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) eventfd(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) gettid() [ 508.267930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 508.277473] Call Trace: [ 508.280147] dump_stack+0x138/0x19c [ 508.283790] should_fail.cold+0x10f/0x159 [ 508.288683] __alloc_pages_nodemask+0x1d6/0x7a0 [ 508.307575] ? __alloc_pages_slowpath+0x2930/0x2930 [ 508.312964] cache_grow_begin+0x80/0x400 16:27:56 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x30200, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) close(r0) eventfd(0x6) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) 16:27:56 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) accept(r2, &(0x7f0000000080)=@l2, &(0x7f0000000140)=0x80) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x30000, 0x0) ioctl$KDSKBLED(r3, 0x4b65, 0x98d) ioctl$EVIOCGSW(r3, 0x8040451b, &(0x7f00000002c0)=""/211) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) eventfd(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 508.317162] kmem_cache_alloc_trace+0x6b2/0x790 [ 508.322026] ? mutex_trylock+0x1c0/0x1c0 [ 508.326155] ? devm_device_remove_groups+0x50/0x50 [ 508.331118] kobject_uevent_env+0x378/0xc23 [ 508.335573] ? wait_for_completion+0x420/0x420 [ 508.340196] kobject_uevent+0x20/0x26 [ 508.344697] device_del+0x65c/0xaa0 [ 508.348327] ? __device_links_no_driver+0x220/0x220 [ 508.353447] __input_unregister_device+0x381/0x480 [ 508.358396] input_unregister_device+0xa9/0xf0 [ 508.363502] uinput_destroy_device+0x1ce/0x220 16:27:56 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x30200, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) close(r0) eventfd(0x6) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) [ 508.368117] uinput_ioctl_handler.isra.0+0x129/0x18a0 [ 508.373335] ? uinput_request_submit.part.0+0x290/0x290 [ 508.379508] ? __might_sleep+0x93/0xb0 [ 508.383411] ? __fget+0x210/0x370 [ 508.387030] ? uinput_compat_ioctl+0xa0/0xa0 [ 508.391549] uinput_ioctl+0x4a/0x60 [ 508.395193] do_vfs_ioctl+0x7ae/0x1060 [ 508.399090] ? selinux_file_mprotect+0x5d0/0x5d0 [ 508.403849] ? lock_downgrade+0x6e0/0x6e0 [ 508.408031] ? ioctl_preallocate+0x1c0/0x1c0 [ 508.412453] ? __fget+0x237/0x370 [ 508.415924] ? security_file_ioctl+0x89/0xb0 16:27:56 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000240)='/dev/vbi#\x00', 0x1, 0x2) getgroups(0x7, &(0x7f00000000c0)=[0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xee00]) write$FUSE_ENTRY(r2, &(0x7f0000000140)={0x90, 0x0, 0x4, {0x0, 0x3, 0x7, 0x9, 0x696d, 0x9, {0x0, 0x6, 0x400, 0x9, 0x7bb, 0x3, 0x5b13, 0x80, 0x4, 0x1f, 0x7f, 0xee00, r3, 0x8000, 0x38000000000}}}, 0x90) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) eventfd(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) chroot(&(0x7f0000000080)='./file0\x00') [ 508.420348] SyS_ioctl+0x8f/0xc0 [ 508.423722] ? do_vfs_ioctl+0x1060/0x1060 [ 508.427889] do_syscall_64+0x1e8/0x640 [ 508.431789] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 508.436739] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 508.441935] RIP: 0033:0x459829 [ 508.445338] RSP: 002b:00007f03e509fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 508.453093] RAX: ffffffffffffffda RBX: 00007f03e509fc90 RCX: 0000000000459829 [ 508.460375] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 508.467852] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 508.476265] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f03e50a06d4 [ 508.483564] R13: 00000000004c4596 R14: 00000000004d8860 R15: 0000000000000004 16:27:56 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) r2 = eventfd(0x5) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x1, 0x0) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f00000000c0)={0x0, r2}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 16:27:56 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x30200, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) close(r0) eventfd(0x6) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) 16:27:57 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)=0x101) ioctl$int_in(r0, 0x0, &(0x7f0000000000)) 16:27:57 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x5452, &(0x7f0000000500)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) accept4$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @remote}, &(0x7f0000000200)=0x10, 0x80800) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:27:57 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$FICLONE(r0, 0x40049409, r0) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:27:57 executing program 5 (fault-call:3 fault-nth:21): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:27:57 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) eventfd(0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0xa) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 16:27:57 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x30200, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) eventfd(0x6) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) 16:27:57 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) eventfd(0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) socketpair(0xb, 0x2, 0x6, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$unix(r4, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB='o=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',uname=rfdno,mmap,fscache,cache=fscache,cache=mmap,cache=none,cache=fscache,noextend,dfltgid=', @ANYRESHEX=r2, @ANYBLOB=',fowner<', @ANYRESDEC=r3, @ANYBLOB=',fowner<', @ANYRESDEC=r3, @ANYBLOB=',appraise,\x00']) sendmsg$inet6(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000280)="1336c7a0e2de9d8ce5d1faf438cc7f5d487ab24286fbd58cc4df2ce3926e56", 0x1f}, {&(0x7f0000000400)="e3a0c43b20dd97987c1994b4948017c1729663c44efd5443d701b5bb9c0470b7ccb70dddad9a93715fe5292a569464b100c5d1ace00c42691fcb01af440aeb1206bf0850c121a43cc44ad9ad540f5df323120711a20ee59fac23933a92a4f34e9baefc18c7486df12639e7f40fb434d7f6f1f51c514d562b4a0641e28449e2c49604ee441031c88642528df888767d4b8b69c0bd22e764446f0a541a6e7a17c0cbb95f9176bbe31f58ba8c934e5baef10348487a1320e8bc16ba96655401efc51ec5458023e9744201", 0xc9}, {&(0x7f00000002c0)="32059aef3a579bfb421077950f945a8b921e94401f7dadaf4f5be90d7e586e8fa3028e49cd4e33c0ddc2c2d8790924b1854cb704c33159cd5b27e779ab58ccd710b46273dde14023f5f0378239405117675aea0f87fa945c8c9d4f5684041264b2db1df18e6345acb9e924bc4e6fd461a6fe6b6cf985e5771586305cf6741d2b76f876093e459a86b03a365794c3619ac994bb69077b861ed220dfbeeb9ba9482658d8f6ba6e100a", 0xa8}, {&(0x7f0000000500)="58cd8e63cfba51ce8a555e480c931b982fc4d73b19c7bd493b7de9c4b986be7300b4240bec50c57aa4b5f15a9cacdefe4ab59c2ad84d11b6a2c41def0681b2b8dd686aa688e813d075b748439f09ef41ea9ae93c195ec7", 0x57}], 0x4}, 0x20000090) [ 508.895693] input: syz0 as /devices/virtual/input/input60 [ 508.909875] FAULT_INJECTION: forcing a failure. [ 508.909875] name failslab, interval 1, probability 0, space 0, times 0 [ 508.950649] CPU: 1 PID: 25954 Comm: syz-executor.5 Not tainted 4.14.138 #34 [ 508.957806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 508.967165] Call Trace: [ 508.967190] dump_stack+0x138/0x19c [ 508.967209] should_fail.cold+0x10f/0x159 [ 508.967226] should_failslab+0xdb/0x130 [ 508.967239] __kmalloc+0x2f0/0x7a0 [ 508.967249] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 508.967263] ? kobject_uevent_env+0x378/0xc23 [ 508.967276] ? rcu_read_lock_sched_held+0x110/0x130 16:27:57 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) eventfd(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 16:27:57 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x30200, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) eventfd(0x6) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) [ 508.967286] ? kobject_get_path+0xbb/0x1a0 [ 508.967298] kobject_get_path+0xbb/0x1a0 [ 508.967309] ? devm_device_remove_groups+0x50/0x50 [ 508.967323] kobject_uevent_env+0x39c/0xc23 [ 508.967334] ? wait_for_completion+0x420/0x420 [ 508.967354] kobject_uevent+0x20/0x26 [ 508.967364] device_del+0x65c/0xaa0 [ 508.967377] ? __device_links_no_driver+0x220/0x220 [ 508.967393] __input_unregister_device+0x381/0x480 [ 508.967405] input_unregister_device+0xa9/0xf0 [ 508.967417] uinput_destroy_device+0x1ce/0x220 [ 508.967432] uinput_ioctl_handler.isra.0+0x129/0x18a0 [ 508.967444] ? uinput_request_submit.part.0+0x290/0x290 [ 508.967467] ? __might_sleep+0x93/0xb0 [ 509.000408] ? __fget+0x210/0x370 [ 509.000429] ? uinput_compat_ioctl+0xa0/0xa0 [ 509.000440] uinput_ioctl+0x4a/0x60 [ 509.000454] do_vfs_ioctl+0x7ae/0x1060 [ 509.000468] ? selinux_file_mprotect+0x5d0/0x5d0 [ 509.000479] ? lock_downgrade+0x6e0/0x6e0 [ 509.000488] ? ioctl_preallocate+0x1c0/0x1c0 [ 509.000499] ? __fget+0x237/0x370 [ 509.000515] ? security_file_ioctl+0x89/0xb0 16:27:57 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x30200, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) eventfd(0x6) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) [ 509.000534] SyS_ioctl+0x8f/0xc0 [ 509.000545] ? do_vfs_ioctl+0x1060/0x1060 [ 509.013757] do_syscall_64+0x1e8/0x640 [ 509.013768] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 509.013789] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 509.013797] RIP: 0033:0x459829 [ 509.013803] RSP: 002b:00007f03e509fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 509.013817] RAX: ffffffffffffffda RBX: 00007f03e509fc90 RCX: 0000000000459829 [ 509.097016] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 16:27:57 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) eventfd(0x0) r2 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x6, 0x600) ioctl$VIDIOC_TRY_ENCODER_CMD(r2, 0xc028564e, &(0x7f00000000c0)={0x3, 0x1, [0x0, 0x5, 0x101, 0x5, 0x0, 0xb83, 0x4978f981, 0x1]}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 16:27:57 executing program 5 (fault-call:3 fault-nth:22): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 509.108951] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 509.108958] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f03e50a06d4 [ 509.108964] R13: 00000000004c4596 R14: 00000000004d8860 R15: 0000000000000004 [ 509.243584] input: syz0 as /devices/virtual/input/input61 [ 509.290083] FAULT_INJECTION: forcing a failure. [ 509.290083] name failslab, interval 1, probability 0, space 0, times 0 [ 509.310408] CPU: 1 PID: 25986 Comm: syz-executor.5 Not tainted 4.14.138 #34 [ 509.317812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 509.327729] Call Trace: [ 509.330713] dump_stack+0x138/0x19c [ 509.335076] should_fail.cold+0x10f/0x159 [ 509.339234] should_failslab+0xdb/0x130 [ 509.343385] kmem_cache_alloc_node+0x287/0x780 [ 509.347971] __alloc_skb+0x9c/0x500 [ 509.351603] ? skb_scrub_packet+0x4b0/0x4b0 [ 509.355932] ? netlink_has_listeners+0x20a/0x330 [ 509.360870] kobject_uevent_env+0x781/0xc23 [ 509.365384] ? wait_for_completion+0x420/0x420 [ 509.370097] kobject_uevent+0x20/0x26 [ 509.373996] device_del+0x65c/0xaa0 [ 509.377630] ? __device_links_no_driver+0x220/0x220 [ 509.382660] __input_unregister_device+0x381/0x480 [ 509.388112] input_unregister_device+0xa9/0xf0 [ 509.392775] uinput_destroy_device+0x1ce/0x220 [ 509.397353] uinput_ioctl_handler.isra.0+0x129/0x18a0 [ 509.402636] ? uinput_request_submit.part.0+0x290/0x290 [ 509.408043] ? __might_sleep+0x93/0xb0 [ 509.412148] ? __fget+0x210/0x370 [ 509.415601] ? uinput_compat_ioctl+0xa0/0xa0 [ 509.420104] uinput_ioctl+0x4a/0x60 [ 509.423737] do_vfs_ioctl+0x7ae/0x1060 [ 509.428871] ? selinux_file_mprotect+0x5d0/0x5d0 [ 509.433619] ? lock_downgrade+0x6e0/0x6e0 [ 509.437756] ? ioctl_preallocate+0x1c0/0x1c0 [ 509.442173] ? __fget+0x237/0x370 [ 509.445916] ? security_file_ioctl+0x89/0xb0 [ 509.450334] SyS_ioctl+0x8f/0xc0 [ 509.453714] ? do_vfs_ioctl+0x1060/0x1060 [ 509.457876] do_syscall_64+0x1e8/0x640 [ 509.461775] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 509.466640] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 509.471825] RIP: 0033:0x459829 [ 509.475040] RSP: 002b:00007f03e509fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 509.482839] RAX: ffffffffffffffda RBX: 00007f03e509fc90 RCX: 0000000000459829 16:27:57 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)=0x101) ioctl$int_in(r0, 0x0, &(0x7f0000000000)) 16:27:57 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) eventfd(0x6) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) [ 509.490122] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 509.497414] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 509.504679] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f03e50a06d4 [ 509.512207] R13: 00000000004c4596 R14: 00000000004d8860 R15: 0000000000000004 16:27:57 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x5452, &(0x7f0000000500)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) accept4$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @remote}, &(0x7f0000000200)=0x10, 0x80800) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:27:57 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x10012) close(r1) eventfd(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) ioprio_set$pid(0x2, r2, 0xa9) 16:27:57 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000500)='/dev/qat_adf_ctl\x00', 0xc0000, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000580)={0x5f127aa, 0x1, 0x4, 0x4000000, {0x77359400}, {0x3, 0x0, 0x80000001, 0x2, 0x5, 0x6, "d226d495"}, 0x0, 0x3, @planes=&(0x7f0000000540)={0x2, 0x0, @userptr=0x4, 0xfffffffffffff1c7}, 0x4}) r1 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x4b8, 0x0) ppoll(&(0x7f0000000380)=[{r1, 0x108}, {r1, 0x400}, {r1, 0x1000}], 0x3, &(0x7f00000003c0), &(0x7f0000000400)={0x52}, 0x8) read(r1, &(0x7f0000000080)=""/144, 0x90) lsetxattr$trusted_overlay_nlink(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='trusted.overlay.nlink\x00', &(0x7f00000004c0)={'L+'}, 0x28, 0x3) ioctl$int_in(r1, 0x280000040045010, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x40) ioctl$int_in(r1, 0x800060c004500a, &(0x7f0000000000)) getresgid(&(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)=0x0) setfsgid(r2) getpeername(r1, &(0x7f0000000240)=@nfc, &(0x7f0000000040)=0x80) ioctl(r1, 0xff, &(0x7f00000001c0)="f43b3b3067f88b69fd3a84293753ccc10a9d8df9d4dfaf3db72137ab3fd1d8e981636023a0bbeba1b70a0079bae15698f42eb59d8a25bc05c000f90c3c2997478bd45cf1aecd3ed5373f0f9b132ccbe679806cc1") 16:27:57 executing program 5 (fault-call:3 fault-nth:23): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:27:57 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) eventfd(0x6) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) 16:27:58 executing program 1: pipe2$9p(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r2 = syz_open_dev$media(&(0x7f0000000340)='/dev/media#\x00', 0xffffffffffffff7f, 0x10000) statx(r2, &(0x7f00000003c0)='./file0\x00', 0x4000, 0x200, &(0x7f0000000400)) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl(0x9, &(0x7f0000000080)='./file0\x00', r3, &(0x7f00000002c0)="eea3df164f5fb63d1ceac767ac6595ec5f1b8bf1dcccc162418be9db48492178875228045f357f937fd571e6570cceed9da785919205e185296725b925e26782012855fd59fa55adda43b25741ae") mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) r4 = syz_open_dev$dmmidi(&(0x7f00000001c0)='/dev/dmmidi#\x00', 0x89b9, 0x111802) ioctl$SG_SET_RESERVED_SIZE(r4, 0x2275, &(0x7f0000000240)=0xfff) eventfd(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 509.648637] QAT: Invalid ioctl [ 509.664304] QAT: Invalid ioctl [ 509.676737] input: syz0 as /devices/virtual/input/input62 16:27:58 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000040)=@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:27:58 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) eventfd(0x6) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) [ 509.722373] FAULT_INJECTION: forcing a failure. [ 509.722373] name failslab, interval 1, probability 0, space 0, times 0 [ 509.761152] CPU: 1 PID: 26020 Comm: syz-executor.5 Not tainted 4.14.138 #34 [ 509.768401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 509.778574] Call Trace: [ 509.781287] dump_stack+0x138/0x19c [ 509.784942] should_fail.cold+0x10f/0x159 [ 509.789129] should_failslab+0xdb/0x130 [ 509.793133] kmem_cache_alloc_node_trace+0x280/0x770 [ 509.798255] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 509.803735] __kmalloc_node_track_caller+0x3d/0x80 [ 509.808779] __kmalloc_reserve.isra.0+0x40/0xe0 [ 509.813483] __alloc_skb+0xcf/0x500 [ 509.817195] ? skb_scrub_packet+0x4b0/0x4b0 16:27:58 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) eventfd(0x80) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r1, @ANYBLOB=',\x00']) lgetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@random={'trusted.', ']\x00'}, &(0x7f0000000140)=""/67, 0x43) [ 509.821623] ? netlink_has_listeners+0x20a/0x330 [ 509.826395] kobject_uevent_env+0x781/0xc23 [ 509.830733] ? wait_for_completion+0x420/0x420 [ 509.834088] 9pnet: Insufficient options for proto=fd [ 509.835573] kobject_uevent+0x20/0x26 [ 509.844633] device_del+0x65c/0xaa0 [ 509.848285] ? __device_links_no_driver+0x220/0x220 [ 509.849804] 9pnet: Insufficient options for proto=fd [ 509.853340] __input_unregister_device+0x381/0x480 [ 509.853354] input_unregister_device+0xa9/0xf0 [ 509.853367] uinput_destroy_device+0x1ce/0x220 16:27:58 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) close(r1) eventfd(0x5) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\b']) [ 509.853381] uinput_ioctl_handler.isra.0+0x129/0x18a0 [ 509.853395] ? uinput_request_submit.part.0+0x290/0x290 [ 509.853423] ? __might_sleep+0x93/0xb0 [ 509.853433] ? __fget+0x210/0x370 [ 509.853445] ? uinput_compat_ioctl+0xa0/0xa0 [ 509.853454] uinput_ioctl+0x4a/0x60 [ 509.853466] do_vfs_ioctl+0x7ae/0x1060 [ 509.853480] ? selinux_file_mprotect+0x5d0/0x5d0 [ 509.853496] ? lock_downgrade+0x6e0/0x6e0 [ 509.911670] ? ioctl_preallocate+0x1c0/0x1c0 [ 509.916089] ? __fget+0x237/0x370 [ 509.919561] ? security_file_ioctl+0x89/0xb0 [ 509.923975] SyS_ioctl+0x8f/0xc0 [ 509.927340] ? do_vfs_ioctl+0x1060/0x1060 [ 509.931577] do_syscall_64+0x1e8/0x640 [ 509.935574] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 509.940421] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 509.945804] RIP: 0033:0x459829 [ 509.949009] RSP: 002b:00007f03e507ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 509.956987] RAX: ffffffffffffffda RBX: 00007f03e507ec90 RCX: 0000000000459829 [ 509.964254] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 509.971610] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 509.979044] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f03e507f6d4 [ 509.986566] R13: 00000000004c4596 R14: 00000000004d8860 R15: 0000000000000004 16:27:58 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)=0x101) ioctl$int_in(r0, 0x0, &(0x7f0000000000)) 16:27:58 executing program 1: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) eventfd(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="1c8fcda20cccc52208ac52a4dd9ba73f74d8bdb6afb50077030e2610269a6d44", @ANYRESHEX=r1, @ANYBLOB="10ad38a0afc13b5e0e1cda5f3992e68bce334f1a0f4bd6ada663e8014e6365164d31ed3a7dd6f0c6fb15a673030f8c24ec3af465121650713194c5f2b963a2447b4ae5182b5812f7fc8241110b9c5dde9425fbe5e20c1f70c9345e84672634823a0bdaf66830d8d2cf363c8ba5e9ac1a454ffc788f0c26defada25d2951e704833feabd947653e9f4b2c9655a6f879e793528d1ceb795f7b52bc1af4e0205a1fff5346b7a76030fd0ea900"/183]) [ 510.122381] 9pnet: Insufficient options for proto=fd [ 510.129921] 9pnet: Insufficient options for proto=fd 16:27:58 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x5452, &(0x7f0000000500)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) accept4$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @remote}, &(0x7f0000000200)=0x10, 0x80800) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:27:58 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x30200, 0x0) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(0xffffffffffffffff) eventfd(0x6) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) 16:27:58 executing program 5 (fault-call:3 fault-nth:24): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:27:58 executing program 1: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getgid() lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(r0, &(0x7f0000000340)={0x82, 0x7d, 0x2, {{0x0, 0x6a, 0x8, 0xffff, {0x80, 0x1, 0x3}, 0x9522652f52ea57e8, 0x1, 0x7f, 0x8001, 0xe, ')#vmnet0cgroup', 0x3, '9p\x00', 0x23, 'nodev\\posix_acl_access*vboxnet0user', 0x3, '9p\x00'}, 0x3, '9p\x00', r1, r2, r3}}, 0x82) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r5) eventfd(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000716e733d66d52c7266646e6f3d", @ANYRESHEX=r4, @ANYBLOB=',~fdn\x00\x00', @ANYRESHEX=r5, @ANYBLOB=',\x00']) [ 510.231201] input: syz0 as /devices/virtual/input/input63 [ 510.248059] FAULT_INJECTION: forcing a failure. [ 510.248059] name failslab, interval 1, probability 0, space 0, times 0 [ 510.280692] CPU: 1 PID: 26058 Comm: syz-executor.5 Not tainted 4.14.138 #34 [ 510.298887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 510.298893] Call Trace: [ 510.298919] dump_stack+0x138/0x19c [ 510.298935] should_fail.cold+0x10f/0x159 [ 510.298952] should_failslab+0xdb/0x130 [ 510.298964] kmem_cache_alloc_node_trace+0x280/0x770 16:27:58 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0xfff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={0x0, 0x2e}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={r1, 0x38, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x0, @rand_addr="d4fedc3e99b327f2b76c84c4b81853a7", 0x401}, @in6={0xa, 0x4e24, 0x4, @loopback, 0x7}]}, &(0x7f0000000240)=0x10) r2 = getpgid(0xffffffffffffffff) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x7fff, &(0x7f0000000300)=""/225) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x10) readahead(r3, 0x35, 0x10001) close(r3) eventfd(0xffffffffffffffe6) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x4000) ioctl$CAPI_SET_FLAGS(r0, 0x80044324, &(0x7f00000002c0)=0x1) 16:27:58 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) r2 = eventfd(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c00fa4682bc8d0cc42ad6fe4d22f0b4ebb99265ef5f91a10ee7393a2fe85b288fd9e3289a5275264b4a86419fdc855465e9496793b41d4a5fa6793c8aa66d653a7523755b361c168572e6a15b54cfbfa6ac9b9c4bfe444c2771f9a578263090e6de88be9bc93b51c51a1514bb2baed7c134f1d20f0262148b7b4253b9ee3a9ac51ff71a7ae6752438dab5aa36591a221d6e231ce7154ba0d7f111de"]) ioctl(r2, 0xb5, &(0x7f0000000240)="d75a016e75aa2a48ae70f4c32e151d49727526e9c504d718be513c4e044ea9ffac03c89c827337e7a0204185f41f6381c18b7224a213748057122b264a3708e1fdfaf4f57b1bdae01c4271e90f2925288a1849e5295f476b942a4642034682d4d9e1cf0419c8a8f007a55569924864a9cc47cc1e7046f1ab4f5a61060e8080a6a44c9ccdf59acf8b58964d6e2ed755ff6c095c60cb8bbcb796bdfdf1983f4da1b6d72722ffe36e7c020b111663d409ba4cd9e5748bfb37ebef9a32c24e976b31037e09ea08665907df9545082e0dde7ffc6152dada2de8e0c1f84fcac160ce3dced16918d525a68ebffa2f7450bb8cedf75f5291fcf7dc") [ 510.298976] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 510.298989] __kmalloc_node_track_caller+0x3d/0x80 [ 510.299003] __kmalloc_reserve.isra.0+0x40/0xe0 [ 510.299015] __alloc_skb+0xcf/0x500 [ 510.299024] ? skb_scrub_packet+0x4b0/0x4b0 [ 510.299036] ? netlink_has_listeners+0x20a/0x330 [ 510.299049] kobject_uevent_env+0x781/0xc23 [ 510.299059] ? wait_for_completion+0x420/0x420 [ 510.299075] kobject_uevent+0x20/0x26 [ 510.299085] device_del+0x65c/0xaa0 [ 510.299099] ? __device_links_no_driver+0x220/0x220 [ 510.319230] __input_unregister_device+0x381/0x480 [ 510.319245] input_unregister_device+0xa9/0xf0 [ 510.319259] uinput_destroy_device+0x1ce/0x220 [ 510.319275] uinput_ioctl_handler.isra.0+0x129/0x18a0 [ 510.319287] ? uinput_request_submit.part.0+0x290/0x290 [ 510.402114] ? __might_sleep+0x93/0xb0 [ 510.406005] ? __fget+0x210/0x370 [ 510.409473] ? uinput_compat_ioctl+0xa0/0xa0 [ 510.413888] uinput_ioctl+0x4a/0x60 [ 510.417698] do_vfs_ioctl+0x7ae/0x1060 [ 510.421601] ? selinux_file_mprotect+0x5d0/0x5d0 [ 510.426354] ? lock_downgrade+0x6e0/0x6e0 [ 510.430503] ? ioctl_preallocate+0x1c0/0x1c0 [ 510.434912] ? __fget+0x237/0x370 [ 510.438352] ? security_file_ioctl+0x89/0xb0 [ 510.442745] SyS_ioctl+0x8f/0xc0 [ 510.446251] ? do_vfs_ioctl+0x1060/0x1060 [ 510.450395] do_syscall_64+0x1e8/0x640 [ 510.454280] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 510.459202] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 510.464413] RIP: 0033:0x459829 [ 510.467593] RSP: 002b:00007f03e509fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 510.475310] RAX: ffffffffffffffda RBX: 00007f03e509fc90 RCX: 0000000000459829 [ 510.482583] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 510.489850] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 510.497108] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f03e50a06d4 [ 510.504387] R13: 00000000004c4596 R14: 00000000004d8860 R15: 0000000000000004 16:27:58 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x280000040045010, &(0x7f00000002c0)=0x1000) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, r1, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x38, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x91b3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1ff}]}, @TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x400}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000000) 16:27:58 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) eventfd(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 16:27:58 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x30200, 0x0) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(0xffffffffffffffff) eventfd(0x6) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) 16:27:58 executing program 5 (fault-call:3 fault-nth:25): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:27:59 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)=0x101) ioctl$int_in(r0, 0x800060c004500a, 0x0) 16:27:59 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) pause() eventfd(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="74726100b9d7753ef930640de792a8af701c9746543d5969cdfb47ba9cc2", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$KVM_GET_TSC_KHZ(r2, 0xaea3) [ 510.711300] input: syz0 as /devices/virtual/input/input64 [ 510.748576] FAULT_INJECTION: forcing a failure. [ 510.748576] name failslab, interval 1, probability 0, space 0, times 0 [ 510.779185] CPU: 1 PID: 26089 Comm: syz-executor.5 Not tainted 4.14.138 #34 [ 510.786340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 510.795715] Call Trace: [ 510.798322] dump_stack+0x138/0x19c [ 510.801979] should_fail.cold+0x10f/0x159 [ 510.806143] should_failslab+0xdb/0x130 [ 510.810122] kmem_cache_alloc_node_trace+0x280/0x770 [ 510.810136] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 510.810148] __kmalloc_node_track_caller+0x3d/0x80 [ 510.810162] __kmalloc_reserve.isra.0+0x40/0xe0 [ 510.810174] __alloc_skb+0xcf/0x500 [ 510.810184] ? skb_scrub_packet+0x4b0/0x4b0 [ 510.810196] ? netlink_has_listeners+0x20a/0x330 [ 510.810210] kobject_uevent_env+0x781/0xc23 [ 510.810220] ? wait_for_completion+0x420/0x420 [ 510.810236] kobject_uevent+0x20/0x26 [ 510.855860] device_del+0x65c/0xaa0 [ 510.859479] ? __device_links_no_driver+0x220/0x220 [ 510.864488] __input_unregister_device+0x381/0x480 [ 510.869408] input_unregister_device+0xa9/0xf0 [ 510.874011] uinput_destroy_device+0x1ce/0x220 [ 510.878735] uinput_ioctl_handler.isra.0+0x129/0x18a0 [ 510.883948] ? uinput_request_submit.part.0+0x290/0x290 [ 510.889318] ? __might_sleep+0x93/0xb0 [ 510.893208] ? __fget+0x210/0x370 [ 510.896679] ? uinput_compat_ioctl+0xa0/0xa0 [ 510.901088] uinput_ioctl+0x4a/0x60 [ 510.904719] do_vfs_ioctl+0x7ae/0x1060 [ 510.908623] ? selinux_file_mprotect+0x5d0/0x5d0 [ 510.913373] ? lock_downgrade+0x6e0/0x6e0 [ 510.917522] ? ioctl_preallocate+0x1c0/0x1c0 [ 510.921924] ? __fget+0x237/0x370 [ 510.925371] ? security_file_ioctl+0x89/0xb0 [ 510.929773] SyS_ioctl+0x8f/0xc0 [ 510.933225] ? do_vfs_ioctl+0x1060/0x1060 [ 510.937370] do_syscall_64+0x1e8/0x640 [ 510.941253] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 510.946097] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 510.951383] RIP: 0033:0x459829 [ 510.954761] RSP: 002b:00007f03e509fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 510.962481] RAX: ffffffffffffffda RBX: 00007f03e509fc90 RCX: 0000000000459829 [ 510.969736] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 510.977075] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 510.984343] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f03e50a06d4 [ 510.991633] R13: 00000000004c4596 R14: 00000000004d8860 R15: 0000000000000004 16:27:59 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x5452, &(0x7f0000000500)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) accept4$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @remote}, &(0x7f0000000200)=0x10, 0x80800) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:27:59 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x30200, 0x0) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(0xffffffffffffffff) eventfd(0x6) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) 16:27:59 executing program 5 (fault-call:3 fault-nth:26): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:27:59 executing program 0: pipe2$9p(0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x30200, 0x0) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(0xffffffffffffffff) eventfd(0x6) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) [ 511.066705] input: syz0 as /devices/virtual/input/input65 [ 511.092682] FAULT_INJECTION: forcing a failure. [ 511.092682] name failslab, interval 1, probability 0, space 0, times 0 [ 511.118458] CPU: 0 PID: 26112 Comm: syz-executor.5 Not tainted 4.14.138 #34 [ 511.125606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 511.135487] Call Trace: [ 511.138100] dump_stack+0x138/0x19c [ 511.141745] should_fail.cold+0x10f/0x159 [ 511.145909] should_failslab+0xdb/0x130 [ 511.149889] kmem_cache_alloc_node+0x287/0x780 [ 511.154861] __alloc_skb+0x9c/0x500 [ 511.158488] ? skb_scrub_packet+0x4b0/0x4b0 [ 511.162803] ? netlink_has_listeners+0x20a/0x330 [ 511.167606] kobject_uevent_env+0x781/0xc23 [ 511.171923] ? wait_for_completion+0x420/0x420 [ 511.176546] kobject_uevent+0x20/0x26 [ 511.180350] device_del+0x65c/0xaa0 [ 511.183992] ? __device_links_no_driver+0x220/0x220 [ 511.189011] __input_unregister_device+0x381/0x480 [ 511.194076] input_unregister_device+0xa9/0xf0 [ 511.198997] uinput_destroy_device+0x1ce/0x220 [ 511.203584] uinput_ioctl_handler.isra.0+0x129/0x18a0 [ 511.208949] ? uinput_request_submit.part.0+0x290/0x290 [ 511.214331] ? __might_sleep+0x93/0xb0 [ 511.218568] ? __fget+0x210/0x370 [ 511.222060] ? uinput_compat_ioctl+0xa0/0xa0 [ 511.226493] uinput_ioctl+0x4a/0x60 [ 511.230210] do_vfs_ioctl+0x7ae/0x1060 [ 511.234104] ? selinux_file_mprotect+0x5d0/0x5d0 [ 511.238870] ? lock_downgrade+0x6e0/0x6e0 [ 511.243055] ? ioctl_preallocate+0x1c0/0x1c0 [ 511.247673] ? __fget+0x237/0x370 [ 511.251122] ? security_file_ioctl+0x89/0xb0 [ 511.255625] SyS_ioctl+0x8f/0xc0 [ 511.259007] ? do_vfs_ioctl+0x1060/0x1060 [ 511.263196] do_syscall_64+0x1e8/0x640 [ 511.267171] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 511.272057] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 511.277241] RIP: 0033:0x459829 [ 511.280442] RSP: 002b:00007f03e509fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 511.288153] RAX: ffffffffffffffda RBX: 00007f03e509fc90 RCX: 0000000000459829 [ 511.295513] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 511.303161] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 511.310431] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f03e50a06d4 16:27:59 executing program 0: pipe2$9p(0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x30200, 0x0) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(0xffffffffffffffff) eventfd(0x6) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) [ 511.317796] R13: 00000000004c4596 R14: 00000000004d8860 R15: 0000000000000004 16:27:59 executing program 5 (fault-call:3 fault-nth:27): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:27:59 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)) ioctl(r0, 0x10000, &(0x7f00000001c0)="fb6a5a71b5e616cb3e3f5f6899250cb2a35f12d9a3a01d9f87761791b93f0311be78bb16822abe7504d0c56b1484d92551199a2957a6d4326d6c3753afd690ab8572df14f536f68e566fa7df54aac2aa7c8e2fa72c366dbf26e2804e6e5a9ff30755ed7cb3e775ebd3c9369e85d350713a800e73cf8c9b110b83f4f81b9fb819c157c2dcfeab26302f8564e9c38edb7a7533238e48da5b5f12c2bbb993e8700ba2195570b01583e77db2282aeaf9ff51d71c369dfbf6a39a608fddd84e61850e62628e26e684e6e2e749f5c02e48279b0f747abbdad2") ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:27:59 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)=0x101) ioctl$int_in(r0, 0x800060c004500a, 0x0) 16:27:59 executing program 0: pipe2$9p(0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x30200, 0x0) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(0xffffffffffffffff) eventfd(0x6) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) [ 511.429792] input: syz0 as /devices/virtual/input/input66 [ 511.467290] FAULT_INJECTION: forcing a failure. [ 511.467290] name failslab, interval 1, probability 0, space 0, times 0 [ 511.504095] CPU: 0 PID: 26133 Comm: syz-executor.5 Not tainted 4.14.138 #34 [ 511.511266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 511.520611] Call Trace: [ 511.523206] dump_stack+0x138/0x19c [ 511.526841] should_fail.cold+0x10f/0x159 [ 511.530983] should_failslab+0xdb/0x130 [ 511.534983] kmem_cache_alloc_node_trace+0x280/0x770 [ 511.540094] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 511.545649] __kmalloc_node_track_caller+0x3d/0x80 [ 511.550585] __kmalloc_reserve.isra.0+0x40/0xe0 [ 511.555345] __alloc_skb+0xcf/0x500 [ 511.559088] ? skb_scrub_packet+0x4b0/0x4b0 [ 511.563418] ? netlink_has_listeners+0x20a/0x330 [ 511.568173] kobject_uevent_env+0x781/0xc23 [ 511.572491] ? wait_for_completion+0x420/0x420 [ 511.577088] kobject_uevent+0x20/0x26 [ 511.580888] device_del+0x65c/0xaa0 [ 511.584518] ? __device_links_no_driver+0x220/0x220 [ 511.589577] __input_unregister_device+0x381/0x480 [ 511.594517] input_unregister_device+0xa9/0xf0 [ 511.599113] uinput_destroy_device+0x1ce/0x220 [ 511.603710] uinput_ioctl_handler.isra.0+0x129/0x18a0 [ 511.608903] ? uinput_request_submit.part.0+0x290/0x290 [ 511.614282] ? __might_sleep+0x93/0xb0 [ 511.618534] ? __fget+0x210/0x370 [ 511.622007] ? uinput_compat_ioctl+0xa0/0xa0 [ 511.626538] uinput_ioctl+0x4a/0x60 [ 511.630169] do_vfs_ioctl+0x7ae/0x1060 [ 511.634058] ? selinux_file_mprotect+0x5d0/0x5d0 [ 511.638821] ? lock_downgrade+0x6e0/0x6e0 [ 511.642962] ? ioctl_preallocate+0x1c0/0x1c0 [ 511.647378] ? __fget+0x237/0x370 [ 511.650846] ? security_file_ioctl+0x89/0xb0 [ 511.655267] SyS_ioctl+0x8f/0xc0 [ 511.658903] ? do_vfs_ioctl+0x1060/0x1060 [ 511.663229] do_syscall_64+0x1e8/0x640 [ 511.667108] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 511.672135] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 511.677330] RIP: 0033:0x459829 [ 511.680502] RSP: 002b:00007f03e509fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 511.688538] RAX: ffffffffffffffda RBX: 00007f03e509fc90 RCX: 0000000000459829 [ 511.695834] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 16:28:00 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) r2 = eventfd(0x0) r3 = getgid() mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r3}}, {@loose='loose'}, {@fscache='fscache'}, {@mmap='mmap'}, {@nodevmap='nodevmap'}]}}) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x8000, 0x0) ioctl$TIOCLINUX2(r4, 0x541c, &(0x7f0000000180)={0x2, 0x80000000, 0x2, 0x6, 0x8}) [ 511.703224] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 511.710598] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f03e50a06d4 [ 511.717952] R13: 00000000004c4596 R14: 00000000004d8860 R15: 0000000000000004 16:28:00 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x5452, &(0x7f0000000500)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:28:00 executing program 5 (fault-call:3 fault-nth:28): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:28:00 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x10401, 0x0) ioctl$TIOCLINUX3(r2, 0x541c, &(0x7f00000000c0)) bind$nfc_llcp(r2, &(0x7f0000000140)={0x27, 0x0, 0x0, 0x0, 0x6, 0x20, "4b247bf44e63f4e12109dc78740960978107d04128fcb52f46ec7b6820d3bcb01fbb818f51bcf8a306d595c6c7a9d50947fe2630506f83a9ea059a8a32c3f6", 0x3e}, 0x60) close(r1) eventfd(0x80000000) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="3d0000000000000000000000000000d1431cd8635220469bef051a008f30d418824769ef0b52b763fbac17368c7f0ee55ed80ac241013bd091d27999ab444e83350ff1e5ee9107b48919ad018d950bb3f16a83bc1b73eabdf474416d1296fd02f6b0ac2ffcebc3c9b9e3e7babe95f228f90d992179c6de80e8a2fe5c75d0ebe8a5b264cdef5226bd71d51984e9d9d6322cf7bb", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) 