53d5959ed1de85c996a62e02c0a6119d45532bdbde082593994bcdf05a8d7d11687cebd03a626fbd51049ca916de8a9a77d05b8f58c788324bbc7d1dc2ce250c7d0f50e9ee2c35d146138d652053580c81026490474e969621137738ad9e3cb53894079ed50c30c53da15216a9720e9e9462adc1085608905b1164884d9609fd5b8e03b0d1e0c06e130757f84174c637b01d5f7659d7d93a4b0cb26d7986a670aaa0177de86809783746f710820dc1363aa82024a81276483dce7cfb9b3413e8f1373f2fdea6207dc05871ecec1eeaa9a081237567cdaf8a524e103b9f7b"}, 0x110, 0x4000000}], 0x1, 0x4000080) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000680)={'ip_vti0\x00', 0x2002}) 12:39:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:39:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0b") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:03 executing program 1: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x80000002, 0x8972, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000600)='smaps\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/236, 0xec}], 0x63, 0x400000000000) 12:39:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x18, 0x32, 0x119, 0x0, 0x0, {0x3}, [@generic="ffd38d9b"]}, 0x18}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 12:39:03 executing program 5: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x80000002, 0x8972, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a62000/0x1000)=nil, 0x200000, 0x10200000008) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000180)=""/236, 0xec}], 0x63, 0x400000000000) 12:39:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7b") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:03 executing program 1: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x80000002, 0x8972, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000600)='smaps\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/236, 0xec}], 0x63, 0x400000000000) [ 358.174107] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 358.197314] openvswitch: netlink: Flow get message rejected, Key attribute missing. 12:39:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x32, 0x119, 0x0, 0x2, {0x3}, [@generic="ffd38d9b"]}, 0x18}}, 0x0) 12:39:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:39:03 executing program 5: r0 = memfd_create(0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = getpid() r4 = getpid() kcmp(r3, r4, 0x4, r0, r1) unshare(0x8000400) r5 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000380)='/dev/mixer\x00', 0x80000, 0x0) ioctl$RTC_PLL_SET(r6, 0x40207012, &(0x7f0000000140)={0x100000000, 0x7f, 0x7f, 0x1, 0x0, 0xffffffff00000000, 0x7fff}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000240)={@broadcast, @loopback, 0x0}, &(0x7f0000000280)=0xc) setsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f00000002c0)={@loopback, r8}, 0x14) clock_nanosleep(0x7, 0x0, &(0x7f0000000180)={0x0, r7+30000000}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) tkill(r5, 0x1000100000016) 12:39:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7b") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) [ 358.337966] openvswitch: netlink: Flow get message rejected, Key attribute missing. 12:39:06 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x7, 0x0, &(0x7f0000000180)={0x0, r1+30000000}, &(0x7f0000000000)) ptrace$getregs(0xe, r0, 0x3, &(0x7f0000000080)=""/54) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) tkill(r0, 0x1000100000016) 12:39:06 executing program 1: madvise(&(0x7f0000a62000/0x1000)=nil, 0x200000, 0x10200000008) r0 = syz_open_procfs(0x0, &(0x7f0000000600)='smaps\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/236, 0xec}], 0x63, 0x400000000000) 12:39:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:39:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x18, 0x32, 0x119, 0x0, 0x0, {0x3}, [@generic="ffd38d9b"]}, 0x18}}, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x18, 0x400000) set_mempolicy(0x2, &(0x7f00000000c0)=0x5000000000, 0x200) 12:39:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7b") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:06 executing program 5: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x80000002, 0x8972, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000600)='smaps\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/236, 0xec}], 0x63, 0x400000000000) 12:39:06 executing program 1: madvise(&(0x7f0000a62000/0x1000)=nil, 0x200000, 0x10200000008) r0 = syz_open_procfs(0x0, &(0x7f0000000600)='smaps\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/236, 0xec}], 0x63, 0x400000000000) 12:39:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be0") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x6, 0x4200) accept$unix(r1, 0x0, &(0x7f0000000100)) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$TIOCLINUX7(r2, 0x541c, &(0x7f0000000140)={0x7, 0x200}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="1800000032801901000000000000000003000000ffd38d9b"], 0x18}}, 0x0) 12:39:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:39:06 executing program 1: madvise(&(0x7f0000a62000/0x1000)=nil, 0x200000, 0x10200000008) r0 = syz_open_procfs(0x0, &(0x7f0000000600)='smaps\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/236, 0xec}], 0x63, 0x400000000000) 12:39:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be0") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:06 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x1, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x7, 0x0, &(0x7f0000000180)={0x0, r1+30000000}, &(0x7f0000000000)) wait4(r0, &(0x7f0000000080), 0xa, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) tkill(r0, 0x1000100000016) 12:39:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="1800000032001901000000000000000003000000ffd39d9b"], 0x18}}, 0x0) 12:39:06 executing program 1: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x0, 0x8972, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a62000/0x1000)=nil, 0x200000, 0x10200000008) r0 = syz_open_procfs(0x0, &(0x7f0000000600)='smaps\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/236, 0xec}], 0x63, 0x400000000000) 12:39:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be0") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:06 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be0") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:39:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:39:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x200000, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/attr/sockcreate\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x3f}, &(0x7f0000000100)=0x8) fsetxattr$security_selinux(r1, &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:tmpreaper_exec_t:s0\x00', 0x26, 0x1) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000140)={r2, 0x7, 0xe321, 0x8000, 0x0, 0x9}, 0x14) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r3, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x479}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000040) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="18000000320019010000ff1b00004e1003000004ffd38d9b"], 0x18}}, 0x0) 12:39:06 executing program 1: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x0, 0x8972, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a62000/0x1000)=nil, 0x200000, 0x10200000008) r0 = syz_open_procfs(0x0, &(0x7f0000000600)='smaps\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/236, 0xec}], 0x63, 0x400000000000) [ 361.721506] net_ratelimit: 3 callbacks suppressed [ 361.721511] openvswitch: netlink: Flow get message rejected, Key attribute missing. 12:39:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) [ 361.832411] openvswitch: netlink: Flow get message rejected, Key attribute missing. 12:39:09 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0xc, 0xfffffffffffffffe, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) r3 = syz_open_dev$admmidi(&(0x7f0000000380)='/dev/admmidi#\x00', 0x8, 0x400000) fcntl$lock(r3, 0x7, &(0x7f00000003c0)={0x0, 0x3, 0x5, 0x1, r0}) clock_nanosleep(0x7, 0x3, &(0x7f00000001c0)={r1, r2+10000000}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) tkill(r0, 0x1000100000016) 12:39:09 executing program 1: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x0, 0x8972, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a62000/0x1000)=nil, 0x200000, 0x10200000008) r0 = syz_open_procfs(0x0, &(0x7f0000000600)='smaps\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/236, 0xec}], 0x63, 0x400000000000) 12:39:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) listxattr(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)=""/145, 0x91) setxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x2) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="18cc62a636d38d9b0000000000000000000000000000000084b04dc4439c5bd5f6c4c32724a0810cf6a6076205bcb66a938a415753724419092d704649830e89a0e598213019d82b8aa1f7a4b897668ba51979a7cd81bbf44f9ad5b7529b9e06066600701bf743ef848bb0cbd81d"], 0x18}}, 0x0) 12:39:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:39:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:39:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:09 executing program 1: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x80000002, 0x10, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a62000/0x1000)=nil, 0x200000, 0x10200000008) r0 = syz_open_procfs(0x0, &(0x7f0000000600)='smaps\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/236, 0xec}], 0x63, 0x400000000000) 12:39:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000009d3c3ba9b2c7130099a2bc124f188e9586c31458ac467fcdefc2b26c00d1f80e818f5e1c2b5067126005237dbd039139224fdf942c7ee6cf3f83824835d3ea1388516180ae384b"], 0x18}}, 0x0) 12:39:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x1) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000140)={0x0, 0x66, "462ec899d9af1449a5b3363338c77a6c3e074a5fb2631f9830e323d33553bb3fc27da39df03cbe2e7b899b04f5e4db63c13c137a96945d90c11b9c87db4356b5a998e2483d1e3bcd5f19ab317325f7beb28e79cd2fe4ae2f45a06238134db13e1b859ef72bbb"}, &(0x7f00000001c0)=0x6e) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000200)={r2, 0xffffffffffffffb9}, 0x8) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x18, 0x32, 0x119, 0x0, 0x0, {0x3}, [@generic="ffd38d9b"]}, 0x18}}, 0x0) 12:39:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) [ 364.877125] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 364.893696] openvswitch: netlink: Flow get message rejected, Key attribute missing. 12:39:12 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x7, 0x0, &(0x7f0000000180)={0x0, r1+30000000}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) tkill(r0, 0x8) ptrace$getenv(0x4201, r0, 0x4, &(0x7f0000000080)) 12:39:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:39:12 executing program 1: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x80000002, 0x10, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a62000/0x1000)=nil, 0x200000, 0x10200000008) r0 = syz_open_procfs(0x0, &(0x7f0000000600)='smaps\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/236, 0xec}], 0x63, 0x400000000000) 12:39:12 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000000c0)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000200)=0xe8) r3 = getegid() setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={r1, r2, r3}, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x18, 0x32, 0x119, 0x0, 0x0, {0x3}, [@generic="ffd38d9b"]}, 0x18}}, 0x0) 12:39:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:39:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, 0x0) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) [ 367.675873] openvswitch: netlink: Flow get message rejected, Key attribute missing. 12:39:12 executing program 1: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x80000002, 0x10, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a62000/0x1000)=nil, 0x200000, 0x10200000008) r0 = syz_open_procfs(0x0, &(0x7f0000000600)='smaps\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/236, 0xec}], 0x63, 0x400000000000) [ 367.725885] openvswitch: netlink: Flow get message rejected, Key attribute missing. 12:39:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:39:12 executing program 3: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/status\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000240)='fou\x00') sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r1, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_IPPROTO={0x8}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="77920007d38d9b0000000000356cdfb07d5010d93fa20990d9df677606e475954e3e1cd7e9db104a6231d917be1b44c5d5153dbc530962f5f3493731c87fe213a564f67ff422dc4c2c83ab02bfe188eed55b02abb5da364102af05bb4e7c671018bb81a8b9eb3428eecb42a4cf0e00000000000035645dfc3eb00e5e59963e08d679832ce7a9bbe24dc12c81e3b902b132540b3efbbcc46109728f055ee7a974001b3bfd09363c99fd6a647add68f96c90cf4939aec951b0fd57ea0c13124962"], 0x18}}, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x8, 0x200000) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000180)) 12:39:12 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x6, 0x40) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000100)='syz1\x00') r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x7, 0x0, &(0x7f0000000180)={0x0, r2+30000000}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) tkill(r1, 0x100050000001d) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000340)={'broute\x00', 0x0, 0x3, 0xc8, [], 0x5, &(0x7f00000001c0)=[{}, {}, {}, {}, {}], &(0x7f0000000240)=""/200}, &(0x7f0000000140)=0x78) 12:39:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, 0x0) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:39:13 executing program 1: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x80000002, 0x8972, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a62000/0x1000)=nil, 0x200000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000600)='smaps\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/236, 0xec}], 0x63, 0x400000000000) 12:39:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="1800000032001901400000000010000003000000ffd38d9b"], 0x18}}, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8f, 0x200080) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000300)={0x3, &(0x7f00000000c0)=[{}, {}, {}]}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f00000002c0)={0x3, &(0x7f00000003c0)=[{}, {}, {}]}) openat$uhid(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uhid\x00', 0x2, 0x0) 12:39:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, 0x0) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:13 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x7, 0x0, &(0x7f0000000180)={0x0, r1+30000000}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) tkill(r0, 0x6) 12:39:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:39:13 executing program 1: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x80000002, 0x8972, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a62000/0x1000)=nil, 0x200000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000600)='smaps\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/236, 0xec}], 0x63, 0x400000000000) 12:39:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) [ 368.067055] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 368.138482] openvswitch: netlink: Flow get message rejected, Key attribute missing. 12:39:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:39:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000003200380100000000f6656f7df72a7e94fd0c101f0b9433b60d5e256f4a8df5d9d6f5ad18000000ffd38d9bde3101000000000000002ccf0d165e0f54ad7e084a395621a88e7b84"], 0x18}}, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') r3 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x83f0, 0x101000) r4 = geteuid() mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='overlay\x00', 0x6040, &(0x7f00000003c0)={[{@xino_auto='xino=auto'}, {@xino_on='xino=on'}, {@metacopy_off='metacopy=off'}, {@workdir={'workdir', 0x3d, './file0'}}, {@nfs_export_on='nfs_export=on'}, {@default_permissions='default_permissions'}, {@xino_auto='xino=auto'}], [{@fscontext={'fscontext', 0x3d, 'user_u'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@fsuuid={'fsuuid', 0x3d, {[0x3f, 0x33, 0x61, 0x65, 0x62, 0x39, 0x62], 0x2d, [0x7f, 0x35, 0x34, 0x33], 0x2d, [0x6393e177c35bbf9d, 0x0, 0x30, 0x30], 0x2d, [0x36, 0x67, 0x36, 0x35], 0x2d, [0x37, 0x37, 0x64, 0x0, 0x74, 0x38, 0x34, 0x36]}}}, {@euid_gt={'euid>', r4}}, {@subj_type={'subj_type', 0x3d, '/usr/lib/telepathy/mission-control-5'}}]}) write$selinux_create(r3, &(0x7f00000002c0)=@access={'system_u:object_r:hald_var_run_t:s0', 0x20, '/usr/lib/telepathy/mission-control-5', 0x20, 0xffffffffffffa76b}, 0x5e) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="020d27bd7000ffdbdf25010000000000000007410000004c001800008000657468000000000000000000000000009577493e02b8efa2866f27120000000000000000000000000000000000000000000400"/110], 0x68}, 0x1, 0x0, 0x0, 0x20048810}, 0x800) 12:39:13 executing program 2: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000020c0)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000002000)=[{{&(0x7f0000001640)=@l2, 0x80, &(0x7f0000001700)=[{&(0x7f00000016c0)}], 0x1, &(0x7f0000001740)=""/222, 0xde}, 0x6}, {{&(0x7f0000001840)=@xdp, 0x80, &(0x7f0000001d00)=[{&(0x7f00000018c0)=""/204, 0xcc}, {&(0x7f00000019c0)=""/249, 0xf9}, {&(0x7f0000001ac0)=""/9, 0x9}, {&(0x7f0000001b00)=""/120, 0x78}, {&(0x7f0000001b80)=""/73, 0x49}, {&(0x7f0000001c00)=""/59, 0x3b}, {&(0x7f0000001c40)=""/147, 0x93}], 0x7, &(0x7f0000001d80)=""/41, 0x29}, 0x100000001}, {{&(0x7f0000001dc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000001f00)=[{&(0x7f0000001e40)=""/186, 0xba}], 0x1, &(0x7f0000001f40)=""/181, 0xb5}, 0x5}], 0x3, 0x42, &(0x7f0000002100)={r0, r1+30000000}) setsockopt$X25_QBITINCL(r2, 0x106, 0x1, &(0x7f0000002140)=0x1, 0x4) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x101000, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r3, 0x80046402, &(0x7f0000000140)=0x1) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x7, 0x0, &(0x7f0000000180)={0x0, r4+30000000}, &(0x7f0000000000)) r5 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x3, 0x40100) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f00000001c0)={0x3, 0x0, @ioapic={0x100002, 0x800, 0x5, 0x4c, 0x0, [{0x8001, 0x715b, 0x8, [], 0x3}, {0x991, 0x7fff, 0xffffffffffff8001, [], 0x5}, {0x6, 0xffff, 0x3, [], 0x3}, {0x0, 0x2, 0x1f, [], 0x2219e730}, {0x400, 0x6b450876, 0x80000000, [], 0x400}, {0x8, 0x7, 0x0, [], 0xfff}, {0x401, 0x7, 0x800, [], 0x76}, {0x7, 0x1, 0x100}, {0x1, 0x8001, 0xa8, [], 0x1f}, {0x20, 0x1000, 0xad, [], 0x6}, {0x9, 0x1, 0x8001, [], 0xff}, {0x101, 0x7fffffff, 0x9, [], 0x5}, {0x7, 0x4, 0x1, [], 0x494d}, {0x3cb, 0x80000001, 0x1f2, [], 0x100}, {0x1000000, 0x3585, 0x0, [], 0x8}, {0x3ff, 0x2a8f, 0x80, [], 0x4}, {0x300000, 0x10000, 0x2, [], 0x8}, {0xffffffff00000001, 0x7fffffff, 0x3ff, [], 0xfffffffffffffff8}, {0x2, 0x9, 0x10001, [], 0xff}, {0xcd7, 0xf7e, 0x1, [], 0x2}, {0x3, 0xffffffffffffff81, 0x4, [], 0xffffffffffff8545}, {0x1, 0x1, 0x1000, [], 0xfffffffffffffffd}, {0x8, 0x4, 0x10000}, {0x6, 0x3, 0x0, [], 0x46}]}}) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) tkill(0x0, 0x1000100000016) writev(r2, &(0x7f00000003c0)=[{&(0x7f00000002c0)="6b13e0a3820b32a93dbeb14402e38c6e5adc28c5ac919cef349b9d9bddfba5fbd718aacd82e7e202da320e486b9b9615207c421420ee444e6aadfe85328238168a5366f1b48df1d9df9e2b321e7e350774603fd83ef2d9b182e550119bd49743904ba2a5ba1c0906a0cd06c888a5babe5b95e9f8015b1ee470334776cd18eceeb3e2a33e7018b9124e360f8dfc100c7738ffcd7df237c3ca78ca48", 0x9b}, {&(0x7f0000000380)="6e7894faac83b41a15426d743dfc5793a89c1796", 0x14}], 0x2) 12:39:13 executing program 1: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x80000002, 0x8972, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a62000/0x1000)=nil, 0x200000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000600)='smaps\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/236, 0xec}], 0x63, 0x400000000000) 12:39:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x7, 0x32, 0x200, 0x0, 0x0, {0x3}, [@generic="ffd38d9b"]}, 0x18}}, 0x0) 12:39:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:39:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:13 executing program 1: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x80000002, 0x8972, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a62000/0x1000)=nil, 0x200000, 0x10200000008) r0 = syz_open_procfs(0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/236, 0xec}], 0x63, 0x400000000000) 12:39:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:13 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x5, 0x2000) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000140)='/dev/md0\x00', 0x12000, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x840, 0x0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x101042, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$VIDIOC_EXPBUF(0xffffffffffffff9c, 0xc0405610, &(0x7f0000000240)={0x3, 0x8, 0x2, 0x4000, 0xffffffffffffffff}) r7 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev}, &(0x7f00000002c0)=0x1c, 0x80000) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000300)={0x0, 0x8001, 0x7, 0x0, 0x0, [{r1, 0x0, 0x10001}, {r2, 0x0, 0x200}, {r3, 0x0, 0x7fffffff}, {r4}, {r5, 0x0, 0x9}, {r6, 0x0, 0x7}, {r7, 0x0, 0x401}]}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6bdb249e7b9fa9ebd343c7b164629618004ae3f66532001901000000000000000003000000ffd3"], 0x18}}, 0x0) 12:39:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:13 executing program 5: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x80000002, 0x8972, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a62000/0x1000)=nil, 0x200000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000600)='smaps\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/236, 0xec}], 0x63, 0x400000000000) 12:39:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:39:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r0, 0x3) r1 = syz_open_pts(0xffffffffffffffff, 0x4403) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x10) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x400, 0x0) ioctl$TIOCLINUX4(r1, 0x541c, &(0x7f0000000140)) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x18, 0x32, 0x119, 0x0, 0x0, {0x3}, [@generic="ffd38d9b"]}, 0x18}}, 0x0) [ 368.665479] openvswitch: netlink: Flow get message rejected, Key attribute missing. 12:39:13 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x7, 0x0, &(0x7f0000000180)={0x0, r1+30000000}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000440)={0x0, 0x1, 0x4, 0x1, 0x5}, &(0x7f0000000480)=0x14) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f00000004c0)={0x0, 0xa4cd, 0x8, 0x90a}, &(0x7f0000000500)=0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000000540)={0x0, @in={{0x2, 0x4e22, @broadcast}}, 0x3ff, 0xffffffff, 0x1ff, 0x3, 0x100}, &(0x7f0000000600)=0x98) sendmsg$inet_sctp(r2, &(0x7f0000000700)={&(0x7f00000001c0)=@in6={0xa, 0x4e22, 0x4, @loopback, 0x3814}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000200)="421a148bf471d3bdc3edc5b2e1a7054bc9f95061ff637e491825047b5f39e7a3a052c2a757605ae8401551200c5d9702dd2116616de56e3d99915ae35d825d95db541b1e9aff60c5138a0a6bc58a6b17e4de897a5bdba2d8152e90253339beabc08264899a4e30f1705f7883d61b4b6db9d8bea64a8190f89f31e843ce760bf7a7f1548e6dfd7604163b12ec57b9", 0x8e}, {&(0x7f00000002c0)="ddbf89fa4c153001f874701a02fa3dde062c8692d82afcf213158fa2478e5729496d3cddbc4fe7ac81987d02136caa53e45685a547e13ca607ca86002710e0b630f6968e04c5c48c7eb1eac77d411ccc8d869c6fd2d009ec10ceab9ef5312bf20dc672a1db56", 0x66}, {&(0x7f0000000340)="5801520938256e2596565dd4817b5586ab1e9c3cd97ec1c4a2d7d4af6c146b7806f8a439dd424dc3d3995cbd6e47a76ab45a8de349853875d3774e79a84818aeac3faccd5cd6c9d1d31d77673025597637efe4c6c05630629d213f5b7132b60ec2066e6b25d72ac5810c858e85df96c7739209c0a81888e948101b373e658d0dfb557e7b17228664a5418e2d836a2aad7954df658b2b74e906757db24ce0b115c1446e90cf0fcbcdce7417ec25f5", 0xae}], 0x3, &(0x7f0000000640)=[@sndrcv={0x30, 0x84, 0x1, {0x3ff, 0x7ff, 0x1, 0x4, 0x5, 0xffffffff, 0x400, 0x4b5, r3}}, @init={0x18, 0x84, 0x0, {0x6, 0x9, 0xffffffff, 0xcdd2}}, @sndinfo={0x20, 0x84, 0x2, {0x4, 0x4, 0x6, 0x8, r4}}, @sndinfo={0x20, 0x84, 0x2, {0x8, 0x8200, 0xfffffffffffffffd, 0x6, r5}}], 0x88, 0x4004}, 0x4000800) r6 = open(&(0x7f0000000080)='./file0\x00', 0x2, 0x188) ioctl$KVM_GET_MP_STATE(r6, 0x8004ae98, &(0x7f0000000100)) tkill(r0, 0x1000100000016) 12:39:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:13 executing program 1: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x80000002, 0x8972, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a62000/0x1000)=nil, 0x200000, 0x10200000008) r0 = syz_open_procfs(0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/236, 0xec}], 0x63, 0x400000000000) 12:39:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x18, 0x32, 0x119, 0x0, 0x0, {0x3}, [@generic="ffd38d9b"]}, 0x18}}, 0x0) r1 = add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key(&(0x7f00000002c0)='trusted\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000003c0)="e393443f3ab47fd494fb6d9c61c1c1ce42e6b086fe20c453e776edd0ab43a40c359b15f5da3593b0e027efa016e454dc0825a1bfda9dbadb7cdf94792f0f82a910509b73fa8f629ec9d35ca851d4e25d8f2c24db1b7d5c6f16db18fbcd8c942511273bc5d99c5ccdf1f0", 0x6a, 0xfffffffffffffffd) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340)='/dev/hwrng\x00', 0x100, 0x0) keyctl$instantiate_iov(0x14, r1, &(0x7f0000000280)=[{&(0x7f0000000100)="eb5e6fe0ae2996eed75e60fd76481e6af37cd3f9ddbdf047d164738097156a86c7c5da35f6fba91ab6961711363b1b5d4f33ef7a719c62201a6cc0af8e742f44161fbd3cfc40024429e82695bdf069e40cc4c2217f0f39a35e8146fbe7a4c076e73b5f06ea", 0x65}, {&(0x7f0000000180)="6cfede3fac3babcc", 0x8}, {&(0x7f00000001c0)="a9d8fb99a9cfdd6b0d43554965c3420bc02f4de7d547bc7d7febdec6c1fcbcd291a61f454608e05bfed36c19308ba440dc3c07f1994ba5cb5e19e75f13a502e8d6302ba9fab72e2ce66bde4c901f3305788ca88272717f01168e2b482a9e623df67db059bfe40f5a57302b0e3ef77609775227afd749a5324ce5fecb1928bb14837010a9d68073d14bf79099cc18ebd0a1683016b9", 0x95}], 0x3, r2) 12:39:13 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x7, 0x0, &(0x7f0000000180)={0x0, r1+30000000}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) tkill(r0, 0x6) 12:39:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:39:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:14 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x7, 0x0, &(0x7f0000000180)={0x0, r1+30000000}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) tkill(r0, 0x1000100000016) r2 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x9, 0x101400) setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000100)=0xffffffffffffffe0, 0x4) [ 368.847275] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 368.886891] openvswitch: netlink: Flow get message rejected, Key attribute missing. 