16:28:00 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x30200, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) eventfd(0x6) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) [ 511.829297] input: syz0 as /devices/virtual/input/input67 [ 511.839697] FAULT_INJECTION: forcing a failure. [ 511.839697] name failslab, interval 1, probability 0, space 0, times 0 [ 511.865610] CPU: 0 PID: 26160 Comm: syz-executor.5 Not tainted 4.14.138 #34 16:28:00 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) eventfd(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)=ANY=[]) 16:28:00 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) eventfd(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 511.872756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 511.882209] Call Trace: [ 511.884812] dump_stack+0x138/0x19c [ 511.888449] should_fail.cold+0x10f/0x159 [ 511.892619] should_failslab+0xdb/0x130 [ 511.896705] kmem_cache_alloc_node+0x287/0x780 [ 511.901314] __alloc_skb+0x9c/0x500 [ 511.904946] ? skb_scrub_packet+0x4b0/0x4b0 [ 511.909302] ? netlink_has_listeners+0x20a/0x330 [ 511.914075] kobject_uevent_env+0x781/0xc23 [ 511.918416] ? wait_for_completion+0x420/0x420 [ 511.923022] kobject_uevent+0x20/0x26 16:28:00 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) eventfd(0x0) r2 = geteuid() mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose'}, {@dfltuid={'dfltuid', 0x3d, r2}}, {@cache_loose='cache=loose'}, {@cache_fscache='cache=fscache'}, {@uname={'uname', 0x3d, 'trans=fd,'}}]}}) [ 511.926843] device_del+0x65c/0xaa0 [ 511.930487] ? __device_links_no_driver+0x220/0x220 [ 511.935527] __input_unregister_device+0x381/0x480 [ 511.940492] input_unregister_device+0xa9/0xf0 [ 511.945095] uinput_destroy_device+0x1ce/0x220 [ 511.949792] uinput_ioctl_handler.isra.0+0x129/0x18a0 [ 511.955025] ? uinput_request_submit.part.0+0x290/0x290 [ 511.960415] ? __might_sleep+0x93/0xb0 [ 511.964424] ? __fget+0x210/0x370 [ 511.968075] ? uinput_compat_ioctl+0xa0/0xa0 [ 511.972497] uinput_ioctl+0x4a/0x60 [ 511.976140] do_vfs_ioctl+0x7ae/0x1060 16:28:00 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RSTAT(r1, &(0x7f0000000140)={0x68, 0x7d, 0x1, {0x0, 0x61, 0x81, 0x46, {0xb32d5683ef56d9ca, 0x0, 0x7}, 0x4d1edc0c11865263, 0xee, 0x800, 0x3ff, 0x0, '', 0x17, '\\mime_typesystemlowlan1', 0x4, ')(]*', 0x13, 'wlan1wlan1\xee%selinux'}}, 0x68) close(r1) eventfd(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 511.980141] ? selinux_file_mprotect+0x5d0/0x5d0 [ 511.984918] ? lock_downgrade+0x6e0/0x6e0 [ 511.989113] ? ioctl_preallocate+0x1c0/0x1c0 [ 511.993533] ? __fget+0x237/0x370 [ 511.997007] ? security_file_ioctl+0x89/0xb0 [ 512.001701] SyS_ioctl+0x8f/0xc0 [ 512.005081] ? do_vfs_ioctl+0x1060/0x1060 [ 512.009423] do_syscall_64+0x1e8/0x640 [ 512.013322] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 512.018644] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 512.023828] RIP: 0033:0x459829 [ 512.027014] RSP: 002b:00007f03e509fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 512.034812] RAX: ffffffffffffffda RBX: 00007f03e509fc90 RCX: 0000000000459829 [ 512.042163] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 512.049555] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 512.056822] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f03e50a06d4 [ 512.064076] R13: 00000000004c4596 R14: 00000000004d8860 R15: 0000000000000004 16:28:00 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f00000001c0)={{0x32, @multicast1, 0x4e23, 0x1, 'lblcr\x00', 0x23, 0x9a2, 0x7f}, {@multicast2, 0x4e20, 0x0, 0x7ceea5a7, 0x2e, 0x1}}, 0x44) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x400, 0x9, 0x20, 0x44c7, 0x0, 0x1, 0x841, 0x8, 0xa0ab, 0x80000001, 0x7, 0x5, 0x6, 0x389f, 0x1, 0x6, 0x9, 0x0, 0x80, 0x87fd, 0x3, 0x0, 0x8000, 0x3ff, 0x6, 0x1, 0x7fff, 0x0, 0x4, 0x51c7, 0x8, 0x200, 0xffffffff, 0x8001, 0x9, 0x6, 0x0, 0x52, 0x1, @perf_config_ext={0x20, 0x4}, 0x8000, 0x400, 0x7ff, 0x2, 0x5, 0x7fff, 0x1}, r1, 0x7, 0xffffffffffffffff, 0x8) 16:28:00 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) eventfd(0x0) r2 = socket(0x2, 0x2, 0x80000000000000) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000080), 0x4) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 16:28:00 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x30200, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) eventfd(0x6) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) 16:28:00 executing program 5 (fault-call:3 fault-nth:29): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 512.246285] input: syz0 as /devices/virtual/input/input68 [ 512.276394] FAULT_INJECTION: forcing a failure. [ 512.276394] name failslab, interval 1, probability 0, space 0, times 0 [ 512.308210] CPU: 0 PID: 26196 Comm: syz-executor.5 Not tainted 4.14.138 #34 [ 512.315356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 512.324883] Call Trace: [ 512.324903] dump_stack+0x138/0x19c [ 512.324922] should_fail.cold+0x10f/0x159 [ 512.324939] should_failslab+0xdb/0x130 [ 512.324952] kmem_cache_alloc_node_trace+0x280/0x770 [ 512.324966] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 512.331183] __kmalloc_node_track_caller+0x3d/0x80 [ 512.331201] __kmalloc_reserve.isra.0+0x40/0xe0 [ 512.331215] __alloc_skb+0xcf/0x500 [ 512.331225] ? skb_scrub_packet+0x4b0/0x4b0 [ 512.331236] ? netlink_has_listeners+0x20a/0x330 [ 512.331249] kobject_uevent_env+0x781/0xc23 [ 512.331260] ? wait_for_completion+0x420/0x420 [ 512.331282] kobject_uevent+0x20/0x26 [ 512.385984] device_del+0x65c/0xaa0 [ 512.389603] ? __device_links_no_driver+0x220/0x220 [ 512.394624] __input_unregister_device+0x381/0x480 [ 512.399563] input_unregister_device+0xa9/0xf0 [ 512.404140] uinput_destroy_device+0x1ce/0x220 [ 512.408753] uinput_ioctl_handler.isra.0+0x129/0x18a0 [ 512.413935] ? uinput_request_submit.part.0+0x290/0x290 [ 512.419306] ? __might_sleep+0x93/0xb0 [ 512.423206] ? __fget+0x210/0x370 [ 512.426662] ? uinput_compat_ioctl+0xa0/0xa0 [ 512.431168] uinput_ioctl+0x4a/0x60 [ 512.434883] do_vfs_ioctl+0x7ae/0x1060 [ 512.438787] ? selinux_file_mprotect+0x5d0/0x5d0 [ 512.443530] ? lock_downgrade+0x6e0/0x6e0 [ 512.447762] ? ioctl_preallocate+0x1c0/0x1c0 [ 512.452176] ? __fget+0x237/0x370 [ 512.455649] ? security_file_ioctl+0x89/0xb0 [ 512.460073] SyS_ioctl+0x8f/0xc0 [ 512.463427] ? do_vfs_ioctl+0x1060/0x1060 [ 512.467616] do_syscall_64+0x1e8/0x640 [ 512.471490] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 512.476350] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 512.481547] RIP: 0033:0x459829 [ 512.484748] RSP: 002b:00007f03e509fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 16:28:00 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x5452, &(0x7f0000000500)) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:28:00 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)=0x101) ioctl$int_in(r0, 0x800060c004500a, 0x0) 16:28:00 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) eventfd(0x3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x3d0e, 0x0) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f00000002c0)={0xc, @output={0x1000, 0x1, {0x80000001, 0xa7de}, 0x1}}) 16:28:00 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x30200, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) eventfd(0x6) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) 16:28:00 executing program 5 (fault-call:3 fault-nth:30): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 512.492465] RAX: ffffffffffffffda RBX: 00007f03e509fc90 RCX: 0000000000459829 [ 512.499744] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 512.507106] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 512.514366] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f03e50a06d4 [ 512.521623] R13: 00000000004c4596 R14: 00000000004d8860 R15: 0000000000000004 16:28:00 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) close(0xffffffffffffffff) eventfd(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='|rans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00']) 16:28:00 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x0, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) eventfd(0x6) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) [ 512.629849] input: syz0 as /devices/virtual/input/input69 [ 512.664406] FAULT_INJECTION: forcing a failure. [ 512.664406] name failslab, interval 1, probability 0, space 0, times 0 16:28:01 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) eventfd(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="7472616e733d661a0615f7183e2c72", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) [ 512.688855] CPU: 0 PID: 26220 Comm: syz-executor.5 Not tainted 4.14.138 #34 [ 512.696015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 512.705560] Call Trace: [ 512.708162] dump_stack+0x138/0x19c [ 512.709926] 9pnet: Could not find request transport: f÷> [ 512.711809] should_fail.cold+0x10f/0x159 [ 512.711827] should_failslab+0xdb/0x130 [ 512.711840] kmem_cache_alloc_node+0x287/0x780 [ 512.711863] __alloc_skb+0x9c/0x500 [ 512.711875] ? skb_scrub_packet+0x4b0/0x4b0 [ 512.711888] ? netlink_has_listeners+0x20a/0x330 [ 512.711901] kobject_uevent_env+0x781/0xc23 [ 512.711917] ? wait_for_completion+0x420/0x420 [ 512.722156] 9pnet: Could not find request transport: f÷> [ 512.722594] kobject_uevent+0x20/0x26 [ 512.722606] device_del+0x65c/0xaa0 [ 512.722619] ? __device_links_no_driver+0x220/0x220 [ 512.722643] __input_unregister_device+0x381/0x480 [ 512.776019] input_unregister_device+0xa9/0xf0 [ 512.780626] uinput_destroy_device+0x1ce/0x220 [ 512.785384] uinput_ioctl_handler.isra.0+0x129/0x18a0 [ 512.790575] ? uinput_request_submit.part.0+0x290/0x290 [ 512.796072] ? __might_sleep+0x93/0xb0 [ 512.799972] ? __fget+0x210/0x370 [ 512.803449] ? uinput_compat_ioctl+0xa0/0xa0 [ 512.807869] uinput_ioctl+0x4a/0x60 [ 512.811512] do_vfs_ioctl+0x7ae/0x1060 [ 512.815451] ? selinux_file_mprotect+0x5d0/0x5d0 [ 512.820320] ? lock_downgrade+0x6e0/0x6e0 [ 512.824557] ? ioctl_preallocate+0x1c0/0x1c0 [ 512.828962] ? __fget+0x237/0x370 [ 512.832530] ? security_file_ioctl+0x89/0xb0 [ 512.836981] SyS_ioctl+0x8f/0xc0 [ 512.840334] ? do_vfs_ioctl+0x1060/0x1060 [ 512.844473] do_syscall_64+0x1e8/0x640 [ 512.848358] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 512.853302] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 512.858570] RIP: 0033:0x459829 [ 512.861770] RSP: 002b:00007f03e509fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 512.869522] RAX: ffffffffffffffda RBX: 00007f03e509fc90 RCX: 0000000000459829 [ 512.877003] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 512.884897] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 512.892162] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f03e50a06d4 [ 512.900510] R13: 00000000004c4596 R14: 00000000004d8860 R15: 0000000000000004 16:28:01 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x4000) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:28:01 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x10) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) syz_open_procfs$namespace(r2, &(0x7f00000001c0)='ns/ipc\x00') close(r1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) eventfd(0x0) r3 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x80000008, 0x88002) ioctl$SIOCRSACCEPT(r3, 0x89e3) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x488040, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 16:28:01 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x0, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) eventfd(0x6) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) 16:28:01 executing program 5 (fault-call:3 fault-nth:31): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 513.026117] input: syz0 as /devices/virtual/input/input70 [ 513.053213] FAULT_INJECTION: forcing a failure. [ 513.053213] name failslab, interval 1, probability 0, space 0, times 0 [ 513.095005] CPU: 0 PID: 26252 Comm: syz-executor.5 Not tainted 4.14.138 #34 [ 513.102424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 513.111901] Call Trace: [ 513.114508] dump_stack+0x138/0x19c [ 513.118165] should_fail.cold+0x10f/0x159 [ 513.122341] should_failslab+0xdb/0x130 [ 513.126318] kmem_cache_alloc_node_trace+0x280/0x770 [ 513.131410] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 513.136877] __kmalloc_node_track_caller+0x3d/0x80 [ 513.141833] __kmalloc_reserve.isra.0+0x40/0xe0 [ 513.146516] __alloc_skb+0xcf/0x500 [ 513.150448] ? skb_scrub_packet+0x4b0/0x4b0 [ 513.154774] ? netlink_has_listeners+0x20a/0x330 [ 513.159524] kobject_uevent_env+0x781/0xc23 [ 513.163883] ? wait_for_completion+0x420/0x420 [ 513.168495] kobject_uevent+0x20/0x26 [ 513.172299] device_del+0x65c/0xaa0 [ 513.175999] ? __device_links_no_driver+0x220/0x220 [ 513.181091] __input_unregister_device+0x381/0x480 [ 513.186210] input_unregister_device+0xa9/0xf0 [ 513.190999] uinput_destroy_device+0x1ce/0x220 [ 513.195602] uinput_ioctl_handler.isra.0+0x129/0x18a0 [ 513.201180] ? uinput_request_submit.part.0+0x290/0x290 [ 513.206635] ? __might_sleep+0x93/0xb0 [ 513.210598] ? __fget+0x210/0x370 [ 513.214046] ? uinput_compat_ioctl+0xa0/0xa0 [ 513.218460] uinput_ioctl+0x4a/0x60 [ 513.222091] do_vfs_ioctl+0x7ae/0x1060 [ 513.226021] ? selinux_file_mprotect+0x5d0/0x5d0 [ 513.230795] ? lock_downgrade+0x6e0/0x6e0 [ 513.234956] ? ioctl_preallocate+0x1c0/0x1c0 [ 513.239357] ? __fget+0x237/0x370 [ 513.242896] ? security_file_ioctl+0x89/0xb0 [ 513.247299] SyS_ioctl+0x8f/0xc0 [ 513.250762] ? do_vfs_ioctl+0x1060/0x1060 [ 513.254987] do_syscall_64+0x1e8/0x640 [ 513.258858] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 513.264002] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 513.269179] RIP: 0033:0x459829 [ 513.272367] RSP: 002b:00007f03e509fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 513.280178] RAX: ffffffffffffffda RBX: 00007f03e509fc90 RCX: 0000000000459829 [ 513.287465] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 513.294743] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 513.302007] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f03e50a06d4 [ 513.309578] R13: 00000000004c4596 R14: 00000000004d8860 R15: 0000000000000004 16:28:01 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x5452, &(0x7f0000000500)) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:28:01 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x14) close(r1) eventfd(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 16:28:01 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x0, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) eventfd(0x6) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) 16:28:01 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)) r1 = getpgid(0xffffffffffffffff) ptrace$getregs(0xe, r1, 0xf67, &(0x7f00000001c0)=""/200) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:28:01 executing program 5 (fault-call:3 fault-nth:32): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:28:01 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000000)=0xfffffffffffffe01, 0x4) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) recvmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000180)="f2", 0x1}], 0x1) 16:28:01 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f0000000080)) close(r1) eventfd(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0) r3 = getpgrp(0x0) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000140)=r3) [ 513.447781] input: syz0 as /devices/virtual/input/input71 [ 513.479257] FAULT_INJECTION: forcing a failure. [ 513.479257] name failslab, interval 1, probability 0, space 0, times 0 [ 513.502367] CPU: 1 PID: 26275 Comm: syz-executor.5 Not tainted 4.14.138 #34 [ 513.510051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 513.519424] Call Trace: [ 513.522046] dump_stack+0x138/0x19c [ 513.525692] should_fail.cold+0x10f/0x159 [ 513.529857] should_failslab+0xdb/0x130 [ 513.533852] kmem_cache_alloc_node+0x287/0x780 [ 513.538459] __alloc_skb+0x9c/0x500 [ 513.542189] ? skb_scrub_packet+0x4b0/0x4b0 [ 513.546520] ? netlink_has_listeners+0x20a/0x330 [ 513.551297] kobject_uevent_env+0x781/0xc23 [ 513.555637] ? wait_for_completion+0x420/0x420 [ 513.560246] kobject_uevent+0x20/0x26 [ 513.564063] device_del+0x65c/0xaa0 [ 513.567930] ? __device_links_no_driver+0x220/0x220 [ 513.572964] __input_unregister_device+0x381/0x480 [ 513.577893] input_unregister_device+0xa9/0xf0 [ 513.582482] uinput_destroy_device+0x1ce/0x220 [ 513.587094] uinput_ioctl_handler.isra.0+0x129/0x18a0 [ 513.592278] ? uinput_request_submit.part.0+0x290/0x290 [ 513.597665] ? __might_sleep+0x93/0xb0 [ 513.601669] ? __fget+0x210/0x370 [ 513.605128] ? uinput_compat_ioctl+0xa0/0xa0 [ 513.609554] uinput_ioctl+0x4a/0x60 [ 513.613178] do_vfs_ioctl+0x7ae/0x1060 [ 513.617070] ? selinux_file_mprotect+0x5d0/0x5d0 [ 513.621824] ? lock_downgrade+0x6e0/0x6e0 [ 513.626089] ? ioctl_preallocate+0x1c0/0x1c0 [ 513.630521] ? __fget+0x237/0x370 [ 513.633979] ? security_file_ioctl+0x89/0xb0 [ 513.638393] SyS_ioctl+0x8f/0xc0 [ 513.641762] ? do_vfs_ioctl+0x1060/0x1060 [ 513.645915] do_syscall_64+0x1e8/0x640 [ 513.649824] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 513.654684] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 513.660043] RIP: 0033:0x459829 [ 513.663261] RSP: 002b:00007f03e509fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 513.670975] RAX: ffffffffffffffda RBX: 00007f03e509fc90 RCX: 0000000000459829 [ 513.678242] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 513.685550] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 513.692816] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f03e50a06d4 16:28:02 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x30200, 0x0) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) eventfd(0x6) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) 16:28:02 executing program 1: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) eventfd(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 16:28:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000030100c0"]) [ 513.700079] R13: 00000000004c4596 R14: 00000000004d8860 R15: 0000000000000004 16:28:02 executing program 5 (fault-call:3 fault-nth:33): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:28:02 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, 0x0, 0x0) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$pppoe(0x18, 0x1, 0x0) shutdown(r0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000040), 0x8) [ 513.852358] input: syz0 as /devices/virtual/input/input72 [ 513.913285] FAULT_INJECTION: forcing a failure. [ 513.913285] name failslab, interval 1, probability 0, space 0, times 0 [ 513.925830] CPU: 0 PID: 26310 Comm: syz-executor.5 Not tainted 4.14.138 #34 [ 513.932981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 513.942329] Call Trace: [ 513.944913] dump_stack+0x138/0x19c [ 513.948537] should_fail.cold+0x10f/0x159 [ 513.952688] should_failslab+0xdb/0x130 [ 513.956655] kmem_cache_alloc_node_trace+0x280/0x770 [ 513.961838] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 513.967285] __kmalloc_node_track_caller+0x3d/0x80 [ 513.972234] __kmalloc_reserve.isra.0+0x40/0xe0 [ 513.976895] __alloc_skb+0xcf/0x500 [ 513.980519] ? skb_scrub_packet+0x4b0/0x4b0 [ 513.984838] ? netlink_has_listeners+0x20a/0x330 [ 513.990312] kobject_uevent_env+0x781/0xc23 [ 513.994624] ? wait_for_completion+0x420/0x420 [ 513.999310] kobject_uevent+0x20/0x26 [ 514.003102] device_del+0x65c/0xaa0 [ 514.006728] ? __device_links_no_driver+0x220/0x220 [ 514.011779] __input_unregister_device+0x381/0x480 [ 514.016698] input_unregister_device+0xa9/0xf0 [ 514.021276] uinput_destroy_device+0x1ce/0x220 [ 514.025877] uinput_ioctl_handler.isra.0+0x129/0x18a0 [ 514.031071] ? uinput_request_submit.part.0+0x290/0x290 [ 514.036483] ? __might_sleep+0x93/0xb0 [ 514.040386] ? __fget+0x210/0x370 [ 514.043850] ? uinput_compat_ioctl+0xa0/0xa0 [ 514.048285] uinput_ioctl+0x4a/0x60 [ 514.052001] do_vfs_ioctl+0x7ae/0x1060 [ 514.055884] ? selinux_file_mprotect+0x5d0/0x5d0 [ 514.060741] ? lock_downgrade+0x6e0/0x6e0 [ 514.064875] ? ioctl_preallocate+0x1c0/0x1c0 [ 514.069289] ? __fget+0x237/0x370 [ 514.072733] ? security_file_ioctl+0x89/0xb0 [ 514.077129] SyS_ioctl+0x8f/0xc0 [ 514.080504] ? do_vfs_ioctl+0x1060/0x1060 [ 514.084652] do_syscall_64+0x1e8/0x640 [ 514.088532] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 514.093373] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 514.098545] RIP: 0033:0x459829 [ 514.101725] RSP: 002b:00007f03e507ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 16:28:02 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x5452, &(0x7f0000000500)) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:28:02 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x30200, 0x0) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) eventfd(0x6) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) 16:28:02 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f00000001c0)) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) write$binfmt_script(r2, &(0x7f0000002540)={'#! ', './file0', [{0x20, '}'}, {0x20, '/self'}, {}, {}, {}, {0x20, '#\'self.&&mime_type\xf9'}, {0x20, 'vboxnet0nodev'}], 0xa, "2b606430809dec4305a09b6560bd0de8f0facc01fa754e93b776cdd01ca9eb105b05bb6d8d17d709498b5803494872479d41d7c96a0d423eeafc67a45cad60b93c30e1d6418e3e0d3ea2515c22b6b9979b911309713ab143e0505da7ced2fb1c0b35a9cc85787cfcee0d7ace25fe6a25487d5becb3c83c17cb3ed2127ea8098aa08ec69941beeb3d9c6293bcceb64320364ca0a3862f255ee2d72f4432117d330894d74c89"}, 0xdd) setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f0000000100)={0x0, {{0xa, 0x4e24, 0x1e4, @rand_addr="c3be5e1865da63f08632aa0f8c8819e3", 0x8001}}}, 0x88) sendto$inet6(r2, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="7f454c46000069442a26641f7f000000000000000122cff4710000000000000023000000000000000004003a6aeec999620000544430ecbfa3fff806983b271905a7fd98eac669aac9fcbe272a060000003f7708af1c1aa5f30eb86ed3bfbce1c38ae73f92a0fc036ed7973b27a12d14f0d419248265ed62282c613edb0f87d636764b7d5229317ee17b8a0000008000000000b90395b866bd5d26a6be2275c35a60f0f575f742e76c8be607cf04ed25fc276993548efa5fc50e00000000000000000000000000003fae96fc2bf372fc38a7cc8c4a70ca46d7d632370e5cb102b6dd80a09ae7c873bdffc5339d3e"], 0xee) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000540)="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", 0xcf0}, {&(0x7f0000000280)="311609e553a7873ae9f7f2af9f6bb89f87d5293a937380c20efa4d82bfff21b3a8d948ddf8c5fe3997baeba0f7fd9fca543211bd1837efc86b2c8c326001f757fdd51807073c9a33734b5174a9462cc060768948080399199dca0c215f2308c5b7e1fb9ee842e0e6e2474056c762d1e6edc5568fb0dfbb5d49d1da6b84f4d3cf48b4338b7669bdce9f7438260e0975f855f065bc4306efd79f5ac4e11a38cd6a3ab3c9ca5861db1cdc5abd8cebf196c374e2943816b954448fde4ec20a74af84d7dc9229f8817b9cc1c06ff3dc5135983f8b63b5bceb6a664913ae6942c01fe471534ca61249f1a4b348", 0xea}, {&(0x7f0000001540)="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", 0x1000}], 0x3) recvmmsg(r2, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) [ 514.109438] RAX: ffffffffffffffda RBX: 00007f03e507ec90 RCX: 0000000000459829 [ 514.116702] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 514.123962] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 514.131230] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f03e507f6d4 [ 514.138503] R13: 00000000004c4596 R14: 00000000004d8860 R15: 0000000000000004 16:28:02 executing program 1: gettid() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000840)={@mcast1, 0x7}, 0x18d) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x19) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 16:28:02 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)) setsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f0000000040)=0x40, 0x4) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:28:02 executing program 5 (fault-call:3 fault-nth:34): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:28:02 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x30200, 0x0) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) eventfd(0x6) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) [ 514.270474] input: syz0 as /devices/virtual/input/input73 [ 514.304588] FAULT_INJECTION: forcing a failure. [ 514.304588] name failslab, interval 1, probability 0, space 0, times 0 [ 514.337154] CPU: 1 PID: 26328 Comm: syz-executor.5 Not tainted 4.14.138 #34 [ 514.344483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 514.352995] ptrace attach of "/root/syz-executor.1"[26338] was attempted by "/root/syz-executor.1"[26340] [ 514.353930] Call Trace: [ 514.353953] dump_stack+0x138/0x19c [ 514.353976] should_fail.cold+0x10f/0x159 [ 514.353995] should_failslab+0xdb/0x130 [ 514.354013] kmem_cache_alloc_node+0x287/0x780 [ 514.382748] __alloc_skb+0x9c/0x500 [ 514.386390] ? skb_scrub_packet+0x4b0/0x4b0 [ 514.390718] ? netlink_has_listeners+0x20a/0x330 [ 514.395486] kobject_uevent_env+0x781/0xc23 [ 514.399818] ? wait_for_completion+0x420/0x420 [ 514.404415] kobject_uevent+0x20/0x26 [ 514.408304] device_del+0x65c/0xaa0 [ 514.411937] ? __device_links_no_driver+0x220/0x220 [ 514.416986] __input_unregister_device+0x381/0x480 [ 514.422041] input_unregister_device+0xa9/0xf0 [ 514.427261] uinput_destroy_device+0x1ce/0x220 [ 514.431870] uinput_ioctl_handler.isra.0+0x129/0x18a0 [ 514.437089] ? uinput_request_submit.part.0+0x290/0x290 [ 514.442574] ? __might_sleep+0x93/0xb0 [ 514.446469] ? __fget+0x210/0x370 [ 514.449955] ? uinput_compat_ioctl+0xa0/0xa0 [ 514.454386] uinput_ioctl+0x4a/0x60 [ 514.458021] do_vfs_ioctl+0x7ae/0x1060 [ 514.461920] ? selinux_file_mprotect+0x5d0/0x5d0 [ 514.466788] ? lock_downgrade+0x6e0/0x6e0 [ 514.470945] ? ioctl_preallocate+0x1c0/0x1c0 [ 514.475359] ? __fget+0x237/0x370 [ 514.478823] ? security_file_ioctl+0x89/0xb0 [ 514.483237] SyS_ioctl+0x8f/0xc0 16:28:02 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x30200, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) eventfd(0x6) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) [ 514.486689] ? do_vfs_ioctl+0x1060/0x1060 [ 514.491035] do_syscall_64+0x1e8/0x640 [ 514.495054] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 514.500061] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 514.505256] RIP: 0033:0x459829 [ 514.508473] RSP: 002b:00007f03e509fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 514.516283] RAX: ffffffffffffffda RBX: 00007f03e509fc90 RCX: 0000000000459829 [ 514.523646] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 514.530923] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 16:28:02 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000020100c0"]) [ 514.538208] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f03e50a06d4 [ 514.545580] R13: 00000000004c4596 R14: 00000000004d8860 R15: 0000000000000004 16:28:02 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x30200, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) eventfd(0x6) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) 16:28:02 executing program 5 (fault-call:3 fault-nth:35): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:28:02 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc4c85513, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x0, 'syz1\x00'}) [ 514.700682] input: syz0 as /devices/virtual/input/input74 16:28:03 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:28:03 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 514.797460] input: syz0 as /devices/virtual/input/input75 [ 514.823860] input: syz0 as /devices/virtual/input/input76 16:28:03 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000400)="75569dbb70eb9030bcb6cc0400fb8b65", 0x10) sendmmsg(r1, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000140)="4a6fe2c97989662ddc969b0e8c644c5cfd6784debd5ee2f755", 0x19}], 0x1}}], 0x1, 0x0) 16:28:03 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getpid() getitimer(0x3, &(0x7f0000000080)) 16:28:03 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x30200, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) eventfd(0x6) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) 16:28:03 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) mlockall(0x1) 16:28:03 executing program 2: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f00000001c0)) r1 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r1, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r1, 0x280000040045010, &(0x7f0000000180)) ioctl$int_in(r1, 0x800060c004500a, &(0x7f0000000000)) [ 515.037786] input: syz0 as /devices/virtual/input/input77 16:28:03 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000b40)={{}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) 16:28:03 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000800)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x63, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='veno\x00', 0x5) sendto$inet(r0, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x7f36, 0x3, 0x0, 0x27) 16:28:03 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x30200, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000140), &(0x7f0000000180)=0x4) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) eventfd(0x6) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) 16:28:03 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) syz_emit_ethernet(0x83, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/708], 0x0) sendmsg$inet(r0, &(0x7f0000000a80)={&(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10, 0x0}, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000080)={0x0, 0x989680}, 0x0, 0x0) 16:28:03 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000440)=ANY=[@ANYBLOB="04000000000000000000000001"]) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) [ 515.287613] input: syz0 as /devices/virtual/input/input78 16:28:03 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:28:03 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x30200, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000140), &(0x7f0000000180)=0x4) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) eventfd(0x6) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) 16:28:03 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:28:03 executing program 1: pipe(&(0x7f0000000140)) syz_genetlink_get_family_id$ipvs(0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) 16:28:03 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0xd}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f00000005c0), r1, 0x2}}, 0x18) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:28:03 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000300)=""/144, 0x209) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f00000001c0)='./file0\x00', 0x8, 0x1) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:28:03 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x30200, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000140), &(0x7f0000000180)=0x4) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) eventfd(0x6) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) 16:28:03 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) [ 515.618275] input: syz0 as /devices/virtual/input/input79 16:28:04 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r1, 0x0, 0xfffffffffffffffa, 0x20000802, &(0x7f00000000c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) r2 = dup2(r1, r0) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) 16:28:04 executing program 4: read(0xffffffffffffffff, &(0x7f0000000080)=""/144, 0x90) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$int_in(0xffffffffffffffff, 0x800060c004500a, &(0x7f0000000000)) 16:28:04 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x30200, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000140)=0x1, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) eventfd(0x6) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) 16:28:04 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101003, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2014020, &(0x7f00000001c0)={[{@acl='acl'}]}) 16:28:04 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) socket$inet6(0xa, 0x2, 0x2dea) 16:28:04 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x30200, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000140)=0x1, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) eventfd(0x6) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) [ 516.060821] input: syz0 as /devices/virtual/input/input81 [ 516.095147] input: syz0 as /devices/virtual/input/input82 16:28:04 executing program 4: read(0xffffffffffffffff, &(0x7f0000000080)=""/144, 0x90) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$int_in(0xffffffffffffffff, 0x800060c004500a, &(0x7f0000000000)) [ 516.125517] EXT4-fs (sda1): re-mounted. Opts: acl, 16:28:04 executing program 4: read(0xffffffffffffffff, &(0x7f0000000080)=""/144, 0x90) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$int_in(0xffffffffffffffff, 0x800060c004500a, &(0x7f0000000000)) 16:28:04 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x200000, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x6ed4, 0x400000) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000040)) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/attr/exec\x00', 0x2, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:28:04 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x44400) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0xba57) r1 = request_key(&(0x7f0000000040)='rxrpc_s\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='\x00', 0xfffffffffffffffc) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000240)={r1, 0x7, 0xae}, &(0x7f0000000280)={'enc=', 'raw', ' hash=', {'sha3-512\x00'}}, &(0x7f0000000300)="e83625990f0b3f", &(0x7f0000000340)=""/174) 16:28:04 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x30200, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000140)=0x1, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) eventfd(0x6) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) [ 516.228201] EXT4-fs (sda1): re-mounted. Opts: acl, 16:28:04 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x4a00, 0x0, 0x0, 0xc0ffffff, 0x4d}}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0x44e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd85, 0x10, &(0x7f0000000000), 0xfffffffffffffe64}, 0x48) [ 516.291831] input: syz0 as /devices/virtual/input/input83 [ 516.361123] input: syz0 as /devices/virtual/input/input84 16:28:05 executing program 3: ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1e}}}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000500)=[{&(0x7f0000000180)}], 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000340)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda32363ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x10a, 0x400}], 0x1, 0x0) 16:28:05 executing program 4: r0 = syz_open_dev$dspn(0x0, 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:28:05 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x30200, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) mkdir(0x0, 0x0) close(r0) eventfd(0x6) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) 16:28:05 executing program 1: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xf7d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = add_key(0x0, &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180)="a6502f8768a2fccda5fd7b19efc917fdc89bd056878ccf8d185c4d817feb0759d0b052d3bab1a0bd958c2b4f8c2bdb317d3721f03cefc9cd6861c9079bc6fe6e824b85fb633f86303b3ddd7b1c09755c07bc69cd1c1bf7ccbfa07d84665237aece3f0bb0a114aedbc090fa148f490a795656a937cbc5c01c726737fd61cd41697946e41869702b11032348c573a55b698b99636946d8868cba4a55", 0x9b, 0xfffffffffffffffe) keyctl$get_keyring_id(0x0, r1, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x20000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a0, &(0x7f0000000000)='&@[\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a1, &(0x7f0000000680)='&@[\x00') dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) execve(0x0, 0x0, 0x0) 16:28:05 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0xfffffffffffffdb2) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)) write(r0, &(0x7f00000001c0)="8f9db819e0a12aaab9e041be98ff2ff59f3bca055a36bf6f0966e05c060d4a59bc707ca9b3be85a7913ec56a83c43adcfc6dd21d480f699a7d8b93fba8c81b3eb3f9e288f34c36dc7560", 0x4a) pipe2(&(0x7f0000000040), 0x800) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:28:05 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:28:05 executing program 4: r0 = syz_open_dev$dspn(0x0, 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) [ 516.939139] input: syz0 as /devices/virtual/input/input85 