12:39:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:39:14 executing program 1: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x80000002, 0x8972, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a62000/0x1000)=nil, 0x200000, 0x10200000008) r0 = syz_open_procfs(0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/236, 0xec}], 0x63, 0x400000000000) 12:39:14 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:14 executing program 3: creat(&(0x7f0000000080)='./file0\x00', 0x40) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x18, 0x32, 0x119, 0x0, 0x0, {0x3}, [@generic="ffd38d9b"]}, 0x18}}, 0x0) 12:39:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:39:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x18, 0x32, 0x119, 0x0, 0x0, {0x3}, [@nested={0x4, 0x1}]}, 0x18}}, 0x24000000) socketpair(0x10, 0x80004, 0x1, &(0x7f0000000080)={0xffffffffffffffff}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x0, 0x0) accept$nfc_llcp(r1, 0x0, &(0x7f00000000c0)) [ 369.068205] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 369.078396] openvswitch: netlink: Flow get message rejected, Key attribute missing. 12:39:14 executing program 1: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x80000002, 0x8972, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a62000/0x1000)=nil, 0x200000, 0x10200000008) r0 = syz_open_procfs(0x0, &(0x7f0000000600)='smaps\x00') socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/236, 0xec}], 0x63, 0x400000000000) 12:39:14 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) r2 = accept(0xffffffffffffff9c, 0x0, &(0x7f0000000080)) getsockname$inet(r2, &(0x7f0000000100)={0x2, 0x0, @remote}, &(0x7f0000000140)=0x10) clock_nanosleep(0x7, 0x0, &(0x7f0000000180)={0x0, r1+30000000}, &(0x7f0000000000)) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000380)={{{@in6=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@remote}}, &(0x7f0000000480)=0xe8) getresgid(&(0x7f00000004c0), &(0x7f0000000500)=0x0, &(0x7f0000000540)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000580)={0x0}, &(0x7f00000005c0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000600)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000700)=0xe8) fstat(r2, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000001000)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@remote}}, &(0x7f0000001100)=0xe8) lstat(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000001200)={{{@in6=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6}}, &(0x7f0000001300)=0xe8) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001340)={0x0, 0x0, 0x0}, &(0x7f0000001380)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000013c0)={{{@in=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@loopback}}, &(0x7f00000014c0)=0xe8) r13 = getegid() getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000017c0)={0x0, 0x0}, &(0x7f0000001800)=0xc) r15 = getegid() r16 = geteuid() getgroups(0x5, &(0x7f0000002dc0)=[0xee01, 0xffffffffffffffff, 0xee00, 0xee00, 0xffffffffffffffff]) fstat(r2, &(0x7f0000002e00)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000002e80)='.\x00', &(0x7f0000002ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000002f40)={0x0, 0x0}, &(0x7f0000002f80)=0xc) fstat(r2, &(0x7f0000002fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000003040), &(0x7f0000003080)=0x0, &(0x7f00000030c0)) getgroups(0x1, &(0x7f0000003100)=[0xee01]) r24 = getuid() stat(&(0x7f0000003140)='./file0\x00', &(0x7f0000003180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r2, &(0x7f0000003300)=[{&(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000240)="40002784ae267565dd8ab604b2a414833ede4b7f08b9f5cfb615769bbe3ec3df1919be382c261edad50fed47c717ba3d7a5721c4933374759e96932ac91db247fce60f2d6f2dc2eff3f4b1d17a6f61cdb8d5995b0197f25b1e74c684b43913c3b1f80feb0707b04476e4d22da99ca300672c530a0f9cf2d67d23592962c00a48fca23779584fc74865213230496ff7fb55d8b948453601fa75ba64aff25db39a09dbab12d2809929669c6e0662febb3556facd537d8ff0e36a94cae636116abbc14e", 0xc2}], 0x1, &(0x7f00000007c0)=[@cred={{0x1c, 0x1, 0x2, {r0, r3, r4}}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}], 0x40, 0x40}, {&(0x7f0000000800)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000880)="1a3f11226e37f399056eb7ae4559151c2faa30d16f63aae4824ca0f1d0d190729ef6436bbe4b81bd30cf45d98438d17789ca350f635bf5da17ca6fafcafcd2494f8fa073c913788bd8ba6a617f267302a235d9d696230cd52085919947b51a13dea89694cda8", 0x66}, {&(0x7f0000000900)="b199d76e4467d5b86c987b66d90ee16668d438641e355cf0f174a787111e0d857b025bc01289928c8e28ada03491cfe4af741b61989fc60fd8be26ededdac81de6756ba17aea5da441306e7dcb6ed96bd1727bcd6bc2", 0x56}, {&(0x7f0000000980)="10aa4f699064fbe531669d64626dfdded215fa870cdf2bd7c9f33d35dce36b9491d1a97c4c847fddb84e314484bd3ac34b666bf0d3b3fee52dfa6399e12c1121dabaa6d1e46d1097c93be6db3e12fcbed92b4c42790a61198a79ef46809aca551f96aefa19af96", 0x67}, {&(0x7f0000000a00)="2fae1d0f7b58ec1321d3c21d7b6f9325f29df709a3b0e90fe573493ca12e85ad2a221e96", 0x24}], 0x4, 0x0, 0x0, 0x804}, {&(0x7f0000000a80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000d40)=[{&(0x7f0000000b00)="f7c8c98bd5de4f90e65f511c4e7614759af1b2416ef43a90c45d88665352ddbf1cddf24bac3c8a020bd4a091723f6c8ce44b25ab6a487046854b57624903eadc567012c167c21953a66f713a52e70b45d9b99ca85289ba7b9a10747c26fc2f25db5ad4193a753b6a8da8d1c73916e42f57f414e333769b0c50ec28ec636dbbd52ce3414ecb396fdd859d19eb3846956cd1889a9e1bead84c2d3309ff8ddd287b30c870ac4b114a0a7abb1f01f37a7b0ead41a41097b7c57a128002f37f6774d17ae1cef62a0aaf77bfd0e6bbbc852f", 0xcf}, {&(0x7f0000000c00)="6179b820bf5f28a523b7323d9fe4f046cfdd568d48075296a5125b3b126e9244dc4f70401973c310aec58938d6efa5734d05f9ac110ca4b20b7482654ba2a0672b736f572af081b731e18eed6d58e1583d33fe9fc48069499559dddd1c13cf7f39e725c306fab2d6d172dbc1cf0d00ad5f9e364203dba805", 0x78}, {&(0x7f0000000c80)="ec39c4b2ed931f978847abeced248b4d308fa2d9a7620c2ea93b54520854dc52de68c7a04233e3faa0dd0fa2f2c60724290859d7df0533f1b9f19d6710ffb27ef0fbe382cc17d31eafe8e3f9e736b8b2471f5492be76746738d04eb7ceaef35c311f59e9", 0x64}, {&(0x7f0000000d00)}], 0x4}, {&(0x7f0000000d80)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000fc0)=[{&(0x7f0000000e00)="e1b0e465607d4647e77469dad555e2796afd06c39e271ac177a8f5adfe38fe77ad5aeaa8746c01ea4a5b36a39054727501b62f873e6c5cec283816c0bd80d8e2aeaaebecd885f7af1af2b6c60f5ac69c8593f88c0f4cba6a384f614523067e8c15b1664ef00a46596b022c00517a0e57a55ce68d62818d0623b5f38224c6f28ca8dcf8f009b945d422120d06418b38708d076ba66bd6bb308d7c7868fde7182d0a3d09730162a62a948ce8d001683900b2db6ea72e2f9e84a5938edf1f85a2e9e44383384790b6eca4fc8a6f7c610077e8be7248b569cc5154958e7e9637028f536b21899fbe8df80d2e67c9fe22b46a5e2c4bd5ef8c", 0xf6}, {&(0x7f0000000f00)="bec7ce54c1217165570f61f84dc23980cee1deab0f9fede3099c47d21c52722a29c334134433681783e83f0a3493eb4912461097d6852babb75a77859de831b2bb0882b5da5eed3120b72301ba7b092dcd49ad7882fbeb63b19d6b544d577191e8e9e0d1bfd1856d6c4eb5123ef3b9e299c91a65e265a7323968988b8fee36a03bdf828d998161ed4b6e42c874ef204aff0563c33d3ab59c56a28129e0a8eb47701707b35297dc23997bee0bb6785c98b8f0e8", 0xb3}], 0x2, &(0x7f0000001500)=[@cred={{0x1c, 0x1, 0x2, {r0, r8, r9}}}, @cred={{0x1c, 0x1, 0x2, {r0, r10, r11}}}, @rights={{0x18, 0x1, 0x1, [r2, r2]}}, @cred={{0x1c, 0x1, 0x2, {r0, r12, r13}}}], 0x78, 0x40000}, {&(0x7f0000001580)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001780)=[{&(0x7f0000001600)="07d802bd401578dc9b4717fee99a943ee6fac3be36b4383c827330ecdd2c006b61d747c753635a13021ce1dd058c7a3892d6df70d6", 0x35}, {&(0x7f0000001640)}, {&(0x7f0000001680)="acaf2461185960c0c2e49c20e96088437a07208fc2ddfd37276279ef1d701b258a3bc621b0acfafd13ef3fb4ee4a4b8a0fa3a6c8268aafd211627f1d8fff30d597cd12516624f7619f7a95b22931b9a6bf1840eac0c8a80adc4ceaefcaafe900f4adf01fbafbb751b10c1f0cee2d87ebf8d2615af5f388403cfeab3a29e2e25a37cc52dcf98acbc7c047111cb507e765a5c441ed4b96a3f57e34971595c5702b71840420546bcdc09319e78b7b9872d7db5914229655128985cffdd38369452f9a43009faa8fa714ef4f5b0afd3b44bbfa6d", 0xd2}], 0x3, &(0x7f0000001840)=[@cred={{0x1c, 0x1, 0x2, {r0, r14, r15}}}, @rights={{0x18, 0x1, 0x1, [r2, r2]}}, @rights={{0x14, 0x1, 0x1, [r2]}}], 0x50, 0x40}, {&(0x7f00000018c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000002d40)=[{&(0x7f0000001940)="20abc6dd08e734ff5c8abfd137c92e80044a751463f654e6e627b3e3159f91dd68626a3160abe4e10bda6e729d0cbd339c66295b24dcb44b4e7fd33acf9fc02b3231dfb0be2ee4c712632bd70cab254db873eba011dae5b9f12a4c1f4b678ce9ddc7b370b102e74f8371172ede820fc1e1d8057f6ae6c866dc6bbd465fbc62f7884e3164a7fd724092ef4e476060b1835f3c", 0x92}, {&(0x7f0000001a00)}, {&(0x7f0000001a40)="09f38fe1910bba7cc20690a8fbbe4604463671e2e2f297f7dd9230698221201f6e299a7746fb1412344d05bb4e4b7be6003fa153c7b81a114d00658a13d32b976d9dfc063a63a998c30a04553047c315895f74133d0b71bf9e748e28922de219219aa7eff7b6ae603567e8604f4ebdbc23cbb2fcdd325c9d781b6e8514bd1f7182cfbaacae64c999e1db923c67c65067e9030990e9a21aca6f3e41da0760bb67f829ac1b22c16dd68cfd26eb40c0fd9dabd6c34e42f02f83092f680713381d02382e89b612d3ccd6f9b271fe8f518ed3033cb45bc3f2", 0xd6}, {&(0x7f0000001b40)="8c9ac5d23020774fb346aefcf1d476e5d839a4f9ff98f19895127c5ea0a723bf31590db192ed3df07bf042f451806b7e168ed100e77eea0390de87b3f266af6f4b46cda7a7f96fe72890a9af35ce9082a859f0b0943ed627558e3f3c88e860a8d74383f0e66010ab706a12d7ccd86e7c1bc1f8", 0x73}, {&(0x7f0000001bc0)="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", 0x1000}, {&(0x7f0000002bc0)="15e00bdbf95f81b6c5a27f8368b91acc44364b506c00d86dc155aa9ec63f8a55efedc7675315ecbdd5faa3f2a027f3011e7c91a711c427fd45645f6a9994166997499a152cc24009dc61a7fc03327314a5b4cd630f408ff22c1292e65c4bfc7c9fa28c2caa300fc16aa6db9b491c14ecbe33f64ab1eb74ccd7b7753ac4ab613821358c586f153efbe1bc7e154d3f56a6fab3f5cb55d406f2a689", 0x9a}, {&(0x7f0000002c80)="860b", 0x2}, {&(0x7f0000002cc0)="8ed494fd9f2f82899852e8701726137a9a1491630bbfb5c95287a9b1b5f99fa6212a675cff8e2e2af771d3ee45b75d748e1b9c2e9b355dd253af9b9adf2a4dc1f14152881f13b4020e1b82", 0x4b}], 0x8, &(0x7f0000003200)=[@cred={{0x1c, 0x1, 0x2, {r0, r16, r17}}}, @cred={{0x1c, 0x1, 0x2, {r0, r18, r19}}}, @cred={{0x1c, 0x1, 0x2, {r0, r20, r21}}}, @rights={{0x20, 0x1, 0x1, [r2, r2, r2, r2]}}, @cred={{0x1c, 0x1, 0x2, {r0, r22, r23}}}, @cred={{0x1c, 0x1, 0x2, {r0, r24, r25}}}, @rights={{0x1c, 0x1, 0x1, [r2, r2, r2]}}], 0xe0, 0x51}], 0x6, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) tkill(r0, 0x3d) 12:39:14 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) [ 369.202614] openvswitch: netlink: Flow get message rejected, Key attribute missing. 12:39:14 executing program 5: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x80000002, 0x8972, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a62000/0x1000)=nil, 0x200000, 0x10200000008) r0 = syz_open_procfs(0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/236, 0xec}], 0x63, 0x400000000000) 12:39:14 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000040)={&(0x7f0000000380)={0x18, 0x32, 0x119, 0x0, 0x25dfdbfb, {0x3}, [@generic="ffd38d9b"]}, 0x18}}, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r1, 0x1, 0x70bd27, 0x25dfdbfe, {{}, 0x0, 0x410c, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4c014) 12:39:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:39:14 executing program 2: r0 = syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0xfff, 0x90000) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300)=0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000340)={[], 0x97, 0x2f6, 0x4, 0x8, 0x80000000, r1}) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x7, 0x1, &(0x7f0000000080), &(0x7f0000000280)) clock_nanosleep(0x7, 0x0, &(0x7f0000000180)={0x0, r3+30000000}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x18) timer_create(0x6, &(0x7f0000000100)={0x0, 0x29, 0x7, @thr={&(0x7f0000000080), &(0x7f00000001c0)="720065710bcc1bc06db924ef0d1c28772834332787fed0ba0e843c188e6c64e57e388c181aaffb1cb8b3ffc86dcefd9f6bdbec853d9ccf11ce037d10a25b448a8f3469a16a566a8eb431246a2d6903836ad011ec18f73c4d6d0d8dbe971c5e00fd40aa0da0a08c194f93d09db98fb2c858a48d4710570a048bcdd83a8c63f2608f835dfa99de4932457eb75c9a469d7ba82c67fd7cbaa005e14f73080389b505c49d34b0c5a180469d1302da92acf70e"}}, &(0x7f0000000140)) 12:39:14 executing program 1: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x80000002, 0x8972, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a62000/0x1000)=nil, 0x200000, 0x10200000008) r0 = syz_open_procfs(0x0, &(0x7f0000000600)='smaps\x00') socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/236, 0xec}], 0x63, 0x400000000000) 12:39:14 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="18110019e84e3f5f36363a1b5e2f1b000007060000ffdb82c0000000d6fe894e9c1471d99ca3ddd602828f"], 0x18}}, 0x0) 12:39:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:39:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8, 0x0) sendmsg$nfc_llcp(r1, &(0x7f0000002700)={&(0x7f00000000c0)={0x27, 0x1, 0x0, 0x7, 0x1, 0x9, "ef39c5dbecca946d3199813466c51dd578d26a11feb5095ba10508d5c470a27de6d9191bd679d6ebc7ef513ce87f3a2190953e3517b164c67a888479e5b603", 0x26}, 0x60, &(0x7f0000002500)=[{&(0x7f0000000140)="36b8c0d74e00be8fd0c99ac15cf1d57ac523fa617ac1c1fe36646d90", 0x1c}, {&(0x7f0000000180)="681b0b501a0460e80fc43c6d1c0a0ce583fee39b4d805cc0ae6c3baf553d600ab9bdbeb291dbfa870588fa47d177a29437", 0x31}, {&(0x7f00000001c0)="6a7aa13f843e62ae52cc9aa62ad0289a3d19f485fe5cfcaa12effbe7c76d4f217a0fb72be421b707719cb3bfd8ef56074c59b4fbf243bbfc7bb31e91ff983a2af9b73fb70e9162ad466c4113e278dfcce7fa2deee2b5c1a7c7ea8ce3ba403a414cad7432154bf906fe75e6cc23b1b76c0dde963ae13aeeee", 0x78}, {&(0x7f0000000240)="622d5353668c36f615ae8fa2cc4ed1f4dcd34882f477f4d8c48ffd99aa395aa5714148d2b49639b7d5fb59a77db83a41ba37c7cbd35d0b93e9d7f03118c8c08feec6773ba548684c23131106e7179ca0fcef6da51f58010dd3fd7ab067ec3e1a77c80fbf096ab90054785c18874b377f", 0x70}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000002c0)="2e5dc744c0d592b7ae837b99bdbebb731e6e0604885279192704c6066ebaadb0725771c3b9da5efb3d64159ef9ccf1a040eac962a3a31ab8f3c5be74ea8e6f66d1e522ead82abe3e324f01f5b996b0e63ba2fca742c904cd71c32834d358a5118618dcfa9fa61607941778b50675fa0b95d06e2f12c244a8e6baf323009977d59b75d2a2b60c7d86ee5a98b600d0b8ee7820cd12002cf54e278fd59cd869334d1ec77f89", 0xa4}, {&(0x7f00000013c0)="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", 0x1000}, {&(0x7f00000023c0)="84947a72764f65d4058e62caea241039f80a16048493af5cdd0ed88152a45950475810fef4b09bd86f96f9a95394a4ff48153f76746ffa44b5d81b5d9b24b33bed888c7d5ef5734bc89bfedd456a6309a3e1b1957568a1a44608db402ce7ae045f97f0130b43d654aca50439cfd4eb4b1b213f948f9df5e57a5f2e38d09321f662d58c4237911ef4ad92fb97c1e4356425b42316e0baddd5448053b9c9", 0x9d}, {&(0x7f0000002480)="d6899b26ff9f73e005992f9162363070847412b63f3b5aafbcf20de9a693d9b2ee713ca4c15fee1f0ca59debfe101091033e3f414f13691ec3f0770de23dedad357e547febcf58fa56dc", 0x4a}], 0x9, &(0x7f00000025c0)={0x108, 0x18d, 0x8, "f50185bd60d19a7078364ece9421a4a28a9c1c7e042770a867dc9d4e143d1e5ba1775027583a2e91a82c1645c6192241ecb3c3216bd4a7512bb34eeb86d3f015e7eb010015b2d84c1738ba60575524eb20c5b21c9b98b2e66eb4b7f9f9fb31a3b331d8e8a3f0f06716f0b88b48a15c4d089005ebb5ca4f8c8d2355db8923bb2b3b9f88a7073150fc5a9e2e35aa2670c64002a25cd441a80890f7bd2e3203531c3df9da1d1d68968b037bf6fcc49708454995b2638307571ea6c09a5fd062787bb77fd37ca41e60ef42751233d9c40e49b38435db8e360b4ce0ed7a3b296ee5f1671896c42833464ce2ec2c42cb54ed4412772b14486a"}, 0x108, 0x800}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="180000c40000000000000000000000000400000000000000"], 0x18}}, 0x0) 12:39:14 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:14 executing program 2: gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x7, 0x0, &(0x7f0000000180)={0x0, r0+30000000}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x400, 0x0) connect$vsock_stream(r1, &(0x7f00000001c0)={0x28, 0x0, 0x2711, @host}, 0x10) r2 = msgget(0x0, 0x10) msgrcv(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00"/91], 0x5b, 0x2, 0x3800) 12:39:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:39:14 executing program 1: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x80000002, 0x8972, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a62000/0x1000)=nil, 0x200000, 0x10200000008) r0 = syz_open_procfs(0x0, &(0x7f0000000600)='smaps\x00') socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/236, 0xec}], 0x63, 0x400000000000) 12:39:14 executing program 3: write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x18, 0x32, 0x119, 0x0, 0x0, {0x3}, [@generic="ffd3"]}, 0x18}}, 0x0) 12:39:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:39:14 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0xc1105511, &(0x7f0000001000)) 12:39:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:39:14 executing program 1: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x80000002, 0x8972, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a62000/0x1000)=nil, 0x200000, 0x10200000008) r0 = syz_open_procfs(0x0, &(0x7f0000000600)='smaps\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000040)="11dca5055e0bcfec7be070") preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/236, 0xec}], 0x63, 0x400000000000) 12:39:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0xc1105511, &(0x7f0000001000)) 12:39:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:39:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:39:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0xc1105511, &(0x7f0000001000)) 12:39:15 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r1 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x0, 0x2) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000200)=r2) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4008af14, &(0x7f0000000240)={0x3}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) getgid() clock_nanosleep(0x7, 0x0, &(0x7f0000000180)={0x0, r3+30000000}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r4 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0xf3, 0x10001) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000100)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) tkill(r0, 0x1000100000016) getsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f0000000280)=0x8000, &(0x7f00000002c0)=0x4) 12:39:15 executing program 1: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x80000002, 0x8972, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a62000/0x1000)=nil, 0x200000, 0x10200000008) r0 = syz_open_procfs(0x0, &(0x7f0000000600)='smaps\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000040)="11dca5055e0bcfec7be070") preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/236, 0xec}], 0x63, 0x400000000000) 12:39:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x10000, 0x8080) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000100)=0x0) write$P9_RGETLOCK(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="3100000037010000ab830000000000006806000000000000", @ANYRES32=r2, @ANYBLOB="13006d643573756d76626f786ee574305b707070312ff0f4d13333e62bf10bea8a40f1a8dc7aaf080e1129cde1406230a8bcfc8689f8a57179f0454da5c920e9a82d106c526d8032a43fce3cad2dc6b0522ebe80f3a13964e973a98af4dffb6f6f2fa005d0f2701be5f9c3bce9e31584138d1ff7b25ee5ac9388b3668d4e20a22ec9eb9db6a0f9b08788"], 0x31) faccessat(r1, &(0x7f00000000c0)='./file0\x00', 0x60, 0x800) prctl$PR_GET_DUMPABLE(0x3) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x18, 0x32, 0x119, 0x0, 0x0, {0x3}, [@generic="ffd38d9b"]}, 0x18}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000100), 0x4) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)={0x244, r4, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x20000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA={0x64, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4a6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_MEDIA={0x9c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc00}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc000000000000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xec}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}]}, @TIPC_NLA_NODE={0x2c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER={0x18, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xbf96}]}, @TIPC_NLA_BEARER={0x44, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x7fff, @mcast1, 0x1000000000}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3f}]}, @TIPC_NLA_LINK={0x64, 0x4, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}]}, 0x244}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) 12:39:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:39:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, 0x0) 12:39:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:39:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, 0x0) 12:39:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:39:15 executing program 1: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x80000002, 0x8972, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a62000/0x1000)=nil, 0x200000, 0x10200000008) r0 = syz_open_procfs(0x0, &(0x7f0000000600)='smaps\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000040)="11dca5055e0bcfec7be070") preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/236, 0xec}], 0x63, 0x400000000000) 12:39:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, 0x0) 12:39:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:39:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:39:16 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x7, 0x0, &(0x7f0000000180)={0x0, r1+30000000}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x2002, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x4}, 0x68) tkill(r0, 0x1000100000016) 12:39:16 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r3, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r2, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r2, &(0x7f0000000040)) r4 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r4, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r2, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r5, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r0, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r2, 0x40c, 0x0) ftruncate(r5, 0x2007fff) sendfile(r2, r5, 0x0, 0x87ff7) 12:39:16 executing program 3 (fault-call:6 fault-nth:0): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:16 executing program 1: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x80000002, 0x8972, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a62000/0x1000)=nil, 0x200000, 0x10200000008) r0 = syz_open_procfs(0x0, &(0x7f0000000600)='smaps\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/236, 0xec}], 0x63, 0x400000000000) 12:39:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:39:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:39:16 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in=@broadcast, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@initdev}}, &(0x7f0000000140)=0xe8) getgroups(0x9, &(0x7f0000000180)=[0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0xee00, 0x0, 0xee01, 0x0, 0xee01, 0xee01]) fchown(r1, r2, r3) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:39:16 executing program 1: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x80000002, 0x8972, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a62000/0x1000)=nil, 0x200000, 0x10200000008) r0 = syz_open_procfs(0x0, &(0x7f0000000600)='smaps\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/236, 0xec}], 0x63, 0x400000000000) 12:39:16 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x100000000000000, 0x2) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x48, r3, 0x404, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004080}, 0x40000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:16 executing program 4: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x80000002, 0x8972, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a62000/0x1000)=nil, 0x200000, 0x10200000008) r0 = syz_open_procfs(0x0, &(0x7f0000000600)='smaps\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000040)="11dca5055e0bcfec7be070") preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/236, 0xec}], 0x63, 0x400000000000) 12:39:16 executing program 5 (fault-call:2 fault-nth:0): write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x18, 0x32, 0x119, 0x0, 0x0, {0x3}, [@generic="ffd3"]}, 0x18}}, 0x0) [ 371.551190] FAULT_INJECTION: forcing a failure. [ 371.551190] name failslab, interval 1, probability 0, space 0, times 0 [ 371.607464] CPU: 0 PID: 17874 Comm: syz-executor.5 Not tainted 4.14.129 #23 [ 371.614807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 371.624348] Call Trace: [ 371.626957] dump_stack+0x138/0x19c [ 371.630625] should_fail.cold+0x10f/0x159 [ 371.634875] should_failslab+0xdb/0x130 [ 371.638871] kmem_cache_alloc_node+0x287/0x780 [ 371.643482] __alloc_skb+0x9c/0x500 [ 371.647131] ? skb_scrub_packet+0x4b0/0x4b0 [ 371.651470] ? netlink_autobind.isra.0+0x1c9/0x290 [ 371.656409] netlink_sendmsg+0x874/0xc60 [ 371.660482] ? netlink_unicast+0x780/0x780 [ 371.664730] ? security_socket_sendmsg+0x89/0xb0 [ 371.669499] ? netlink_unicast+0x780/0x780 [ 371.673750] sock_sendmsg+0xce/0x110 [ 371.677475] ___sys_sendmsg+0x70a/0x840 [ 371.681456] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 371.686334] ? __fget+0x210/0x370 [ 371.689861] ? find_held_lock+0x35/0x130 [ 371.693906] ? __fget+0x210/0x370 [ 371.697348] ? lock_downgrade+0x6e0/0x6e0 [ 371.701518] ? __fget+0x237/0x370 [ 371.704974] ? __fget_light+0x172/0x1f0 [ 371.708953] ? __fdget+0x1b/0x20 [ 371.712322] ? sockfd_lookup_light+0xb4/0x160 [ 371.716810] __sys_sendmsg+0xb9/0x140 [ 371.720605] ? SyS_shutdown+0x170/0x170 [ 371.724577] SyS_sendmsg+0x2d/0x50 [ 371.728099] ? __sys_sendmsg+0x140/0x140 [ 371.732153] do_syscall_64+0x1e8/0x640 [ 371.736082] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 371.740983] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 371.746162] RIP: 0033:0x4592c9 [ 371.749335] RSP: 002b:00007feab5d9ec78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 12:39:16 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x7, 0x0, &(0x7f0000000180)={0x0, r1+30000000}, &(0x7f0000000000)) io_setup(0x2, &(0x7f0000000080)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vfio/vfio\x00', 0x40002, 0x0) io_submit(r2, 0x1, &(0x7f0000000280)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x0, r3, &(0x7f00000001c0)="7c79c50dd513911eedbe6387bcf66947882513b112fcafb7c588fcb11b92694e33dff3624f95541751ae3dc5139b00cb77cf7b95078ebffd9c31216e22087a26059f7ff4d667a5ad7b4c7a02380d8fe4c8afb796bca3b04df584095f885c55a6ce656006d9e1d4d1dc5662ad59641d66109047b68f6efb561935de", 0x7b, 0xe6, 0x0, 0x1, r4}]) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) tkill(r0, 0x1000100000016) 12:39:16 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x101000) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@initdev}}, &(0x7f0000000080)=0xe8) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) r5 = getgid() stat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000540)=0xe8) r9 = getgid() write$FUSE_DIRENTPLUS(r1, &(0x7f0000000580)={0x2a0, 0x0, 0x2, [{{0x2, 0x2, 0xb4c, 0x7fffffff, 0xfffffffffffffffe, 0x3, {0x5, 0x80000001, 0x4, 0x1000, 0x100000000, 0x8, 0x400, 0x1, 0x7ea, 0x7fff, 0x0, r2, r3, 0x587203fd, 0x8}}, {0x5, 0x1, 0x5, 0x2, 'syz1\x00'}}, {{0x3, 0x2, 0x401, 0x6, 0x200, 0x6, {0x6, 0x8, 0x6, 0x7, 0xb9, 0x9, 0x6, 0x4, 0x240000000000000, 0xc37c, 0x8001, r4, r5, 0x80000000, 