16:28:05 executing program 4: r0 = syz_open_dev$dspn(0x0, 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:28:05 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) getsockname$inet(r0, &(0x7f0000000280)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x1ff}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000300)={r1, 0x7fffffff, 0x2a, "61fec0ed9106607a81561bffb0c18ff681b1d6aee64142de454d45eacb00"/42}, 0x32) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{}, {}, {}, {}, {}]}) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:28:05 executing program 1: syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) statfs(&(0x7f0000000300)='./bus\x00', &(0x7f00000003c0)=""/189) [ 517.049252] input: syz0 as /devices/virtual/input/input86 16:28:05 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x30200, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) mkdir(0x0, 0x0) close(r0) eventfd(0x6) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) 16:28:05 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 517.516031] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 517.528558] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 517.539659] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 517.556748] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 16:28:05 executing program 1: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) 16:28:05 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x0, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:28:05 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x30200, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) mkdir(0x0, 0x0) close(r0) eventfd(0x6) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) 16:28:05 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000040)={0x33efceca, 0x7, 0x8, 0xfffffffffffffff7, 0xc, 0x3ff, 0x9, 0x8001, 0x9, 0x81}) r2 = getpgrp(0xffffffffffffffff) r3 = fcntl$getown(r0, 0x9) kcmp(r2, r3, 0x3, r0, r0) ioctl$UI_DEV_CREATE(r0, 0x5501) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:28:05 executing program 3: ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1e}}}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000500)=[{&(0x7f0000000180)}], 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000340)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda32363ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x10a, 0x400}], 0x1, 0x0) 16:28:05 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x0, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) [ 517.645401] input: syz0 as /devices/virtual/input/input89 16:28:06 executing program 1: unshare(0x40400) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0x40405514, &(0x7f0000000000)={0x2}) 16:28:06 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x5, 0x100) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000001c0)={0x4, 0x1, {0x1, 0x0, 0x200, 0x2, 0x5}}) ioctl$int_in(r0, 0x5452, &(0x7f0000000240)=0x2) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) [ 517.712159] input: syz0 as /devices/virtual/input/input90 16:28:06 executing program 0: pipe2$9p(&(0x7f0000000000), 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x30200, 0x0) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(0xffffffffffffffff) eventfd(0x6) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) 16:28:06 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x0, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:28:06 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x8, 0x2) 16:28:06 executing program 1: io_setup(0x1, &(0x7f0000000100)=0x0) r1 = socket(0x2, 0x803, 0xff) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x379}]) [ 517.903527] input: syz0 as /devices/virtual/input/input91 16:28:06 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(0xffffffffffffffff, &(0x7f0000000080)=""/144, 0x90) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:28:06 executing program 0: pipe2$9p(&(0x7f0000000000), 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x30200, 0x0) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(0xffffffffffffffff) eventfd(0x6) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) 16:28:06 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000008000)=ANY=[@ANYBLOB="850000002200009500010000000000"], &(0x7f0000014ff5)='syzka\x00\x00\x00\x05\x00\xf3', 0x2, 0x1000, &(0x7f0000014000)=""/4096}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x0, 0xe, 0x0, &(0x7f0000000500)="e460cdfbef24080000000a9386dd", 0x0, 0xffff}, 0x28) r3 = fcntl$getown(r2, 0x9) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)=0x0) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='stat\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x10000400200) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000001c0)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x10}) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f00000002c0)={'dummy0\x00', 0x600}) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = syz_open_procfs(r3, &(0x7f0000000380)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x96W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) ioctl$void(r7, 0xc0045878) write$input_event(r5, &(0x7f0000000100)={{0x77359400}, 0x0, 0x1, 0x800}, 0x18) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x402}, 0x0) ioctl$RTC_SET_TIME(r7, 0x4024700a, 0x0) mkdirat$cgroup(r1, &(0x7f0000000200)='syz1\x00', 0x1ff) getsockopt$ARPT_SO_GET_ENTRIES(r7, 0x0, 0x61, &(0x7f0000001400)=ANY=[@ANYRESHEX=r7], 0x0) setsockopt$EBT_SO_SET_COUNTERS(r7, 0x0, 0x81, &(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYPTR=&(0x7f0000000300)=ANY=[], @ANYBLOB='\x00'/56], 0xa8) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) ftruncate(r6, 0x1) listen(0xffffffffffffffff, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) preadv(r7, &(0x7f00000017c0), 0x1fe, 0x500) [ 517.961678] input: syz0 as /devices/virtual/input/input92 [ 517.975071] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 16:28:06 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x0, 0x4) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 518.057043] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 518.125095] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 518.186216] input: syz0 as /devices/virtual/input/input93 [ 518.215926] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 16:28:06 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$KDSIGACCEPT(r0, 0x5393, 0x207208010824ffe0) 16:28:06 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(0xffffffffffffffff, &(0x7f0000000080)=""/144, 0x90) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:28:06 executing program 0: pipe2$9p(&(0x7f0000000000), 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x30200, 0x0) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(0xffffffffffffffff) eventfd(0x6) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) 16:28:06 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f00000001c0)=""/144, 0x90) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)=0xfffffffffffffffc) 16:28:06 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = dup2(r0, r0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000000)=0x3, 0x4) 16:28:06 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(0xffffffffffffffff, &(0x7f0000000080)=""/144, 0x90) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:28:06 executing program 1: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0106418, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f0000000440), 0x59c449cc68e838, 0x810) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000003c0)=@gcm_256={{}, "c012d67a5ca99515", "e24361eed107f20b3cec965d2ca9e2cebc7f5505fa6229f5fe0e101674f4a615", "2f51d081", "3c1d2505ff1bcf85"}, 0x38) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x1ff, 0x0) 16:28:06 executing program 3: syz_emit_ethernet(0x46, &(0x7f0000000140)={@local, @broadcast, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @initdev, {[@ssrr={0x89, 0x3}]}}, @tipc=@payload_direct={{{{0x20, 0x0, 0x0, 0x0, 0x0, 0x8}}}}}}}}, 0x0) 16:28:06 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x30200, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) eventfd(0x0) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) [ 518.537361] input: syz0 as /devices/virtual/input/input95 16:28:06 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000140)={0x35, 0x3, 0x0, {0x0, 0x14, 0x0, ']mime_type/]cgroup#&'}}, 0x35) write$FUSE_BMAP(r0, &(0x7f0000000000)={0x18, 0x0, 0x1}, 0x18) 16:28:06 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:28:06 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x30200, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) eventfd(0x0) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) [ 518.636362] input: syz0 as /devices/virtual/input/input96 16:28:07 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:28:07 executing program 1: syz_mount_image$iso9660(&(0x7f0000001480)='iso9660\x00', &(0x7f00000014c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)={[{@map_normal='map=normal'}]}) 16:28:07 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000640)='/dev/snapshot\x00', 0x141100, 0x0) write(r0, &(0x7f00000008c0)="8f403454c7", 0x5) accept4$x25(r0, &(0x7f0000000840), &(0x7f0000000880)=0x12, 0x800) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) fcntl$getown(r1, 0x9) write$uinput_user_dev(r1, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$UI_DEV_DESTROY(r1, 0x5502) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/capi/capi20\x00', 0x200, 0x0) connect$vsock_stream(r2, &(0x7f0000000600)={0x28, 0x0, 0x2710}, 0x10) openat(0xffffffffffffffff, &(0x7f0000000700)='./file0\x00', 0x40000, 0x1) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x2710, @hyper}, 0x1, 0x80000) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x8000, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r3, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000780)=ANY=[@ANYBLOB="a500f2c0f56700b81ca917517ea14794c4c0c721", @ANYRES16=r4, @ANYBLOB="020028bd7000fcdbdf25120000003c0009000800020002000000080002000500000008000100090000000800010080000000080001000400000008000200020000000800010001000000380001002c0004001400010002004e24fffffffa00000000000000001400020002004e22e000000100000000000000000800030007000000"], 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x8850) ioctl$VIDIOC_SUBDEV_G_CROP(r3, 0xc038563b, &(0x7f0000000040)={0x3, 0x0, {0x5, 0x7, 0x8001, 0x40000000002}}) [ 518.823960] ISOFS: Unable to identify CD-ROM format. [ 518.876790] input: syz0 as /devices/virtual/input/input97 [ 518.940244] ISOFS: Unable to identify CD-ROM format. [ 518.951596] input: syz0 as /devices/virtual/input/input98 16:28:07 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x1, r0}) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20ncci\x00', 0x40, 0x0) 16:28:07 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:28:07 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000140)={0x35, 0x3, 0x0, {0x0, 0x14, 0x0, ']mime_type/]cgroup#&'}}, 0x35) write$FUSE_BMAP(r0, &(0x7f0000000000)={0x18, 0x0, 0x1}, 0x18) 16:28:07 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x30200, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) eventfd(0x0) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) 16:28:07 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = semget(0x2, 0x9b8a4ceaab09c8cb, 0x3e79615b31ca32e0) semctl$SEM_STAT(r1, 0x1, 0x12, &(0x7f00000000c0)=""/55) socket$bt_bnep(0x1f, 0x3, 0x4) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r2, 0x0, 0x5, &(0x7f0000000040)='syz0\x00', 0xffffffffffffffff}, 0x30) timer_create(0x7, &(0x7f0000000680)={0x0, 0x29, 0x0, @tid=r3}, &(0x7f00000006c0)) ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, &(0x7f00000005c0)={0x20, "26c53ff7021b3e503746522141c894a9c5f903d924f2211f118fd3a4a93248478dd6359325b19261d95d697f189c58f3ca803e97449e2b68ebb393f11d0590e3390d72bfe42398a38b2492ade61b560539c08f762cc8b331d0f62f7c6d144ccd047801bf02ed131888f120c8c6e30b15b294a64243a361da9c693d8e91cce675"}) 16:28:07 executing program 1: syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60d8652b00142b00fe80f0000000000000000d00000000aafe8000000000000000000000000000aa0000883e", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) [ 519.091047] input: syz0 as /devices/virtual/input/input99 16:28:07 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf74, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000540)={0x3, 0x70, 0x0, 0x5, 0xc881, 0x276c, 0x0, 0xfffffffffffffff8, 0x2000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x100000000, 0xfffffffffffffc01, 0x1ff, 0x2, 0xffffffffffff0f59, 0x1, 0x8, 0x2, 0x9, 0x10000, 0x3, 0x7, 0x0, 0x8, 0x0, 0x0, 0x0, 0xbf1b, 0x2, 0x7, 0x2, 0x2, 0x8, 0x0, 0x992, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0xb14, 0x19, 0x5, 0x0, 0x0, 0x34f}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0xb) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x8004002, 0x0) recvfrom$packet(r2, &(0x7f0000000200)=""/3, 0x3, 0x100, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0xffffffffffff1c5e}, 0x14) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) ioctl$TIOCLINUX4(r2, 0x541c, 0x0) write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000000), 0xa) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f00000006c0)={0x512b, 0x81, 0xcba2, 'queue1\x00', 0xfff}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) prctl$PR_SET_TSC(0x1a, 0x3) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, 0x0, 0x0) ioctl$KDSETLED(r0, 0x4b32, 0x1000) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000500)={'sit0\x00\x00\x00\x00\x00\x00\x00\xd6\x00'}) write$FUSE_LK(r2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'sit0\x00\x00\xff\xff\xff\xff\xa0\x00Q\xfc\x03\x00', 0x141}) set_robust_list(&(0x7f0000000680), 0x18) 16:28:07 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) [ 519.149736] input: syz0 as /devices/virtual/input/input100 16:28:07 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x1000, 0x101000) ioctl$VIDIOC_S_PRIORITY(r1, 0x40045644, 0x1) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f00000000c0)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x111000, 0x0) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{0x20, ':wlan1trusted'}, {0x20, '/dev/admmidi#\x00'}, {}], 0xa, "1db39c8e4bf46abf"}, 0x31) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:28:07 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x30200, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) eventfd(0x6) syz_open_dev$evdev(0x0, 0x4, 0x300) 16:28:07 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000140)={0x35, 0x3, 0x0, {0x0, 0x14, 0x0, ']mime_type/]cgroup#&'}}, 0x35) write$FUSE_BMAP(r0, &(0x7f0000000000)={0x18, 0x0, 0x1}, 0x18) [ 519.250257] audit: type=1804 audit(1565454487.543:131): pid=26773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir734095033/syzkaller.occBJ6/654/file0" dev="sda1" ino=16767 res=1 [ 519.327338] device sit0 entered promiscuous mode [ 519.336261] input: syz0 as /devices/virtual/input/input101 16:28:07 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x30200, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) eventfd(0x6) syz_open_dev$evdev(0x0, 0x4, 0x300) [ 519.364093] audit: type=1804 audit(1565454487.553:132): pid=26773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.1" name="/root/syzkaller-testdir734095033/syzkaller.occBJ6/654/file0" dev="sda1" ino=16767 res=1 [ 519.414321] input: syz0 as /devices/virtual/input/input102 [ 519.525942] device sit0 left promiscuous mode [ 519.530758] audit: type=1804 audit(1565454487.813:133): pid=26797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir734095033/syzkaller.occBJ6/654/file0" dev="sda1" ino=16767 res=1 [ 519.576503] audit: type=1804 audit(1565454487.813:134): pid=26784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.1" name="/root/syzkaller-testdir734095033/syzkaller.occBJ6/654/file0" dev="sda1" ino=16767 res=1 [ 519.581091] device sit0 entered promiscuous mode 16:28:08 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$TCSETX(r0, 0x5433, &(0x7f0000000240)={0x0, 0x1ff, [0x0, 0x80000001, 0x10000, 0x8, 0x6], 0xe77f}) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000300)=0x2, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000200)={0xa, 0x4, 0xfa00, {r1}}, 0xc) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000280)={{0x1, @remote, 0x4e21, 0x4, 'fo\x00', 0x8, 0x5, 0xb}, {@remote, 0x4e21, 0x1, 0x40, 0x5, 0x7fff}}, 0x44) 16:28:08 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x4) accept$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x1bc, 0x24, 0xb987ee48113e7f41, 0x70bd29, 0x25dfdbfd, {0x0, r2, {0x0, 0x10}, {0xb587ac35d35741d9, 0x10}, {0x10, 0xffef}}, [@TCA_STAB={0x7c, 0x8, [{{0x1c, 0x1, {0x9, 0x800, 0x8, 0x200, 0x0, 0x1f, 0x7fffffff, 0x3}}, {0xc, 0x2, [0xffffffffffff0001, 0x8001, 0x4]}}, {{0x1c, 0x1, {0x1, 0x5a, 0xd218, 0x4, 0x2, 0x6, 0x100000001, 0x3}}, {0xc, 0x2, [0x5, 0x9279, 0x0]}}, {{0x1c, 0x1, {0xb27c, 0x3, 0x865a, 0x60000000000000, 0x0, 0x1f, 0x4, 0x4}}, {0xc, 0x2, [0x2, 0x2, 0x65, 0xe05a]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}, @TCA_RATE={0x8, 0x5, {0x400, 0xfffffffffffffff9}}, @qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x2c, 0x2, [@TCA_CBQ_FOPT={0x10, 0x3, {{0x3, 0xb}, 0x4, 0xe44}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x12, 0x3, 0x5, 0xedd, 0x4, 0xffffffff, 0xfffffffffffffffc, 0x7f}}]}}, @TCA_RATE={0x8, 0x5, {0xb3, 0x1}}, @TCA_STAB={0x58, 0x8, [{{0x1c, 0x1, {0x0, 0xe0ab, 0x4, 0x1, 0x0, 0x4, 0x5a, 0x3}}, {0xc, 0x2, [0x0, 0x401, 0x5]}}, {{0x1c, 0x1, {0x3, 0x2, 0x7, 0x4, 0x1, 0x5, 0x7f, 0x6}}, {0x10, 0x2, [0x9, 0x2, 0x6, 0x1, 0x7, 0x1]}}]}, @TCA_RATE={0x8, 0x5, {0x2, 0x101}}, @TCA_STAB={0x34, 0x8, [{{0x1c, 0x1, {0xc22f, 0x322, 0x7fff, 0x100000001, 0x1, 0x1, 0x7fff, 0x7}}, {0x14, 0x2, [0x100000001, 0x6, 0x100, 0xffffffffffffff81, 0x1000, 0x13, 0x400]}}]}, @TCA_RATE={0x8, 0x5, {0x81, 0x10000}}, @qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xff, 0x100, 0x8da, 0x3, 0x3, 0x101, 0x0, 0x80000001, 0xfffffffffffffffc}}}}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:28:08 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x30200, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) eventfd(0x6) syz_open_dev$evdev(0x0, 0x4, 0x300) 16:28:08 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000140)={0x35, 0x3, 0x0, {0x0, 0x14, 0x0, ']mime_type/]cgroup#&'}}, 0x35) write$FUSE_BMAP(r0, &(0x7f0000000000)={0x18, 0x0, 0x1}, 0x18) 16:28:08 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf74, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000540)={0x3, 0x70, 0x0, 0x5, 0xc881, 0x276c, 0x0, 0xfffffffffffffff8, 0x2000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x100000000, 0xfffffffffffffc01, 0x1ff, 0x2, 0xffffffffffff0f59, 0x1, 0x8, 0x2, 0x9, 0x10000, 0x3, 0x7, 0x0, 0x8, 0x0, 0x0, 0x0, 0xbf1b, 0x2, 0x7, 0x2, 0x2, 0x8, 0x0, 0x992, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0xb14, 0x19, 0x5, 0x0, 0x0, 0x34f}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0xb) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x8004002, 0x0) recvfrom$packet(r2, &(0x7f0000000200)=""/3, 0x3, 0x100, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0xffffffffffff1c5e}, 0x14) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) ioctl$TIOCLINUX4(r2, 0x541c, 0x0) write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000000), 0xa) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f00000006c0)={0x512b, 0x81, 0xcba2, 'queue1\x00', 0xfff}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r3, 0x0, 0x7fffffff) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) prctl$PR_SET_TSC(0x1a, 0x3) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, 0x0, 0x0) ioctl$KDSETLED(r0, 0x4b32, 0x1000) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000500)={'sit0\x00\x00\x00\x00\x00\x00\x00\xd6\x00'}) write$FUSE_LK(r2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'sit0\x00\x00\xff\xff\xff\xff\xa0\x00Q\xfc\x03\x00', 0x141}) set_robust_list(&(0x7f0000000680), 0x18) 16:28:08 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) [ 519.747822] input: syz0 as /devices/virtual/input/input103 [ 519.760555] audit: type=1804 audit(1565454488.043:135): pid=26808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir734095033/syzkaller.occBJ6/655/file0" dev="sda1" ino=16930 res=1 16:28:08 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x30200, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) eventfd(0x6) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x300) [ 519.819067] audit: type=1804 audit(1565454488.103:136): pid=26808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.1" name="/root/syzkaller-testdir734095033/syzkaller.occBJ6/655/file0" dev="sda1" ino=16930 res=1 [ 519.862834] device sit0 left promiscuous mode [ 519.908671] device sit0 entered promiscuous mode 16:28:08 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000140)={0x35, 0x3, 0x0, {0x0, 0x14, 0x0, ']mime_type/]cgroup#&'}}, 0x35) [ 519.942893] input: syz0 as /devices/virtual/input/input104 16:28:08 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x30200, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) eventfd(0x6) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x300) 16:28:08 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f00000005c0)) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='bridge_slave_1\x00', 0x10) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:28:08 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc1105511, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x0, 'syz1\x00'}) 16:28:08 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) seccomp(0x1, 0x0, &(0x7f0000001980)={0x2, &(0x7f0000000000)=[{0x81}, {0x6, 0x0, 0x0, 0x50000}]}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:28:08 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x2000, 0x0) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:28:08 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x30200, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) eventfd(0x6) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x300) 16:28:08 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 16:28:08 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000001440)=""/246) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000200)="80fdd7f95889", 0x6}], 0x1, 0x0) 16:28:08 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:28:08 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x30200, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) eventfd(0x6) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x0) 16:28:08 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 16:28:08 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101003, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2014020, &(0x7f00000001c0)={[{@commit={'commit'}}]}) 16:28:08 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:28:08 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x30200, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) eventfd(0x6) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x0) [ 520.474461] input: syz0 as /devices/virtual/input/input108 16:28:08 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) [ 520.537163] EXT4-fs (sda1): re-mounted. Opts: commit=0x0000000000000000, [ 520.559763] input: syz0 as /devices/virtual/input/input109 16:28:08 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x30200, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) eventfd(0x6) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x0) [ 520.653712] EXT4-fs (sda1): re-mounted. Opts: commit=0x0000000000000000, 16:28:09 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101003, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2014020, &(0x7f00000001c0)={[{@commit={'commit'}}]}) 16:28:09 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000000)={0x2, 0x2, 0x7, 0x3, 0xb0}) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:28:09 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 16:28:09 executing program 2: read(0xffffffffffffffff, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(0xffffffffffffffff, 0x280000040045010, &(0x7f0000000180)) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x2400, 0x4) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)) 16:28:09 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/wireless\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000540)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1000000000000277, 0x400000000000) 16:28:09 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:28:09 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/wireless\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000540)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1000000000000277, 0x400000000000) [ 520.993278] EXT4-fs (sda1): re-mounted. Opts: commit=0x0000000000000000, [ 521.012484] input: syz0 as /devices/virtual/input/input110 16:28:09 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e22, 0xc0db, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, 0x0, 0x7, 0x0, "c40681f816c73a913e1c5761cda8ad218e6b39ef141b94b1613f591b613652c21aa33c1dcff7677d2f696ab9e7c3dc58ce7be67321698687d5b2abb927705058aa11d968a373d8d03db5b6554057b762"}, 0xd8) [ 521.046212] input: syz0 as /devices/virtual/input/input111 16:28:09 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101003, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2014020, &(0x7f00000001c0)={[{@commit={'commit'}}]}) 16:28:09 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 16:28:09 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f00000005c0)={0x990000, 0x8, 0x2, [], &(0x7f0000000100)={0xa2090b, 0x5, [], @value=0xffff}}) ioctl$UI_DEV_DESTROY(r0, 0x5502) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x88200, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000040)) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000600)) 16:28:09 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="2166b6b30400fbab65d8b4ac2ca35c6e", 0x10) sendmmsg$inet6(r4, &(0x7f000000a780)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000780)="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", 0x111}], 0x1}}], 0x1, 0x0) [ 521.179103] EXT4-fs (sda1): re-mounted. Opts: commit=0x0000000000000000, 16:28:09 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) [ 521.239237] input: syz0 as /devices/virtual/input/input112 16:28:09 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101003, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2014020, &(0x7f00000001c0)={[{@commit={'commit'}}]}) [ 521.293172] input: syz0 as /devices/virtual/input/input113 16:28:09 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000005c0)={'syz0\x00', {0x4, 0x0, 0x1, 0x9}, 0x52, [0x5, 0x2, 0x2, 0x1, 0x10001, 0x49dd1bd7, 0x4, 0x7f, 0x81, 0x6, 0x2, 0x3ff, 0x10001, 0xffffffffffffff46, 0x1, 0x9, 0x5, 0x6fbf, 0x60000, 0x4, 0x80000001, 0x5c1, 0x401, 0x7, 0x7, 0x7, 0x10001, 0x3, 0x4, 0xff, 0x4cd, 0xfad, 0x8, 0x88, 0x7fffffff, 0x4, 0x3, 0x1, 0x312, 0x1, 0x2, 0xff, 0x4c45, 0x48d, 0xffffffffffffff81, 0x6, 0xfffffffffffffff9, 0x8, 0x10000, 0x7f, 0x3, 0x4, 0x80, 0x800, 0x8, 0x9, 0x7, 0x401, 0x98ed, 0x80000000, 0x1, 0x8000, 0x401, 0xca12], [0x963, 0x7, 0x4, 0x400, 0xff, 0x1, 0x7f, 0x3, 0x7fffffff, 0x1f, 0x3, 0x1, 0x800, 0x0, 0x4, 0x4, 0x7ff, 0x5, 0x8001, 0x5c2, 0x81, 0x3, 0xb01, 0x8, 0x0, 0x8628, 0x4, 0x4, 0x5, 0xc0, 0x829, 0xffffffff, 0x1, 0x10001, 0x8000, 0x5, 0x53, 0x20, 0x101, 0x400, 0x3, 0x2, 0x20, 0x1000, 0x0, 0xfff, 0x2, 0x1, 0x200, 0x9, 0x80000000, 0xffff, 0x400, 0x1, 0x3ff, 0x3f, 0x3, 0x0, 0xf6f2, 0x2, 0x81, 0x9, 0x6, 0x4], [0x4, 0x8, 0x6, 0x8f, 0x3, 0x3, 0x7ff, 0x8001, 0xffff, 0x400, 0x6, 0x1ff, 0x9, 0x0, 0x20, 0x80000000, 0xfff, 0x0, 0x3f, 0x80, 0x7ff, 0x0, 0x80008, 0x2, 0x7fffffff, 0x100000001, 0x43a, 0x10000, 0x6, 0x1, 0x2, 0x30, 0x83, 0x1000, 0x8, 0x6, 0x80, 0x4, 0x12be7d33, 0x80000000, 0x7, 0xffffffffffff445e, 0x81, 0x9, 0x7fffffff, 0xf7a, 0xe87, 0x24000, 0x51, 0xfffffffffffff9ad, 0x0, 0xe3, 0x5, 0x7, 0x6, 0x2, 0x9, 0x800, 0x0, 0xfffffffffffffff9, 0x0, 0x8, 0x1, 0x1], [0x3, 0xe78, 0xffffffff, 0x7c, 0xffffffff, 0x4d0, 0x7fff, 0x0, 0x8520, 0x8, 0x8029, 0xdaf8, 0x8, 0x9, 0x4, 0x1, 0x1, 0x40, 0x0, 0x2, 0x3, 0xfffffffffffff689, 0x5, 0xffff, 0x9192, 0x0, 0x4, 0x0, 0x8000, 0x81, 0x100, 0xffffffffffffffff, 0x4, 0x3, 0x4, 0x0, 0xfff, 0x9, 0x7ff, 0xda, 0xfffffffffffffffe, 0xfff, 0x7, 0xf, 0x7f, 0xf6, 0xffffffffffffff00, 0x20, 0x80000000, 0x1000000000, 0x0, 0x8, 0x2, 0x0, 0x0, 0x8, 0x6, 0x7, 0xf3fe, 0x9, 0x80000000, 0x9, 0x100, 0x100000000]}, 0x45c) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:28:09 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101003, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2014020, &(0x7f00000001c0)={[{@commit={'commit'}}]}) 16:28:09 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) [ 521.371182] EXT4-fs (sda1): re-mounted. Opts: commit=0x0000000000000000, [ 521.476935] input: syz0 as /devices/virtual/input/input114 [ 521.516856] EXT4-fs (sda1): re-mounted. Opts: commit=0x0000000000000000, 16:28:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffdbc, 0x70, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:28:09 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) [ 521.525184] input: syz0 as /devices/virtual/input/input115 16:28:09 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) preadv(r0, &(0x7f00000012c0)=[{&(0x7f00000001c0)=""/102, 0x66}, {&(0x7f0000000040)=""/11, 0xb}, {&(0x7f0000000240)=""/73, 0x49}, {&(0x7f00000002c0)=""/4096, 0x1000}], 0x4, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000001300)=0x5) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)=0x3) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000001340)={0x10000, 0x0, 0x7}) 16:28:09 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 16:28:09 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000000)) 16:28:09 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101003, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2014020, &(0x7f00000001c0)={[{@commit={'commit'}}]}) 16:28:10 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) [ 521.719872] input: syz0 as /devices/virtual/input/input116 [ 521.726401] EXT4-fs (sda1): re-mounted. Opts: commit=0x0000000000000000, 16:28:10 executing program 0: 16:28:10 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101003, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2014020, &(0x7f00000001c0)={[{@commit={'commit'}}]}) [ 521.788969] input: syz0 as /devices/virtual/input/input117 16:28:10 executing program 0: 16:28:10 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) fstat(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000640)=0x0, &(0x7f0000000680), &(0x7f0000000780)) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000700)={r2, r3, r4}, 0xc) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r5 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x606500, 0x108) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) 16:28:10 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 16:28:10 executing program 0: [ 521.929022] EXT4-fs (sda1): re-mounted. Opts: commit=0x0000000000000000, [ 522.013353] input: syz0 as /devices/virtual/input/input118 16:28:10 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) [ 522.057993] input: syz0 as /devices/virtual/input/input119 16:28:10 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)) ioctl$int_in(r0, 0x800060c004500a, &(0x7f00000001c0)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x801, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000200)) 16:28:10 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101003, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2014020, &(0x7f00000001c0)={[{@commit={'commit'}}]}) 16:28:10 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 16:28:10 executing program 0: 16:28:10 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_DESTROY(r0, 0x5502) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)='{\x00'}, 0x30) ptrace$setsig(0x4203, r1, 0x0, &(0x7f00000000c0)={0x33, 0x100, 0x2}) 16:28:10 executing program 0: 16:28:10 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) [ 522.369250] EXT4-fs (sda1): re-mounted. Opts: commit=0x0000000000000000, 16:28:10 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101003, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2014020, &(0x7f00000001c0)={[{@commit={'commit'}}]}) 16:28:10 executing program 0: 16:28:10 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000cc0)=0x2) r2 = request_key(&(0x7f00000000c0)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f00000005c0)='posix_acl_access\x00', 0xfffffffffffffffc) r3 = request_key(&(0x7f0000000a40)='user\x00', &(0x7f0000000a80)={'syz', 0x3}, &(0x7f0000000ac0)='/dev/uinput\x00', 0xfffffffffffffffb) keyctl$instantiate_iov(0x14, r2, &(0x7f00000009c0)=[{&(0x7f0000000600)="0074e3d573868690a260a0f87a18b159c358243918d98a9fda1cd1bd1bbe6bfb76786a2feb94e31e848adf109af01ba6f0bfdf0655900d6e98af782ad5e8eafc21e059ad638bac36823d3207868129a531eb30d9a0f33387729882d905219cd339202d338c50ff23f42c563c33746445769391603472643feda1e402dbe2b409667d88a537d5908f2c14c4599ca8a0ad9692088349cf56e47403e6639b9b58111acdb4ce056c9c9dce471a", 0xab}, {&(0x7f00000006c0)="d1b6118c1ddd247725d0bdd6213b5d93cf70dad7f9366b82afcfe0f83f2d08b0f4d524476051dbfcf57ae67f5cf4715785aeeb76c6d5df", 0x37}, {&(0x7f0000000700)="3c6b1ce89d3139bb1053cd9d0ebdbe4ec2cee28bf9ea602a1dba58856ab4c9f2206e269ddbbc01c1e091bf1425cd11f45ad17f1e0be13adcf59379cfc2f3be9268579a49b47ea364997ab9a213e7093f29b1e610420148ebdf6ab4e6f9bd54a5edc3f51ae65a2987b2a68c906f0d857fde421f31a3ed55c6c28f7b28431a2b81d696e4ec51c36e657531d72d6d7e33160e9430fd7baa4c50af65922d77086996457a0b2306f8d4cb850792a379a4a70ec61fc69bf09487d432a0619eb0eb1b9abbe6b0e471bea838", 0xc8}, {&(0x7f0000000800)="006135f3c4a21fba9bbbfc43763ba8ceba642f681f8680644a25af8c5e25b3d6dbb12904665d7c83c84cc4cb1fb9dafe032ceddbd9e7f059e382ec92532d17a91e2a7c9d9339ee72227b541e31f3a022879ea91fed780c1a6a17f1c82a3fce0a18134179da59649049f99154412d34cf616a40f85db21439ea66c1545e630124a5d8595d5c1f1d68d095495990ddd03724ab", 0x92}, {&(0x7f00000008c0)="a11004bc9f23714802d64dc8218199e04ab788d812f70529fc967b0017f69e27e07e3a9a495446191fe6c99302cdba069ea854ffaabcbfe5dde061c2c2509cb7a1eda5cbed96503c108f6ce7be84770245bea5e00cf0f5f5abdfb5f52e26db294cf8264c1c1a39b9bf63790292e4728d323ec0b5050e91e158f7c41f506158e7f0f95bee0f2041b909cc08022cc86e56c16b823f2ddab8f2dbae580db141b8307b21d62070ed7161b1c15d47d282d150ddce54f47edafdac20e1e5ae8ac6196cda54e2545a4c0b30be117d46fec379dcc4994878fde662a3013804769bc31159d2999198f9ed6679888e86aa5d", 0xed}], 0x5, r3) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000b00)={'lo\x00', 0x79}) r4 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x200) inotify_rm_watch(r1, r4) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000b80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000b40)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000c40)='trusted.overlay.nlink\x00', &(0x7f0000000c80)={'L+', 0x80000001}, 0x28, 0x1) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f0000000c00)) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000bc0)={0xa, 0x4, 0xfa00, {r5}}, 0xc) 16:28:10 executing program 0: [ 522.476232] EXT4-fs (sda1): re-mounted. Opts: commit=0x0000000000000000, 16:28:10 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) [ 522.538060] input: syz0 as /devices/virtual/input/input122 16:28:11 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) listen(r0, 0x3f) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)) setxattr$security_smack_entry(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='security.SMACK64EXEC\x00', &(0x7f0000000380)='y\x00', 0x2, 0x1) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000740)) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) clock_nanosleep(0x7, 0x889fdb23b04738a9, &(0x7f0000000700)={r2, r3+10000000}, &(0x7f00000002c0)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000003c0)) setpriority(0x2, r1, 0xfb2) ioctl$TIOCSCTTY(r0, 0x540e, 0x800) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000200)='trusted.overlay.origin\x00', &(0x7f0000000240)='y\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000006c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000440), r4}}, 0x18) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000400)={&(0x7f0000ffa000/0x4000)=nil, 0x2, 0x7, 0x2, &(0x7f0000ffa000/0x6000)=nil}) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f00000001c0)={0x7, 0x9b, 0x7fffffff8000}) 16:28:11 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 16:28:11 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101003, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2014020, &(0x7f00000001c0)={[{@commit={'commit'}}]}) 16:28:11 executing program 0: 