0x2}}, {0x1, 0x6, 0xd, 0x5, 'selinuxcpuset'}}, {{0x1, 0x0, 0x8, 0xade4, 0xffffffffffffffa0, 0xfffffffffffffc01, {0x4, 0x1f, 0x1cb, 0x80000001, 0x6, 0x80000001, 0x2, 0x9, 0x8, 0xffffffffbccb3c86, 0x1000, r6, r7, 0x0, 0x100}}, {0x7fff, 0x3, 0x9, 0x0, '[$*:nodev'}}, {{0x6, 0x0, 0x1, 0xfff, 0xfffffffffffffffa, 0x5, {0x4, 0x6, 0x3, 0x3, 0x3ff, 0x2, 0x1, 0x2, 0x0, 0x0, 0x4, r8, r9, 0x81, 0x9}}, {0x3, 0x10000, 0x6, 0xffffffffffffff81, '-\'em1^'}}]}, 0x2a0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)=0x7, 0x4) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r10 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r10, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000840)="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") perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r10, 0xc1105511, &(0x7f0000001000)) 12:39:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:39:16 executing program 1: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x80000002, 0x8972, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a62000/0x1000)=nil, 0x200000, 0x10200000008) r0 = syz_open_procfs(0x0, &(0x7f0000000600)='smaps\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/236, 0xec}], 0x63, 0x400000000000) 12:39:16 executing program 4 (fault-call:0 fault-nth:0): syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 12:39:16 executing program 5 (fault-call:2 fault-nth:1): write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x18, 0x32, 0x119, 0x0, 0x0, {0x3}, [@generic="ffd3"]}, 0x18}}, 0x0) [ 371.757035] RAX: ffffffffffffffda RBX: 00007feab5d9ec90 RCX: 00000000004592c9 [ 371.764299] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 371.771560] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 371.778821] R10: 0000000000000000 R11: 0000000000000246 R12: 00007feab5d9f6d4 [ 371.786116] R13: 00000000004c6fc1 R14: 00000000004dc128 R15: 0000000000000004 [ 371.870517] FAULT_INJECTION: forcing a failure. [ 371.870517] name failslab, interval 1, probability 0, space 0, times 0 [ 371.883533] FAULT_INJECTION: forcing a failure. [ 371.883533] name failslab, interval 1, probability 0, space 0, times 0 [ 371.897493] CPU: 0 PID: 17894 Comm: syz-executor.5 Not tainted 4.14.129 #23 [ 371.904625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 371.904631] Call Trace: [ 371.904654] dump_stack+0x138/0x19c [ 371.904674] should_fail.cold+0x10f/0x159 [ 371.924387] should_failslab+0xdb/0x130 [ 371.924402] kmem_cache_alloc_node_trace+0x280/0x770 [ 371.924418] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 371.933474] __kmalloc_node_track_caller+0x3d/0x80 [ 371.933491] __kmalloc_reserve.isra.0+0x40/0xe0 [ 371.933501] __alloc_skb+0xcf/0x500 [ 371.933510] ? skb_scrub_packet+0x4b0/0x4b0 [ 371.933522] ? netlink_autobind.isra.0+0x1c9/0x290 [ 371.933532] netlink_sendmsg+0x874/0xc60 [ 371.933544] ? netlink_unicast+0x780/0x780 [ 371.933560] ? security_socket_sendmsg+0x89/0xb0 [ 371.933569] ? netlink_unicast+0x780/0x780 [ 371.933581] sock_sendmsg+0xce/0x110 [ 371.933592] ___sys_sendmsg+0x70a/0x840 [ 371.986455] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 371.991197] ? __fget+0x210/0x370 [ 371.994634] ? find_held_lock+0x35/0x130 [ 371.998673] ? __fget+0x210/0x370 [ 372.002112] ? lock_downgrade+0x6e0/0x6e0 [ 372.006241] ? __fget+0x237/0x370 [ 372.009694] ? __fget_light+0x172/0x1f0 [ 372.013649] ? __fdget+0x1b/0x20 [ 372.017002] ? sockfd_lookup_light+0xb4/0x160 [ 372.021486] __sys_sendmsg+0xb9/0x140 [ 372.025272] ? SyS_shutdown+0x170/0x170 [ 372.029243] SyS_sendmsg+0x2d/0x50 [ 372.032766] ? __sys_sendmsg+0x140/0x140 [ 372.036808] do_syscall_64+0x1e8/0x640 [ 372.040677] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 372.045529] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 372.050698] RIP: 0033:0x4592c9 [ 372.053871] RSP: 002b:00007feab5d9ec78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 372.061560] RAX: ffffffffffffffda RBX: 00007feab5d9ec90 RCX: 00000000004592c9 12:39:17 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = open(&(0x7f0000000080)='./file0\x00', 0x4100, 0x10) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x2) r2 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r2, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0xc1105511, &(0x7f0000000040)) get_thread_area(&(0x7f0000000000)={0x0, 0x20001000, 0x0, 0x1, 0x40, 0x8, 0x3f, 0x10000, 0x5ed8, 0x4}) [ 372.071348] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 372.078606] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 372.085943] R10: 0000000000000000 R11: 0000000000000246 R12: 00007feab5d9f6d4 [ 372.093226] R13: 00000000004c6fc1 R14: 00000000004dc128 R15: 0000000000000004 [ 372.105500] CPU: 0 PID: 17895 Comm: syz-executor.4 Not tainted 4.14.129 #23 [ 372.112648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 372.122002] Call Trace: [ 372.124587] dump_stack+0x138/0x19c [ 372.128202] should_fail.cold+0x10f/0x159 [ 372.132340] should_failslab+0xdb/0x130 [ 372.136301] __kmalloc+0x2f0/0x7a0 [ 372.139824] ? __sb_end_write+0xc1/0x100 [ 372.143891] ? strnlen_user+0x12f/0x1a0 [ 372.147849] ? SyS_memfd_create+0xba/0x3a0 [ 372.152070] SyS_memfd_create+0xba/0x3a0 [ 372.156111] ? shmem_fcntl+0x130/0x130 [ 372.159981] ? do_syscall_64+0x53/0x640 [ 372.163937] ? shmem_fcntl+0x130/0x130 [ 372.167806] do_syscall_64+0x1e8/0x640 [ 372.171674] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 372.176502] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 372.181673] RIP: 0033:0x4592c9 [ 372.184844] RSP: 002b:00007fbd1d1a1a88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 372.192539] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000004592c9 [ 372.199791] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 00000000004be1cc [ 372.207042] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 372.214297] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbd1d1a26d4 12:39:17 executing program 1: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x80000002, 0x8972, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a62000/0x1000)=nil, 0x200000, 0x10200000008) r0 = syz_open_procfs(0x0, &(0x7f0000000600)='smaps\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/236, 0xec}], 0x63, 0x400000000000) 12:39:17 executing program 4 (fault-call:0 fault-nth:1): syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 372.221546] R13: 00000000004c8220 R14: 00000000004dea68 R15: 0000000000000003 12:39:17 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x4000, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00000001c0)={r2, 0x5, 0x30, 0x3, 0xfffffffffffffbff}, &(0x7f0000000200)=0x18) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x7, 0x0, &(0x7f0000000180)={0x0, r3+30000000}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) tkill(r0, 0x1000100000016) 12:39:17 executing program 5 (fault-call:2 fault-nth:2): write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x18, 0x32, 0x119, 0x0, 0x0, {0x3}, [@generic="ffd3"]}, 0x18}}, 0x0) 12:39:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) [ 372.315501] FAULT_INJECTION: forcing a failure. [ 372.315501] name failslab, interval 1, probability 0, space 0, times 0 [ 372.358995] CPU: 1 PID: 17908 Comm: syz-executor.4 Not tainted 4.14.129 #23 [ 372.366154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 372.375518] Call Trace: [ 372.378119] dump_stack+0x138/0x19c [ 372.381751] should_fail.cold+0x10f/0x159 [ 372.385965] should_failslab+0xdb/0x130 [ 372.389933] kmem_cache_alloc+0x2d7/0x780 [ 372.394084] ? __alloc_fd+0x1d4/0x4a0 [ 372.397875] __d_alloc+0x2d/0x9f0 [ 372.401313] ? lock_downgrade+0x6e0/0x6e0 [ 372.405477] d_alloc_pseudo+0x1e/0x30 [ 372.409263] __shmem_file_setup.part.0+0xd8/0x400 [ 372.414089] ? __alloc_fd+0x1d4/0x4a0 [ 372.417885] ? shmem_fill_super+0x8c0/0x8c0 [ 372.422466] SyS_memfd_create+0x1f9/0x3a0 [ 372.426598] ? shmem_fcntl+0x130/0x130 [ 372.430729] ? do_syscall_64+0x53/0x640 [ 372.434685] ? shmem_fcntl+0x130/0x130 [ 372.438556] do_syscall_64+0x1e8/0x640 [ 372.442513] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 372.447347] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 372.452605] RIP: 0033:0x4592c9 12:39:17 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x80, 0x0) ioctl$VIDIOC_S_JPEGCOMP(r1, 0x408c563e, &(0x7f0000000080)={0x6, 0xa, 0x21, "019cbcc1ae12d9498e42617be456a12d8c364cac482d2113b9d1c64c7d3a57b8137acc488c5a9e8b85624d342008236a5c5112abe0839b65458186ed", 0x36, "0b578fa8c46051e3bfafc11f228c2cc7c059ef919cc33bcf85aad5f35dc74dca5c5c2bb875a0c60fc7289fd019114a6c3188e5f288d078cb265fbe38", 0xa0}) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r2 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xfffffffffffffffe, 0x80000) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r2, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47b, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0xc1105511, &(0x7f0000001000)) [ 372.455775] RSP: 002b:00007fbd1d1a1a88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 372.463467] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000004592c9 [ 372.470719] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 00000000004be1cc [ 372.477972] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 372.485237] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbd1d1a26d4 [ 372.492491] R13: 00000000004c8220 R14: 00000000004dea68 R15: 0000000000000003 12:39:17 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x100, 0x1) connect$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0x2710}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x18, 0x40, 0x4, 0x0, 0x0, {0x9}, [@generic="ffd3"]}, 0x18}}, 0xfffffffffffffffd) 12:39:17 executing program 1: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x80000002, 0x8972, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a62000/0x1000)=nil, 0x200000, 0x10200000008) r0 = syz_open_procfs(0x0, &(0x7f0000000600)='smaps\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/236, 0xec}], 0x63, 0x400000000000) 12:39:17 executing program 4 (fault-call:0 fault-nth:2): syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 12:39:17 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x40000000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:17 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="b1efdda3f7507b2a00000032001901d300"/32], 0x18}}, 0x0) [ 372.653421] FAULT_INJECTION: forcing a failure. [ 372.653421] name failslab, interval 1, probability 0, space 0, times 0 [ 372.688110] CPU: 0 PID: 17937 Comm: syz-executor.4 Not tainted 4.14.129 #23 [ 372.695274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 372.704903] Call Trace: [ 372.707513] dump_stack+0x138/0x19c [ 372.711418] should_fail.cold+0x10f/0x159 [ 372.715583] should_failslab+0xdb/0x130 [ 372.719578] kmem_cache_alloc+0x2d7/0x780 [ 372.723735] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 372.729536] ? rcu_read_lock_sched_held+0x110/0x130 [ 372.734542] ? shmem_destroy_callback+0xa0/0xa0 [ 372.734550] shmem_alloc_inode+0x1c/0x50 [ 372.734559] alloc_inode+0x64/0x180 [ 372.734568] new_inode_pseudo+0x19/0xf0 12:39:17 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x80, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f00000000c0)) write$P9_RCREATE(r1, &(0x7f0000000180)={0x18, 0x73, 0x1, {{0x81, 0x2, 0x2}, 0x101}}, 0x18) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1880000032001900000000000000040003000000ffd300008f5dc204a5c9b4e7e4e53763a7d622d7d36ef93d81248620d8f37998c40680b37c2254e18100ddc335219d34710f641f615f0bdaddc19bfee38a6d1679558a37b38f3db68b4237eb202560273b79"], 0x18}}, 0x0) [ 372.734577] new_inode+0x1f/0x40 [ 372.734585] shmem_get_inode+0x75/0x750 [ 372.734596] __shmem_file_setup.part.0+0x111/0x400 [ 372.734605] ? __alloc_fd+0x1d4/0x4a0 [ 372.734615] ? shmem_fill_super+0x8c0/0x8c0 [ 372.734632] SyS_memfd_create+0x1f9/0x3a0 [ 372.734641] ? shmem_fcntl+0x130/0x130 [ 372.734653] ? do_syscall_64+0x53/0x640 [ 372.783486] ? shmem_fcntl+0x130/0x130 [ 372.787378] do_syscall_64+0x1e8/0x640 [ 372.791273] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 372.796113] entry_SYSCALL_64_after_hwframe+0x42/0xb7 12:39:17 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) sendmsg(r0, &(0x7f00000005c0)={&(0x7f0000000000)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000200)="49d6d4c5d0f08d58cc016f64214b3c0fbd54dd011f5888e6f7289bf7a9609882121257ea6b313743347752d22f5244937613afd213d1b7908a65f3b5e6813ffb91064cb8b2aa613ffb6e362f015397fc1f4ac9dc0b7b2c438edc529cfd9f61bfba53cdb7050b1037302d63662015afbb9734308d39906440c35f2601b1774b91e8a67dee172c37967478b7cc680211ffb52599caa411f95276ca17db948df03fef6bb2767284a4fc91e60c28cb1155205395a9a125", 0xb5}, {&(0x7f00000002c0)="ca057aab5b736a8452c2fe4285b7253301ca62bc4021abf0c01924c165f2da8cb88321e8427ba886628f6cdb806d67914461770f45f7f725d8225c75c42bab53a2457664a2921b4315aebd42daaaec12858b4ed8a09c5be4b5b222f46bfa5323e5a267e16960301693cbdc847ca9d12a5ac6102c072c73d64003150ee18f054d6bf0eee1e399e0f567d8dd5b1c4469b40bedd43ffc7b0532b7ac794c7b7cb2544966c81b42bd0fbd8373198b80aa218961e4d68c105001de7707a45832835204c4e58b6502dcd75dce717ebfcf9b0b4896648cb238fe2494bf0aba36", 0xdc}, {&(0x7f00000011c0)="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", 0x1000}, {&(0x7f00000003c0)="71a1792075d999477b93bf8aee7490e12315f5c8ef11a1aab58ad519496c6acbae1f9bc8bc060a183bf3e5b03653f0f8f05bad742453b8632b901e95e598853c5e552d334b649760fd9d595aaff50576f801e63d590ff4c410fd6b4dd5199cbf414e1d9b7b5eb80468bbf7d0a9b368cbdcde2039812522e21bd0e1aa3f620ccf79553275b7125828d3cf38486784b334b2e83f635b5186a19aaab29187f24f7c", 