16:28:11 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x2000, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x2, 0xfffffffffffff801, 0x4, 0x3, 0x8e, 0x5, 0xfffffffffffffffa, 0x4, 0xbb0f, 0x5, 0x4}, 0xb) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$UI_DEV_DESTROY(r1, 0x5502) 16:28:11 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:28:11 executing program 0: [ 523.092932] input: syz0 as /devices/virtual/input/input124 [ 523.126555] EXT4-fs (sda1): re-mounted. Opts: commit=0x0000000000000000, 16:28:11 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 16:28:11 executing program 0: [ 523.152971] input: syz0 as /devices/virtual/input/input125 16:28:11 executing program 3: mkdir(0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 16:28:11 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:28:11 executing program 0: [ 523.364013] input: syz0 as /devices/virtual/input/input126 [ 523.386699] input: syz0 as /devices/virtual/input/input127 16:28:12 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x37f) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x40010, r0, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0xffffffff) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000200)) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)) 16:28:12 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2014020, &(0x7f00000001c0)={[{@commit={'commit'}}]}) 16:28:12 executing program 3: mkdir(0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 16:28:12 executing program 0: 16:28:12 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000000)={0x10, 0xfffffffffffffffc, {0x56, 0x7, 0xfffffffffffffffd, {0x4, 0x9e}, {0x1, 0x8}, @const={0x80, {0xfffffffffffffff7, 0x2d45, 0x0, 0x7}}}, {0x51, 0x9, 0x41c2, {0x8001, 0x9}, {0x3, 0x80000001}, @ramp={0xffffffffffffff01, 0x1, {0x9, 0x4, 0x3, 0xff}}}}) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:28:12 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:28:12 executing program 0: 16:28:12 executing program 3: mkdir(0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) [ 524.016608] input: syz0 as /devices/virtual/input/input128 [ 524.087364] input: syz0 as /devices/virtual/input/input129 16:28:12 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2014020, &(0x7f00000001c0)={[{@commit={'commit'}}]}) 16:28:12 executing program 0: 16:28:12 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 16:28:12 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9673]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) getrusage(0xffffffffffffffff, &(0x7f00000005c0)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x9, 0x5, [0x400, 0x7, 0x4, 0x45, 0x101]}, &(0x7f00000000c0)=0x12) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={r2, 0xb}, 0xfffffffffffffcaa) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 524.264670] input: syz0 as /devices/virtual/input/input130 [ 524.314410] input: syz0 as /devices/virtual/input/input131 16:28:13 executing program 2: openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:28:13 executing program 0: 16:28:13 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 16:28:13 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2014020, &(0x7f00000001c0)={[{@commit={'commit'}}]}) 16:28:13 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x8080, 0x0) epoll_pwait(r0, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x11, &(0x7f0000000040)={0x4}, 0x8) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$UI_DEV_DESTROY(r1, 0x5502) 16:28:13 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:28:13 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 16:28:13 executing program 0: 16:28:13 executing program 1: mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101003, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2014020, &(0x7f00000001c0)={[{@commit={'commit'}}]}) [ 524.868336] input: syz0 as /devices/virtual/input/input132 16:28:13 executing program 0: 16:28:13 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) [ 524.930266] input: syz0 as /devices/virtual/input/input133 16:28:13 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x80, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000040)={0x3c, @empty, 0x4e21, 0x3, 'wrr\x00', 0x27, 0xff, 0x6d}, 0x2c) [ 525.103129] input: syz0 as /devices/virtual/input/input134 [ 525.138871] input: syz0 as /devices/virtual/input/input135 16:28:13 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x5, 0x200000) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x6d4740d14cb60b43, &(0x7f0000000180)=0xffffffff) fcntl$setflags(r0, 0x2, 0x1) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) getsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040), &(0x7f00000001c0)=0x4) 16:28:13 executing program 0: 16:28:13 executing program 1: mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101003, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2014020, &(0x7f00000001c0)={[{@commit={'commit'}}]}) 16:28:13 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 16:28:13 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x40840, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) r1 = socket$caif_stream(0x25, 0x1, 0x1) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000040), &(0x7f00000000c0)=0x30) ioctl$UI_DEV_CREATE(r0, 0x5501) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_S390_VCPU_FAULT(r2, 0x4008ae52, &(0x7f0000000000)=0x2c82) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:28:13 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:28:13 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 16:28:14 executing program 0: 16:28:14 executing program 1: mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101003, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2014020, &(0x7f00000001c0)={[{@commit={'commit'}}]}) [ 525.686640] input: syz0 as /devices/virtual/input/input136 16:28:14 executing program 0: [ 525.737355] input: syz0 as /devices/virtual/input/input137 16:28:14 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 16:28:14 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, &(0x7f0000000040)={0xfffffffffffffffd, 0x5, 0x5, 0x7}) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 525.899726] input: syz0 as /devices/virtual/input/input138 [ 525.940722] input: syz0 as /devices/virtual/input/input139 16:28:14 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1005, 0x4000) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$KIOCSOUND(r0, 0x4b2f, 0x3ff) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:28:14 executing program 0: 16:28:14 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 16:28:14 executing program 1: creat(0x0, 0x0) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101003, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2014020, &(0x7f00000001c0)={[{@commit={'commit'}}]}) 16:28:14 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_flowlabel\x00') getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="0051cf0000f9ff000000"], &(0x7f00000005c0)=0xe) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000600)={r2, 0xfaac, 0x6}, 0x8) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x100, 0x0) write$P9_RATTACH(r3, &(0x7f0000000040)={0x14, 0x69, 0x2, {0x47, 0x1, 0x2}}, 0x14) ioctl$UI_DEV_DESTROY(r0, 0x5502) socket$netlink(0x10, 0x3, 0xd) [ 526.057722] input: syz0 as /devices/virtual/input/input140 [ 526.143305] input: syz0 as /devices/virtual/input/input141 16:28:14 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 16:28:14 executing program 0: 16:28:14 executing program 1: creat(0x0, 0x0) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101003, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2014020, &(0x7f00000001c0)={[{@commit={'commit'}}]}) 16:28:14 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:28:14 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:28:14 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x4, 0x9, 0x4, 0x9, 0x3}, &(0x7f00000001c0)=0x14) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000480)='/dev/video1\x00', 0x2, 0x0) r3 = getgid() write$FUSE_CREATE_OPEN(r0, &(0x7f00000003c0)={0xa0, 0xffffffffffffffda, 0x5, {{0x2, 0xff, 0x3, 0xff4a, 0x401, 0x5, {0x6, 0x100, 0x91b9, 0x8, 0x0, 0x4, 0x6, 0x7ff, 0x401, 0x9, 0x1, r2, r3, 0xb6, 0x6}}, {0x0, 0x2}}}, 0xa0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={r1, @in={{0x2, 0x4e21, @local}}, 0x0, 0x2, 0x8, 0xb259, 0x40}, &(0x7f00000002c0)=0x98) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f00000004c0)={{0x2, 0x1, 0x9, 0x59ae3804839d45e2, 0x9}, 0x8, 0x3, 0x6a2e}) 16:28:14 executing program 0: [ 526.299248] input: syz0 as /devices/virtual/input/input142 16:28:14 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 16:28:14 executing program 0: [ 526.347119] input: syz0 as /devices/virtual/input/input143 16:28:14 executing program 1: creat(0x0, 0x0) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101003, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2014020, &(0x7f00000001c0)={[{@commit={'commit'}}]}) 16:28:14 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x2, 0x0) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f00000005c0)={"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"}) 16:28:14 executing program 0: 16:28:14 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 16:28:14 executing program 0: 16:28:14 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x20000000, 0x0, 0x0, 0x101003, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2014020, &(0x7f00000001c0)={[{@commit={'commit'}}]}) [ 526.518440] input: syz0 as /devices/virtual/input/input144 16:28:14 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) [ 526.593425] input: syz0 as /devices/virtual/input/input145 16:28:15 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0b") ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:28:15 executing program 0: 16:28:15 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 16:28:15 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:28:15 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x20000000, 0x0, 0x0, 0x101003, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2014020, &(0x7f00000001c0)={[{@commit={'commit'}}]}) 16:28:15 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) socket$vsock_dgram(0x28, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r0, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=0x7, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x6, 0x5}, 0x0, 0x0, &(0x7f0000000300)={0x5, 0x4, 0x2001}, &(0x7f0000000340)=0x57d, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x6}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={r0, 0x10, &(0x7f00000004c0)={&(0x7f00000001c0)=""/212, 0xd4, r1}}, 0x10) 16:28:15 executing program 0: [ 526.874254] input: syz0 as /devices/virtual/input/input146 16:28:15 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) [ 526.934681] input: syz0 as /devices/virtual/input/input147 16:28:15 executing program 0: 16:28:15 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x20000000, 0x0, 0x0, 0x101003, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2014020, &(0x7f00000001c0)={[{@commit={'commit'}}]}) 16:28:15 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x6, 0x20000) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:28:15 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 16:28:15 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0b") ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:28:15 executing program 0: 16:28:15 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 16:28:15 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000640)='/dev/qat_adf_ctl\x00', 0x100, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000800)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000780)=0xfd) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000007c0)={r2}, 0xc) ioctl$UI_DEV_CREATE(r0, 0x5501) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x3b64a296d47ab5db, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) write$FUSE_LSEEK(r3, &(0x7f0000000040)={0x18, 0xffffffffffffffda, 0x3, {0x5}}, 0x18) 16:28:15 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2014020, &(0x7f00000001c0)={[{@commit={'commit'}}]}) [ 527.481682] input: syz0 as /devices/virtual/input/input150 [ 527.516910] input: syz0 as /devices/virtual/input/input151 16:28:15 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f00000001c0)=""/144, 0x90) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:28:15 executing program 0: 16:28:15 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 16:28:15 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x6, 0x8080) ioctl$KDADDIO(r1, 0x4b34, 0x101) timer_create(0x2, &(0x7f0000000000)={0x0, 0xa, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_delete(r2) ioctl$UI_DEV_DESTROY(r0, 0x5502) r3 = semget$private(0x0, 0x7, 0x104) semctl$SETALL(r3, 0x0, 0x11, &(0x7f00000000c0)) 16:28:15 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2014020, &(0x7f00000001c0)={[{@commit={'commit'}}]}) 16:28:15 executing program 0: 16:28:16 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) [ 527.660306] input: syz0 as /devices/virtual/input/input152 [ 527.719774] input: syz0 as /devices/virtual/input/input153 16:28:16 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0b") ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:28:16 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2014020, &(0x7f00000001c0)={[{@commit={'commit'}}]}) 16:28:16 executing program 0: 16:28:16 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x5, 0x4000) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000100), &(0x7f00000005c0)=0x4) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000600)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r1, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000040)={0xdfdacdc9d522ac9b, 0x0, 0x2, {0x8, 0x21, 0x400, 0x80000001}}) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$UI_DEV_DESTROY(r1, 0x5502) 16:28:16 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) [ 528.070801] input: syz0 as /devices/virtual/input/input154 [ 528.093741] input: syz0 as /devices/virtual/input/input155 16:28:16 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x40, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x3e030e4ba704a79f}, 0xc, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="60010000", @ANYRES16=r1, @ANYBLOB="a0ca2bbd7000fddbdf25030000002800020008000100070000000400040008000100ff000000080002000900000008000100700f0000000101003c00020008000100040000000800010010000000080003000000000008000100040000000800030080000000080002008000000008000400040000002400020008000100090000000800040006000000080003000000000008000100080000000800030008000000340002000800030080430000080004005400000008000100000000000800040019080000080001000800000008000100090000002400020008000300ff7f00000800040007000000080001000b00000008000300de9300002c0004001400010002004e24ac1e000100000000000000001400020002004e20ac1414aa0000000000000000080003000203000008000300020000002400090008000100f3000000080002000400000008000100000400000800010008e00000a8e737354a306483f8fd0681ab530b49ccf63b822b0c5259938c6b5a54404ca1f41aa3113ba8e563e80898fd689851c5da342a430c1a8cefe089360daf73c56e58b1765c3d305de6b20646c9b2ce12601b07918873cebf48f7ad5802c70db4c426953e922fe83afd50b600b2f0ea0aeac05cf924c75b09afb6caa3db3e4ce52682f9b84b6181c9c70dbb33b006416e1095760f8049e68755ef8f13630c0fdb3f70411d3caf6caaeb8b2e2924cd3dc1863144617cdd8f32a35d16648690caeed859fa06a08b1086e16f8890a086551477960c801b4ee6172392f1c23f3f20b6e0e1ba1abdb5fbb444552e8404db5aa337a5cb6dc7738be3bb27ed315b3c4f0e7c8f545cabf031d96b866df5565972f490a41728d09b443f53c0573f43f57787727c6c4c70939051c5f8cf397496519f21bf3dec25fd7229e993a8e7d7a4fe08"], 0x160}, 0x1, 0x0, 0x0, 0xeb31e9aa27e85934}, 0x40000) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000400)={0xffffffffffffffff}, 0x0, 0x7}}, 0xfffffffa) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000480)={0x6, 0x118, 0xfa00, {{0x821, 0x5878dbc4, "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", 0x4000002f, 0x2, 0xbe, 0x22e81a52, 0x80, 0xb0, 0x2}, r2}}, 0x63) 16:28:16 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 16:28:16 executing program 0: 16:28:16 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101003, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2014020, &(0x7f00000001c0)={[{@commit={'commit'}}]}) 16:28:16 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r1, 0x800443d2, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{}, {}]}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:28:16 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 16:28:16 executing program 0: [ 528.383164] input: syz0 as /devices/virtual/input/input156 [ 528.413779] EXT4-fs (sda1): re-mounted. Opts: commit=0x0000000000000000, [ 528.449022] input: syz0 as /devices/virtual/input/input157 16:28:16 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47b") ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:28:16 executing program 0: 16:28:16 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 16:28:16 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:28:16 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101003, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2014020, &(0x7f00000001c0)={[{@commit={'commit'}}]}) [ 528.647636] EXT4-fs (sda1): re-mounted. Opts: commit=0x0000000000000000, 16:28:17 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) r1 = dup(r0) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)) keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x1}) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) io_setup(0x9, &(0x7f00000001c0)=0x0) io_submit(r2, 0x9, &(0x7f00000008c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x6, 0x2, r0, &(0x7f0000000200)="dc13ec37347f28152a0a69b486c7c54050227a573b070a4ac7b3ba1d97b8d24eb632106974df197680294790bbb11ec8d679e6e52dcd91f4aa8e86f0ce66fea57cac6413952ac1d7f8fb0531520167a8450410d0cf8fbedc3353f6c646f29acf04020d6fa21cc632d9c3b51bd596cb7c9735e4c73bc9bd3fd88fd91daf4b497739e6c055", 0x84, 0xf3b, 0x0, 0x1}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0xc5, r0, &(0x7f0000000300)="4cad4f82d2ae669b18f211666b2cff392e2f5ec6bc", 0x15, 0x6, 0x0, 0x1, r1}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x7, 0xef6, r1, &(0x7f0000000380)="e9595da12440d3547de7d141fbbd83186f2c64f7b5040529", 0x18, 0x7, 0x0, 0x2, r1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x8c2, r1, &(0x7f0000000400)="496f44f961706842165c02bcea9c5b4fcb306357f8e3ad38dedeccd1f82220aec0be23c9592f25bba10afb352ded1736c7ac099835eb696ba8246ded47d58b49a0ad8461b3ead2dae9187185640f9ec673f8c58c4b636cf2422b0cdfcc58c3a852", 0x61, 0x8, 0x0, 0x0, r0}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7, 0x2d25, r0, &(0x7f00000004c0)="45b154fc258e43db9b3d32b6f9c9c979ce2879254c3ef4baf9f8aa54ab6d425dad002c5e2a6a66c9238a0a2dec63416ce45618ffd5ec76d8f9968c0140cf9bff81", 0x41, 0x7fff, 0x0, 0x1, r1}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x2, 0x2, r0, &(0x7f0000000580)="3561db56b75e11dbd49adf5a09a0c2e5b7c834373b68e5d3a870c2ac82a3e701f988b6e5e724e9328e92b58617e5a009c8751d3ef9581a9b59a976834d80d4cb0f9aca2b496fc77b98ae01c936fbf1c9abbf5e9c040370feea2139ca8284eb3acdb0eb5313c6ba5300c09ed9ad6aedbb14352fd7326801bfdd2c65083ec6d70a0e694186af6e79524d3abe05dd6ddec42e493656a68013e13f0b4484d9a64bf4e5e2df720fe4090e968f0a39b184b63cbaf19b26ebd33744ca8b8de85747a2464b", 0xc1, 0x1, 0x0, 0x3, r1}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x6, 0x4, r0, &(0x7f00000006c0)="cd269779cf082a7446a80c33d56cb7f26f2e7b543d0a8ddad81139b4c26a471345d1e17ec7cbadd3f47e0554227d917ecfd2be825e", 0x35, 0xf2, 0x0, 0x1, r1}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x507, r0, &(0x7f0000000740)="0132b6e643ade0a6ee5efeaeab3e3a26f88b327e", 0x14, 0x6, 0x0, 0x2, r1}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x8, r0, &(0x7f00000007c0)="d30b32b875e11becc393ba07752787047e3a486bdaffe6003cba87d5970e14a118ffb12e0372cbd21481e7ca4a2e2225c779a609ee6610252b230bbe4482b092b6e98aa5bda2fa1a2f79c72ed39f62d49eb3ff61ecfee0170c60271ad1bba0273f251aef5e6127dfe3fb771cd8f24eed40d32a218b5ebca9f0b10f90a1a43cdaf1006bf04ba62f1af87753a84964da40787057969a3f", 0x96, 0x2, 0x0, 0x0, r1}]) ioctl$UI_DEV_CREATE(r0, 0x5501) 16:28:17 executing program 0: 16:28:17 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:28:17 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 16:28:17 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101003, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2014020, &(0x7f00000001c0)={[{@commit={'commit'}}]}) 16:28:17 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 16:28:17 executing program 0: [ 529.067092] EXT4-fs (sda1): re-mounted. Opts: commit=0x0000000000000000, [ 529.081153] input: syz0 as /devices/virtual/input/input160 16:28:17 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47b") ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:28:17 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101003, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2014020, &(0x7f00000001c0)={[{@commit={'commit'}}]}) 16:28:17 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 16:28:17 executing program 5: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000100)={0x403, 0x3}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000005c0)={0x3, {0x7d13, 0x4, 0x80000000, 0x4, 0xb16f, 0x3f}}) write$uinput_user_dev(r1, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) write$FUSE_STATFS(r1, &(0x7f0000000000)={0x60, 0x0, 0x2, {{0x401, 0x7cfbd7f8, 0x4, 0x8aa, 0x42e, 0x1, 0x101, 0x6}}}, 0x60) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$UI_DEV_DESTROY(r1, 0x5502) 16:28:17 executing program 0: [ 529.308407] EXT4-fs (sda1): re-mounted. Opts: commit=0x0000000000000000, [ 529.321505] input: syz0 as /devices/virtual/input/input163 [ 529.357587] input: syz0 as /devices/virtual/input/input164 16:28:18 executing program 2: r0 = syz_open_dev$radio(&(0x7f00000001c0)='/dev/radio#\x00', 0x3, 0x2) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x6}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000280)={0x1000, 0x1, 0x4, 0xa707, r1}, 0x10) r2 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r2, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r2, 0x280000040045010, &(0x7f0000000180)) ioctl$int_in(r2, 0x800060c004500a, &(0x7f0000000000)) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000040)={0x8, 0x0, 0x6f3, 0x6, 0xa, 0x7fff, 0x7fff, 0x200, 0x8, 0x3, 0x1, 0x7ff}) 16:28:18 executing program 0: 16:28:18 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 16:28:18 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101003, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2014020, &(0x7f00000001c0)={[{@commit={'commit'}}]}) 16:28:18 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x800, 0x0) getpeername(r1, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x80) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:28:18 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47b") ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:28:18 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x9600, 0x0, 0x0, 0x0) ptrace$cont(0x18, 0x0, 0x2, 0x7) 16:28:18 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) [ 529.871350] input: syz0 as /devices/virtual/input/input165 [ 529.884586] EXT4-fs (sda1): re-mounted. Opts: commit=0x0000000000000000, 16:28:18 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101003, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2014020, &(0x7f00000001c0)={[{@commit={'commit'}}]}) [ 529.920609] audit: type=1326 audit(1565454498.223:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=27576 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c66a code=0x0 16:28:18 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 16:28:18 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f0000000040)={0x2, 0x80000001}) r2 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x32000, 0xa3) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x9c, r3, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xffffffffffffffff}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x26}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8001}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4b0}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4040810}, 0x800) ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f0000000100)={0x4, 0x7, 0x2, 0x8, 0x8, 0x21e80272}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, &(0x7f0000000780)={0x3a, @empty, 0x4e21, 0x2, 'lc\x00', 0x22, 0x9, 0x26}, 0x2c) [ 530.047615] input: syz0 as /devices/virtual/input/input167 16:28:18 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) [ 530.099798] input: syz0 as /devices/virtual/input/input168 [ 530.162410] EXT4-fs (sda1): re-mounted. Opts: commit=0x0000000000000000, [ 530.700531] audit: type=1326 audit(1565454499.003:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=27576 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c66a code=0x0 16:28:19 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101003, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2014020, &(0x7f00000001c0)={[{@commit={'commit'}}]}) 16:28:19 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 16:28:19 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) 16:28:19 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf0") ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:28:19 executing program 2: io_setup(0x1, &(0x7f0000000040)=0x0) r1 = socket$inet6(0xa, 0x5, 0x2a2) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000600)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000500)) r3 = accept$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000300)=0x1c) r4 = syz_open_dev$amidi(&(0x7f0000000440)='/dev/amidi#\x00', 0xa0ae, 0xb00) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x6, 0x1, r1, &(0x7f00000001c0)="1888313c6f9aea8656f3847ac8b2db54517c01961f32e9c519f5d92d56239f3a2f9ce9332bd21b7a1b925979d5a913d6049490fe114cfc36fa0557562c07aa3430f49f43595e2a62dddc6342b75fde301e94dc86c1798a34e854a95e1a1fbb4b7c7c1e3ea6ca40d21979297ff94778037592", 0x72, 0x3, 0x0, 0x2, r2}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0xfff, r3, &(0x7f0000000340)="4d15b1b1d284da31e4e67fa244d3927d38a48cb0c69f285971770a49808e8369ea9cafb9b2529ba95298bb47297a6bdbe71e8fcdd70c0277acd470fd15bdc29e9b5f717db023483c53f7dae5660cc7f46e9df37031364b96189b0f95404aa7c2297247f738c6b383aa0ef5e89530b42cc8c44355f59155117b5a0add4985566c895885fb6a50356c69c42ad9395feda1f957689f8e7939169c26eeb2a8b2893033727986d81649cf66a47ff81646651c2b1ed0d310989b411acb66641d6ee58e6e1a2b42059cd318af0bff88a85dd44b2847121a81a7", 0xd6, 0x8, 0x0, 0x2, r4}]) r5 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r5, &(0x7f0000000080)=""/144, 0x90) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000540)={0x8, 0x1, 0x7, 0x10001}, 0x8) ioctl$int_in(r5, 0x280000040045010, &(0x7f0000000180)) ioctl$int_in(r5, 0x800060c004500a, &(0x7f0000000000)) 16:28:19 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000400)="75569dbb70eb9030bcb6cc0400fb8b65", 0x10) sendmmsg(r1, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000140)="4a6fe2c97989662ddc969b0e8c644c5cfd6784debd5ee2f7", 0x18}], 0x1}}], 0x1, 0x0) 16:28:19 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) [ 530.811301] input: syz0 as /devices/virtual/input/input169 16:28:19 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 16:28:19 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x400, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000000c0)=ANY=[@ANYBLOB="040000007d00080002008100"], &(0x7f0000000100)=0xc) exit_group(0x80000000) [ 530.863068] EXT4-fs (sda1): re-mounted. Opts: commit=0x0000000000000000, [ 530.884577] input: syz0 as /devices/virtual/input/input171 16:28:19 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101003, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2014020, &(0x7f00000001c0)={[{@commit={'commit'}}]}) 16:28:19 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 16:28:19 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'syz_tun\x00'}) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0"], 0x1}}, 0x0) poll(&(0x7f00000001c0)=[{}], 0x2000000000000018, 0x1000000009d) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'syz_tun\x00', 0x2000000000000001}) [ 531.009669] input: syz0 as /devices/virtual/input/input173 [ 531.048783] EXT4-fs (sda1): re-mounted. Opts: commit=0x0000000000000000, 16:28:19 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101003, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2014020, &(0x7f00000001c0)={[{@commit={'commit'}}]}) 16:28:19 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) sched_setscheduler(r1, 0x0, &(0x7f0000000040)=0xf69) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:28:19 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) [ 531.190463] input: syz0 as /devices/virtual/input/input174 [ 531.195222] EXT4-fs (sda1): re-mounted. Opts: commit=0x0000000000000000, [ 531.226242] input: syz0 as /devices/virtual/input/input175 16:28:19 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf0") ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:28:20 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)) 16:28:20 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000400)="75569dbb70eb9030bcb6cc0400fb8b65", 0x10) sendmmsg(r1, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000140)="4a6fe2c97989662ddc969b0e8c644c5cfd6784debd5ee2f755249e8d6f860d4f42565d1d06326ff86aa1140ab9a036", 0x2f}], 0x1}}], 0x1, 0x0) 16:28:20 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x800, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000100)={r2, 0x3}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:28:20 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 16:28:20 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101003, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2014020, &(0x7f00000001c0)={[{@commit={'commit'}}]}) 16:28:20 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf0") ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:28:20 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) [ 532.006703] QAT: Invalid ioctl [ 532.017428] EXT4-fs (sda1): re-mounted. Opts: commit=0x0000000000000000, [ 532.045366] input: syz0 as /devices/virtual/input/input176 16:28:20 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101003, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2014020, &(0x7f00000001c0)={[{@commit={'commit'}}]}) [ 532.066454] QAT: Invalid ioctl [ 532.078844] input: syz0 as /devices/virtual/input/input177 16:28:20 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 16:28:20 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:28:20 executing program 0: setitimer(0x0, &(0x7f0000000040)={{}, {0x1}}, 0x0) poll(0x0, 0x0, 0x6) setitimer(0x0, &(0x7f0000000000), &(0x7f0000000080)) 16:28:20 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) [ 532.243191] input: syz0 as /devices/virtual/input/input178 [ 532.282650] input: syz0 as /devices/virtual/input/input179 16:28:21 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)) creat(&(0x7f0000000040)='./file0\x00', 0x10) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:28:21 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101003, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2014020, &(0x7f00000001c0)={[{@commit={'commit'}}]}) 16:28:21 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x800, 0x0) getpeername(r1, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x80) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:28:21 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 16:28:21 executing program 5: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000140)={'syz0\x00', {}, 0x34, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000]}, 0x12) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x5, 0x40) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 16:28:21 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$int_in(0xffffffffffffffff, 0x800060c004500a, &(0x7f0000000000)) 16:28:21 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x800, 0x0) getpeername(r1, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x80) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:28:21 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 16:28:21 executing program 5: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) semget(0x0, 0x2, 0x4e0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, 0xd44f, 0x3, 0x3c, &(0x7f0000ff7000/0x6000)=nil, 0x80000000}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000140)={'syz0\x00', {}, 0x34, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000], [0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ed9]}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x80) uname(&(0x7f0000000080)=""/92) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) [ 532.864343] input: syz0 as /devices/virtual/input/input180 16:28:21 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101003, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x2014020, &(0x7f00000001c0)={[{@commit={'commit'}}]}) 16:28:21 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) socket$unix(0x1, 0x2, 0x0) pread64(r0, &(0x7f0000000000)=""/100, 0xffffffffffffffd9, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$void(r0, 0x0) [ 532.984001] input: syz0 as /devices/virtual/input/input181 16:28:21 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) [ 533.103624] input: syz0 as /devices/virtual/input/input182 [ 533.151835] input: syz0 as /devices/virtual/input/input184 16:28:22 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101003, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x2014020, &(0x7f00000001c0)={[{@commit={'commit'}}]}) 16:28:22 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9673]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) getrusage(0xffffffffffffffff, &(0x7f00000005c0)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x9, 0x5, [0x400, 0x7, 0x4, 0x45, 0x101]}, &(0x7f00000000c0)=0x12) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={r2, 0xb}, 0xfffffffffffffcaa) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:28:22 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3) 16:28:22 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 16:28:22 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) r1 = open(&(0x7f0000002180)='./file0\x00', 0x101001, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f00000022c0)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002280)={&(0x7f0000002240)={0x30, r2, 0x4, 0x70bd2a, 0x25dfdbfb, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x8, 0xfd, 0x2, 0x3}}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x8050) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:28:22 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$int_in(0xffffffffffffffff, 0x800060c004500a, &(0x7f0000000000)) 16:28:22 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000004000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) [ 533.769133] input: syz0 as /devices/virtual/input/input186 [ 533.805378] input: syz0 as /devices/virtual/input/input187 16:28:22 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101003, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x2014020, &(0x7f00000001c0)={[{@commit={'commit'}}]}) 16:28:22 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) fstat(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000640)=0x0, &(0x7f0000000680), &(0x7f0000000780)) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000700)={r2, r3, r4}, 0xc) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r5 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x606500, 0x108) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) [ 533.854867] input: syz0 as /devices/virtual/input/input188 16:28:22 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000004000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 16:28:22 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000740)='/dev/hwrng\x00', 0x400040, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000)={0x280, 0x6, 0x6, 0x1}, 0x8) accept$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000640)={{{@in=@broadcast, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4e23, 0x100, 0x4e23, 0x6, 0x2, 0x20, 0x80, 0x29, r2, r3}, {0x0, 0x2, 0x800, 0x8001, 0x20, 0x8, 0x88f0f7a, 0x6}, {0x35f, 0x19, 0x1, 0x71}, 0x9, 0x6e6bb6, 0x0, 0x1, 0x2, 0x1}, {{@in=@empty, 0x4d6, 0xff}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3501, 0x2, 0x2, 0x6249, 0x2, 0x971, 0x3ff}}, 0xe8) 16:28:22 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) fsetxattr(r0, &(0x7f0000000000)=@known='system.posix_acl_default\x00', &(0x7f0000000040)='%\x00', 0x2, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:28:22 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000004000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 16:28:22 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101003, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@commit={'commit'}}]}) [ 534.078356] input: syz0 as /devices/virtual/input/input191 [ 534.126473] input: syz0 as /devices/virtual/input/input192 [ 534.183699] input: syz0 as /devices/virtual/input/input193 16:28:23 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r1, &(0x7f00000001c0)=""/144, 0x90) readahead(r1, 0x4, 0x83e) ioctl$int_in(r1, 0x5421, &(0x7f00000000c0)) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0xfffffffffffffff9) open_by_handle_at(r0, &(0x7f0000000080)={0x2, 0x10000, "121b7b3a3b0ac29e651e452921cd7d896551ea73626a0937cc06965619d4afce3de94ec153ae787f6ab154b1443390bffd"}, 0x10d000) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)={@multicast2, @loopback, 0x0, 0x2, [@loopback, @broadcast]}, 0x18) 16:28:23 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 16:28:23 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000000)) 16:28:23 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x3, 0x80080) ioctl$VIDIOC_OVERLAY(r1, 0x4004560e, &(0x7f0000000040)=0x7) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f00000000c0)={0x0, 0x1f, 0x1013, 0x1}) 16:28:23 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101003, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@commit={'commit'}}]}) 16:28:23 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$int_in(0xffffffffffffffff, 0x800060c004500a, &(0x7f0000000000)) 16:28:23 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) [ 534.777059] input: syz0 as /devices/virtual/input/input194 [ 534.797764] input: syz0 as /devices/virtual/input/input195 16:28:23 executing program 0: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101003, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2014020, &(0x7f00000001c0)={[{@commit={'commit'}}]}) 16:28:23 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101003, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@commit={'commit'}}]}) [ 534.858057] input: syz0 as /devices/virtual/input/input196 16:28:23 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 16:28:23 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x45c) r1 = syz_open_dev$swradio(&(0x7f00000005c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000600)={0x1, 0x6, 0x3, "31f0b96f7ee236ead0828b6ac87ab6d5fffc3462d163f8e0a15ccc9d33c3bca6", 0x30314442}) getsockopt$inet_buf(r1, 0x0, 0x23, &(0x7f0000000640)=""/52, &(0x7f0000000680)=0x34) ioctl$UI_DEV_CREATE(r0, 0x5501) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) futimesat(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={{0x77359400}, {r3, r4/1000+10000}}) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 534.981499] EXT4-fs: 2 callbacks suppressed [ 534.981508] EXT4-fs (sda1): re-mounted. Opts: commit=0x0000000000000000, 16:28:23 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) [ 535.043108] input: syz0 as /devices/virtual/input/input197 [ 535.092676] input: syz0 as /devices/virtual/input/input198 16:28:23 executing program 2: r0 = syz_open_dev$dspn(&(0x7f00000001c0)='/dev/dsp#\x00', 0xf0, 0x8000) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)) 16:28:23 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000640)='/dev/snapshot\x00', 0x141100, 0x0) write(r0, &(0x7f00000008c0)="8f403454c7", 0x5) accept4$x25(r0, &(0x7f0000000840), &(0x7f0000000880)=0x12, 0x800) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) fcntl$getown(r1, 0x9) write$uinput_user_dev(r1, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$UI_DEV_DESTROY(r1, 0x5502) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/capi/capi20\x00', 0x200, 0x0) connect$vsock_stream(r2, &(0x7f0000000600)={0x28, 0x0, 0x2710}, 0x10) openat(0xffffffffffffffff, &(0x7f0000000700)='./file0\x00', 0x40000, 0x1) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x2710, @hyper}, 0x1, 0x80000) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x8000, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r3, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000780)=ANY=[@ANYBLOB="a500f2c0f56700b81ca917517ea14794c4c0c721", @ANYRES16=r4, @ANYBLOB="020028bd7000fcdbdf25120000003c0009000800020002000000080002000500000008000100090000000800010080000000080001000400000008000200020000000800010001000000380001002c0004001400010002004e24fffffffa00000000000000001400020002004e22e000000100000000000000000800030007000000"], 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x8850) ioctl$VIDIOC_SUBDEV_G_CROP(r3, 0xc038563b, &(0x7f0000000040)={0x3, 0x0, {0x5, 0x7, 0x8001, 0x40000000002}}) 16:28:23 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101003, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2014020, 0x0) 16:28:23 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) fcntl$setlease(r0, 0x400, 0x3) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x8) 16:28:23 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 16:28:23 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$int_in(r0, 0x0, &(0x7f0000000000)) 16:28:24 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) [ 535.681230] input: syz0 as /devices/virtual/input/input199 [ 535.686933] EXT4-fs (sda1): re-mounted. Opts: [ 535.692987] input: syz0 as /devices/virtual/input/input200 16:28:24 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101003, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2014020, 0x0) 16:28:24 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0xd}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f00000005c0), r1, 0x2}}, 0x18) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 535.776679] input: syz0 as /devices/virtual/input/input202 16:28:24 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 16:28:24 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x200000, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) [ 535.840241] input: syz0 as /devices/virtual/input/input203 [ 535.874823] EXT4-fs (sda1): re-mounted. Opts: 16:28:24 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x30200, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) eventfd(0x6) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) [ 535.967392] input: syz0 as /devices/virtual/input/input204 [ 536.013953] input: syz0 as /devices/virtual/input/input205 16:28:24 executing program 2: pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$TIOCLINUX2(r0, 0x541c, &(0x7f0000000200)={0x2, 0x6, 0x8000, 0x101, 0x2, 0x8001}) read(0xffffffffffffffff, &(0x7f0000000080)=""/144, 0x90) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, 0x1c) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)) ioctl$int_in(0xffffffffffffffff, 0x800060c004500a, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000300)={0x2, 0x1, 0x1, 'queue1\x00', 0x5}) write$binfmt_misc(r1, &(0x7f0000000540)={'syz1', "ff09361edf90d295a14d67e99e217e0d843b7b70a4f84a86fcd178b7bb7f6cd8bc8aab660953a4b23816435d01a234300800e88b98c0714ba233bd1a3f3c20dac50ad38cbe3814a2410db8bfe0321341dd1a80df6309f1434a615aa59b020c830900af8ba42fa5d8a420e3e1098586f6d69dba43d38ed4ec35e7708d7c9146bc158ee24611e5188112887d0e618f1238cd7f6a08ed077c00000000b2df784a4e09cb09e6497961dfc0e857f7718d09520053a2192dd2b23e0b3f837d148b2bc199b4bcb323b01bef02496e6808c3"}, 0xd2) 16:28:24 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101003, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2014020, 0x0) 16:28:24 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 16:28:24 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x30200, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) eventfd(0x6) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) 16:28:24 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) setsockopt$inet_udp_int(r1, 0x11, 0xa, &(0x7f0000000040), 0x4) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f00000000c0)=0x80000001, 0x4) [ 536.144184] EXT4-fs (sda1): re-mounted. Opts: [ 536.171081] input: syz0 as /devices/virtual/input/input206 16:28:24 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$int_in(r0, 0x0, &(0x7f0000000000)) 16:28:24 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 16:28:24 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101003, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2014020, &(0x7f00000001c0)) 16:28:24 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x30200, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) eventfd(0x6) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) [ 536.255418] input: syz0 as /devices/virtual/input/input207 16:28:24 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000040)={0x3, 0x2, 0x9, 0x3, 0x2, 0x1}) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r1, &(0x7f00000005c0)={'syz1\x00', {0x8, 0x5, 0x96, 0x82d6}, 0x20, [0x6, 0xb264, 0x742, 0x9, 0x6, 0x202, 0x1, 0x401, 0x2, 0x0, 0x8, 0x4, 0x165771ca, 0x1, 0x8, 0x9a1, 0x1, 0x6, 0x40, 0x3, 0xdca, 0x10001, 0x7466, 0x7f, 0x100000001, 0x1, 0x0, 0xf7, 0x800, 0xe30, 0x8000, 0x8, 0x1, 0x8, 0x8, 0x400, 0x2, 0x200, 0xfffffffffffffffb, 0x10000, 0x8, 0x15fd, 0x800, 0x3, 0x8000, 0xf, 0x101, 0xfffffffffffffffd, 0x3f, 0x7, 0x7f, 0x7f, 0x50000000000000, 0x6, 0xa9c, 0x1000, 0x2, 0x800, 0x8, 0x7, 0x3, 0xb1, 0x6, 0x7fff], [0x36, 0x7, 0x51, 0x71, 0x7, 0x2000000007f, 0x4, 0x8, 0x2, 0x6, 0x10001, 0x100000001, 0x3, 0x1, 0x80000001, 0x0, 0x5, 0x3, 0x8001, 0x0, 0xff09, 0x2, 0x2, 0x8, 0x8, 0x401, 0x9, 0x7, 0x0, 0xfffffffffffffffa, 0x1f, 0x460, 0x80, 0x1ff, 0x6, 0x5, 0x8, 0x7, 0x7, 0x400, 0x4, 0x84e, 0x2, 0x1, 0x2, 0x6, 0x8001, 0xf9b, 0x0, 0x1, 0x3, 0x2, 0xfffffffffffffffd, 0x800, 0x9f, 0x9, 0x7f, 0x7, 0x4, 0x10001, 0x0, 0x0, 0x5, 0x5], [0x401, 0x9, 0x9, 0x7fffffff, 0x4, 0x6, 0x2, 0x73a, 0x3, 0x1, 0x7fff, 0x7ff, 0x7ff, 0x10001, 0x80, 0x2, 0x80, 0xc000, 0x100000001, 0x1000, 0x7, 0x3, 0x2, 0xfff, 0x6e4, 0x5, 0x100000000, 0xa1a, 0x100000001, 0x80000000, 0x4, 0x81, 0x3, 0x4, 0x6000000000000000, 0x2, 0x7cb, 0x1, 0x4, 0x1, 0x0, 0x4, 0xf0, 0x3, 0x0, 0x0, 0x4, 0x7, 0x5, 0xe1, 0x8, 0x1, 0x1, 0x0, 0x7, 0x4, 0x100000001, 0x6, 0x6, 0x7ff, 0x1, 0x9, 0x4], [0x3, 0x51, 0xffffffffffffff81, 0x13, 0x8, 0xff, 0x3, 0xb8, 0x7a4cbf03, 0x20004, 0x8, 0xd01c, 0x1, 0x8, 0xcc46, 0x1, 0x4, 0x9, 0x8cd, 0x4, 0x8, 0x800, 0x8, 0x20, 0x8, 0x7ff, 0x200, 0x5, 0x0, 0x401, 0x5, 0xee7, 0x4, 0x85c, 0x2ef5, 0x0, 0xfff, 0x399, 0x1, 0x7f, 0x1f, 0x5, 0x800, 0x5c6e, 0x0, 0x7, 0x400, 0xfff, 0x5, 0x3, 0x101, 0xfff, 0x625d, 0x8, 0x8, 0x2000000000000, 0x3c2, 0x1, 0x29, 0x60, 0x80000001, 0x80, 0x7f, 0xfffffffffffffff9]}, 0x45c) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 536.309842] EXT4-fs (sda1): re-mounted. Opts: 16:28:24 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 16:28:24 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$int_in(r0, 0x0, &(0x7f0000000000)) [ 536.411389] input: syz0 as /devices/virtual/input/input208 [ 536.494615] input: syz0 as /devices/virtual/input/input209 16:28:24 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f00000001c0)=""/144, 0x90) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000040)=r0) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:28:24 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 16:28:24 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101003, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2014020, &(0x7f00000001c0)) 16:28:24 executing program 0: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101003, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2014020, &(0x7f00000001c0)) 16:28:24 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x100, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000040)=0x80000000) ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, &(0x7f00000000c0)={0x6, 0x1, @start={0x5}}) 16:28:24 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 16:28:24 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101003, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2014020, &(0x7f00000001c0)) [ 536.601013] EXT4-fs (sda1): re-mounted. Opts: [ 536.618140] input: syz0 as /devices/virtual/input/input210 [ 536.629993] EXT4-fs (sda1): re-mounted. Opts: 16:28:25 executing program 0: gettid() pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x80000, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x100, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000140)=r3) r4 = eventfd(0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000180)=0x2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 536.669651] input: syz0 as /devices/virtual/input/input211 16:28:25 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 16:28:25 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:28:25 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) [ 536.852134] EXT4-fs (sda1): re-mounted. Opts: [ 536.865209] input: syz0 as /devices/virtual/input/input212 [ 536.906952] input: syz0 as /devices/virtual/input/input213 16:28:25 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$int_in(r0, 0x800060c004500a, 0x0) 16:28:25 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) io_setup(0xde, &(0x7f0000000040)=0x0) io_cancel(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x8, 0x1ff, r0, &(0x7f00000001c0)="1e0fecd8a89d9ae7200f77f2549e6373aaf2ec562cde1f83c4dceeffa557c98cd56b004520546bcb926216b8811ee6614dc001c38b450de6cf07657c26e0cf5448b1a312d7e4f99e13810a7da1677882e96b40f8cf5a60aee687ca996be7fe1776e6e7aa0bbc0b59a328c75b1a88de2d3c3e438701be2b2a3d77fb079c7fa8eff08151de10a575a7330d95f5b41d538327e21221a360991ab88bc38cc27c9d629292cb3ad9814022d5a9cb123b873732", 0xb0, 0x1, 0x0, 0x1, r0}, &(0x7f00000002c0)) 16:28:25 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 16:28:25 executing program 1: r0 = userfaultfd(0x800) fallocate(r0, 0x1, 0x6, 0xfa0) r1 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) ptrace$setregs(0xd, 0x0, 0x7, &(0x7f00000001c0)="e8f6b77089955ee5e0f2cd08dbdac977fa86f922f119a9ffb4542a3f850a4d656f13c8fa990dee68319d21da32427b51c26352ac3839eb51639643d99f513bed783bb9f104e8fadbc05ad9a3b1cd8b7c655d0c7a212bef878677794d6bb2b17d56287bc49e7364e4a9c51c870454493861c066e809fb2cc7013f0a93d19a0bc8f926339b6c0190ba768fc6ee9a") read(r1, &(0x7f0000000280)=""/144, 0xfffffd9a) ioctl$int_in(r1, 0x280000040045010, &(0x7f0000000180)) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000040)=""/155) sendfile(r1, r1, 0x0, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_REQUEST_TABLE(r2, 0x227f, &(0x7f0000000280)) ioctl$int_in(r1, 0x800060c004500a, &(0x7f0000000000)) 16:28:25 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000000000)={0x10, 0x8, {0x0, 0x3f, 0x8, {0x0, 0x1f}, {0x1f, 0x10001}, @const={0xffff, {0x2, 0x0, 0x40, 0x7fff}}}, {0x56, 0x80000001, 0x6, {0xffffffffffffffc1, 0x6}, {0x3cfb, 0x6}, @rumble={0x4, 0x1f}}}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x10) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000100)) mkdir(&(0x7f00000005c0)='./file0\x00', 0x81) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:28:25 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) [ 537.546611] input: syz0 as /devices/virtual/input/input214 16:28:25 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$int_in(r0, 0x800060c004500a, 0x0) 16:28:25 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x280000040045010, 0x0) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) [ 537.591970] input: syz0 as /devices/virtual/input/input215 16:28:25 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 16:28:26 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) process_vm_readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/12, 0xc}], 0x1, &(0x7f0000000100)=[{&(0x7f00000005c0)=""/206, 0xce}], 0x1, 0x0) 16:28:26 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 16:28:26 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) [ 537.762421] input: syz0 as /devices/virtual/input/input216 16:28:26 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) [ 537.815458] input: syz0 as /devices/virtual/input/input217 16:28:26 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x2, &(0x7f0000000040)=[{}, {0x0}]}) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000200)={r1, 0x1}) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) ioctl$NBD_DISCONNECT(r0, 0xab08) syz_open_dev$midi(&(0x7f0000000240)='/dev/midi#\x00', 0x5, 0x200) 16:28:26 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:28:26 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 16:28:26 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$int_in(r0, 0x800060c004500a, 0x0) 16:28:26 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) process_vm_readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/12, 0xc}], 0x1, &(0x7f0000000100)=[{&(0x7f00000005c0)=""/206, 0xce}], 0x1, 0x0) 16:28:26 executing program 1 (fault-call:4 fault-nth:0): creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101003, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2014020, &(0x7f00000001c0)={[{@commit={'commit'}}]}) [ 538.456315] input: syz0 as /devices/virtual/input/input218 [ 538.466750] input: syz0 as /devices/virtual/input/input219 [ 538.481895] FAULT_INJECTION: forcing a failure. [ 538.481895] name failslab, interval 1, probability 0, space 0, times 0 [ 538.504729] CPU: 0 PID: 28148 Comm: syz-executor.1 Not tainted 4.14.138 #34 [ 538.511955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 538.511962] Call Trace: [ 538.511983] dump_stack+0x138/0x19c [ 538.512002] should_fail.cold+0x10f/0x159 [ 538.512021] should_failslab+0xdb/0x130 [ 538.512043] __kmalloc+0x2f0/0x7a0 [ 538.512060] ? __sb_end_write+0xc1/0x100 [ 538.512074] ? strnlen_user+0x12f/0x1a0 [ 538.512086] ? SyS_memfd_create+0xba/0x3a0 [ 538.512099] SyS_memfd_create+0xba/0x3a0 16:28:26 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) [ 538.512111] ? shmem_fcntl+0x130/0x130 [ 538.512124] ? do_syscall_64+0x53/0x640 [ 538.512134] ? shmem_fcntl+0x130/0x130 [ 538.512153] do_syscall_64+0x1e8/0x640 [ 538.527709] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 538.527732] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 538.527745] RIP: 0033:0x459829 [ 538.535844] RSP: 002b:00007f0241e81a88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 538.535856] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000459829 16:28:26 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000040)=0xff, 0x4) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 538.535862] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 00000000004be748 [ 538.535868] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 538.535874] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0241e826d4 [ 538.535880] R13: 00000000004c8976 R14: 00000000004df838 R15: 0000000000000006 16:28:26 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 16:28:27 executing program 1 (fault-call:4 fault-nth:1): creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101003, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2014020, &(0x7f00000001c0)={[{@commit={'commit'}}]}) 16:28:27 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) [ 538.700293] input: syz0 as /devices/virtual/input/input221 16:28:27 executing program 0 (fault-call:6 fault-nth:0): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x30200, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) eventfd(0x6) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) [ 538.752335] input: syz0 as /devices/virtual/input/input222 [ 538.776218] FAULT_INJECTION: forcing a failure. [ 538.776218] name failslab, interval 1, probability 0, space 0, times 0 [ 538.821403] FAULT_INJECTION: forcing a failure. [ 538.821403] name failslab, interval 1, probability 0, space 0, times 0 [ 538.835502] CPU: 0 PID: 28171 Comm: syz-executor.1 Not tainted 4.14.138 #34 [ 538.842632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 538.842638] Call Trace: [ 538.842659] dump_stack+0x138/0x19c [ 538.842681] should_fail.cold+0x10f/0x159 [ 538.862395] should_failslab+0xdb/0x130 [ 538.866419] kmem_cache_alloc+0x2d7/0x780 [ 538.870574] ? __alloc_fd+0x1d4/0x4a0 [ 538.870592] __d_alloc+0x2d/0x9f0 [ 538.870605] ? lock_downgrade+0x6e0/0x6e0 [ 538.870619] d_alloc_pseudo+0x1e/0x30 [ 538.870631] __shmem_file_setup.part.0+0xd8/0x400 [ 538.870638] ? __alloc_fd+0x1d4/0x4a0 [ 538.870646] ? shmem_fill_super+0x8c0/0x8c0 [ 538.870662] SyS_memfd_create+0x1f9/0x3a0 [ 538.870672] ? shmem_fcntl+0x130/0x130 [ 538.870684] ? do_syscall_64+0x53/0x640 [ 538.870693] ? shmem_fcntl+0x130/0x130 [ 538.870704] do_syscall_64+0x1e8/0x640 [ 538.870713] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 538.870732] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 538.870740] RIP: 0033:0x459829 [ 538.870746] RSP: 002b:00007f0241e81a88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 538.870756] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000459829 [ 538.870762] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 00000000004be748 [ 538.870771] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 538.890805] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0241e826d4 [ 538.890812] R13: 00000000004c8976 R14: 00000000004df838 R15: 0000000000000006 [ 538.895897] CPU: 0 PID: 28174 Comm: syz-executor.0 Not tainted 4.14.138 #34 [ 538.914955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 538.914962] Call Trace: [ 538.914980] dump_stack+0x138/0x19c [ 538.914999] should_fail.cold+0x10f/0x159 [ 538.915015] should_failslab+0xdb/0x130 [ 538.915028] kmem_cache_alloc+0x2d7/0x780 [ 538.915048] ? lock_downgrade+0x6e0/0x6e0 [ 538.983267] getname_flags+0xcb/0x580 [ 538.983281] getname+0x1a/0x20 [ 539.003133] do_sys_open+0x1e7/0x430 [ 539.003147] ? filp_open+0x70/0x70 [ 539.003165] SyS_open+0x2d/0x40 [ 539.003174] ? do_sys_open+0x430/0x430 [ 539.003188] do_syscall_64+0x1e8/0x640 [ 539.003197] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 539.003215] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 539.050656] RIP: 0033:0x413711 [ 539.053933] RSP: 002b:00007f0ebe6867a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 539.061639] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000413711 [ 539.068892] RDX: 0000000000000000 RSI: 0000000000000300 RDI: 00007f0ebe686850 [ 539.076145] RBP: 000000000075bf20 R08: 000000000000000f R09: 0000000000000000 [ 539.083402] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f0ebe6876d4 [ 539.090668] R13: 00000000004c8beb R14: 00000000004dfb08 R15: 0000000000000005 16:28:27 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) open(&(0x7f00000001c0)='./file0\x00', 0x40, 0x1c5) creat(&(0x7f0000000040)='./file0\x00', 0x1c0) 16:28:27 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:28:27 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 16:28:27 executing program 1 (fault-call:4 fault-nth:2): creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101003, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2014020, &(0x7f00000001c0)={[{@commit={'commit'}}]}) 16:28:27 executing program 0 (fault-call:6 fault-nth:1): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x30200, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) eventfd(0x6) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) 16:28:27 executing program 4 (fault-call:4 fault-nth:0): r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) [ 539.452988] FAULT_INJECTION: forcing a failure. [ 539.452988] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 539.464866] CPU: 0 PID: 28190 Comm: syz-executor.0 Not tainted 4.14.138 #34 [ 539.471965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 539.471972] Call Trace: [ 539.471992] dump_stack+0x138/0x19c [ 539.472016] should_fail.cold+0x10f/0x159 [ 539.472043] __alloc_pages_nodemask+0x1d6/0x7a0 [ 539.492042] ? fs_reclaim_acquire+0x20/0x20 [ 539.492060] ? __alloc_pages_slowpath+0x2930/0x2930 [ 539.492081] cache_grow_begin+0x80/0x400 [ 539.501060] kmem_cache_alloc+0x6a6/0x780 [ 539.501074] ? lock_downgrade+0x6e0/0x6e0 [ 539.501088] getname_flags+0xcb/0x580 [ 539.501099] getname+0x1a/0x20 [ 539.501109] do_sys_open+0x1e7/0x430 [ 539.501119] ? filp_open+0x70/0x70 [ 539.501135] SyS_open+0x2d/0x40 [ 539.501142] ? do_sys_open+0x430/0x430 [ 539.501155] do_syscall_64+0x1e8/0x640 [ 539.501164] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 539.501183] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 539.501191] RIP: 0033:0x413711 [ 539.501197] RSP: 002b:00007f0ebe6867a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 539.501208] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000413711 [ 539.501215] RDX: 0000000000000000 RSI: 0000000000000300 RDI: 00007f0ebe686850 [ 539.501221] RBP: 000000000075bf20 R08: 000000000000000f R09: 0000000000000000 [ 539.501227] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f0ebe6876d4 [ 539.501233] R13: 00000000004c8beb R14: 00000000004dfb08 R15: 0000000000000005 [ 539.513763] FAULT_INJECTION: forcing a failure. [ 539.513763] name failslab, interval 1, probability 0, space 0, times 0 [ 539.530314] CPU: 0 PID: 28196 Comm: syz-executor.1 Not tainted 4.14.138 #34 [ 539.544289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 539.544295] Call Trace: [ 539.544313] dump_stack+0x138/0x19c [ 539.544330] should_fail.cold+0x10f/0x159 [ 539.544346] should_failslab+0xdb/0x130 [ 539.601629] kmem_cache_alloc+0x2d7/0x780 16:28:27 executing program 1 (fault-call:4 fault-nth:3): creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101003, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2014020, &(0x7f00000001c0)={[{@commit={'commit'}}]}) 16:28:27 executing program 0 (fault-call:6 fault-nth:2): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x30200, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) eventfd(0x6) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) [ 539.601644] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 539.601659] ? rcu_read_lock_sched_held+0x110/0x130 [ 539.601672] ? shmem_destroy_callback+0xa0/0xa0 [ 539.601681] shmem_alloc_inode+0x1c/0x50 [ 539.601690] alloc_inode+0x64/0x180 [ 539.601700] new_inode_pseudo+0x19/0xf0 [ 539.601709] new_inode+0x1f/0x40 [ 539.601718] shmem_get_inode+0x75/0x750 [ 539.601731] __shmem_file_setup.part.0+0x111/0x400 [ 539.601740] ? __alloc_fd+0x1d4/0x4a0 [ 539.601748] ? shmem_fill_super+0x8c0/0x8c0 [ 539.601764] SyS_memfd_create+0x1f9/0x3a0 [ 539.601774] ? shmem_fcntl+0x130/0x130 [ 539.601786] ? do_syscall_64+0x53/0x640 [ 539.601796] ? shmem_fcntl+0x130/0x130 [ 539.601805] do_syscall_64+0x1e8/0x640 [ 539.601813] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 539.601830] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 539.601839] RIP: 0033:0x459829 [ 539.601845] RSP: 002b:00007f0241e81a88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 539.601856] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000459829 [ 539.601862] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 00000000004be748 [ 539.601868] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 539.601874] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0241e826d4 [ 539.601881] R13: 00000000004c8976 R14: 00000000004df838 R15: 0000000000000006 [ 539.721968] FAULT_INJECTION: forcing a failure. [ 539.721968] name failslab, interval 1, probability 0, space 0, times 0 [ 539.766207] CPU: 0 PID: 28210 Comm: syz-executor.0 Not tainted 4.14.138 #34 [ 539.773544] FAULT_INJECTION: forcing a failure. [ 539.773544] name failslab, interval 1, probability 0, space 0, times 0 [ 539.776378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 539.776383] Call Trace: [ 539.776403] dump_stack+0x138/0x19c [ 539.776420] should_fail.cold+0x10f/0x159 [ 539.776437] should_failslab+0xdb/0x130 [ 539.776459] kmem_cache_alloc+0x2d7/0x780 [ 539.794903] ? save_stack+0xa9/0xd0 [ 539.794924] get_empty_filp+0x8c/0x3f0 [ 539.794938] path_openat+0x8f/0x3f70 [ 539.794952] ? trace_hardirqs_on+0x10/0x10 [ 539.794974] ? check_preemption_disabled+0x3c/0x250 [ 539.815544] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 539.815557] ? find_held_lock+0x35/0x130 [ 539.815567] ? save_trace+0x290/0x290 [ 539.815581] ? __alloc_fd+0x1d4/0x4a0 [ 539.815593] do_filp_open+0x18e/0x250 [ 539.815603] ? may_open_dev+0xe0/0xe0 [ 539.815614] ? lock_downgrade+0x6e0/0x6e0 [ 539.815629] ? _raw_spin_unlock+0x2d/0x50 [ 539.815636] ? __alloc_fd+0x1d4/0x4a0 [ 539.815655] do_sys_open+0x2c5/0x430 [ 539.815665] ? filp_open+0x70/0x70 [ 539.815679] SyS_open+0x2d/0x40 [ 539.815685] ? do_sys_open+0x430/0x430 [ 539.815699] do_syscall_64+0x1e8/0x640 [ 539.815713] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 539.834205] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 539.834217] RIP: 0033:0x413711 [ 539.834223] RSP: 002b:00007f0ebe6867a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 539.834234] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000413711 [ 539.834239] RDX: 0000000000000000 RSI: 0000000000000300 RDI: 00007f0ebe686850 [ 539.834245] RBP: 000000000075bf20 R08: 000000000000000f R09: 0000000000000000 [ 539.834250] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f0ebe6876d4 [ 539.834255] R13: 00000000004c8beb R14: 00000000004dfb08 R15: 0000000000000005 [ 539.915489] CPU: 1 PID: 28212 Comm: syz-executor.1 Not tainted 4.14.138 #34 [ 539.931365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 539.951349] FAULT_INJECTION: forcing a failure. [ 539.951349] name failslab, interval 1, probability 0, space 0, times 0 [ 539.953162] Call Trace: [ 539.953181] dump_stack+0x138/0x19c [ 539.953199] should_fail.cold+0x10f/0x159 [ 539.953216] should_failslab+0xdb/0x130 [ 539.953230] kmem_cache_alloc+0x2d7/0x780 [ 539.960710] audit: type=1804 audit(1565454508.213:139): pid=28213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir103720111/syzkaller.tAwa12/581/file0" dev="sda1" ino=17621 res=1 [ 539.967776] ? shmem_alloc_inode+0x1c/0x50 [ 539.967789] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 539.967804] selinux_inode_alloc_security+0xb6/0x2a0 [ 539.967820] security_inode_alloc+0x94/0xd0 [ 540.059716] inode_init_always+0x552/0xaf0 [ 540.063964] alloc_inode+0x81/0x180 [ 540.067605] new_inode_pseudo+0x19/0xf0 [ 540.071585] new_inode+0x1f/0x40 [ 540.074955] shmem_get_inode+0x75/0x750 [ 540.078941] __shmem_file_setup.part.0+0x111/0x400 [ 540.083873] ? __alloc_fd+0x1d4/0x4a0 [ 540.087672] ? shmem_fill_super+0x8c0/0x8c0 [ 540.092089] SyS_memfd_create+0x1f9/0x3a0 [ 540.096234] ? shmem_fcntl+0x130/0x130 [ 540.100120] ? do_syscall_64+0x53/0x640 [ 540.104441] ? shmem_fcntl+0x130/0x130 [ 540.108330] do_syscall_64+0x1e8/0x640 [ 540.112216] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 540.117061] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 540.122247] RIP: 0033:0x459829 [ 540.125430] RSP: 002b:00007f0241e81a88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 540.133144] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000459829 [ 540.140411] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 00000000004be748 [ 540.147673] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 00000000fbad8001 16:28:28 executing program 0 (fault-call:6 fault-nth:3): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x30200, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) eventfd(0x6) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) [ 540.154940] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0241e826d4 [ 540.162203] R13: 00000000004c8976 R14: 00000000004df838 R15: 0000000000000006 [ 540.169490] CPU: 0 PID: 28217 Comm: syz-executor.0 Not tainted 4.14.138 #34 [ 540.173644] input: syz0 as /devices/virtual/input/input223 [ 540.176686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 540.176692] Call Trace: [ 540.176711] dump_stack+0x138/0x19c [ 540.176731] should_fail.cold+0x10f/0x159 [ 540.176748] should_failslab+0xdb/0x130 16:28:28 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") recvfrom$unix(r1, &(0x7f0000000180)=""/83, 0xff34, 0x10000, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e23}, 0x6e) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) [ 540.176760] kmem_cache_alloc+0x2d7/0x780 [ 540.176775] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 540.176792] ? check_preemption_disabled+0x3c/0x250 [ 540.191975] selinux_file_alloc_security+0xb4/0x190 [ 540.191990] security_file_alloc+0x6d/0xa0 [ 540.192006] get_empty_filp+0x162/0x3f0 [ 540.192019] path_openat+0x8f/0x3f70 [ 540.192033] ? trace_hardirqs_on+0x10/0x10 [ 540.192054] ? check_preemption_disabled+0x3c/0x250 [ 540.192069] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 540.192076] ? find_held_lock+0x35/0x130 16:28:28 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) [ 540.192085] ? save_trace+0x290/0x290 [ 540.192098] ? __alloc_fd+0x1d4/0x4a0 [ 540.192108] do_filp_open+0x18e/0x250 [ 540.192117] ? may_open_dev+0xe0/0xe0 [ 540.192129] ? lock_downgrade+0x6e0/0x6e0 [ 540.198419] ? _raw_spin_unlock+0x2d/0x50 [ 540.198431] ? __alloc_fd+0x1d4/0x4a0 [ 540.198454] do_sys_open+0x2c5/0x430 [ 540.198466] ? filp_open+0x70/0x70 [ 540.198482] SyS_open+0x2d/0x40 [ 540.198490] ? do_sys_open+0x430/0x430 [ 540.198505] do_syscall_64+0x1e8/0x640 [ 540.206599] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 540.206619] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 540.206628] RIP: 0033:0x413711 [ 540.206634] RSP: 002b:00007f0ebe6867a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 540.206646] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000413711 [ 540.206653] RDX: 0000000000000000 RSI: 0000000000000300 RDI: 00007f0ebe686850 [ 540.206658] RBP: 000000000075bf20 R08: 000000000000000f R09: 0000000000000000 16:28:28 executing program 0 (fault-call:6 fault-nth:4): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x30200, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) eventfd(0x6) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) [ 540.206664] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f0ebe6876d4 [ 540.206669] R13: 00000000004c8beb R14: 00000000004dfb08 R15: 0000000000000005 [ 540.381884] input: syz0 as /devices/virtual/input/input224 [ 540.441982] FAULT_INJECTION: forcing a failure. [ 540.441982] name failslab, interval 1, probability 0, space 0, times 0 [ 540.476087] CPU: 1 PID: 28231 Comm: syz-executor.0 Not tainted 4.14.138 #34 [ 540.483338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 540.492793] Call Trace: [ 540.495399] dump_stack+0x138/0x19c [ 540.499049] should_fail.cold+0x10f/0x159 [ 540.503478] should_failslab+0xdb/0x130 [ 540.507463] kmem_cache_alloc_trace+0x2e9/0x790 [ 540.512157] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 540.516396] FAULT_INJECTION: forcing a failure. [ 540.516396] name failslab, interval 1, probability 0, space 0, times 0 [ 540.517623] __request_module+0x241/0x8eb [ 540.517636] ? base_probe+0x31/0x60 [ 540.517648] ? free_modprobe_argv+0xa0/0xa0 [ 540.517665] ? kobj_lookup+0x256/0x400 [ 540.517686] ? lock_downgrade+0x6e0/0x6e0 [ 540.549173] ? mutex_trylock+0x1c0/0x1c0 [ 540.553277] ? trace_hardirqs_on+0x10/0x10 [ 540.557533] ? __mutex_unlock_slowpath+0x71/0x800 [ 540.562409] base_probe+0x31/0x60 [ 540.565869] kobj_lookup+0x21c/0x400 [ 540.569592] ? exact_match+0x20/0x20 [ 540.573427] chrdev_open+0x2bd/0x590 [ 540.577166] ? cdev_put.part.0+0x50/0x50 [ 540.581415] ? security_file_open+0x89/0x190 [ 540.585830] do_dentry_open+0x73b/0xeb0 [ 540.589893] ? cdev_put.part.0+0x50/0x50 [ 540.593962] vfs_open+0x105/0x220 [ 540.597418] path_openat+0x8bd/0x3f70 [ 540.601223] ? trace_hardirqs_on+0x10/0x10 [ 540.605493] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 540.610169] ? find_held_lock+0x35/0x130 [ 540.614236] ? __alloc_fd+0x1d4/0x4a0 [ 540.618129] do_filp_open+0x18e/0x250 [ 540.621930] ? may_open_dev+0xe0/0xe0 [ 540.625767] ? _raw_spin_unlock+0x2d/0x50 [ 540.630071] ? __alloc_fd+0x1d4/0x4a0 [ 540.633886] do_sys_open+0x2c5/0x430 [ 540.637607] ? filp_open+0x70/0x70 [ 540.641162] SyS_open+0x2d/0x40 [ 540.644437] ? do_sys_open+0x430/0x430 [ 540.648331] do_syscall_64+0x1e8/0x640 [ 540.652415] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 540.657267] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 540.662454] RIP: 0033:0x413711 [ 540.665726] RSP: 002b:00007f0ebe6867a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 540.673432] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000413711 [ 540.680700] RDX: 0000000000000000 RSI: 0000000000000300 RDI: 00007f0ebe686850 16:28:28 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0xc002, 0x0) close(r0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f00000001c0)=0x100000001, 0x4) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:28:28 executing program 1 (fault-call:4 fault-nth:4): creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101003, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2014020, &(0x7f00000001c0)={[{@commit={'commit'}}]}) 16:28:28 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 16:28:28 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) socketpair(0x1, 0x8080b, 