0xa0}, {&(0x7f0000000080)="6d013e5b68dacac3bc9d82cd79cfd1671dd93cba71facc2c13f1510ccaf6ad1eec06c646", 0x24}, {&(0x7f00000000c0)="97f3399eee452500fa4f700917d60086d0f4b73254225e541ef4f9cb", 0x1c}], 0x6, &(0x7f0000000480)=[{0x110, 0x1, 0x3f, "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"}], 0x110}, 0x4000000) 12:39:17 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="a3a3a5d4e1f208e4eb14adaf556600000000000000000032001901000000000000000003000000ffd300000d8abe239bec12083fff964f4d"], 0x18}}, 0x0) [ 372.801369] RIP: 0033:0x4592c9 [ 372.804543] RSP: 002b:00007fbd1d1a1a88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 372.812238] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000004592c9 [ 372.819512] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 00000000004be1cc [ 372.826775] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 372.834122] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbd1d1a26d4 [ 372.841401] R13: 00000000004c8220 R14: 00000000004dea68 R15: 0000000000000003 12:39:18 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000180)) clock_gettime(0x0, &(0x7f00000000c0)) clock_nanosleep(0x7, 0x1, &(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x7000, 0x2000}) tkill(r0, 0x1000100000016) 12:39:18 executing program 1: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x80000002, 0x8972, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a62000/0x1000)=nil, 0x200000, 0x10200000008) r0 = syz_open_procfs(0x0, &(0x7f0000000600)='smaps\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/236, 0xec}], 0x63, 0x400000000000) 12:39:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:39:18 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x41}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="080c27bd7000fddbdf250500000034000100080009002e0000000c00070020000000080000001400030000000000000000000000000000000000080002005c0000002c0002000800060004000000080003000300000008000d0001000000080006000100000008000e004e21000008000500000000004400020008000e004e240000080005003f000000140001000000000000000000000000000000000114000100e0000002000000000000000000000000080002004e20000008000400810000000800040001000100"], 0xd0}, 0x1, 0x0, 0x0, 0x880}, 0x80) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000380)={@tipc=@name={0x1e, 0x2, 0x1, {{0x1, 0x2}, 0x3}}, {&(0x7f0000000300)=""/3, 0x3}, &(0x7f0000000340), 0x15}, 0xa0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000180)=@req3={0x6, 0xd5c1853, 0x4, 0xffffffff, 0x100000001, 0x0, 0x200}, 0x1c) io_setup(0x3, &(0x7f0000000140)=0x0) io_submit(r6, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x0, 0x0, 0x700000000000000, 0x0, 0x0, r5, &(0x7f0000000340), 0x87}]) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x11) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:18 executing program 4 (fault-call:0 fault-nth:3): syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 12:39:18 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x7, 0x2000) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0xffffffffffff9aa8, 0x80}, &(0x7f0000000200)=0xc) write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x39e) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000032001901000000000000000003000000ffd300009a5a48d7b2af7afd01e6aeaab039064df5ca089b204b45d564c72969e78d592e400cd3cce9407c0b94626a6e2d4b3f7aea369dea528e9cac424fa83eb64088458336527ee1ebae95dc401ae50c05da8fcc88ffbb8ec624aac75d971c2b9a23f45c7a6b0000"], 0x18}}, 0x0) [ 373.017733] net_ratelimit: 5 callbacks suppressed [ 373.017738] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 373.030475] FAULT_INJECTION: forcing a failure. [ 373.030475] name failslab, interval 1, probability 0, space 0, times 0 [ 373.066184] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 373.071511] CPU: 1 PID: 17974 Comm: syz-executor.4 Not tainted 4.14.129 #23 [ 373.081309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 373.081315] Call Trace: [ 373.081335] dump_stack+0x138/0x19c [ 373.081356] should_fail.cold+0x10f/0x159 [ 373.081371] should_failslab+0xdb/0x130 [ 373.105053] kmem_cache_alloc+0x2d7/0x780 [ 373.109227] ? shmem_alloc_inode+0x1c/0x50 [ 373.113467] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 373.113491] selinux_inode_alloc_security+0xb6/0x2a0 [ 373.113505] security_inode_alloc+0x94/0xd0 [ 373.113520] inode_init_always+0x552/0xaf0 [ 373.113530] alloc_inode+0x81/0x180 [ 373.132859] new_inode_pseudo+0x19/0xf0 [ 373.132868] new_inode+0x1f/0x40 [ 373.132879] shmem_get_inode+0x75/0x750 [ 373.132895] __shmem_file_setup.part.0+0x111/0x400 [ 373.132904] ? __alloc_fd+0x1d4/0x4a0 [ 373.132913] ? shmem_fill_super+0x8c0/0x8c0 [ 373.140507] SyS_memfd_create+0x1f9/0x3a0 12:39:18 executing program 1: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x80000002, 0x8972, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a62000/0x1000)=nil, 0x200000, 0x10200000008) r0 = syz_open_procfs(0x0, &(0x7f0000000600)='smaps\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0b") preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/236, 0xec}], 0x63, 0x400000000000) 12:39:18 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="18000000110019c43e00000000000000030031078c5ba528"], 0x18}}, 0x0) [ 373.140517] ? shmem_fcntl+0x130/0x130 [ 373.140525] ? do_syscall_64+0x53/0x640 [ 373.140535] ? shmem_fcntl+0x130/0x130 [ 373.176966] do_syscall_64+0x1e8/0x640 [ 373.180862] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 373.180881] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 373.180889] RIP: 0033:0x4592c9 [ 373.180893] RSP: 002b:00007fbd1d1a1a88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 373.180903] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000004592c9 [ 373.180910] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 00000000004be1cc 12:39:18 executing program 1: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x80000002, 0x8972, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a62000/0x1000)=nil, 0x200000, 0x10200000008) r0 = syz_open_procfs(0x0, &(0x7f0000000600)='smaps\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0b") preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/236, 0xec}], 0x63, 0x400000000000) 12:39:18 executing program 4 (fault-call:0 fault-nth:4): syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 373.190925] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 373.190931] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbd1d1a26d4 [ 373.190937] R13: 00000000004c8220 R14: 00000000004dea68 R15: 0000000000000003 12:39:18 executing program 5: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x101000, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x80, 0x0) write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0xfffffffffffffc85) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000080)={0xffffffffffffffff}, 0x0, {0xa, 0x4e22, 0x5, @ipv4={[], [], @rand_addr=0x1}, 0x10000}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000100)={0x11, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) 12:39:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) [ 373.279233] FAULT_INJECTION: forcing a failure. [ 373.279233] name failslab, interval 1, probability 0, space 0, times 0 [ 373.309983] CPU: 1 PID: 17987 Comm: syz-executor.4 Not tainted 4.14.129 #23 [ 373.317328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 373.326695] Call Trace: [ 373.329287] dump_stack+0x138/0x19c [ 373.332939] should_fail.cold+0x10f/0x159 [ 373.337098] should_failslab+0xdb/0x130 [ 373.341075] kmem_cache_alloc+0x2d7/0x780 [ 373.345229] ? lock_downgrade+0x6e0/0x6e0 [ 373.349466] get_empty_filp+0x8c/0x3b0 [ 373.353342] alloc_file+0x23/0x440 [ 373.356958] __shmem_file_setup.part.0+0x1b1/0x400 [ 373.362044] ? __alloc_fd+0x1d4/0x4a0 [ 373.365839] ? shmem_fill_super+0x8c0/0x8c0 [ 373.370157] SyS_memfd_create+0x1f9/0x3a0 [ 373.374288] ? shmem_fcntl+0x130/0x130 [ 373.378420] ? do_syscall_64+0x53/0x640 [ 373.382385] ? shmem_fcntl+0x130/0x130 [ 373.386257] do_syscall_64+0x1e8/0x640 [ 373.390139] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 373.394972] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 373.400147] RIP: 0033:0x4592c9 [ 373.403318] RSP: 002b:00007fbd1d1a1a88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 373.411183] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000004592c9 [ 373.418443] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 00000000004be1cc [ 373.426067] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 373.433322] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbd1d1a26d4 [ 373.440578] R13: 00000000004c8220 R14: 00000000004dea68 R15: 0000000000000003 12:39:21 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)=0x0) socketpair(0x5, 0x805, 0x6, &(0x7f0000000440)={0xffffffffffffffff}) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r2, 0x800442d3, &(0x7f0000000480)={0x1, 0x9, 0x5, @dev={[], 0x25}, 'veth1_to_bond\x00'}) r3 = syz_open_dev$dspn(&(0x7f00000002c0)='/dev/dsp#\x00', 0x40, 0x2) r4 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000300)={0x2, 0x0, @dev}, &(0x7f0000000340)=0x10, 0x800) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000380)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) mq_getsetattr(r3, &(0x7f0000000180)={0x9, 0x1ff, 0x200, 0xa2, 0x6, 0x0, 0x1, 0x2}, &(0x7f0000000400)) clock_nanosleep(0x7, 0x0, &(0x7f00000003c0)={0x0, r5+30000000}, &(0x7f0000000000)) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x42, 0x0) write$P9_RSTATFS(r6, &(0x7f0000000100)={0x43, 0x9, 0x2, {0x1000, 0x401, 0x6, 0x1, 0x0, 0xff00, 0xfffffffffffffffa, 0xb77, 0x8}}, 0x43) timer_settime(r1, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) ioctl$VHOST_SET_VRING_NUM(r6, 0x4008af10, &(0x7f00000001c0)={0x0, 0x1}) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r6, 0xc0505405, &(0x7f0000000200)={{0x0, 0x0, 0xffffffffffff0001, 0x2, 0x836}, 0x4, 0x4, 0x1b0}) tkill(r0, 0x1000100000016) ioctl$RTC_AIE_ON(r6, 0x7001) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f0000000280)=0x3, 0x4) timer_settime(r1, 0x1, &(0x7f00000004c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, &(0x7f0000000500)) 12:39:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:21 executing program 1: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x80000002, 0x8972, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a62000/0x1000)=nil, 0x200000, 0x10200000008) r0 = syz_open_procfs(0x0, &(0x7f0000000600)='smaps\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0b") preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/236, 0xec}], 0x63, 0x400000000000) 12:39:21 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x14, 0x32, 0x119, 0xfffffffffffffffd, 0xffffffffffffffff, {0x11}}, 0x14}}, 0x0) 12:39:21 executing program 4 (fault-call:0 fault-nth:5): syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 12:39:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:39:21 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f0000000100)=0x10) write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x18, 0x32, 0x119, 0x0, 0x0, {0x3}, [@generic="ffd3"]}, 0x18}}, 0x0) [ 375.996928] FAULT_INJECTION: forcing a failure. [ 375.996928] name failslab, interval 1, probability 0, space 0, times 0 [ 376.068459] CPU: 1 PID: 18014 Comm: syz-executor.4 Not tainted 4.14.129 #23 [ 376.075651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 376.075657] Call Trace: [ 376.075676] dump_stack+0x138/0x19c [ 376.075696] should_fail.cold+0x10f/0x159 [ 376.095526] should_failslab+0xdb/0x130 [ 376.099696] kmem_cache_alloc+0x2d7/0x780 [ 376.103860] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 376.109426] ? check_preemption_disabled+0x3c/0x250 [ 376.112101] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 376.114463] selinux_file_alloc_security+0xb4/0x190 [ 376.114478] security_file_alloc+0x6d/0xa0 [ 376.114494] get_empty_filp+0x130/0x3b0 [ 376.127322] alloc_file+0x23/0x440 [ 376.127340] __shmem_file_setup.part.0+0x1b1/0x400 [ 376.127350] ? __alloc_fd+0x1d4/0x4a0 [ 376.127359] ? shmem_fill_super+0x8c0/0x8c0 [ 376.152173] SyS_memfd_create+0x1f9/0x3a0 [ 376.156329] ? shmem_fcntl+0x130/0x130 [ 376.160227] ? do_syscall_64+0x53/0x640 [ 376.164219] ? shmem_fcntl+0x130/0x130 12:39:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000002) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:21 executing program 1: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x80000002, 0x8972, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a62000/0x1000)=nil, 0x200000, 0x10200000008) r0 = syz_open_procfs(0x0, &(0x7f0000000600)='smaps\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7b") preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/236, 0xec}], 0x63, 0x400000000000) 12:39:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) [ 376.168115] do_syscall_64+0x1e8/0x640 [ 376.168126] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 376.168144] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 376.168153] RIP: 0033:0x4592c9 [ 376.168158] RSP: 002b:00007fbd1d1a1a88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 376.168168] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000004592c9 [ 376.168175] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 00000000004be1cc [ 376.197073] openvswitch: netlink: Flow get message rejected, Key attribute missing. 