0x5c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_tcp_int(r1, 0x6, 0x6, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$UI_DEV_CREATE(r0, 0x5501) write$binfmt_misc(r2, &(0x7f0000000100)={'syz1', "2e689e9fdbd7584d8bbfa361ec7494591cea47320ee0405a3abdd52834f4399515e52ba278bfd64d"}, 0x2c) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 540.687994] RBP: 000000000075bf20 R08: 000000000000000f R09: 0000000000000000 [ 540.695267] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f0ebe6876d4 [ 540.702546] R13: 00000000004c8beb R14: 00000000004dfb08 R15: 0000000000000005 [ 540.709914] CPU: 0 PID: 28236 Comm: syz-executor.1 Not tainted 4.14.138 #34 [ 540.717062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 540.726420] Call Trace: [ 540.726441] dump_stack+0x138/0x19c [ 540.726458] should_fail.cold+0x10f/0x159 [ 540.726476] should_failslab+0xdb/0x130 [ 540.732699] kmem_cache_alloc+0x2d7/0x780 [ 540.732715] ? lock_downgrade+0x6e0/0x6e0 [ 540.732730] get_empty_filp+0x8c/0x3f0 [ 540.732740] alloc_file+0x23/0x440 [ 540.732754] __shmem_file_setup.part.0+0x1b1/0x400 [ 540.732764] ? __alloc_fd+0x1d4/0x4a0 [ 540.732774] ? shmem_fill_super+0x8c0/0x8c0 [ 540.732797] SyS_memfd_create+0x1f9/0x3a0 [ 540.740893] ? shmem_fcntl+0x130/0x130 [ 540.740906] ? do_syscall_64+0x53/0x640 [ 540.740915] ? shmem_fcntl+0x130/0x130 [ 540.740927] do_syscall_64+0x1e8/0x640 [ 540.740936] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 540.740953] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 540.740961] RIP: 0033:0x459829 [ 540.740970] RSP: 002b:00007f0241e81a88 EFLAGS: 00000246 [ 540.756700] ORIG_RAX: 000000000000013f [ 540.756708] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000459829 [ 540.756714] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 00000000004be748 [ 540.756719] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 540.756729] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0241e826d4 16:28:29 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, 0x0, 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 16:28:29 executing program 1 (fault-call:4 fault-nth:5): creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101003, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2014020, &(0x7f00000001c0)={[{@commit={'commit'}}]}) [ 540.762029] input: syz0 as /devices/virtual/input/input225 [ 540.765563] R13: 00000000004c8976 R14: 00000000004df838 R15: 0000000000000006 [ 540.870197] input: syz0 as /devices/virtual/input/input226 16:28:29 executing program 0 (fault-call:6 fault-nth:5): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x30200, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) eventfd(0x6) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) 16:28:29 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x369c21c9ce6d85c3, 0x0) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000040)={0x4, 0x1, 0x20}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000004c0)={0x1000000a, 0xfffbffffffffffff, 0x0, 0xffffffffffffffff}) close(r3) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) ioctl$UI_DEV_DESTROY(r4, 0x5502) ioctl$TCSBRKP(r0, 0x5425, 0x0) [ 540.948466] FAULT_INJECTION: forcing a failure. [ 540.948466] name failslab, interval 1, probability 0, space 0, times 0 [ 540.990354] CPU: 0 PID: 28248 Comm: syz-executor.1 Not tainted 4.14.138 #34 [ 540.997736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 541.007111] Call Trace: [ 541.009722] dump_stack+0x138/0x19c [ 541.013551] should_fail.cold+0x10f/0x159 [ 541.017918] should_failslab+0xdb/0x130 [ 541.023824] kmem_cache_alloc+0x2d7/0x780 [ 541.028331] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 541.033794] ? check_preemption_disabled+0x3c/0x250 [ 541.039134] selinux_file_alloc_security+0xb4/0x190 [ 541.044254] security_file_alloc+0x6d/0xa0 [ 541.044758] FAULT_INJECTION: forcing a failure. [ 541.044758] name failslab, interval 1, probability 0, space 0, times 0 [ 541.048590] get_empty_filp+0x162/0x3f0 [ 541.048603] alloc_file+0x23/0x440 [ 541.048618] __shmem_file_setup.part.0+0x1b1/0x400 [ 541.048628] ? __alloc_fd+0x1d4/0x4a0 [ 541.048637] ? shmem_fill_super+0x8c0/0x8c0 [ 541.048662] SyS_memfd_create+0x1f9/0x3a0 [ 541.084557] ? shmem_fcntl+0x130/0x130 [ 541.088478] ? do_syscall_64+0x53/0x640 [ 541.092455] ? shmem_fcntl+0x130/0x130 [ 541.096345] do_syscall_64+0x1e8/0x640 [ 541.100259] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 541.105116] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 541.110303] RIP: 0033:0x459829 [ 541.113486] RSP: 002b:00007f0241e81a88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 541.121291] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000459829 [ 541.128562] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 00000000004be748 [ 541.135830] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 541.143108] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0241e826d4 [ 541.150464] R13: 00000000004c8976 R14: 00000000004df838 R15: 0000000000000006 [ 541.157756] CPU: 1 PID: 28254 Comm: syz-executor.0 Not tainted 4.14.138 #34 [ 541.164920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 541.174281] Call Trace: [ 541.174302] dump_stack+0x138/0x19c [ 541.174319] should_fail.cold+0x10f/0x159 [ 541.180568] should_failslab+0xdb/0x130 [ 541.180582] __kmalloc_track_caller+0x2ec/0x790 [ 541.180598] ? __request_module+0x241/0x8eb [ 541.197684] ? rcu_read_lock_sched_held+0x110/0x130 [ 541.202812] ? kmem_cache_alloc_trace+0x623/0x790 [ 541.207678] ? __request_module+0x25f/0x8eb [ 541.212018] kstrdup+0x3a/0x70 [ 541.215228] __request_module+0x25f/0x8eb [ 541.219391] ? base_probe+0x31/0x60 [ 541.223136] ? free_modprobe_argv+0xa0/0xa0 [ 541.227505] ? kobj_lookup+0x256/0x400 [ 541.233048] ? lock_downgrade+0x6e0/0x6e0 [ 541.237299] ? mutex_trylock+0x1c0/0x1c0 16:28:29 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, 0x0, 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) [ 541.241368] ? trace_hardirqs_on+0x10/0x10 [ 541.241384] ? __mutex_unlock_slowpath+0x71/0x800 [ 541.241403] base_probe+0x31/0x60 [ 541.241419] kobj_lookup+0x21c/0x400 [ 541.260206] ? exact_match+0x20/0x20 [ 541.260222] chrdev_open+0x2bd/0x590 [ 541.260232] ? cdev_put.part.0+0x50/0x50 [ 541.260245] ? security_file_open+0x89/0x190 [ 541.260256] do_dentry_open+0x73b/0xeb0 [ 541.260267] ? cdev_put.part.0+0x50/0x50 [ 541.260279] vfs_open+0x105/0x220 [ 541.267452] path_openat+0x8bd/0x3f70 [ 541.267469] ? trace_hardirqs_on+0x10/0x10 [ 541.267488] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 541.307757] ? find_held_lock+0x35/0x130 [ 541.311848] ? __alloc_fd+0x1d4/0x4a0 [ 541.315670] do_filp_open+0x18e/0x250 [ 541.319492] ? may_open_dev+0xe0/0xe0 [ 541.323319] ? _raw_spin_unlock+0x2d/0x50 [ 541.327485] ? __alloc_fd+0x1d4/0x4a0 [ 541.331309] do_sys_open+0x2c5/0x430 [ 541.335234] ? filp_open+0x70/0x70 [ 541.338790] SyS_open+0x2d/0x40 [ 541.342080] ? do_sys_open+0x430/0x430 [ 541.345980] do_syscall_64+0x1e8/0x640 [ 541.349955] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 541.354822] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 541.361497] RIP: 0033:0x413711 [ 541.364734] RSP: 002b:00007f0ebe6867a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 541.373261] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000413711 [ 541.380553] RDX: 0000000000000000 RSI: 0000000000000300 RDI: 00007f0ebe686850 16:28:29 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) bind$nfc_llcp(r0, &(0x7f0000000180)={0x27, 0x1, 0x2, 0x5, 0x3, 0x4, "e6c65bff58eb4abf355249663b564c7479a20856da25b2df7c5839bfb7852c03d4802a44c814d009c15ab1c2775778b111b2345f92034abcef268dc87ef939", 0x20}, 0x60) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:28:29 executing program 1 (fault-call:4 fault-nth:6): creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101003, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2014020, &(0x7f00000001c0)={[{@commit={'commit'}}]}) 16:28:29 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, 0x0, 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) [ 541.388445] RBP: 000000000075bf20 R08: 000000000000000f R09: 0000000000000000 [ 541.395755] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f0ebe6876d4 [ 541.403057] R13: 00000000004c8beb R14: 00000000004dfb08 R15: 0000000000000005 [ 541.418976] input: syz0 as /devices/virtual/input/input227 [ 541.494234] FAULT_INJECTION: forcing a failure. [ 541.494234] name failslab, interval 1, probability 0, space 0, times 0 [ 541.544705] CPU: 1 PID: 28266 Comm: syz-executor.1 Not tainted 4.14.138 #34 [ 541.551869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 541.561241] Call Trace: [ 541.563862] dump_stack+0x138/0x19c [ 541.567615] should_fail.cold+0x10f/0x159 [ 541.571793] should_failslab+0xdb/0x130 [ 541.575867] kmem_cache_alloc+0x2d7/0x780 [ 541.580034] ? do_sys_ftruncate.constprop.0+0x35c/0x490 [ 541.585421] getname_flags+0xcb/0x580 [ 541.589238] getname+0x1a/0x20 [ 541.592618] do_sys_open+0x1e7/0x430 [ 541.596350] ? filp_open+0x70/0x70 [ 541.599922] ? do_sys_ftruncate.constprop.0+0x370/0x490 [ 541.605298] SyS_open+0x2d/0x40 [ 541.608591] ? do_sys_open+0x430/0x430 [ 541.612491] do_syscall_64+0x1e8/0x640 [ 541.616393] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 541.621611] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 541.626910] RIP: 0033:0x413711 [ 541.630103] RSP: 002b:00007f0241e81a80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 541.637829] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000413711 [ 541.645112] RDX: 00007f0241e81b0a RSI: 0000000000000002 RDI: 00007f0241e81b00 [ 541.652396] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 541.659672] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000007 [ 541.666951] R13: 00000000004c8976 R14: 00000000004df838 R15: 0000000000000006 16:28:30 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000200)=""/4096) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0xfffffffffffffffe) 16:28:30 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$UI_DEV_CREATE(r1, 0x5501) 16:28:30 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740), 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 16:28:30 executing program 1 (fault-call:4 fault-nth:7): creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101003, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2014020, &(0x7f00000001c0)={[{@commit={'commit'}}]}) 16:28:30 executing program 0 (fault-call:6 fault-nth:6): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x30200, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) eventfd(0x6) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) 16:28:30 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'vlan0\x00', 0x0}) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@remote, @in=@dev={0xac, 0x14, 0x14, 0xe}, 0x4e23, 0x1ff, 0x4e23, 0x6, 0x0, 0x80, 0x80, 0x3c, r1, r2}, {0x555d, 0x6f8, 0x6, 0x9, 0x9a, 0xe1f8798, 0x200, 0x8}, {0x5, 0x200, 0x0, 0x7}, 0x101, 0x6e6bb3, 0x1, 0x1, 0x2, 0x1}, {{@in=@multicast1, 0x4d2, 0x2b}, 0xa, @in=@empty, 0x3507, 0x3, 0x2, 0x2, 0x48, 0x4, 0x4}}, 0xe8) read(r0, &(0x7f0000000080)=""/144, 0x90) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) [ 542.209356] FAULT_INJECTION: forcing a failure. [ 542.209356] name failslab, interval 1, probability 0, space 0, times 0 [ 542.225425] FAULT_INJECTION: forcing a failure. [ 542.225425] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 542.236534] CPU: 0 PID: 28290 Comm: syz-executor.0 Not tainted 4.14.138 #34 [ 542.244363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 542.253797] Call Trace: [ 542.256477] dump_stack+0x138/0x19c [ 542.260105] should_fail.cold+0x10f/0x159 [ 542.264253] should_failslab+0xdb/0x130 [ 542.268322] kmem_cache_alloc_trace+0x2e9/0x790 [ 542.273021] ? rcu_read_lock_sched_held+0x110/0x130 [ 542.278047] ? __kmalloc_track_caller+0x372/0x790 [ 542.282889] ? __request_module+0x241/0x8eb [ 542.287208] ? rcu_read_lock_sched_held+0x110/0x130 [ 542.296603] call_usermodehelper_setup+0x70/0x2e0 [ 542.308569] ? memcpy+0x46/0x50 [ 542.311856] ? dec_ucount+0x120/0x120 [ 542.315674] __request_module+0x35a/0x8eb [ 542.319908] ? base_probe+0x31/0x60 [ 542.323538] ? free_modprobe_argv+0xa0/0xa0 [ 542.327861] ? kobj_lookup+0x256/0x400 [ 542.331853] ? lock_downgrade+0x6e0/0x6e0 [ 542.335997] ? mutex_trylock+0x1c0/0x1c0 [ 542.340070] ? trace_hardirqs_on+0x10/0x10 [ 542.344309] ? __mutex_unlock_slowpath+0x71/0x800 [ 542.349331] base_probe+0x31/0x60 [ 542.352788] kobj_lookup+0x21c/0x400 [ 542.356689] ? exact_match+0x20/0x20 [ 542.360411] chrdev_open+0x2bd/0x590 [ 542.364220] ? cdev_put.part.0+0x50/0x50 [ 542.368306] ? security_file_open+0x89/0x190 [ 542.372904] do_dentry_open+0x73b/0xeb0 [ 542.376976] ? cdev_put.part.0+0x50/0x50 [ 542.381045] vfs_open+0x105/0x220 [ 542.384588] path_openat+0x8bd/0x3f70 [ 542.388619] ? trace_hardirqs_on+0x10/0x10 [ 542.393989] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 542.398655] ? find_held_lock+0x35/0x130 [ 542.402721] ? __alloc_fd+0x1d4/0x4a0 [ 542.406520] do_filp_open+0x18e/0x250 [ 542.410319] ? may_open_dev+0xe0/0xe0 [ 542.414832] ? _raw_spin_unlock+0x2d/0x50 [ 542.418982] ? __alloc_fd+0x1d4/0x4a0 [ 542.422793] do_sys_open+0x2c5/0x430 [ 542.426507] ? filp_open+0x70/0x70 [ 542.430061] SyS_open+0x2d/0x40 [ 542.433356] ? do_sys_open+0x430/0x430 [ 542.437356] do_syscall_64+0x1e8/0x640 [ 542.441255] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 542.446231] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 542.451507] RIP: 0033:0x413711 [ 542.454691] RSP: 002b:00007f0ebe6867a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 542.462506] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000413711 [ 542.469871] RDX: 0000000000000000 RSI: 0000000000000300 RDI: 00007f0ebe686850 [ 542.477155] RBP: 000000000075bf20 R08: 000000000000000f R09: 0000000000000000 [ 542.484438] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f0ebe6876d4 [ 542.491716] R13: 00000000004c8beb R14: 00000000004dfb08 R15: 0000000000000005 [ 542.499014] CPU: 1 PID: 28292 Comm: syz-executor.1 Not tainted 4.14.138 #34 [ 542.506303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 542.515687] Call Trace: [ 542.515707] dump_stack+0x138/0x19c [ 542.515723] should_fail.cold+0x10f/0x159 [ 542.515741] __alloc_pages_nodemask+0x1d6/0x7a0 [ 542.521937] ? fs_reclaim_acquire+0x20/0x20 [ 542.521952] ? __alloc_pages_slowpath+0x2930/0x2930 [ 542.521975] cache_grow_begin+0x80/0x400 [ 542.521992] kmem_cache_alloc+0x6a6/0x780 [ 542.530798] getname_flags+0xcb/0x580 [ 542.530812] getname+0x1a/0x20 [ 542.530822] do_sys_open+0x1e7/0x430 16:28:30 executing program 0 (fault-call:6 fault-nth:7): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x30200, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) eventfd(0x6) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) [ 542.530834] ? filp_open+0x70/0x70 [ 542.530847] ? do_sys_ftruncate.constprop.0+0x370/0x490 [ 542.543324] input: syz0 as /devices/virtual/input/input229 [ 542.544251] SyS_open+0x2d/0x40 [ 542.544261] ? do_sys_open+0x430/0x430 [ 542.544279] do_syscall_64+0x1e8/0x640 [ 542.552204] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 542.552225] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 542.552234] RIP: 0033:0x413711 [ 542.552240] RSP: 002b:00007f0241e81a80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 16:28:30 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x81, 0x200000) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000100), &(0x7f00000001c0)=0x8) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x30200, 0x0) getsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) eventfd(0x6) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) prctl$PR_SET_NAME(0xf, &(0x7f0000000240)='\x00') [ 542.552251] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000413711 [ 542.552256] RDX: 00007f0241e81b0a RSI: 0000000000000002 RDI: 00007f0241e81b00 [ 542.552261] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 542.552271] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000007 [ 542.559273] R13: 00000000004c8976 R14: 00000000004df838 R15: 0000000000000006 16:28:31 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000005c0)={r2, @multicast2, @loopback}, 0xc) r3 = socket(0x1e, 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r3) sendmsg(r0, &(0x7f0000000600)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x40) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000046c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r6, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:28:31 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740), 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) [ 542.699030] EXT4-fs (sda1): re-mounted. Opts: commit=0x0000000000000000, 16:28:31 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x30200, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) eventfd(0x6) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) 16:28:31 executing program 1 (fault-call:4 fault-nth:8): creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101003, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2014020, &(0x7f00000001c0)={[{@commit={'commit'}}]}) [ 542.826526] input: syz0 as /devices/virtual/input/input233 [ 542.889274] FAULT_INJECTION: forcing a failure. [ 542.889274] name failslab, interval 1, probability 0, space 0, times 0 [ 542.902605] input: syz0 as /devices/virtual/input/input234 [ 542.909531] CPU: 1 PID: 28328 Comm: syz-executor.1 Not tainted 4.14.138 #34 [ 542.916665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 542.926036] Call Trace: [ 542.928645] dump_stack+0x138/0x19c [ 542.932329] should_fail.cold+0x10f/0x159 [ 542.936509] should_failslab+0xdb/0x130 [ 542.940503] kmem_cache_alloc+0x2d7/0x780 [ 542.940516] ? save_stack+0xa9/0xd0 [ 542.940532] get_empty_filp+0x8c/0x3f0 [ 542.948802] path_openat+0x8f/0x3f70 [ 542.956565] ? trace_hardirqs_on+0x10/0x10 [ 542.961521] ? check_preemption_disabled+0x3c/0x250 [ 542.966569] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 542.966581] ? find_held_lock+0x35/0x130 [ 542.966592] ? save_trace+0x290/0x290 [ 542.966606] ? __alloc_fd+0x1d4/0x4a0 [ 542.975336] do_filp_open+0x18e/0x250 [ 542.975348] ? may_open_dev+0xe0/0xe0 [ 542.975363] ? lock_downgrade+0x6e0/0x6e0 [ 542.975380] ? _raw_spin_unlock+0x2d/0x50 [ 542.998967] ? __alloc_fd+0x1d4/0x4a0 [ 543.002832] do_sys_open+0x2c5/0x430 [ 543.006535] ? filp_open+0x70/0x70 [ 543.010083] ? do_sys_ftruncate.constprop.0+0x370/0x490 [ 543.015447] SyS_open+0x2d/0x40 [ 543.018726] ? do_sys_open+0x430/0x430 [ 543.022602] do_syscall_64+0x1e8/0x640 [ 543.026515] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 543.031373] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 543.036650] RIP: 0033:0x413711 [ 543.039917] RSP: 002b:00007f0241e81a80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 543.047806] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000413711 [ 543.055174] RDX: 00007f0241e81b0a RSI: 0000000000000002 RDI: 00007f0241e81b00 [ 543.062442] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 543.069790] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000007 [ 543.077053] R13: 00000000004c8976 R14: 00000000004df838 R15: 0000000000000006 16:28:31 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000300)={0x1000, 0x7, 0xad, 0x5, 0x1000}) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000001c0)={0x0, 0x41, "7378efafba357d6ae23f5336f4a0aa42109f69ef56ad36dbcd774ccf0168268694330919f3d84fe0c9bbc75208ee2ade9ab89598c1a6928c13557ae686ad8c740d"}, &(0x7f0000000040)=0x49) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000240)={r1, 0x1ff}, &(0x7f0000000280)=0x8) r2 = gettid() write$P9_RGETLOCK(r0, &(0x7f00000002c0)={0x28, 0x37, 0x1, {0x0, 0x7, 0x10001, r2, 0xa, '/dev/dsp#\x00'}}, 0x28) 16:28:31 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740), 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 16:28:31 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_out(r0, 0x5462, &(0x7f0000000040)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl(r1, 0x0, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:28:31 executing program 1 (fault-call:4 fault-nth:9): creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101003, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2014020, &(0x7f00000001c0)={[{@commit={'commit'}}]}) 16:28:31 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x30200, 0x0) getsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) iopl(0x7) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r1) eventfd(0x6) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) lstat(&(0x7f0000000040)='./file1\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000340)={0xa0, 0x0, 0x6, {{0x6, 0x0, 0xfffffffffffffff6, 0x3, 0x16, 0x3, {0x5, 0x3, 0x2, 0x3d3, 0xfff, 0x400, 0x7, 0x1, 0x401, 0xc135, 0xff, r3, r4, 0x100000001, 0x10000}}, {0x0, 0x2}}}, 0xa0) 16:28:31 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x6, 0x208400) accept$unix(r1, &(0x7f00000005c0)=@abs, &(0x7f0000000100)=0x6e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x6c, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x3, 'wrr\x00', 0x1d, 0x1, 0x2e}, 0x2c) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x200000, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 543.521235] input: syz0 as /devices/virtual/input/input235 [ 543.531026] IPVS: set_ctl: invalid protocol: 108 172.30.0.6:20003 [ 543.538734] FAULT_INJECTION: forcing a failure. [ 543.538734] name failslab, interval 1, probability 0, space 0, times 0 [ 543.563086] input: syz0 as /devices/virtual/input/input236 [ 543.579608] CPU: 0 PID: 28349 Comm: syz-executor.1 Not tainted 4.14.138 #34 [ 543.586760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 543.596139] Call Trace: [ 543.598743] dump_stack+0x138/0x19c [ 543.602391] should_fail.cold+0x10f/0x159 [ 543.606560] should_failslab+0xdb/0x130 [ 543.610549] kmem_cache_alloc+0x2d7/0x780 [ 543.614738] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 543.620229] ? check_preemption_disabled+0x3c/0x250 16:28:31 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{0x0}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) [ 543.625300] selinux_file_alloc_security+0xb4/0x190 [ 543.630337] security_file_alloc+0x6d/0xa0 [ 543.634582] get_empty_filp+0x162/0x3f0 [ 543.634597] path_openat+0x8f/0x3f70 [ 543.634613] ? trace_hardirqs_on+0x10/0x10 [ 543.634628] ? check_preemption_disabled+0x3c/0x250 [ 543.634646] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 543.634655] ? find_held_lock+0x35/0x130 [ 543.634667] ? save_trace+0x290/0x290 [ 543.639257] IPVS: set_ctl: invalid protocol: 108 172.30.0.6:20003 [ 543.642782] ? __alloc_fd+0x1d4/0x4a0 [ 543.642795] do_filp_open+0x18e/0x250 [ 543.642805] ? may_open_dev+0xe0/0xe0 [ 543.642818] ? lock_downgrade+0x6e0/0x6e0 [ 543.642837] ? _raw_spin_unlock+0x2d/0x50 [ 543.642846] ? __alloc_fd+0x1d4/0x4a0 [ 543.642868] do_sys_open+0x2c5/0x430 [ 543.642880] ? filp_open+0x70/0x70 [ 543.642892] ? do_sys_ftruncate.constprop.0+0x370/0x490 [ 543.642902] SyS_open+0x2d/0x40 [ 543.642910] ? do_sys_open+0x430/0x430 [ 543.642924] do_syscall_64+0x1e8/0x640 [ 543.642936] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 543.652299] entry_SYSCALL_64_after_hwframe+0x42/0xb7 16:28:32 executing program 1 (fault-call:4 fault-nth:10): creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101003, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2014020, &(0x7f00000001c0)={[{@commit={'commit'}}]}) 16:28:32 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x80000001, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000100)={0x2, 0x102, 0x2, {0x3, 0xffff, 0x7fffffff, 0xfffffffffffffffb}}) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r1, 0x4010ae94, &(0x7f00000001c0)={0x40800, 0x7fffffff}) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x30200, 0x0) getsockopt$netrom_NETROM_T4(r3, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r2) eventfd(0x6) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) fdatasync(r1) [ 543.652309] RIP: 0033:0x413711 [ 543.652315] RSP: 002b:00007f0241e81a80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 543.652327] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000413711 [ 543.652334] RDX: 00007f0241e81b0a RSI: 0000000000000002 RDI: 00007f0241e81b00 [ 543.652340] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 543.652346] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000007 [ 543.652352] R13: 00000000004c8976 R14: 00000000004df838 R15: 0000000000000006 16:28:32 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{0x0}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 16:28:32 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = dup2(r0, r0) ioctl$sock_netrom_SIOCDELRT(r1, 0x890c, &(0x7f0000000000)={0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0xc, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, 0x6, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) ioctl$SIOCGETLINKNAME(r1, 0x89e0, &(0x7f00000000c0)={0x0, 0x3}) [ 543.846488] FAULT_INJECTION: forcing a failure. [ 543.846488] name failslab, interval 1, probability 0, space 0, times 0 [ 543.876909] input: syz0 as /devices/virtual/input/input237 [ 543.884936] CPU: 0 PID: 28371 Comm: syz-executor.1 Not tainted 4.14.138 #34 [ 543.892076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 543.901437] Call Trace: [ 543.904048] dump_stack+0x138/0x19c [ 543.907691] should_fail.cold+0x10f/0x159 [ 543.911852] should_failslab+0xdb/0x130 [ 543.915831] kmem_cache_alloc_trace+0x2e9/0x790 [ 543.920516] ? __lockdep_init_map+0x10c/0x570 [ 543.925033] ? loop_get_status64+0x120/0x120 [ 543.929456] __kthread_create_on_node+0xe3/0x3e0 [ 543.934219] ? kthread_park+0x140/0x140 [ 543.938198] ? __fget+0x210/0x370 [ 543.941668] ? loop_get_status64+0x120/0x120 [ 543.946091] kthread_create_on_node+0xa8/0xd0 [ 543.950597] ? __kthread_create_on_node+0x3e0/0x3e0 [ 543.955628] ? __lockdep_init_map+0x10c/0x570 [ 543.960174] lo_ioctl+0xcf7/0x1ce0 [ 543.963725] ? debug_check_no_obj_freed+0x2aa/0x7b7 [ 543.968764] ? loop_probe+0x160/0x160 [ 543.972584] blkdev_ioctl+0x96b/0x1860 [ 543.976490] ? blkpg_ioctl+0x980/0x980 [ 543.980394] ? __might_sleep+0x93/0xb0 [ 543.984394] ? __fget+0x210/0x370 [ 543.987855] block_ioctl+0xde/0x120 [ 543.991486] ? blkdev_fallocate+0x3b0/0x3b0 16:28:32 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x30200, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) truncate(&(0x7f0000000040)='.\x00', 0x1) close(r0) eventfd(0x6) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) [ 543.995810] do_vfs_ioctl+0x7ae/0x1060 [ 543.999920] ? selinux_file_mprotect+0x5d0/0x5d0 [ 544.004675] ? lock_downgrade+0x6e0/0x6e0 [ 544.008825] ? ioctl_preallocate+0x1c0/0x1c0 [ 544.008839] ? __fget+0x237/0x370 [ 544.008858] ? security_file_ioctl+0x89/0xb0 [ 544.016718] SyS_ioctl+0x8f/0xc0 [ 544.016729] ? do_vfs_ioctl+0x1060/0x1060 [ 544.016744] do_syscall_64+0x1e8/0x640 [ 544.016758] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 544.032569] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 544.032579] RIP: 0033:0x459697 [ 544.032585] RSP: 002b:00007f0241e81a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 544.053595] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000459697 [ 544.053602] RDX: 0000000000000007 RSI: 0000000000004c00 RDI: 0000000000000008 [ 544.053608] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 544.053614] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000007 [ 544.053619] R13: 00000000004c8976 R14: 00000000004df838 R15: 0000000000000006 16:28:32 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x101001, 0x0) setgid(0xee01) 16:28:32 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x30200, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) eventfd(0x6) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$invalidate(0x15, r2) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) 16:28:32 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000600)={0x5, @win={{0x6, 0x401, 0x3, 0x400}, 0x5, 0x200, &(0x7f0000000100)={{0x6b4e, 0x4, 0x20}, &(0x7f00000000c0)={{0x1, 0x55c5, 0xff, 0x101}, &(0x7f0000000040)={{0x8001, 0x74, 0xff, 0x4}}}}, 0x6, &(0x7f00000005c0)="594a42850a0495a68dd8c59ea454ebb13cf9b767823e863900581a69ae3c84a27b867471326bfadda7e843bed43a", 0x8}}) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:28:32 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{0x0}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 16:28:32 executing program 1 (fault-call:4 fault-nth:11): creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101003, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2014020, &(0x7f00000001c0)={[{@commit={'commit'}}]}) 16:28:32 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000200)=""/144, 0xffd9) r1 = socket$inet_udplite(0x2, 0x2, 0x88) io_setup(0x63a2c2c2, &(0x7f0000000040)=0x0) io_getevents(r2, 0x0, 0x1, &(0x7f0000000180)=[{}], &(0x7f00000001c0)={0x77359400}) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)=0x7) [ 544.226167] input: syz0 as /devices/virtual/input/input241 [ 544.254034] input: syz0 as /devices/virtual/input/input242 16:28:32 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(0x0, 0x0) [ 544.273562] FAULT_INJECTION: forcing a failure. [ 544.273562] name failslab, interval 1, probability 0, space 0, times 0 [ 544.307291] CPU: 1 PID: 28409 Comm: syz-executor.1 Not tainted 4.14.138 #34 [ 544.314453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 544.323812] Call Trace: [ 544.323833] dump_stack+0x138/0x19c [ 544.323855] should_fail.cold+0x10f/0x159 [ 544.323873] should_failslab+0xdb/0x130 [ 544.323888] kmem_cache_alloc+0x2d7/0x780 [ 544.323902] ? trace_hardirqs_on+0x10/0x10 [ 544.323915] ? save_trace+0x290/0x290 [ 544.334299] __kernfs_new_node+0x70/0x420 [ 544.334315] kernfs_new_node+0x80/0xf0 [ 544.334329] kernfs_create_dir_ns+0x41/0x140 [ 544.334342] internal_create_group+0xea/0x7b0 [ 544.334358] sysfs_create_group+0x20/0x30 [ 544.342647] lo_ioctl+0x1176/0x1ce0 [ 544.342663] ? loop_probe+0x160/0x160 [ 544.342677] blkdev_ioctl+0x96b/0x1860 [ 544.342687] ? blkpg_ioctl+0x980/0x980 [ 544.342705] ? __might_sleep+0x93/0xb0 [ 544.342714] ? __fget+0x210/0x370 [ 544.342727] block_ioctl+0xde/0x120 [ 544.342739] ? blkdev_fallocate+0x3b0/0x3b0 [ 544.350781] do_vfs_ioctl+0x7ae/0x1060 [ 544.350797] ? selinux_file_mprotect+0x5d0/0x5d0 [ 544.350809] ? lock_downgrade+0x6e0/0x6e0 [ 544.350820] ? ioctl_preallocate+0x1c0/0x1c0 [ 544.350832] ? __fget+0x237/0x370 16:28:32 executing program 2: read(0xffffffffffffffff, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(0xffffffffffffffff, 0x280000040045010, &(0x7f0000000180)) ioctl$int_in(0xffffffffffffffff, 0x800060c004500a, &(0x7f0000000000)) fstat(0xffffffffffffffff, &(0x7f00000001c0)) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x5, 0x4) syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0xd6, 0x80) [ 544.350850] ? security_file_ioctl+0x89/0xb0 [ 544.350862] SyS_ioctl+0x8f/0xc0 [ 544.358903] ? do_vfs_ioctl+0x1060/0x1060 [ 544.367882] do_syscall_64+0x1e8/0x640 [ 544.367893] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 544.367914] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 544.367923] RIP: 0033:0x459697 [ 544.367929] RSP: 002b:00007f0241e81a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 544.367943] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000459697 [ 544.431269] RDX: 0000000000000007 RSI: 0000000000004c00 RDI: 0000000000000008 16:28:32 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(0x0, 0x0) [ 544.431276] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 544.431282] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000007 [ 544.431289] R13: 00000000004c8976 R14: 00000000004df838 R15: 0000000000000006 [ 544.512648] EXT4-fs (sda1): re-mounted. Opts: commit=0x0000000000000000, 16:28:32 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x30200, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) mkdir(&(0x7f0000000040)='./file0\x00', 0x154) close(r0) eventfd(0x6) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f00000001c0)={0x3f, "fc5814acdb1627e74a4e003ad82ceb848957baae3cf13dd3f2502a664396d13c", 0x2, 0x7d, 0x5, 0x10, 0x10000, 0x4}) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) 16:28:32 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = socket(0x5, 0x0, 0x81) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{0x10001, 0x4, 0x2000000000000000, 0x8000}, 'syz1\x00', 0x4f}) ioctl$sock_proto_private(r1, 0x89ea, &(0x7f0000000000)="57d4b48a3d0f5ceaeac8def3eeec92c4c18f947ce66047f246293fbd7bd0374dc111b099b85a15a0db1c967bb2999e97105ba9173d90ac7fce7938a915616007a5fabee553beed4434ac109619799237ebd7c0b20905b5cfa130a7b0fac7d03ae64d012c24fae7a51d7523ea128b78d57e9148efab") ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f00000005c0)=@generic={0x8b5e8401d9ce851a, 0x0, 0x8}) 16:28:32 executing program 1 (fault-call:4 fault-nth:12): creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101003, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2014020, &(0x7f00000001c0)={[{@commit={'commit'}}]}) 16:28:32 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(0x0, 0x0) [ 544.647482] input: syz0 as /devices/virtual/input/input243 [ 544.678419] FAULT_INJECTION: forcing a failure. [ 544.678419] name failslab, interval 1, probability 0, space 0, times 0 16:28:33 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f00000001c0)=""/244, &(0x7f0000000040)=0xf4) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) [ 544.717289] CPU: 0 PID: 28442 Comm: syz-executor.1 Not tainted 4.14.138 #34 [ 544.724444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 544.733815] Call Trace: [ 544.736448] dump_stack+0x138/0x19c [ 544.740104] should_fail.cold+0x10f/0x159 [ 544.744268] should_failslab+0xdb/0x130 [ 544.744283] kmem_cache_alloc+0x2d7/0x780 [ 544.744299] ? __mutex_unlock_slowpath+0x71/0x800 [ 544.752430] ? __lock_is_held+0xb6/0x140 [ 544.752451] __kernfs_new_node+0x70/0x420 [ 544.752464] kernfs_new_node+0x80/0xf0 [ 544.752476] __kernfs_create_file+0x46/0x323 [ 544.752488] sysfs_add_file_mode_ns+0x1e4/0x450 [ 544.752502] internal_create_group+0x232/0x7b0 [ 544.752517] sysfs_create_group+0x20/0x30 [ 544.752529] lo_ioctl+0x1176/0x1ce0 [ 544.752547] ? loop_probe+0x160/0x160 [ 544.752558] blkdev_ioctl+0x96b/0x1860 [ 544.752567] ? blkpg_ioctl+0x980/0x980 [ 544.752584] ? __might_sleep+0x93/0xb0 [ 544.799305] ? __fget+0x210/0x370 [ 544.799322] block_ioctl+0xde/0x120 [ 544.799336] ? blkdev_fallocate+0x3b0/0x3b0 [ 544.807106] do_vfs_ioctl+0x7ae/0x1060 [ 544.807121] ? selinux_file_mprotect+0x5d0/0x5d0 [ 544.807133] ? lock_downgrade+0x6e0/0x6e0 [ 544.807143] ? ioctl_preallocate+0x1c0/0x1c0 [ 544.807158] ? __fget+0x237/0x370 [ 544.840084] ? security_file_ioctl+0x89/0xb0 [ 544.844501] SyS_ioctl+0x8f/0xc0 [ 544.847867] ? do_vfs_ioctl+0x1060/0x1060 [ 544.852022] do_syscall_64+0x1e8/0x640 [ 544.855909] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 544.860758] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 544.866062] RIP: 0033:0x459697 [ 544.869254] RSP: 002b:00007f0241e81a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 544.876975] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000459697 [ 544.884249] RDX: 0000000000000007 RSI: 0000000000004c00 RDI: 0000000000000008 [ 544.891707] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 544.898965] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000007 [ 544.906230] R13: 00000000004c8976 R14: 00000000004df838 R15: 0000000000000006 16:28:33 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) socketpair(0x1, 0x8080b, 0x5c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_tcp_int(r1, 0x6, 0x6, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$UI_DEV_CREATE(r0, 0x5501) write$binfmt_misc(r2, &(0x7f0000000100)={'syz1', "2e689e9fdbd7584d8bbfa361ec7494591cea47320ee0405a3abdd52834f4399515e52ba278bfd64d"}, 0x2c) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:28:33 executing program 1 (fault-call:4 fault-nth:13): creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101003, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2014020, &(0x7f00000001c0)={[{@commit={'commit'}}]}) [ 544.925076] EXT4-fs (sda1): re-mounted. Opts: commit=0x0000000000000000, 16:28:33 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x30200, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) fanotify_init(0xc9efeccd0085c81a, 0x400) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) eventfd(0x6) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) [ 545.039884] input: syz0 as /devices/virtual/input/input245 [ 545.061634] FAULT_INJECTION: forcing a failure. [ 545.061634] name failslab, interval 1, probability 0, space 0, times 0 [ 545.091434] CPU: 0 PID: 28471 Comm: syz-executor.1 Not tainted 4.14.138 #34 [ 545.098588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 545.107951] Call Trace: [ 545.110550] dump_stack+0x138/0x19c [ 545.114202] should_fail.cold+0x10f/0x159 [ 545.118372] should_failslab+0xdb/0x130 [ 545.122362] kmem_cache_alloc+0x2d7/0x780 [ 545.126519] ? wait_for_completion+0x420/0x420 [ 545.131125] __kernfs_new_node+0x70/0x420 [ 545.135282] kernfs_new_node+0x80/0xf0 16:28:33 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) socket$kcm(0x29, 0x7, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000340)=0x3f, 0x4) symlink(&(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) times(0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) removexattr(0x0, &(0x7f0000000400)=ANY=[]) clone(0x80000000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xee}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000200)={r2, @in6={{0xa, 0x4e23, 0x391a, @local, 0x4}}}, 0xfffffffffffffdbf) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)={&(0x7f0000000180)='./file0\x00'}, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") write$P9_RSETATTR(r0, &(0x7f0000000040)={0x7, 0x1b, 0x1}, 0x7) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:28:33 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{0x5c, 0x91, 0x6d, 0xffffffffffffff7f}, 'syz0\x00', 0x1b}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x400000, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000100)) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:28:33 executing program 3 (fault-call:4 fault-nth:0): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) [ 545.139169] __kernfs_create_file+0x46/0x323 [ 545.139184] sysfs_add_file_mode_ns+0x1e4/0x450 [ 545.139199] internal_create_group+0x232/0x7b0 [ 545.139215] sysfs_create_group+0x20/0x30 [ 545.139227] lo_ioctl+0x1176/0x1ce0 [ 545.139240] ? loop_probe+0x160/0x160 [ 545.164527] blkdev_ioctl+0x96b/0x1860 [ 545.168418] ? blkpg_ioctl+0x980/0x980 [ 545.168437] ? __might_sleep+0x93/0xb0 [ 545.168448] ? __fget+0x210/0x370 [ 545.168463] block_ioctl+0xde/0x120 [ 545.168474] ? blkdev_fallocate+0x3b0/0x3b0 [ 545.168485] do_vfs_ioctl+0x7ae/0x1060 16:28:33 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x30200, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) mkdir(&(0x7f0000000040)='./file0\x00', 0x2) close(r0) eventfd(0x33) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) [ 545.168499] ? selinux_file_mprotect+0x5d0/0x5d0 [ 545.168512] ? lock_downgrade+0x6e0/0x6e0 [ 545.191653] ? ioctl_preallocate+0x1c0/0x1c0 [ 545.191669] ? __fget+0x237/0x370 [ 545.191689] ? security_file_ioctl+0x89/0xb0 [ 545.191699] SyS_ioctl+0x8f/0xc0 [ 545.191707] ? do_vfs_ioctl+0x1060/0x1060 [ 545.191721] do_syscall_64+0x1e8/0x640 [ 545.191730] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 545.191748] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 545.191756] RIP: 0033:0x459697 [ 545.191762] RSP: 002b:00007f0241e81a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 545.191774] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000459697 [ 545.191779] RDX: 0000000000000007 RSI: 0000000000004c00 RDI: 0000000000000008 [ 545.191785] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 545.191791] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000007 [ 545.191796] R13: 00000000004c8976 R14: 00000000004df838 R15: 0000000000000006 [ 545.275102] FAULT_INJECTION: forcing a failure. [ 545.275102] name failslab, interval 1, probability 0, space 0, times 0 [ 545.305493] CPU: 0 PID: 28491 Comm: syz-executor.3 Not tainted 4.14.138 #34 [ 545.312642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 545.312648] Call Trace: [ 545.312667] dump_stack+0x138/0x19c [ 545.312685] should_fail.cold+0x10f/0x159 [ 545.312701] should_failslab+0xdb/0x130 [ 545.329164] kmem_cache_alloc+0x2d7/0x780 [ 545.329181] ? selinux_capable+0x36/0x40 [ 545.337306] getname_flags+0xcb/0x580 [ 545.337323] user_path_mountpoint_at+0x29/0x50 [ 545.337339] SyS_umount+0x10c/0x380 [ 545.337349] ? SyS_write+0x15e/0x230 [ 545.337360] ? __detach_mounts+0x2f0/0x2f0 [ 545.337377] ? do_syscall_64+0x53/0x640 [ 545.345620] ? __detach_mounts+0x2f0/0x2f0 [ 545.345635] do_syscall_64+0x1e8/0x640 [ 545.345645] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 545.345664] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 545.345673] RIP: 0033:0x459829 [ 545.345678] RSP: 002b:00007f1ab9d02c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 545.345690] RAX: ffffffffffffffda RBX: 00007f1ab9d02c90 RCX: 0000000000459829 [ 545.345699] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200000c0 [ 545.351216] input: syz0 as /devices/virtual/input/input246 [ 545.354619] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 545.354627] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1ab9d036d4 16:28:33 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x30200, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) eventfd(0x6) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x800, 0x309d01) recvfrom$netrom(r1, &(0x7f0000000100)=""/22, 0x16, 0x20, &(0x7f0000000240)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x6}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) 16:28:33 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) fsetxattr$security_selinux(r0, &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:hald_log_t:s0\x00', 0x20, 0x2) [ 545.354632] R13: 00000000004c8f97 R14: 00000000004e00c0 R15: 0000000000000004 16:28:33 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:28:33 executing program 3 (fault-call:4 fault-nth:1): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) [ 545.496422] EXT4-fs (sda1): re-mounted. Opts: commit=0x0000000000000000, [ 545.529388] input: syz0 as /devices/virtual/input/input248 [ 545.612445] input: syz0 as /devices/virtual/input/input249 [ 545.620217] audit: type=1400 audit(1565454513.913:140): avc: denied { associate } for pid=28505 comm="syz-executor.4" name="dsp1" dev="devtmpfs" ino=15274 scontext=system_u:object_r:hald_log_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=filesystem permissive=1 [ 545.662553] FAULT_INJECTION: forcing a failure. [ 545.662553] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 545.674497] CPU: 0 PID: 28522 Comm: syz-executor.3 Not tainted 4.14.138 #34 [ 545.681696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 545.691067] Call Trace: [ 545.693682] dump_stack+0x138/0x19c [ 545.697332] should_fail.cold+0x10f/0x159 [ 545.701511] __alloc_pages_nodemask+0x1d6/0x7a0 [ 545.706198] ? fs_reclaim_acquire+0x20/0x20 [ 545.710529] ? __alloc_pages_slowpath+0x2930/0x2930 [ 545.715561] cache_grow_begin+0x80/0x400 [ 545.719630] kmem_cache_alloc+0x6a6/0x780 [ 545.723818] getname_flags+0xcb/0x580 [ 545.723835] user_path_mountpoint_at+0x29/0x50 [ 545.723850] SyS_umount+0x10c/0x380 [ 545.723860] ? SyS_write+0x15e/0x230 [ 545.723877] ? __detach_mounts+0x2f0/0x2f0 [ 545.732258] ? do_syscall_64+0x53/0x640 [ 545.732273] ? __detach_mounts+0x2f0/0x2f0 [ 545.732285] do_syscall_64+0x1e8/0x640 [ 545.732294] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 545.732311] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 545.732319] RIP: 0033:0x459829 [ 545.732325] RSP: 002b:00007f1ab9d23c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 545.732336] RAX: ffffffffffffffda RBX: 00007f1ab9d23c90 RCX: 0000000000459829 [ 545.732342] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200000c0 [ 545.732348] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 545.732353] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1ab9d246d4 [ 545.732358] R13: 00000000004c8f97 R14: 00000000004e00c0 R15: 0000000000000004 16:28:34 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)) 16:28:34 executing program 1 (fault-call:4 fault-nth:14): creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101003, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2014020, &(0x7f00000001c0)={[{@commit={'commit'}}]}) 16:28:34 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) r2 = syz_open_dev$dspn(&(0x7f0000000600)='/dev/dsp#\x00', 0x10001, 0x121040) ioctl$ASHMEM_GET_PROT_MASK(r2, 0x7706, &(0x7f0000000580)) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x40100, 0x0) getsockopt$netrom_NETROM_T4(r3, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000540)='/selinux/load\x00', 0x2, 0x0) close(r1) ioctl$RNDADDENTROPY(r3, 0x40085203, &(0x7f00000002c0)={0x7, 0x55, "abb18fe757db0af5dd14d4529a97a813739dfbba396d2805f8ec37b025d3e9934cda04f494adfc277dd22bd95d8321ba0021ac19fb87062558dd75a22e72c6e11d305f1ad74ad5b812b8a8f47b30ce3ea75c7627fc"}) mknodat(r2, &(0x7f00000005c0)='./file0\x00', 0x400, 0xfff) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x2, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',version=9p2000.L,loose,loose,dfltuid=', @ANYRESHEX=r4, @ANYBLOB="2c63616368653d6e6f6e652c756e616d653d73656c696e75782c63616368657461673d2f70726f632f636170692f636170693230002c636e616d653d242c6673757569643d343d6139376139332d39d437622d333464662d396534342d33646166337f31382c6f626a5f757365723d2f70726f632f636170692f636170693230002c6d61736b3d5e4d41595f455845432c6f626a5f757365723d2f70726f632f636170692f636170693230002c7375626a5f747970653d2f70726f632f636170692f636170693230002c00"]) r5 = eventfd(0x7) recvfrom$ax25(r5, &(0x7f0000000040)=""/17, 0x11, 0x0, &(0x7f0000000240)={{0x3, @bcast, 0x3}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @default]}, 0x48) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000680)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r6, 0x100, 0x70bd26, 0x25dfdbfe, {}, [""]}, 0x1c}}, 0x801) 16:28:34 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/mixer\x00', 0x80000, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000600)={0xbd, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000640)={0x400, r1}) timer_create(0x3, &(0x7f0000000000)={0x0, 0x35}, &(0x7f0000000040)=0x0) timer_getoverrun(r2) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x197000, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000100)={0x0, 0x101, 0x4, 0x9}, 0x8) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000140)={'syz0\x00', {}, 0x34, [], [], [0x0, 0x0, 0x0, 0x1b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc]}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) ioctl$UI_DEV_DESTROY(r4, 0x5502) 16:28:34 executing program 3 (fault-call:4 fault-nth:2): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) [ 545.904930] input: syz0 as /devices/virtual/input/input250 [ 545.910262] FAULT_INJECTION: forcing a failure. [ 545.910262] name failslab, interval 1, probability 0, space 0, times 0 [ 545.931207] CPU: 0 PID: 28536 Comm: syz-executor.1 Not tainted 4.14.138 #34 [ 545.938344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 545.938350] Call Trace: [ 545.938373] dump_stack+0x138/0x19c [ 545.938394] should_fail.cold+0x10f/0x159 [ 545.938412] should_failslab+0xdb/0x130 [ 545.938427] kmem_cache_alloc+0x2d7/0x780 [ 545.938445] ? wait_for_completion+0x420/0x420 [ 545.971268] __kernfs_new_node+0x70/0x420 [ 545.975430] kernfs_new_node+0x80/0xf0 [ 545.979327] __kernfs_create_file+0x46/0x323 [ 545.979344] sysfs_add_file_mode_ns+0x1e4/0x450 [ 545.979358] internal_create_group+0x232/0x7b0 [ 545.979374] sysfs_create_group+0x20/0x30 [ 545.988449] lo_ioctl+0x1176/0x1ce0 [ 545.988466] ? loop_probe+0x160/0x160 [ 545.988480] blkdev_ioctl+0x96b/0x1860 [ 545.988490] ? blkpg_ioctl+0x980/0x980 [ 545.988507] ? __might_sleep+0x93/0xb0 [ 545.988517] ? __fget+0x210/0x370 [ 545.988530] block_ioctl+0xde/0x120 [ 546.023378] ? blkdev_fallocate+0x3b0/0x3b0 [ 546.027719] do_vfs_ioctl+0x7ae/0x1060 [ 546.031636] ? selinux_file_mprotect+0x5d0/0x5d0 [ 546.036404] ? lock_downgrade+0x6e0/0x6e0 [ 546.040745] ? ioctl_preallocate+0x1c0/0x1c0 [ 546.045167] ? __fget+0x237/0x370 [ 546.048664] ? security_file_ioctl+0x89/0xb0 [ 546.053085] SyS_ioctl+0x8f/0xc0 [ 546.056462] ? do_vfs_ioctl+0x1060/0x1060 [ 546.060622] do_syscall_64+0x1e8/0x640 [ 546.064610] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 546.069567] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 546.074785] RIP: 0033:0x459697 [ 546.077986] RSP: 002b:00007f0241e81a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 546.085689] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000459697 [ 546.093061] RDX: 0000000000000007 RSI: 0000000000004c00 RDI: 0000000000000008 [ 546.100422] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 546.107701] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000007 [ 546.114992] R13: 00000000004c8976 R14: 00000000004df838 R15: 0000000000000006 [ 546.131377] FAULT_INJECTION: forcing a failure. [ 546.131377] name failslab, interval 1, probability 0, space 0, times 0 [ 546.143169] EXT4-fs (sda1): re-mounted. Opts: commit=0x0000000000000000, [ 546.150398] CPU: 0 PID: 28539 Comm: syz-executor.3 Not tainted 4.14.138 #34 [ 546.157526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 546.166901] Call Trace: [ 546.169505] dump_stack+0x138/0x19c [ 546.173157] should_fail.cold+0x10f/0x159 [ 546.177314] should_failslab+0xdb/0x130 [ 546.177330] kmem_cache_alloc_trace+0x2e9/0x790 [ 546.186846] ? lock_downgrade+0x6e0/0x6e0 [ 546.186864] ? devm_device_remove_groups+0x50/0x50 [ 546.186880] kobject_uevent_env+0x378/0xc23 [ 546.196120] ? wait_for_completion+0x420/0x420 [ 546.196147] kobject_uevent+0x20/0x26 [ 546.205053] device_del+0x65c/0xaa0 [ 546.205069] ? __device_links_no_driver+0x220/0x220 [ 546.205083] ? synchronize_srcu+0x233/0x3e2 [ 546.205097] ? simple_release_fs+0x8c/0xb0 [ 546.212513] device_unregister+0x15/0x30 [ 546.212528] bdi_unregister+0x42b/0x600 [ 546.212538] ? wb_blkcg_offline+0x180/0x180 [ 546.212553] ? refcount_sub_and_test+0x8d/0xf0 [ 546.212564] ? lock_downgrade+0x6e0/0x6e0 [ 546.212575] bdi_put+0x13a/0x170 [ 546.212590] generic_shutdown_super+0x2b0/0x370 [ 546.212600] kill_anon_super+0x3f/0x60 [ 546.212613] fuse_kill_sb_anon+0x1e/0x30 [ 546.212621] deactivate_locked_super+0x74/0xe0 [ 546.212629] deactivate_super+0x85/0xa0 [ 546.212640] cleanup_mnt+0xb2/0x150 [ 546.212651] __cleanup_mnt+0x16/0x20 [ 546.212663] task_work_run+0x114/0x190 [ 546.212679] exit_to_usermode_loop+0x1da/0x220 [ 546.212691] do_syscall_64+0x4bc/0x640 [ 546.212702] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 546.227138] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 546.314035] RIP: 0033:0x459829 [ 546.317246] RSP: 002b:00007f1ab9d23c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 546.324949] RAX: 0000000000000000 RBX: 00007f1ab9d23c90 RCX: 0000000000459829 [ 546.332201] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200000c0 [ 546.339483] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 546.346854] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1ab9d246d4 16:28:34 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) fsync(r0) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = socket$nl_crypto(0x10, 0x3, 0x15) listen(r1, 0x9) 16:28:34 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) io_setup(0xfffffffffffffff1, &(0x7f0000000040)=0x0) io_cancel(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0xfffffffeffffffff, r0, &(0x7f0000000180)="c2a9ea76679072624ba987cd3fe890b51c5690c1af1ca8e7a6d6b4b513a0e3bc43347c5e5084893c8dd9e213b14fbd52aeae63ca11cbf1804420288a0c5dc90a2c92064ba05216e5844358f0b7e086c093fbe4dd92dfa815616ca27ed4143f1d0590e4fade5d9abc08f0ebaa52f772a91c4f1742ca518cd6a89ec70d513fb327a714a4f757d194c48242796cb2862ec23994a5ff6978a0e9923bb653d7816d40f9cc9b2cd80cb440505f806c46f828499952dee42d9f8018a0a1dd98c7597d15e2431d9a27298e", 0xc7, 0xad, 0x0, 0x1, r0}, &(0x7f00000002c0)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) [ 546.354115] R13: 00000000004c8f97 R14: 00000000004e00c0 R15: 0000000000000004 16:28:34 executing program 3 (fault-call:4 fault-nth:3): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 16:28:34 executing program 1 (fault-call:4 fault-nth:15): creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101003, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2014020, &(0x7f00000001c0)={[{@commit={'commit'}}]}) [ 546.453922] FAULT_INJECTION: forcing a failure. [ 546.453922] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 546.465776] CPU: 0 PID: 28563 Comm: syz-executor.3 Not tainted 4.14.138 #34 [ 546.465786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 546.465791] Call Trace: [ 546.465815] dump_stack+0x138/0x19c [ 546.465835] should_fail.cold+0x10f/0x159 [ 546.465853] __alloc_pages_nodemask+0x1d6/0x7a0 [ 546.465863] ? fs_reclaim_acquire+0x20/0x20 [ 546.465875] ? __alloc_pages_slowpath+0x2930/0x2930 [ 546.465895] cache_grow_begin+0x80/0x400 [ 546.465909] kmem_cache_alloc_trace+0x6b2/0x790 [ 546.465928] ? devm_device_remove_groups+0x50/0x50 [ 546.465942] kobject_uevent_env+0x378/0xc23 [ 546.465953] ? wait_for_completion+0x420/0x420 [ 546.465974] kobject_uevent+0x20/0x26 [ 546.465986] device_del+0x65c/0xaa0 [ 546.465999] ? __device_links_no_driver+0x220/0x220 [ 546.466014] ? synchronize_srcu+0x233/0x3e2 [ 546.466024] ? simple_release_fs+0x8c/0xb0 [ 546.466036] device_unregister+0x15/0x30 [ 546.466061] bdi_unregister+0x42b/0x600 [ 546.466076] ? wb_blkcg_offline+0x180/0x180 [ 546.466094] ? refcount_sub_and_test+0x8d/0xf0 [ 546.466104] ? lock_downgrade+0x6e0/0x6e0 [ 546.466117] bdi_put+0x13a/0x170 [ 546.466129] generic_shutdown_super+0x2b0/0x370 [ 546.466141] kill_anon_super+0x3f/0x60 [ 546.466152] fuse_kill_sb_anon+0x1e/0x30 [ 546.466161] deactivate_locked_super+0x74/0xe0 [ 546.466169] deactivate_super+0x85/0xa0 [ 546.466181] cleanup_mnt+0xb2/0x150 [ 546.466190] __cleanup_mnt+0x16/0x20 [ 546.466203] task_work_run+0x114/0x190 [ 546.466221] exit_to_usermode_loop+0x1da/0x220 [ 546.466235] do_syscall_64+0x4bc/0x640 [ 546.506232] audit: type=1400 audit(1565454514.803:141): avc: denied { listen } for pid=28558 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 546.507032] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 546.507064] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 546.512611] input: syz0 as /devices/virtual/input/input253 [ 546.515774] RIP: 0033:0x459829 [ 546.515781] RSP: 002b:00007f1ab9d23c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 546.515793] RAX: 0000000000000000 RBX: 00007f1ab9d23c90 RCX: 0000000000459829 [ 546.515799] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200000c0 [ 546.515805] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 546.515811] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1ab9d246d4 [ 546.515818] R13: 00000000004c8f97 R14: 00000000004e00c0 R15: 0000000000000004 [ 546.531715] FAULT_INJECTION: forcing a failure. [ 546.531715] name failslab, interval 1, probability 0, space 0, times 0 [ 546.543389] CPU: 1 PID: 28568 Comm: syz-executor.1 Not tainted 4.14.138 #34 [ 546.551551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 546.551556] Call Trace: [ 546.551574] dump_stack+0x138/0x19c [ 546.551591] should_fail.cold+0x10f/0x159 [ 546.551608] should_failslab+0xdb/0x130 [ 546.551622] kmem_cache_alloc+0x2d7/0x780 [ 546.559627] ? wait_for_completion+0x420/0x420 [ 546.559651] __kernfs_new_node+0x70/0x420 [ 546.568545] kernfs_new_node+0x80/0xf0 [ 546.568559] __kernfs_create_file+0x46/0x323 [ 546.584699] sysfs_add_file_mode_ns+0x1e4/0x450 [ 546.593343] internal_create_group+0x232/0x7b0 [ 546.593358] sysfs_create_group+0x20/0x30 [ 546.593370] lo_ioctl+0x1176/0x1ce0 [ 546.593382] ? loop_probe+0x160/0x160 [ 546.593393] blkdev_ioctl+0x96b/0x1860 [ 546.593401] ? blkpg_ioctl+0x980/0x980 [ 546.593418] ? __might_sleep+0x93/0xb0 [ 546.593430] ? __fget+0x210/0x370 [ 546.608593] block_ioctl+0xde/0x120 [ 546.617045] ? blkdev_fallocate+0x3b0/0x3b0 [ 546.645828] do_vfs_ioctl+0x7ae/0x1060 [ 546.656623] ? selinux_file_mprotect+0x5d0/0x5d0 [ 546.818992] ? lock_downgrade+0x6e0/0x6e0 [ 546.823146] ? ioctl_preallocate+0x1c0/0x1c0 [ 546.827544] ? __fget+0x237/0x370 [ 546.830995] ? security_file_ioctl+0x89/0xb0 [ 546.835403] SyS_ioctl+0x8f/0xc0 [ 546.838752] ? do_vfs_ioctl+0x1060/0x1060 [ 546.842934] do_syscall_64+0x1e8/0x640 [ 546.846809] ? trace_hardirqs_off_thunk+0x1a/0x1c 16:28:35 executing program 3 (fault-call:4 fault-nth:4): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) [ 546.851646] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 546.856822] RIP: 0033:0x459697 [ 546.860008] RSP: 002b:00007f0241e81a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 546.867801] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000459697 [ 546.875065] RDX: 0000000000000007 RSI: 0000000000004c00 RDI: 0000000000000008 [ 546.882429] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 546.889688] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000007 [ 546.896946] R13: 00000000004c8976 R14: 00000000004df838 R15: 0000000000000006 [ 546.922392] input: syz0 as /devices/virtual/input/input254 [ 546.946069] FAULT_INJECTION: forcing a failure. [ 546.946069] name failslab, interval 1, probability 0, space 0, times 0 [ 546.966931] EXT4-fs (sda1): re-mounted. Opts: commit=0x0000000000000000, [ 546.975838] CPU: 1 PID: 28573 Comm: syz-executor.3 Not tainted 4.14.138 #34 [ 546.982963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 546.992321] Call Trace: [ 546.994924] dump_stack+0x138/0x19c [ 546.998561] should_fail.cold+0x10f/0x159 [ 547.002743] should_failslab+0xdb/0x130 [ 547.006723] kmem_cache_alloc_node+0x287/0x780 [ 547.006744] __alloc_skb+0x9c/0x500 [ 547.006756] ? skb_scrub_packet+0x4b0/0x4b0 [ 547.006786] ? netlink_has_listeners+0x20a/0x330 [ 547.006801] kobject_uevent_env+0x781/0xc23 [ 547.028358] ? wait_for_completion+0x420/0x420 [ 547.032938] kobject_uevent+0x20/0x26 [ 547.036728] device_del+0x65c/0xaa0 [ 547.040342] ? __device_links_no_driver+0x220/0x220 [ 547.045347] ? synchronize_srcu+0x233/0x3e2 [ 547.049650] ? simple_release_fs+0x8c/0xb0 [ 547.053869] device_unregister+0x15/0x30 [ 547.057918] bdi_unregister+0x42b/0x600 [ 547.061893] ? wb_blkcg_offline+0x180/0x180 [ 547.066215] ? refcount_sub_and_test+0x8d/0xf0 16:28:35 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)) ioctl$sock_x25_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={@null=' \x00', 0x3, 'vlan0\x00'}) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) [ 547.070793] ? lock_downgrade+0x6e0/0x6e0 [ 547.074951] bdi_put+0x13a/0x170 [ 547.078332] generic_shutdown_super+0x2b0/0x370 [ 547.083034] kill_anon_super+0x3f/0x60 [ 547.086929] fuse_kill_sb_anon+0x1e/0x30 [ 547.090994] deactivate_locked_super+0x74/0xe0 [ 547.091005] deactivate_super+0x85/0xa0 [ 547.091018] cleanup_mnt+0xb2/0x150 [ 547.091028] __cleanup_mnt+0x16/0x20 [ 547.091039] task_work_run+0x114/0x190 [ 547.091057] exit_to_usermode_loop+0x1da/0x220 [ 547.091070] do_syscall_64+0x4bc/0x640 [ 547.099611] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 547.099631] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 547.099640] RIP: 0033:0x459829 [ 547.099645] RSP: 002b:00007f1ab9d23c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 547.140266] RAX: 0000000000000000 RBX: 00007f1ab9d23c90 RCX: 0000000000459829 [ 547.147528] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200000c0 [ 547.154879] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 547.162146] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1ab9d246d4 16:28:35 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x30200, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) eventfd(0x6) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x0, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r2, 0x840b9c721f0ab9ac, 0x0, @in6={0xa, 0x4e24, 0xe9, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8001}}}, 0x90) 16:28:35 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000180)=""/144, 0xffffffffffffff84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) [ 547.169418] R13: 00000000004c8f97 R14: 00000000004e00c0 R15: 0000000000000004 16:28:35 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4000) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000040)={0x20, 0x2}) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:28:35 executing program 1 (fault-call:4 fault-nth:16): creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101003, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2014020, &(0x7f00000001c0)={[{@commit={'commit'}}]}) 16:28:35 executing program 3 (fault-call:4 fault-nth:5): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 16:28:35 executing program 4: syz_open_dev$rtc(&(0x7f0000000080)='/dev/rtc#\x00', 0x8, 0x80) r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x8000, 0x1) read(r0, &(0x7f0000000180)=""/144, 0x67) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") chmod(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$int_in(r1, 0x800060c004500a, &(0x7f00000000c0)) [ 547.296744] input: syz0 as /devices/virtual/input/input255 [ 547.328360] FAULT_INJECTION: forcing a failure. [ 547.328360] name failslab, interval 1, probability 0, space 0, times 0 [ 547.368327] CPU: 0 PID: 28596 Comm: syz-executor.1 Not tainted 4.14.138 #34 [ 547.387305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 547.387311] Call Trace: [ 547.387335] dump_stack+0x138/0x19c [ 547.387351] should_fail.cold+0x10f/0x159 [ 547.387366] should_failslab+0xdb/0x130 [ 547.387377] kmem_cache_alloc+0x2d7/0x780 [ 547.387388] ? wait_for_completion+0x420/0x420 [ 547.387405] __kernfs_new_node+0x70/0x420 [ 547.387418] kernfs_new_node+0x80/0xf0 [ 547.387429] __kernfs_create_file+0x46/0x323 [ 547.387441] sysfs_add_file_mode_ns+0x1e4/0x450 [ 547.387456] internal_create_group+0x232/0x7b0 [ 547.387470] sysfs_create_group+0x20/0x30 [ 547.387480] lo_ioctl+0x1176/0x1ce0 [ 547.387492] ? loop_probe+0x160/0x160 [ 547.387502] blkdev_ioctl+0x96b/0x1860 [ 547.387511] ? blkpg_ioctl+0x980/0x980 [ 547.387528] ? __might_sleep+0x93/0xb0 [ 547.387537] ? __fget+0x210/0x370 16:28:35 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340)='/proc/capi/capi20\x00', 0x1, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) eventfd(0x6) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) mknod(&(0x7f0000000100)='./file0\x00', 0x0, 0x4) [ 547.387549] block_ioctl+0xde/0x120 [ 547.387559] ? blkdev_fallocate+0x3b0/0x3b0 [ 547.387570] do_vfs_ioctl+0x7ae/0x1060 [ 547.387583] ? selinux_file_mprotect+0x5d0/0x5d0 [ 547.387594] ? lock_downgrade+0x6e0/0x6e0 [ 547.387604] ? ioctl_preallocate+0x1c0/0x1c0 [ 547.387614] ? __fget+0x237/0x370 [ 547.387632] ? security_file_ioctl+0x89/0xb0 [ 547.387642] SyS_ioctl+0x8f/0xc0 [ 547.387650] ? do_vfs_ioctl+0x1060/0x1060 [ 547.387664] do_syscall_64+0x1e8/0x640 [ 547.387672] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 547.387688] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 547.420141] RIP: 0033:0x459697 [ 547.420149] RSP: 002b:00007f0241e81a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 547.420160] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000459697 [ 547.420165] RDX: 0000000000000007 RSI: 0000000000004c00 RDI: 0000000000000008 [ 547.420170] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 547.420175] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000007 16:28:35 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x0, 0x10400) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000080)={0x0, 0xfffffffffffffffa, 0x2, [0x0, 0x8]}, &(0x7f00000000c0)=0xc) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000001c0)={r2, 0x1f, 0x30}, 0xc) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="76643de668bc23fe43e16bc9dd3f3b41d805d0684120d456f0d5c97dd2104fc7887b055ee621d059058bffa0ffdb573d72195c", @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64650180000030303030303030303030303030303034303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) fstat(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETOWNER(r1, 0x400454cc, r3) 16:28:35 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) r1 = inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x80000020) inotify_rm_watch(r0, r1) ftruncate(r0, 0xfffffffffffffff9) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000040), &(0x7f0000000180)=0x8) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x8, 0xbf}, &(0x7f0000000200)=0xc) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000400)=ANY=[@ANYRES32=r2, @ANYBLOB="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"], &(0x7f0000000340)=0x100) [ 547.420181] R13: 00000000004c8976 R14: 00000000004df838 R15: 0000000000000006 16:28:35 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="66643d90a5041f552cd0b9c37a0b0fd89ea2c8903ac9ff072b534ea60455248bd11d018d3cfe10cba7efaf41a4f91fef96f22eb655a98830480835ed2789df87e3aaa00fb7e7800d0cc512841d5496270b293e908e054fcf3e10f40d4988e1f7ec14e143935001dfe740d894f255a222d440d6215905671f8921e24edd5abc44bad74f88f3f608ab92db2842c79df3e7114e0a31aef276d83ea6af08d5fb66cf320dd594323217df561ecd487381603dabb3d17190d9ee90872c85d75f2d5f6b051265c7f8e9116890", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67596ef0ce0b8d8f30a199a444ce15fc51afdf7a9c2a718bd3628a9338981113930ad89762255b13b55842aa47f48f43151f3751c1a8f8640313d4a314c13089b467ad194f20db09241b49706db36f60e216a055547501f4255a329ae651542038b68a095a08461622da475aaa9eee6b05216467eeafdad4cdb4f3f122851c9e5ef71e92f5b693032a9e9b1f5828964f21bb7cc322b895666518a7f24cda3bb0a0977abf43614188faedc7c548343c4f224ad55112ef55891062c8db224af1996a15741b201278e61537a7a737dd", @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) remap_file_pages(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000000, 0x80bfe30, 0x3) 16:28:35 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x30200, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) ioctl$VIDIOC_S_JPEGCOMP(r1, 0x408c563e, &(0x7f0000000240)={0x685a, 0x8, 0x19, "7c603a8f9c30869e85d31c6d4b5109d192abc5922f3fab14151655613bedd68ba5f6737af6c850bdc67a7cb35187be5eba432e4a69c33176d8465ed3", 0x3a, "91bd544a24b39ff9d7ba4a42044834aedc735d771648ae8a9ac2ab9d6807a59e7c86ed13d052fef41de8bbbf16fe0db7f20a7bc3e4e57217875ea9e5", 0x18}) ioctl$NBD_CLEAR_QUE(r1, 0xab05) close(r0) eventfd(0x6) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) [ 547.635685] EXT4-fs (sda1): re-mounted. Opts: commit=0x0000000000000000, [ 547.660591] input: syz0 as /devices/virtual/input/input256 16:28:36 executing program 2: read(0xffffffffffffffff, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(0xffffffffffffffff, 0x280000040045010, &(0x7f0000000040)=0x1) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x4000000000007) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0x7, 0x0, 0x1, 'queue0\x00', 0x26e3}) 16:28:36 executing program 1 (fault-call:4 fault-nth:17): creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101003, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2014020, &(0x7f00000001c0)={[{@commit={'commit'}}]}) 16:28:36 executing program 3: open$dir(&(0x7f0000000000)='./file0\x00', 0x10000, 0x40) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e332b637050925e060df93729ca608185228d22cde3636c95f6bca91bd5e18d6f7de3f91c0e9a2e38", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = syz_open_dev$mouse(&(0x7f00000002c0)='/dev/input/mouse#\x00', 0x2, 0x400000) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000000280)) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000140)=0x1e, &(0x7f0000000180)=0x2) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 16:28:36 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x7, 0x2) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000040)) 16:28:36 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$RTC_WIE_OFF(r0, 0x7010) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000040)) 16:28:36 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x30200, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r2 = dup3(r1, r0, 0x80000) close(r0) eventfd(0x6) write$P9_RRENAME(r0, &(0x7f0000000040)={0x7, 0x15, 0x2}, 0x7) getpeername(r2, &(0x7f0000000240)=@ax25={{0x3, @default}, [@null, @bcast, @rose, @netrom, @remote, @netrom, @default, @netrom]}, &(0x7f0000000100)=0x80) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) [ 547.874118] input: syz0 as /devices/virtual/input/input257 [ 547.883774] FAULT_INJECTION: forcing a failure. [ 547.883774] name failslab, interval 1, probability 0, space 0, times 0 [ 547.902732] CPU: 1 PID: 28659 Comm: syz-executor.1 Not tainted 4.14.138 #34 [ 547.909859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 547.919216] Call Trace: [ 547.921812] dump_stack+0x138/0x19c [ 547.921832] should_fail.cold+0x10f/0x159 [ 547.921851] should_failslab+0xdb/0x130 [ 547.921869] kmem_cache_alloc+0x2d7/0x780 [ 547.937744] ? wait_for_completion+0x420/0x420 [ 547.942392] __kernfs_new_node+0x70/0x420 [ 547.946565] kernfs_new_node+0x80/0xf0 [ 547.950469] __kernfs_create_file+0x46/0x323 [ 547.954917] sysfs_add_file_mode_ns+0x1e4/0x450 [ 547.959608] internal_create_group+0x232/0x7b0 [ 547.964214] sysfs_create_group+0x20/0x30 [ 547.968410] lo_ioctl+0x1176/0x1ce0 16:28:36 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000200)='/dev/dsp#\x00', 0x1005, 0x20000) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000140)={0x4, &(0x7f0000000040)=[{}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000240)={r1, &(0x7f00000001c0)=""/29}) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) [ 547.972047] ? loop_probe+0x160/0x160 [ 547.972062] blkdev_ioctl+0x96b/0x1860 [ 547.972073] ? blkpg_ioctl+0x980/0x980 [ 547.972092] ? __might_sleep+0x93/0xb0 [ 547.972105] ? __fget+0x210/0x370 [ 547.979803] block_ioctl+0xde/0x120 [ 547.994798] ? blkdev_fallocate+0x3b0/0x3b0 [ 547.999134] do_vfs_ioctl+0x7ae/0x1060 [ 548.003034] ? selinux_file_mprotect+0x5d0/0x5d0 [ 548.007803] ? lock_downgrade+0x6e0/0x6e0 [ 548.011965] ? ioctl_preallocate+0x1c0/0x1c0 [ 548.016383] ? __fget+0x237/0x370 [ 548.019856] ? security_file_ioctl+0x89/0xb0 16:28:36 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x4) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd703cb62eeb96a5177c001400090008000100c03a0000080002007f000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x84) preadv(r1, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) [ 548.024287] SyS_ioctl+0x8f/0xc0 [ 548.027662] ? do_vfs_ioctl+0x1060/0x1060 [ 548.031841] do_syscall_64+0x1e8/0x640 [ 548.035822] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 548.040850] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 548.046044] RIP: 0033:0x459697 [ 548.046050] RSP: 002b:00007f0241e81a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 548.046062] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000459697 [ 548.046068] RDX: 0000000000000007 RSI: 0000000000004c00 RDI: 0000000000000008 16:28:36 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x30200, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) eventfd(0x6) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) 16:28:36 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000003780)={0x0, @empty, @empty}, &(0x7f00000037c0)=0xc) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000003800)={r2, 0x1, 0x6, @dev={[], 0x25}}, 0x10) [ 548.046074] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 548.046080] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000007 [ 548.046087] R13: 00000000004c8976 R14: 00000000004df838 R15: 0000000000000006 [ 548.100659] input: syz0 as /devices/virtual/input/input258 [ 548.151562] EXT4-fs (sda1): re-mounted. Opts: commit=0x0000000000000000, 16:28:36 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x793e15c08130b93, 0xffffffffffffffff) connect$ax25(r0, &(0x7f0000000100)={{0x3, @bcast, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @default, @null]}, 0x48) mkdir(&(0x7f0000000340)='./file0\x00', 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0xffffffffffffffbb, 0x17, 0x1, {0x7, './file0'}}, 0x10) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r1, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x8200, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) sendmmsg$alg(r2, &(0x7f0000005380)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000380)="b99f12f4b8f040e8beecaddbcbb2f9ed702860762280e708d60d912e8875ecdc3824bd137adbf8767b32b34cf9f66ebd7aa8d4eb8c9a7c9b650e2a40dfb715cbcc4ebbc0323199231bd82cfccb7e5912c2ac03de19162ef8b8486757ea3b744d9f0c7292bba5df047126dd6b8f4547ab0041b6e1745881e9b8ef94ec7523689bc3", 0x81}, {&(0x7f0000000540)="3b47aba6b0dc7b1054c3f1453497464a3e6bda5e13299077365137ee07cc493ca33186a0622b7be51fca934a54f510663e263fb96599f143d9f9b2cb399177cbbaea046d5b4488a96bf6860eef101304d1aeacdeddd7ac607e6644c7d506b40c7798b9d9bad3a583eddc1ce3a6102b480c4e2f49d4ae798701e33eaf93cac4a163d30fffe6702860410b37", 0x8b}, {&(0x7f00000001c0)="82e7d3d905b9b04287d89bb5", 0xc}, {&(0x7f0000000280)="c0d32f1dcedc22a0b07f29d9a9d7951f2d0ff50bc5869f917b4cae775699970733cd4b3876c08079744156a34f0824842b3ee3e582ec5c337f06e285c211b819d0", 0x41}, {&(0x7f0000000780)="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", 