12:39:21 executing program 5: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x40000, 0x0) syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x80000000, 0x8000) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) write$P9_RMKDIR(r0, 0x0, 0xfffffffffffffcb4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000001200190100000000000000000300c75b2e80421400ef39a1bb1c2f6b0000ffd30000"], 0x18}}, 0x0) 12:39:21 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x7, 0x0, &(0x7f0000000180)={0x0, r1+30000000}, &(0x7f0000000000)) r2 = socket$unix(0x1, 0x7, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000080)=0x6) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) tkill(r0, 0x1000100000016) 12:39:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x8041, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) r4 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vfio/vfio\x00', 0x400, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000380)={0x12, 0x10, 0xfa00, {&(0x7f0000000180), r3, r4}}, 0x18) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000e40000/0x14000)=nil, 0x14000, 0x2000200000007) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) clone(0x8000000, &(0x7f0000000000)="3dbc9e32527f94c36a0e0a6ded8168d73c4fe36f01da1f50d51f4b29eddc7bce22850d54915370f056d9ebee74d9feeba9445c5f0bc062f355d90dcca5acaddfcee8f4922745114ef13df80ff0d91ac8593d9cdc42156b", &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000200)="33c8360930c9849375aa88007f4a272c5c2a7307ee1c277f4f263bba474d0c2ad73e3165792dd7821619624dd396aff50f6fa6aa04b4da030766e0b4f1c2c7c3735cb780405f690ac77d6c122934abfd5798d423f86cc23b13963808f5b7acecab20465fbf0c8d9b1e4543ea1eed797975d76dbc68c4f5afefff68edc1ccec3f67d2d2a6e0a40b591cd8331f2053e427ad5488cc6a2e786d5e7affc0ffcf1d1a7045740f15dfe2788020") [ 376.200677] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 376.200685] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbd1d1a26d4 [ 376.200691] R13: 00000000004c8220 R14: 00000000004dea68 R15: 0000000000000003 [ 376.254545] Unknown ioctl 1074310928 [ 376.258422] Unknown ioctl -1068477435 [ 376.264521] Unknown ioctl 28673 12:39:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:39:21 executing program 1: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x80000002, 0x8972, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a62000/0x1000)=nil, 0x200000, 0x10200000008) r0 = syz_open_procfs(0x0, &(0x7f0000000600)='smaps\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7b") preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/236, 0xec}], 0x63, 0x400000000000) 12:39:21 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x18, 0x32, 0x119, 0x0, 0x0, {0x3}, [@generic="ffd3"]}, 0x18}}, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) write$FUSE_WRITE(r1, &(0x7f00000000c0)={0x18, 0xffffffffffffffff, 0x5, {0x6}}, 0x18) [ 376.418617] openvswitch: netlink: Flow get message rejected, Key attribute missing. 12:39:21 executing program 4 (fault-call:0 fault-nth:6): syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 12:39:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:39:21 executing program 1: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x80000002, 0x8972, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a62000/0x1000)=nil, 0x200000, 0x10200000008) r0 = syz_open_procfs(0x0, &(0x7f0000000600)='smaps\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7b") preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/236, 0xec}], 0x63, 0x400000000000) 12:39:21 executing program 5: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x402400, 0x0) write$P9_RMKDIR(r0, 0x0, 0x21f) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x18, 0x32, 0x119, 0x0, 0x0, {0x3}, [@generic="ffd3"]}, 0x18}}, 0x0) [ 376.468125] openvswitch: netlink: Flow get message rejected, Key attribute missing. 12:39:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x80, &(0x7f0000000200)="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") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000000080)) [ 376.558068] FAULT_INJECTION: forcing a failure. [ 376.558068] name failslab, interval 1, probability 0, space 0, times 0 [ 376.575109] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 376.601292] CPU: 0 PID: 18069 Comm: syz-executor.4 Not tainted 4.14.129 #23 [ 376.608648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 376.618114] Call Trace: [ 376.620728] dump_stack+0x138/0x19c [ 376.624471] should_fail.cold+0x10f/0x159 [ 376.628750] should_failslab+0xdb/0x130 [ 376.632827] kmem_cache_alloc+0x2d7/0x780 [ 376.637001] ? do_sys_ftruncate.constprop.0+0x35c/0x490 [ 376.642380] getname_flags+0xcb/0x580 [ 376.646187] getname+0x1a/0x20 [ 376.649389] do_sys_open+0x1e7/0x430 [ 376.653116] ? filp_open+0x70/0x70 [ 376.653132] ? do_sys_ftruncate.constprop.0+0x370/0x490 [ 376.653143] SyS_open+0x2d/0x40 [ 376.662225] ? do_sys_open+0x430/0x430 [ 376.662240] do_syscall_64+0x1e8/0x640 [ 376.662249] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 376.662264] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 376.662272] RIP: 0033:0x4131b1 [ 376.662276] RSP: 002b:00007fbd1d1a1a80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 376.662286] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000004131b1 12:39:21 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000032e7180100000000425fa866750000000003000000ffd30000"], 0x18}}, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x700, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20040080}, 0x20000040) [ 376.662294] RDX: 00007fbd1d1a1b0a RSI: 0000000000000002 RDI: 00007fbd1d1a1b00 [ 376.709114] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 376.716371] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000004 [ 376.723711] R13: 00000000004c8220 R14: 00000000004dea68 R15: 0000000000000003 12:39:21 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x4, 0x0, &(0x7f0000000180)={0x0, r1+30000000}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) tkill(r0, 0x27) tkill(r0, 0x1000100000016) 12:39:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:39:21 executing program 1: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x80000002, 0x8972, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a62000/0x1000)=nil, 0x200000, 0x10200000008) r0 = syz_open_procfs(0x0, &(0x7f0000000600)='smaps\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be0") preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/236, 0xec}], 0x63, 0x400000000000) 12:39:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000040), &(0x7f0000000080)=0x14) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:21 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES16=0x0], 0x1}, 0x1, 0x0, 0x0, 0x40005}, 0xffffffffffffffff) 12:39:21 executing program 4 (fault-call:0 fault-nth:7): syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 376.889895] FAULT_INJECTION: forcing a failure. [ 376.889895] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 376.901775] CPU: 1 PID: 18099 Comm: syz-executor.4 Not tainted 4.14.129 #23 [ 376.901784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 376.901788] Call Trace: [ 376.901813] dump_stack+0x138/0x19c [ 376.901832] should_fail.cold+0x10f/0x159 [ 376.901849] __alloc_pages_nodemask+0x1d6/0x7a0 [ 376.901859] ? fs_reclaim_acquire+0x20/0x20 12:39:22 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) prctl$PR_CAP_AMBIENT(0x2f, 0x7, 0xb) clock_nanosleep(0x7, 0x0, &(0x7f0000000180)={0x0, r1+30000000}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) tkill(r0, 0x1000100000016) [ 376.901869] ? __alloc_pages_slowpath+0x2930/0x2930 [ 376.901889] cache_grow_begin+0x80/0x400 [ 376.901901] kmem_cache_alloc+0x6a6/0x780 [ 376.901915] getname_flags+0xcb/0x580 [ 376.924595] getname+0x1a/0x20 [ 376.924609] do_sys_open+0x1e7/0x430 [ 376.924620] ? filp_open+0x70/0x70 [ 376.924632] ? do_sys_ftruncate.constprop.0+0x370/0x490 [ 376.970542] SyS_open+0x2d/0x40 [ 376.973823] ? do_sys_open+0x430/0x430 [ 376.977722] do_syscall_64+0x1e8/0x640 [ 376.981715] ? trace_hardirqs_off_thunk+0x1a/0x1c 12:39:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="040029bd8fc82c0c7a8961fe0300000000000000009d0b0000000000000400000000"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x40001) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000008) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/btrfs-control\x00', 0x40800, 0x0) ioctl$KDENABIO(r3, 0x4b36) pipe2$9p(&(0x7f0000000000), 0x80800) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:39:22 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x9, 0x101100) write$P9_RSETATTR(r0, &(0x7f00000000c0)={0x7, 0x1b, 0x2}, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1800000032001901000000003201000003004aebfaf361fa58cbcc0000"], 0x18}}, 0x0) [ 376.981734] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 376.981744] RIP: 0033:0x4131b1 [ 376.981749] RSP: 002b:00007fbd1d1a1a80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 376.981757] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000004131b1 [ 376.981762] RDX: 00007fbd1d1a1b0a RSI: 0000000000000002 RDI: 00007fbd1d1a1b00 [ 376.981767] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 376.981771] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000004 [ 376.981776] R13: 00000000004c8220 R14: 00000000004dea68 R15: 0000000000000003 12:39:22 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x3dfe, 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x100) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000200)={0x0, 0xc3, "299e4024a4ad62f7efb24fcdfd27e38b60d808862bc4731dc143cd6ff1f07b39b8c9b0058c28ad408f4c7acbb4b3f85999f4765dea52e94db4adc51b8b3e60976498c4f25dace8d31030c1d1a1fb1ec8e1fb8964251fa02a0f325bf34a674f5c7e0c7743d33e0762d0e0bdfd6d410818da0fd22e9c31dfcb0f2bd9e82c4540dd8e9a3b4accd4224c7ae02a41111bd00337f928356dd4f94005e94646ba8dea88f23135db1725a817cf784ca5adf899e3448cbb563739fe17c4577ed900cdabbdf1ad22"}, &(0x7f0000000040)=0xcb) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000080)={r2, 0x76, 0xd6fef0f}, &(0x7f00000000c0)=0x8) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105511, &(0x7f0000001000)) 12:39:22 executing program 1: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x80000002, 0x8972, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a62000/0x1000)=nil, 0x200000, 0x10200000008) r0 = syz_open_procfs(0x0, &(0x7f0000000600)='smaps\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be0") preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/236, 0xec}], 0x63, 0x400000000000) [ 377.116506] openvswitch: netlink: Flow get message rejected, Key attribute missing. 12:39:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f0000000000)=""/89) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:22 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x18, 0x32, 0x119, 0x0, 0x0, {}, [@generic="ffd3"]}, 0xffffffffffffffaf}}, 0x0) 12:39:22 executing program 1: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x80000002, 0x8972, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a62000/0x1000)=nil, 0x200000, 0x10200000008) r0 = syz_open_procfs(0x0, &(0x7f0000000600)='smaps\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be0") preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/236, 0xec}], 0x63, 0x400000000000) 12:39:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:39:22 executing program 2: r0 = gettid() r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e21, @multicast1}], 0x10) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x7, 0x0, &(0x7f0000000180)={0x0, r2+30000000}, &(0x7f0000000000)) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f00000002c0)={@llc={0x1a, 0x0, 0x10000, 0x40, 0x2cf, 0x1, @local}, {&(0x7f00000001c0)=""/240, 0xf0}, &(0x7f0000000140), 0x40}, 0xa0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) tkill(r0, 0x1000100000016) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r1, &(0x7f0000000380)) [ 377.296899] gfs2: not a GFS2 filesystem 12:39:22 executing program 4 (fault-call:0 fault-nth:8): syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 12:39:22 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x18, 0x32, 0x119, 0x0, 0x0, {0x3}, [@generic="ffd3"]}, 0x18}}, 0x0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) 12:39:22 executing program 3: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0xa0000, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000040)=0x800) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r2 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x1, 0x80000) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r2, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0xc1105511, &(0x7f0000001000)) [ 377.390757] FAULT_INJECTION: forcing a failure. [ 377.390757] name failslab, interval 1, probability 0, space 0, times 0 [ 377.405760] openvswitch: netlink: Flow get message rejected, Key attribute missing. 