0x1000}, {&(0x7f0000000600)="906f8aa608713578ae3c3b51354863c7451c9cbed9090bc20c910e32f33803c54832cf1a0162c7c10859b9a5393c31d95e665f5169b16e03a1b8fcc08fe9fe40b98479d2f1fd1d7a34a4863e120373e1ae7bab0530a29e09af56124289527d522e66771e7b7ae6158bb086318ed3eed35763c3f61a85eca721ab3184a9638f12a9f2b65c06548ec97cae59d786545be3ed3b93be20c99b6e13194a68089847bba2c4f2fa74247cc0d2e3d9cdc8d96a2cdd1ee6f541488f7149f437f06b6d55f9e2f6920996edbf9e423e1e78de621426", 0xd0}], 0x6, &(0x7f0000001800)=[@iv={0x110, 0x117, 0x2, 0xfc, "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"}], 0x110, 0x4}, {0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000001940)="02762ff6a1606cd373b8cda5ab6e20b21a541ef995872585c440632cf4d7ee0fcdb8e6fdc25ff0403efdf86dad163493e3b6cf2a2a0e60fbea98cc45930f36b67b02e5634b06b31dec7421798616a7e11e1d29b79afeafc18250134ccddae7b5d95dc1b1d689d35ca6c8a9ac74e08930bc78cbf1bddeb8021c9107b74a3959976b437b0d1fa2a87c1e23c7d3d0536320c86376eee46211e78992eab1c37b40351e40f7fca55cc8", 0xa7}, {&(0x7f0000001a00)="a4cc288d57f41bf23ea03f8d6ea88bbee85cd5f1cc590d10bd7186c315f5ac3d802b8c0c6edf90da4af02db2245cdb2c7e86359996d79ba11b9c3baef91596835aaec83eb38769de7bc9fe57f3e44697fafa8f751b786999599a4e0fd33c351538f7bc44e57c7f89ca8bda8f9b009193826913be876a1a22ed66b4384c187f3964dfecc7bac8dc9592502aa07dd7367f4688dff70b6b834e2325230d05f20581868ce3d54d542f5a65f9899fdbf1d3fe719364705b00c707cc5fb644117e8e010a6b735e7f76ddf4ffc1e39ef0014830cc243ffcbd3bef729c28e169104b2625eba22d30f5be0211b49b2ff4141931d4", 0xf0}, {&(0x7f0000000440)="db075d825bce108d6743923476a47ac45705ad09e4f29b48e81cb90b656001032d53a66ba279554dbcea9c162e06641c6cd087c4ad5fd0ab78", 0x39}, {&(0x7f0000001b00)="4a95245271839d0d1bf767e5787ddd3d802ded355c85e39694822f31f06fe8579be9e0ac02b46d89d844a9d14791491b33694a0eebc29c4cdcdf632bcaea1fbf442710c21596adc3fcd5ce34", 0x4c}, {&(0x7f0000001b80)="dc79bf6da9d8179f33390b6df952b054f848ec17e3ed000b6fb7bf92e14bf0fb4c44669af825dbfb618e8a8a06aae514d66d754ec3077d50cb5e50075af6734fa9a0a31c0184227555e60062e7dbc9d6bef12eff43626d4c2fc4f2c220d4de2eff419e7a3b738fa1f2be9dc7374164fbe4f26b7fb263e771c0e87500a2e311008e534eafa2e0bd267aab13680f3c28c5e347c37255ab", 0x96}, {&(0x7f0000001c40)="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", 0x1000}, {&(0x7f0000000700)="468d95b11f19ae3a54d95e683868eee5a3eb65048cd36ce608404207660e5f7ff2f26eaed075d8b74838046b7b97cae03dac05698aaa28aa", 0x38}], 0x7, &(0x7f0000002cc0)=[@iv={0x100, 0x117, 0x2, 0xe7, "008464d067313cacc1b941b7f1c3bd01b53f3a74c7a7e29be1c705f6f0586a8f899e6ef1cdaff62e8d9e9f1068ddf9fc5eb8c323555a61accc7591099a61903f2390fdde1269ea2b3ff8441b9b6e40ff76e676a0b6ba2d41b68d0441126e5c131cd22bec892eab3dc74a56f7a1f65b20770e761e26480bf5453def1ba83ab82ec558c80cc47236f18603ede708f911c6db5f3c1c2a7b3ae600f4a1f314c9b6987c7e2a86ef50e5fe8ba70d512e80fb5eafe214b33292adaa43f4338fb99b86f85159ebb665707f36b22005ef4472458634a3b37359f0b952148bac438d9123fa597ad224dfb708"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0xe1}, @iv={0x20, 0x117, 0x2, 0x5, "1dc6321deb"}, @assoc={0x18, 0x117, 0x4, 0x8}, @assoc={0x18, 0x117, 0x4, 0xc6ad}, @assoc={0x18, 0x117, 0x4, 0xd1c}, @assoc={0x18, 0x117, 0x4, 0x8}], 0x1b0}, {0x0, 0x0, &(0x7f00000052c0)=[{&(0x7f0000002e80)="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", 0x1000}, {&(0x7f0000003e80)="c5e7151561b9630a097cff93486d413fcfcac3d753e1eda1e7c78f56ff65fc4ff4f30478eaee4c16820c2168e8bd159d0d347a974f1c305f6314f0f540d8fccdbaf4d3b246a4d6fabbaf80e8b6", 0x4d}, {&(0x7f0000003f00)="26edd9d28e399bf43f9834561b63345401df13b8feefa98f864364332bc104eb5382bf1664a0e75b9f16dfe1a02f19d7e83ee69e3b76fc848126e6e1cb1d6009b63c384bc889d20062f493ec2045af68d55c49adde033ea27a4d6e985af22a2c177c6eab4f8a4a57802d76fbb12dafe9c33647e91fc423fecff36442cdfbfecd0c67e4685d540f08f50d0e3e597a17c9d29a79da6ca50e078a093d9a", 0x9c}, {&(0x7f0000003fc0)="f694909f8314c285b1a48fd91e4a74cb2839c4468c7ba35a023de5fc1ac8d53e4ac3843800d443ad4b59e2f93ef48cc29a5ce8b7f5d9c30cb91270566efb37273e53c34c125ebf4c7b4da265d27463c2cab4202aba861cba56f6d0e2989175bd08e14332e380aaba704418", 0x6b}, {&(0x7f0000004040)="5f27c71e438688fa91551aeced45de122f2286bcba6acf79f3ceb976466362295248fc0b78cc7e0afe524145b3199eb326b0abd98b93bd988d90ea0b6da47785fca6b3e778f3370ba0159f67bb6c05e5e1fff454e92aba4c1d1e451edf67f7ee2bd1aabc5ef6e421dd595b507241e47d32344b9e11bf599909fd41de6d88ddcd43221d402bcac58c95d644721f0171315df306d61667ce192d43c38e524ef8bdc86b6ef2", 0xa4}, {&(0x7f0000004100)="37deffe2d86260376266a7c51b2db314387b9c29d469e02e17f2c07ad1a3cfd767c35e38aa5074cf40838a9442d6298020c03903c0a5016171f476a8a3042beab7be775c14f584a4fb904983895f9cf078b27ad8c28d9851f05ac382eff659939de3b4c4ed43ac7c9ae69ef791e21ada69e7333ce27b", 0x76}, {&(0x7f0000004180)="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", 0x1000}, {&(0x7f0000005180)="05a392a6ee47999559124e5422ee1d9c9db0a2e2b859a48f30fe1303bd8646a56e0b173c5b566eaca6aa4cdd3872c434d7ac511fa1ce008345558818f2aac2f0b7d30ab8b696b91beabbfac627f54dd4cef0f870d925027a435857deb9607f3da5821e3b292827198706b3d176369e7ad4", 0x71}, {&(0x7f0000005200)="90f67caa233414efb030e112ab5abebf2cf96cd196c38e309faa82d8e3a9d531e204caf12519be4c1e2acf89382cf46f98d208132e7c1b6899b1c3ea0cd7141ea7e2c58aad7b23429e7d5526c65a0f734ce399987ede10b4fc322b8a0e2b6a814f28c6024851a33950c33061c6c9cda7a594c230100e56d6d0bb3d56281e47b0efe7b62096e64cc3d19abc6ea2369a1238a85404c2d42f3ccaf36b6079e033e881eae792f1d9a9", 0xa7}], 0x9, 0x0, 0x0, 0x40800}], 0x3, 0x40000) [ 548.198594] input: syz0 as /devices/virtual/input/input259 16:28:36 executing program 1 (fault-call:4 fault-nth:18): creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101003, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2014020, &(0x7f00000001c0)={[{@commit={'commit'}}]}) [ 548.279661] input: syz0 as /devices/virtual/input/input260 [ 548.334116] FAULT_INJECTION: forcing a failure. [ 548.334116] name failslab, interval 1, probability 0, space 0, times 0 [ 548.374652] CPU: 0 PID: 28704 Comm: syz-executor.1 Not tainted 4.14.138 #34 [ 548.381819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 548.381825] Call Trace: [ 548.381860] dump_stack+0x138/0x19c [ 548.381905] should_fail.cold+0x10f/0x159 [ 548.381938] should_failslab+0xdb/0x130 [ 548.381966] kmem_cache_alloc_trace+0x2e9/0x790 [ 548.382000] ? kernfs_put+0x35e/0x490 [ 548.382021] ? sysfs_add_file_mode_ns+0x1e4/0x450 [ 548.382050] ? devm_device_remove_groups+0x50/0x50 16:28:36 executing program 0: clock_gettime(0x0, &(0x7f0000004440)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001240)=""/202, 0xca}, {&(0x7f0000001340)=""/232, 0xe8}, {&(0x7f00000000c0)=""/40, 0x28}], 0x3, &(0x7f00000001c0)=""/44, 0x2c}}, {{&(0x7f0000001440)=@rc, 0x80, &(0x7f00000017c0)=[{&(0x7f00000014c0)=""/240, 0xf0}, {&(0x7f00000015c0)=""/166, 0xa6}, {&(0x7f0000001680)=""/73, 0x49}, {&(0x7f0000001700)=""/131, 0x83}], 0x4, &(0x7f0000001800)=""/26, 0x1a}, 0x2}, {{&(0x7f0000001840)=@ax25={{0x3, @null}, [@rose, @rose, @remote, @rose, @default, @bcast, @default, @rose]}, 0x80, &(0x7f0000002b40)=[{&(0x7f00000018c0)=""/4096, 0x1000}, {0x0}, {&(0x7f00000028c0)=""/218, 0xda}, {&(0x7f00000029c0)=""/127, 0x7f}, {&(0x7f0000002a40)=""/149, 0x95}, {&(0x7f0000002b00)=""/26, 0x1a}], 0x6, &(0x7f0000002bc0)=""/234, 0xea}, 0x7}, {{&(0x7f0000002cc0)=@nfc, 0x80, &(0x7f0000003040)=[{&(0x7f0000002d40)=""/122, 0x7a}, {&(0x7f0000002dc0)=""/42, 0x2a}, {&(0x7f0000002e00)=""/224, 0xe0}, {&(0x7f0000002f00)=""/110, 0x6e}, {&(0x7f0000002f80)=""/75, 0x4b}, {&(0x7f0000003000)=""/64, 0x40}], 0x6, &(0x7f00000030c0)=""/42, 0x2a}, 0x6}, {{&(0x7f0000003100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000003340)=[{&(0x7f0000003180)=""/141, 0x8d}, {&(0x7f0000003240)=""/203, 0xcb}], 0x2}, 0x8}, {{&(0x7f0000003380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f00000038c0)=[{&(0x7f0000003400)=""/110, 0x6e}, {&(0x7f0000003480)=""/246, 0xf6}, {&(0x7f0000003580)=""/215, 0xd7}, {&(0x7f0000003680)=""/197, 0xc5}, {&(0x7f0000003780)=""/200, 0xc8}, {&(0x7f0000003880)=""/16, 0x10}], 0x6}, 0x8000}, {{&(0x7f0000003940)=@alg, 0x80, &(0x7f0000003ac0)=[{&(0x7f00000039c0)=""/153, 0x99}, {&(0x7f0000003a80)=""/35, 0x23}], 0x2, &(0x7f0000003b00)}, 0x86b1}, {{&(0x7f0000003b40)=@can, 0x80, &(0x7f0000004140)=[{&(0x7f0000003bc0)=""/169, 0xa9}, {&(0x7f0000003c80)=""/180, 0xb4}, {&(0x7f0000003d40)=""/142, 0x8e}, {&(0x7f0000003e00)=""/139, 0x8b}, {&(0x7f0000003ec0)=""/239, 0xef}, {&(0x7f0000003fc0)=""/122, 0x7a}, {&(0x7f0000004040)=""/232, 0xe8}], 0x7, &(0x7f00000041c0)=""/117, 0x75}, 0xf1f}], 0x8, 0x10000, &(0x7f0000004480)={r0, r1+10000000}) setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f00000044c0)=0x1, 0x4) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x30200, 0x0) r5 = shmget(0x0, 0xe000, 0x1000, &(0x7f0000fef000/0xe000)=nil) shmctl$IPC_STAT(r5, 0x2, &(0x7f0000000240)=""/4096) getsockopt$netrom_NETROM_T4(r4, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) close(r3) eventfd(0x6) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) 16:28:36 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) [ 548.382073] kobject_uevent_env+0x378/0xc23 [ 548.382095] ? internal_create_group+0x49a/0x7b0 [ 548.382116] kobject_uevent+0x20/0x26 [ 548.382131] lo_ioctl+0x11e7/0x1ce0 [ 548.382152] ? loop_probe+0x160/0x160 [ 548.419085] blkdev_ioctl+0x96b/0x1860 [ 548.419097] ? blkpg_ioctl+0x980/0x980 [ 548.419114] ? __might_sleep+0x93/0xb0 [ 548.419127] ? __fget+0x210/0x370 [ 548.448259] block_ioctl+0xde/0x120 [ 548.448272] ? blkdev_fallocate+0x3b0/0x3b0 [ 548.448282] do_vfs_ioctl+0x7ae/0x1060 [ 548.448296] ? selinux_file_mprotect+0x5d0/0x5d0 [ 548.448311] ? lock_downgrade+0x6e0/0x6e0 [ 548.471303] ? ioctl_preallocate+0x1c0/0x1c0 [ 548.471317] ? __fget+0x237/0x370 [ 548.471334] ? security_file_ioctl+0x89/0xb0 [ 548.471346] SyS_ioctl+0x8f/0xc0 [ 548.471355] ? do_vfs_ioctl+0x1060/0x1060 [ 548.471369] do_syscall_64+0x1e8/0x640 [ 548.471378] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 548.471397] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 548.471405] RIP: 0033:0x459697 16:28:36 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000011c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000001340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5a000100}, 0xc, &(0x7f0000001300)={&(0x7f0000001200)={0xd4, r1, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x800}]}, @TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7d}]}, @TIPC_NLA_NET={0x34, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffffffffffd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1bc4fe8e}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3e506a59}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x8040}, 0x4000010) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f00000001c0)=""/4096) ioctl(r2, 0x1000008914, &(0x7f0000000180)="11dca50d5e9803de2264da1d3b6a785b881a8261618a00") ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:28:36 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d30303034303030302c757365725f69643d98db0100ae", @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643d3a5164ba17ec2826d66d3dbc47426b1a1587306c07b9ec8c0b7886d28647f3c6a7ddbf65d49e282bc72f5e60a55e1156cec32f4325d3a77b170b830ad3e0d107b0753696fbd4a8b8a58a6dc426ecce916538ef5dade774e9bb1c648c31ae248e97e3837fd4b8b50cfadc4c9ed1910a1926cc0db0e810b772767605c6d84385cdecc9c0", @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) [ 548.471411] RSP: 002b:00007f0241e81a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 548.471423] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000459697 [ 548.471428] RDX: 0000000000000007 RSI: 0000000000004c00 RDI: 0000000000000008 [ 548.471434] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 548.471440] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000007 [ 548.471446] R13: 00000000004c8976 R14: 00000000004df838 R15: 0000000000000006 [ 548.516806] EXT4-fs (sda1): re-mounted. Opts: commit=0x0000000000000000, 16:28:36 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 16:28:36 executing program 1 (fault-call:4 fault-nth:19): creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101003, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2014020, &(0x7f00000001c0)={[{@commit={'commit'}}]}) [ 548.576942] input: syz0 as /devices/virtual/input/input261 [ 548.718053] FAULT_INJECTION: forcing a failure. [ 548.718053] name failslab, interval 1, probability 0, space 0, times 0 [ 548.735615] CPU: 1 PID: 28737 Comm: syz-executor.1 Not tainted 4.14.138 #34 [ 548.742752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 548.752210] Call Trace: [ 548.754821] dump_stack+0x138/0x19c [ 548.758473] should_fail.cold+0x10f/0x159 [ 548.762641] should_failslab+0xdb/0x130 [ 548.766627] kmem_cache_alloc_trace+0x2e9/0x790 [ 548.771296] ? kernfs_put+0x35e/0x490 [ 548.775089] ? sysfs_add_file_mode_ns+0x1e4/0x450 [ 548.779940] ? devm_device_remove_groups+0x50/0x50 [ 548.784872] kobject_uevent_env+0x378/0xc23 [ 548.789289] ? internal_create_group+0x49a/0x7b0 [ 548.794075] kobject_uevent+0x20/0x26 [ 548.797872] lo_ioctl+0x11e7/0x1ce0 [ 548.801505] ? loop_probe+0x160/0x160 [ 548.805300] blkdev_ioctl+0x96b/0x1860 [ 548.809186] ? blkpg_ioctl+0x980/0x980 [ 548.813077] ? __might_sleep+0x93/0xb0 [ 548.816960] ? __fget+0x210/0x370 [ 548.820415] block_ioctl+0xde/0x120 [ 548.824037] ? blkdev_fallocate+0x3b0/0x3b0 [ 548.828357] do_vfs_ioctl+0x7ae/0x1060 [ 548.832247] ? selinux_file_mprotect+0x5d0/0x5d0 [ 548.837001] ? lock_downgrade+0x6e0/0x6e0 [ 548.841147] ? ioctl_preallocate+0x1c0/0x1c0 [ 548.845561] ? __fget+0x237/0x370 [ 548.849024] ? security_file_ioctl+0x89/0xb0 [ 548.853456] SyS_ioctl+0x8f/0xc0 [ 548.856818] ? do_vfs_ioctl+0x1060/0x1060 [ 548.860968] do_syscall_64+0x1e8/0x640 [ 548.864851] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 548.869692] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 548.874875] RIP: 0033:0x459697 [ 548.878056] RSP: 002b:00007f0241e81a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 548.885766] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000459697 [ 548.893034] RDX: 0000000000000007 RSI: 0000000000004c00 RDI: 0000000000000008 [ 548.900307] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 548.907578] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000007 [ 548.914850] R13: 00000000004c8976 R14: 00000000004df838 R15: 0000000000000006 [ 548.934892] EXT4-fs (sda1): re-mounted. Opts: commit=0x0000000000000000, 16:28:37 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)) 16:28:37 executing program 5: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000140)={'syz0\x00', {}, 0x34, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c) r2 = dup2(r1, r1) ioctl$RTC_VL_CLR(r2, 0x7014) ioctl$UI_DEV_DESTROY(r1, 0x5502) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000100)={0x24, r3, 0x300, 0x70bd2c, 0x4, {{}, 0x0, 0x8001, 0x0, {0x8}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x6a90ee5c092ac71e}, 0x80) r4 = syz_genetlink_get_family_id$team(&(0x7f00000006c0)='team\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'syz_tun\x00', 0x0}) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000780)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in=@initdev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f00000008c0)=0xe8) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000940)={0x0, @rand_addr, @initdev}, &(0x7f0000000980)=0xc) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f00000009c0)={@loopback, @rand_addr, 0x0}, &(0x7f0000000a00)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000b40)=0xe8) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000b80)={@empty, @remote, 0x0}, &(0x7f0000000bc0)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000cc0)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in=@remote}}, &(0x7f0000000dc0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000e00)={{{@in6=@mcast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@empty}}, &(0x7f0000000f00)=0xe8) getsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00000010c0)={@empty, @multicast1, 0x0}, &(0x7f0000001100)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000001140)={{{@in6, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f0000001240)=0xe8) getpeername$packet(r2, &(0x7f0000001280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000012c0)=0x14) getpeername$packet(r2, &(0x7f0000002500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002540)=0x14) getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000002580)={@loopback, 0x0}, &(0x7f00000025c0)=0x14) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000002600)={@mcast2, 0x0}, &(0x7f0000002640)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000026c0)={{{@in=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@mcast1}}, &(0x7f00000027c0)=0xe8) recvmsg$kcm(r2, &(0x7f0000002c00)={&(0x7f00000028c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000002b00)=[{&(0x7f0000002940)=""/4, 0x4}, {&(0x7f0000002980)=""/57, 0x39}, {&(0x7f00000029c0)=""/6, 0x6}, {&(0x7f0000002a00)=""/83, 0x53}, {&(0x7f0000002a80)=""/121, 0x79}], 0x5, &(0x7f0000002b80)=""/92, 0x5c}, 0x100) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000002c40)={{{@in=@multicast1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@empty}}, &(0x7f0000002d40)=0xe8) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000003440)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003400)={&(0x7f0000002d80)={0x670, r4, 0x4, 0x70bd29, 0x25dfdbfd, {}, [{{0x8, 0x1, r5}, {0xb8, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r8}, {0x1a0, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r10}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r11}, {0x74, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x44f5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x7fff}}}]}}, {{0x8, 0x1, r12}, {0x78, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x3ff}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r13}}}]}}, {{0x8, 0x1, r14}, {0xc0, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r16}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r17}, {0x228, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r18}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r19}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r20}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r21}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r22}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x670}, 0x1, 0x0, 0x0, 0x476dd2b267ecb9e}, 0x1351117d204fe0f8) 16:28:37 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) read$alg(r0, &(0x7f0000000240)=""/103, 0x67) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x30200, 0x0) getsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r3 = eventfd(0x9) close(r1) ioctl$VIDIOC_SUBDEV_S_CROP(r3, 0xc038563c, &(0x7f0000000040)={0x1, 0x0, {0xfff, 0xffff, 0x5, 0xfff}}) eventfd(0x6) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f00000001c0)=0x8) 16:28:37 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2, 0x101) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) fanotify_mark(r1, 0x2, 0x40000000, r2, &(0x7f0000000140)='./file0/file0\x00') ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x8) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 16:28:37 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x20}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={r2}, 0x8) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) 16:28:37 executing program 1 (fault-call:4 fault-nth:20): creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101003, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2014020, &(0x7f00000001c0)={[{@commit={'commit'}}]}) 16:28:37 executing program 5: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000140)={'syz0\x00', {}, 0x34, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff1c88]}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 16:28:37 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',r;otmode=0000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 16:28:37 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x30200, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e22, 0x4, @mcast2, 0x5eb}}, 0x4, 0x401, 0xe7, 0xffff, 0x80000001}, &(0x7f0000000100)=0x98) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000001c0)={r2, 0x8000, 0x81, 0x0, 0x8, 0x5}, &(0x7f0000000300)=0x14) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000040)={0x3, r1}) eventfd(0x6) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) [ 549.101309] FAULT_INJECTION: forcing a failure. [ 549.101309] name failslab, interval 1, probability 0, space 0, times 0 [ 549.155179] CPU: 0 PID: 28765 Comm: syz-executor.1 Not tainted 4.14.138 #34 [ 549.162334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 549.171706] Call Trace: [ 549.174313] dump_stack+0x138/0x19c [ 549.177971] should_fail.cold+0x10f/0x159 [ 549.182133] should_failslab+0xdb/0x130 [ 549.186117] kmem_cache_alloc_node+0x287/0x780 [ 549.190720] __alloc_skb+0x9c/0x500 [ 549.194356] ? skb_scrub_packet+0x4b0/0x4b0 [ 549.198690] ? netlink_has_listeners+0x20a/0x330 [ 549.203460] kobject_uevent_env+0x781/0xc23 [ 549.207792] ? internal_create_group+0x49a/0x7b0 [ 549.212576] kobject_uevent+0x20/0x26 [ 549.216413] lo_ioctl+0x11e7/0x1ce0 [ 549.220054] ? loop_probe+0x160/0x160 [ 549.223853] blkdev_ioctl+0x96b/0x1860 [ 549.227887] ? blkpg_ioctl+0x980/0x980 [ 549.231767] ? __might_sleep+0x93/0xb0 [ 549.235640] ? __fget+0x210/0x370 [ 549.239087] block_ioctl+0xde/0x120 [ 549.242695] ? blkdev_fallocate+0x3b0/0x3b0 [ 549.247119] do_vfs_ioctl+0x7ae/0x1060 [ 549.251000] ? selinux_file_mprotect+0x5d0/0x5d0 [ 549.255750] ? lock_downgrade+0x6e0/0x6e0 [ 549.259890] ? ioctl_preallocate+0x1c0/0x1c0 [ 549.264293] ? __fget+0x237/0x370 [ 549.267756] ? security_file_ioctl+0x89/0xb0 [ 549.272148] SyS_ioctl+0x8f/0xc0 [ 549.275495] ? do_vfs_ioctl+0x1060/0x1060 [ 549.289144] do_syscall_64+0x1e8/0x640 [ 549.293037] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 549.297886] entry_SYSCALL_64_after_hwframe+0x42/0xb7 16:28:37 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x30200, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) eventfd(0x6) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x5, 0x402302) 16:28:37 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRESHEX=r0, @ANYBLOB="2c726b9871516f64653d4c303030da77060000000000006f7f3fa794b59b8305942dce0022", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x10000, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000140)=0x800) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000040)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x10) ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f0000000180)=0xffffffffffffffff) 16:28:37 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000000c0)=0x80, 0x80800) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000680)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1f}]}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x20000000) [ 549.303102] RIP: 0033:0x459697 [ 549.306276] RSP: 002b:00007f0241e81a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 549.313986] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000459697 [ 549.321261] RDX: 0000000000000007 RSI: 0000000000004c00 RDI: 0000000000000008 [ 549.328539] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 549.335831] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000007 [ 549.343087] R13: 00000000004c8976 R14: 00000000004df838 R15: 0000000000000006 [ 549.371260] EXT4-fs (sda1): re-mounted. Opts: commit=0x0000000000000000, [ 549.409685] input: syz0 as /devices/virtual/input/input269 [ 549.475876] input: syz0 as /devices/virtual/input/input270 16:28:37 executing program 1 (fault-call:4 fault-nth:21): creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101003, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2014020, &(0x7f00000001c0)={[{@commit={'commit'}}]}) 16:28:37 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x30200, 0x0) mlockall(0x0) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(0xffffffffffffffff) eventfd(0x53) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000000)={0x1ff, 0xb, 0x4, 0x8, {0x77359400}, {0x5, 0x0, 0xdfd9, 0xff, 0x7fffffff, 0x7ff8, "ca8f0f6e"}, 0xfffffffffffffff8, 0x4, @offset=0x1, 0x4}) 16:28:37 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) fcntl$setlease(r0, 0x400, 0x3) read(r0, &(0x7f0000000080)=""/144, 0x90) ioctl$int_in(r0, 0x280000040045010, &(0x7f0000000180)) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)) 16:28:37 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000380)={{{@in6=@ipv4, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@dev}}, &(0x7f0000000140)=0xe8) r2 = getgid() r3 = geteuid() mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='fuse\x00', 0x40, &(0x7f0000000540)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@default_permissions='default_permissions'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@appraise_type='appraise_type=imasig'}, {@dont_appraise='dont_appraise'}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@fsname={'fsname'}}, {@appraise='appraise'}, {@smackfsfloor={'smackfsfloor'}}, {@uid_gt={'uid>', r3}}]}}) setgid(r2) 16:28:37 executing program 5: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0xfff, 0x80100) accept$ax25(r0, &(0x7f00000000c0)={{}, [@default, @bcast, @bcast, @rose, @bcast, @bcast, @remote, @bcast]}, &(0x7f0000000040)=0x48) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$UI_DEV_DESTROY(r1, 0x5502) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x19b) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) 16:28:37 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) r1 = accept4(r0, &(0x7f0000000180)=@nfc, &(0x7f0000000200)=0x80, 0x80000) read(r0, &(0x7f0000000080)=""/144, 0x90) r2 = socket$inet6(0xa, 0x4001008000000002, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000340)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9}}) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000240)={0x0, 0x100}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000380)={r3, @in6={{0xa, 0x4e23, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x75}}}, &(0x7f00000002c0)=0x84) r4 = socket$inet_udplite(0x2, 0x2, 0x88) dup2(r4, r4) ioctl(r4, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) [ 549.680942] input: syz0 as /devices/virtual/input/input271 [ 549.688957] FAULT_INJECTION: forcing a failure. [ 549.688957] name failslab, interval 1, probability 0, space 0, times 0 [ 549.701564] CPU: 1 PID: 28814 Comm: syz-executor.1 Not tainted 4.14.138 #34 [ 549.708683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 549.718042] Call Trace: [ 549.720644] dump_stack+0x138/0x19c [ 549.724334] should_fail.cold+0x10f/0x159 [ 549.728496] should_failslab+0xdb/0x130 [ 549.732480] kmem_cache_alloc_node_trace+0x280/0x770 [ 549.737592] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 549.743155] __kmalloc_node_track_caller+0x3d/0x80 [ 549.748102] __kmalloc_reserve.isra.0+0x40/0xe0 [ 549.752789] __alloc_skb+0xcf/0x500 [ 549.756416] ? skb_scrub_packet+0x4b0/0x4b0 [ 549.760728] ? netlink_has_listeners+0x20a/0x330 [ 549.765745] kobject_uevent_env+0x781/0xc23 [ 549.770061] ? internal_create_group+0x49a/0x7b0 [ 549.774811] kobject_uevent+0x20/0x26 [ 549.778598] lo_ioctl+0x11e7/0x1ce0 [ 549.782216] ? loop_probe+0x160/0x160 [ 549.786005] blkdev_ioctl+0x96b/0x1860 [ 549.789993] ? blkpg_ioctl+0x980/0x980 [ 549.794249] ? __might_sleep+0x93/0xb0 [ 549.798133] ? __fget+0x210/0x370 [ 549.801603] block_ioctl+0xde/0x120 [ 549.805216] ? blkdev_fallocate+0x3b0/0x3b0 [ 549.809534] do_vfs_ioctl+0x7ae/0x1060 [ 549.813429] ? selinux_file_mprotect+0x5d0/0x5d0 [ 549.818184] ? lock_downgrade+0x6e0/0x6e0 [ 549.822339] ? ioctl_preallocate+0x1c0/0x1c0 [ 549.826748] ? __fget+0x237/0x370 [ 549.830230] ? security_file_ioctl+0x89/0xb0 [ 549.834644] SyS_ioctl+0x8f/0xc0 [ 549.838002] ? do_vfs_ioctl+0x1060/0x1060 [ 549.842140] do_syscall_64+0x1e8/0x640 [ 549.846017] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 549.850931] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 549.856109] RIP: 0033:0x459697 [ 549.859286] RSP: 002b:00007f0241e81a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 549.867004] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000459697 [ 549.874276] RDX: 0000000000000007 RSI: 0000000000004c00 RDI: 0000000000000008 [ 549.881539] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 549.888812] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000007 [ 549.896075] R13: 00000000004c8976 R14: 00000000004df838 R15: 0000000000000006 [ 549.910573] EXT4-fs (sda1): re-mounted. Opts: commit=0x0000000000000000, [ 549.926013] input: syz0 as /devices/virtual/input/input273 16:28:38 executing program 1 (fault-call:4 fault-nth:22): creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101003, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2014020, &(0x7f00000001c0)={[{@commit={'commit'}}]}) 16:28:38 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x30200, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x8000, 0xde, 0xffffffff, 0x2, 0x1}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000001c0)={r2, 0x100000000}, &(0x7f0000000240)=0x8) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) r3 = eventfd(0x6) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x80000, 0x80) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000280), &(0x7f00000002c0)=0x4) 16:28:38 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="60413dc4a85e9566fbdb7346792e73aa23c5e662bd14c08a546426975578cdc4d8484a6897d501ef0b744a12fe0dc41d4cfca6e4b7a6eee545a3a00a7bb74abde657c9449a02d04afd938b880af45ce615962bed2523059b4e44c12f0a2003ada6d4857b101a5aad49cad6e95030bd136560fda183166156a7fce8e53678628171056b78b09bf59d9578c15f84f6dcca4e219b20e4b2d7895d564fa39ad5ab948638", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) finit_module(r0, &(0x7f0000000000)='/dev/fuse\x00', 0x2) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 16:28:38 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {}, 0x34}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x10700, 0x0) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f00000005c0)=""/244) ioctl$UI_DEV_DESTROY(r0, 0x5502) 16:28:38 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0x3e}], 0x1, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl(r0, 0x81, &(0x7f0000000100)="18fea8cfb22e25a9f4958b589d62695e3337a3a915431f48b659f4469380d2ae5028e730f699f4593d59892915a73f26e73f326c1c967b5d491b4e29e8f1a77e15f0b0a39933a2b3a1475b83349856082a743e4a3c8f7701af33e12e798656f0fc7bc5cd671f1c1aad26b12c453a9f1ac5563b4d7cbbd9eb538dc66bb66c90d43c20f4d77bd48aba48cabd86353dfac67f0d6f5e4fa9b3e1b17e1839e1219d5b3a0f230c9adf8d2f56e018fdca0f4ae137f0c5f2d55db6b57ccb64eac0f7eadaba8d056276a6d07c3f6d6f1c7d0ee35a4fe577a7ba2e2edfcec4") [ 550.074219] FAULT_INJECTION: forcing a failure. [ 550.074219] name failslab, interval 1, probability 0, space 0, times 0 [ 550.087244] input: syz0 as /devices/virtual/input/input275 [ 550.105280] CPU: 0 PID: 28846 Comm: syz-executor.1 Not tainted 4.14.138 #34 [ 550.112420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 550.121775] Call Trace: [ 550.124378] dump_stack+0x138/0x19c [ 550.128023] should_fail.cold+0x10f/0x159 [ 550.132189] should_failslab+0xdb/0x130 [ 550.132205] kmem_cache_alloc_node_trace+0x280/0x770 [ 550.132217] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 550.132231] __kmalloc_node_track_caller+0x3d/0x80 [ 550.132246] __kmalloc_reserve.isra.0+0x40/0xe0 [ 550.132258] __alloc_skb+0xcf/0x500 [ 550.132269] ? skb_scrub_packet+0x4b0/0x4b0 [ 550.132284] ? netlink_has_listeners+0x20a/0x330 [ 550.141346] kobject_uevent_env+0x781/0xc23 [ 550.141359] ? internal_create_group+0x49a/0x7b0 [ 550.141376] kobject_uevent+0x20/0x26 [ 550.141387] lo_ioctl+0x11e7/0x1ce0 [ 550.141401] ? loop_probe+0x160/0x160 [ 550.141412] blkdev_ioctl+0x96b/0x1860 [ 550.141421] ? blkpg_ioctl+0x980/0x980 [ 550.141437] ? __might_sleep+0x93/0xb0 [ 550.141446] ? __fget+0x210/0x370 [ 550.141464] block_ioctl+0xde/0x120 [ 550.151843] ? blkdev_fallocate+0x3b0/0x3b0 [ 550.151857] do_vfs_ioctl+0x7ae/0x1060 [ 550.151870] ? selinux_file_mprotect+0x5d0/0x5d0 [ 550.151880] ? lock_downgrade+0x6e0/0x6e0 [ 550.151890] ? ioctl_preallocate+0x1c0/0x1c0 [ 550.151901] ? __fget+0x237/0x370 [ 550.151918] ? security_file_ioctl+0x89/0xb0 [ 550.151930] SyS_ioctl+0x8f/0xc0 [ 550.160232] ? do_vfs_ioctl+0x1060/0x1060 [ 550.160248] do_syscall_64+0x1e8/0x640 [ 550.160258] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 550.160277] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 550.160285] RIP: 0033:0x459697 [ 550.160291] RSP: 002b:00007f0241e81a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 16:28:38 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x30200, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) ioctl$VFIO_IOMMU_GET_INFO(r1, 0x3b70, &(0x7f0000000040)={0x10}) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x10f002, 0x4000}) close(r0) eventfd(0x6) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x300) [ 550.160302] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000459697 [ 550.160308] RDX: 0000000000000007 RSI: 0000000000004c00 RDI: 0000000000000008 [ 550.160313] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 550.160318] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000007 [ 550.160323] R13: 00000000004c8976 R14: 00000000004df838 R15: 0000000000000006 16:28:38 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) read(r0, &(0x7f0000000080)=""/144, 0x90) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ssse3\x00'}, 0x58) ioctl$int_in(r0, 0x800060c004500a, &(0x7f0000000000)) [ 550.169624] EXT4-fs (sda1): re-mounted. Opts: commit=0x0000000000000000, [ 550.369337] refcount_t: increment on 0; use-after-free. [ 550.375537] ------------[ cut here ]------------ [ 550.380323] WARNING: CPU: 1 PID: 28865 at lib/refcount.c:153 refcount_inc.cold+0x18/0x1f [ 550.388559] Kernel panic - not syncing: panic_on_warn set ... [ 550.388559] [ 550.395932] CPU: 1 PID: 28865 Comm: syz-executor.0 Not tainted 4.14.138 #34 [ 550.403043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 550.412429] Call Trace: [ 550.415054] dump_stack+0x138/0x19c [ 550.418697] panic+0x1f2/0x426 [ 550.421889] ? add_taint.cold+0x16/0x16 [ 550.425871] ? refcount_inc.cold+0x18/0x1f [ 550.430108] ? __warn.cold+0x14/0x36 [ 550.433828] ? refcount_inc.cold+0x18/0x1f [ 550.438083] __warn.cold+0x2f/0x36 [ 550.441633] ? ist_end_non_atomic+0x10/0x10 [ 550.445966] ? refcount_inc.cold+0x18/0x1f [ 550.450205] report_bug+0x216/0x254 [ 550.453836] do_error_trap+0x1bb/0x310 [ 550.457724] ? math_error+0x360/0x360 [ 550.461528] ? vprintk_emit+0x171/0x600 [ 550.465506] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 550.470347] do_invalid_op+0x1b/0x20 [ 550.474062] invalid_op+0x1b/0x40 [ 550.477519] RIP: 0010:refcount_inc.cold+0x18/0x1f [ 550.482361] RSP: 0018:ffff888098287980 EFLAGS: 00010286 [ 550.487727] RAX: 000000000000002b RBX: 1ffff11013050f3d RCX: 0000000000000000 [ 550.494999] RDX: 000000000000b79b RSI: ffffffff814b2ab5 RDI: ffffed1013050f26 [ 550.502271] RBP: ffff888098287988 R08: 000000000000002b R09: ffff888057a7aca0 [ 550.509557] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880a5af7260 [ 550.516848] R13: 0000000000000000 R14: ffff8880a143ac80 R15: ffff888098337488 [ 550.524142] ? vprintk_func+0x65/0x159 [ 550.528049] kobject_get+0x5b/0x70 [ 550.531604] cdev_get+0x54/0xa0 [ 550.534878] chrdev_open+0x9b/0x590 [ 550.538504] ? cdev_put.part.0+0x50/0x50 [ 550.542569] ? security_file_open+0x89/0x190 [ 550.546976] do_dentry_open+0x73b/0xeb0 [ 550.550949] ? cdev_put.part.0+0x50/0x50 [ 550.555014] vfs_open+0x105/0x220 [ 550.558475] path_openat+0x8bd/0x3f70 [ 550.562295] ? trace_hardirqs_on+0x10/0x10 [ 550.566573] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 550.571260] ? find_held_lock+0x35/0x130 [ 550.575335] ? __alloc_fd+0x1d4/0x4a0 [ 550.579145] do_filp_open+0x18e/0x250 [ 550.582947] ? may_open_dev+0xe0/0xe0 [ 550.586756] ? _raw_spin_unlock+0x2d/0x50 [ 550.590927] ? __alloc_fd+0x1d4/0x4a0 [ 550.594745] do_sys_open+0x2c5/0x430 [ 550.598459] ? filp_open+0x70/0x70 [ 550.602008] ? SyS_clock_gettime+0xf8/0x180 [ 550.606336] SyS_open+0x2d/0x40 [ 550.609615] ? do_sys_open+0x430/0x430 [ 550.613509] do_syscall_64+0x1e8/0x640 [ 550.617395] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 550.622243] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 550.627430] RIP: 0033:0x413711 [ 550.630613] RSP: 002b:00007f0ebe6867a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 550.638334] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000413711 [ 550.645609] RDX: 0000000000000000 RSI: 0000000000000300 RDI: 00007f0ebe686850 [ 550.652882] RBP: 000000000075bf20 R08: 000000000000000f R09: 0000000000000000 [ 550.660154] R10: 0000000000000004 R11: 0000000000000293 R12: 00007f0ebe6876d4 [ 550.667441] R13: 00000000004c8beb R14: 00000000004dfb08 R15: 00000000ffffffff [ 550.675895] Kernel Offset: disabled [ 550.679688] Rebooting in 86400 seconds..