12:39:22 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000000) socketpair(0xb, 0x3, 0x100, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x8}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000000c0)={0x0, 0x8000, 0x3, 0x3, r2}, 0x10) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105511, &(0x7f0000001000)) [ 377.455345] CPU: 1 PID: 18157 Comm: syz-executor.4 Not tainted 4.14.129 #23 [ 377.458364] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 377.462759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 377.462765] Call Trace: [ 377.462790] dump_stack+0x138/0x19c [ 377.462810] should_fail.cold+0x10f/0x159 [ 377.462827] should_failslab+0xdb/0x130 [ 377.462838] kmem_cache_alloc+0x2d7/0x780 [ 377.462848] ? save_stack+0xa9/0xd0 12:39:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) bind$rose(r2, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, 0x1, @default}, 0x1c) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) [ 377.462862] get_empty_filp+0x8c/0x3b0 [ 377.462871] path_openat+0x8f/0x3f70 [ 377.462883] ? trace_hardirqs_on+0x10/0x10 [ 377.462894] ? check_preemption_disabled+0x3c/0x250 [ 377.462909] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 377.462922] ? find_held_lock+0x35/0x130 [ 377.482729] ? save_trace+0x290/0x290 [ 377.482745] ? __alloc_fd+0x1d4/0x4a0 [ 377.482758] do_filp_open+0x18e/0x250 [ 377.490533] ? may_open_dev+0xe0/0xe0 [ 377.490552] ? lock_downgrade+0x6e0/0x6e0 [ 377.490569] ? _raw_spin_unlock+0x2d/0x50 [ 377.490578] ? __alloc_fd+0x1d4/0x4a0 12:39:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe, 0x1000}, 0xc) r2 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r2, 0x40405514, &(0x7f0000000080)={0x5, 0x0, 0x0, 0x3f, 'syz1\x00', 0x9}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0xc1105511, &(0x7f0000001000)) 12:39:22 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000003c0)={{0x400, 0x200}, {0x1ff, 0x1}, 0x1, 0x4, 0x1}) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x3, 0x101400) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000002c0)={0x3, 0x1, &(0x7f00000000c0)=""/195, &(0x7f00000001c0)=""/176, &(0x7f0000000280)=""/31, 0x17002}) ioctl$UI_DEV_DESTROY(r1, 0x5502) [ 377.490597] do_sys_open+0x2c5/0x430 [ 377.490608] ? filp_open+0x70/0x70 [ 377.490620] ? do_sys_ftruncate.constprop.0+0x370/0x490 [ 377.490631] SyS_open+0x2d/0x40 [ 377.490637] ? do_sys_open+0x430/0x430 [ 377.490650] do_syscall_64+0x1e8/0x640 [ 377.490656] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 377.490669] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 377.579188] RIP: 0033:0x4131b1 [ 377.579195] RSP: 002b:00007fbd1d1a1a80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 12:39:22 executing program 1: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x80000002, 0x8972, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a62000/0x1000)=nil, 0x200000, 0x10200000008) syz_open_procfs(0x0, &(0x7f0000000600)='smaps\x00') r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000180)=""/236, 0xec}], 0x63, 0x400000000000) 12:39:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) [ 377.579206] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000004131b1 [ 377.607812] RDX: 00007fbd1d1a1b0a RSI: 0000000000000002 RDI: 00007fbd1d1a1b00 [ 377.615114] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 377.615121] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000004 [ 377.615127] R13: 00000000004c8220 R14: 00000000004dea68 R15: 0000000000000003 12:39:22 executing program 3: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000980)='/dev/cachefiles\x00', 0x40, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x3, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x0, 0x0) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/status\x00', 0x0, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000200)='cpuac\xff\xff\xff\x7fsage_sys\x00', 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000800)=[{&(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000780)=[{&(0x7f00000002c0)="1ebfec64ebb2b77cf6a68576eec10b142019e8ddd8767be74df05706380b57443fee2e8ca6ab1967c3cb84af4ef927931c9c3d15d39a4d75f293d25dd53e8e7a6339b44a1433449a8a98bb9c97e303dbc09b0110c6399afcb4dfdbfdf27e8053d67e80df3719958710aceedac35d82a6907dd0dcdc39050c6c5472da2f48b5dc8053c5d34ac83fe195b3a40550cfc7d9ae264953c72102de792aeea82629837cfcedd1a9f0a4895b491d2cf6983282a816a86dc7e9a6c703f944686ada73aa7b8e22b8d8229db7", 0xc7}, {&(0x7f00000003c0)="7a7c9de21684dd6a0c30e341e9aa9de38d6cf12191a5cb67f0a50efb3928b2f52b6ae6f1da9989fd01421af48d228a45d8f2e7cb72ceba68f593db1677c989fcfd6d5038a6ca16c3550a183fc75b8e5c5caae83798ba7ad740a9b211e912817857ff40605093e8ead59895c28192ad042e095879107b05fcc3abf5cf9224793ef6a0a1a8177ec2ab9bca3c2e99f8e7dd72836e2d92237888677af54b3fdc49a22fe1a88a1ef49eb3320f586db44485c2762f7cca455af56efab59d457535f23abefacdb6fa298a392dd41471210b96df9ebde8c1beae729fba44e5f3f434c2", 0xdf}, {&(0x7f00000004c0)="6437c4687341204d252f926af736cb521000098f2cf8b94bc6e972431a0a00e6c94f15a81b3e633e0bfd059ff6de403b4364dd7baa0b37c1b1a63e98aee8d2c40add61341b0f313bec3578bd3918ccc5edd52c6e5a29c14b9a2b40944a56ab0a1ef3938db6776e3cfd4661faf6848bfe496bad956465ffc6c9163ee1d7b125b3fef58dcb11236e9dbb0a43da5ca4f727d4f3f51a17ebff086795ecaf17dcc22de884a65c372182997920c88fface6439708b70363eaf0f877df4aa8f9e6c5360447a41b33c61653ff071338ccda1a968ed00ce5ee2cc3fd9ba71d5780f0971c529a35d61f73383ce4febbb67c9c59894395c", 0xf2}, {&(0x7f00000005c0)="3e834108580baba4517c35a1ec9d7e4a74af817d7fefa9149e41b571e58a9ae7f3205867bbb6a217e5108faf92a79a0dfdd59684ccf5de978ce4302f7f2c95fce012ad064bdf9a529ae3900a0b3e8ba1f35fffe2b484b8c39d91f8ee8d5a5e21ecb9", 0x62}, {&(0x7f0000000640)="91c1db660e65f76f7d4317c8f0abf2622f39d8b2c1867ec86f21af6f5090d9b5b243da710029e160f08aff7196e207b3c1dcc4641e17d58f9b593202c87d99f532f6cf880edd19ae8c7f17182d19fcf4b877f4efcfa9f95b5361c42cb45daff0e9528cf73bb471165587f994b927c6455038ebfa173c", 0x76}, {&(0x7f0000000180)="bb8a7c0a1851da83b50525a0eac83d93b748b864d59b3c03827d3d13ca3f391f635dbadf799de20f34a6bf65393c51dbf408fe09", 0x34}, {&(0x7f00000006c0)="50f38816d4ea62340f1607b2eea5cdbd5c394c447fe93f90d9294e190378c51cff3c658e158c59f5ec9d0808b272dbfa02e8185687b2e62aa8b7ce29b5261f28567579f158cc52c9bab12a5c3844f2d7e847fc8690f52fb3f6cd9f423ade5172e188f8a7b91f6601feaa3bd113b79464a54a43d9998bd693708a6012ad5c8ede54a9221bac448ebedc9a9637324888464c70c4972928f436c4b668633db5b211b3", 0xa1}, {&(0x7f00000021c0)="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", 0x1000}], 0x8}], 0x1, 0x80) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000040)={0x40}, 0x2) r4 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r4, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) clock_gettime(0x0, &(0x7f00000008c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000900)={0x0, 0x0}) utimes(&(0x7f0000000880)='./file0/file0\x00', &(0x7f0000000940)={{r5, r6/1000+10000}, {r7, r8/1000+30000}}) r9 = perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r4, 0xc1105511, &(0x7f0000001000)) ioctl(r9, 0x81, &(0x7f00000011c0)="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") syz_open_dev$radio(&(0x7f0000000840)='/dev/radio#\x00', 0x3, 0x2) timerfd_gettime(r2, &(0x7f0000000000)) 12:39:22 executing program 5: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$P9_RMKDIR(r0, 0x0, 0xfffffdd8) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000100)={0xffffffffffffff63, {0x100000001, 0x40, 0x7fff, 0x5525, 0x100000001, 0x8}}) sync_file_range(r0, 0x2, 0x13b, 0x7) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x18, 0x32, 0x119, 0x0, 0x0, {0x3}, [@generic="ffd3"]}, 0x18}}, 0x0) 12:39:23 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x7, 0x0, &(0x7f0000000180)={0x0, r1+30000000}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x24) r2 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x8, 0x10000) setsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000100)=0x40, 0x4) tkill(r0, 0x1000100000016) 12:39:23 executing program 1: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x80000002, 0x8972, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a62000/0x1000)=nil, 0x200000, 0x10200000008) syz_open_procfs(0x0, &(0x7f0000000600)='smaps\x00') r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000180)=""/236, 0xec}], 0x63, 0x400000000000) 12:39:23 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/mls\x00', 0x0, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000280), 0x4) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x40, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000100)={'veth0_to_team\x00', {0x2, 0x4e22, @multicast1}}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000002c0)=[@sack_perm, @timestamp, @mss, @sack_perm, @sack_perm, @mss={0x2, 0x7}, @timestamp, @timestamp, @timestamp], 0x9) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="1800000032001901000000000000000003000000ffd30000fe16d6c3f892f1047ea7b6696877868e9e08f893f83274cced47c1f1dd712c940554aa6343febc82118cc495ae215c949886f17013e7bc3f95e76defa4fe66578276e15928a740adfc9ba709d45e473645028134146afe7891381e24693a3ecf1c68165391128ab59264e197f35e986513d3d568cd20992547"], 0x18}}, 0x0) sched_yield() 12:39:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:39:23 executing program 4 (fault-call:0 fault-nth:9): syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 12:39:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x40, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r2, 0xae78, &(0x7f0000000040)=0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:23 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, [], 0x14}, 0x2}, {0xa, 0x4e23, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x100000000}, 0x8001, [0x7f, 0x5fa, 0x2, 0x4, 0x1, 0x6, 0x7f, 0x3]}, 0x5c) r2 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x7, 0x400) write$P9_RMKNOD(r2, &(0x7f0000000140)={0x14, 0x13, 0x1, {0x6, 0x2, 0x4}}, 0x14) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="1854ffeb7700000300e59e2665b8e11b9ad80000ffd300"/33], 0x18}}, 0x0) [ 378.015514] FAULT_INJECTION: forcing a failure. [ 378.015514] name failslab, interval 1, probability 0, space 0, times 0 [ 378.073836] CPU: 1 PID: 18203 Comm: syz-executor.4 Not tainted 4.14.129 #23 [ 378.081189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 378.091165] Call Trace: [ 378.093880] dump_stack+0x138/0x19c [ 378.097533] should_fail.cold+0x10f/0x159 [ 378.101710] should_failslab+0xdb/0x130 [ 378.105701] kmem_cache_alloc+0x2d7/0x780 [ 378.109860] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 378.109874] ? check_preemption_disabled+0x3c/0x250 12:39:23 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x18, 0x32, 0x119, 0x0, 0x0, {0x3}, [@generic="ffd3"]}, 0x18}}, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8040}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xbc, r1, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x4c, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4f8b}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x800}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @local}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x25}}}}]}, @TIPC_NLA_NET={0x50, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffff9}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x8004}, 0x8041) [ 378.109889] selinux_file_alloc_security+0xb4/0x190 [ 378.120391] security_file_alloc+0x6d/0xa0 [ 378.120404] get_empty_filp+0x130/0x3b0 [ 378.120413] path_openat+0x8f/0x3f70 [ 378.120430] ? trace_hardirqs_on+0x10/0x10 [ 378.120442] ? check_preemption_disabled+0x3c/0x250 [ 378.120457] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 378.120467] ? find_held_lock+0x35/0x130 [ 378.133776] ? save_trace+0x290/0x290 [ 378.141690] ? __alloc_fd+0x1d4/0x4a0 [ 378.141703] do_filp_open+0x18e/0x250 [ 378.141711] ? may_open_dev+0xe0/0xe0 [ 378.141723] ? lock_downgrade+0x6e0/0x6e0 [ 378.141742] ? _raw_spin_unlock+0x2d/0x50 [ 378.141749] ? __alloc_fd+0x1d4/0x4a0 [ 378.141771] do_sys_open+0x2c5/0x430 [ 378.186497] ? filp_open+0x70/0x70 [ 378.190046] ? do_sys_ftruncate.constprop.0+0x370/0x490 [ 378.195571] SyS_open+0x2d/0x40 [ 378.198841] ? do_sys_open+0x430/0x430 [ 378.202714] do_syscall_64+0x1e8/0x640 [ 378.206599] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 378.211444] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 378.216618] RIP: 0033:0x4131b1 12:39:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$getown(r0, 0x9) sched_setscheduler(r2, 0x1, &(0x7f0000000000)=0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000080)=0xffffffffffffffff, 0x4) [ 378.219792] RSP: 002b:00007fbd1d1a1a80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 378.227747] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000004131b1 [ 378.235681] RDX: 00007fbd1d1a1b0a RSI: 0000000000000002 RDI: 00007fbd1d1a1b00 [ 378.243282] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 378.250640] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000004 [ 378.258153] R13: 00000000004c8220 R14: 00000000004dea68 R15: 0000000000000003 12:39:23 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x7, 0x0, &(0x7f0000000180)={0x0, r1+30000000}, &(0x7f0000000000)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) tkill(r0, 0x1000100000016) 12:39:23 executing program 1: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x80000002, 0x8972, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a62000/0x1000)=nil, 0x200000, 0x10200000008) syz_open_procfs(0x0, &(0x7f0000000600)='smaps\x00') r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000180)=""/236, 0xec}], 0x63, 0x400000000000) 12:39:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) [ 378.294993] net_ratelimit: 2 callbacks suppressed [ 378.294998] openvswitch: netlink: Flow get message rejected, Key attribute missing. 12:39:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000001000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000001000/0x1000)=nil, &(0x7f0000005000/0x2000)=nil, &(0x7f0000005000/0x2000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000000000)="523c506cdbf41154ed848aad1746793a57ecff80978e31752594b8616c8bce81500ca24c4a50a5b8b0aa14beabf164e426512ad3cc50993c1e641462c26954777914877d204cd3518439c95a604f301700dd1a178661e36782e332577c0a17d31c0ae6db5eaf795bb254f115ea4589217548d2c730a563a4345a600ef89b0ca4072c1942953d18a506f4b4d29811271481", 0x91, r0}, 0x68) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:23 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x18, 0x32, 0x119, 0x0, 0x0, {0x3}, [@generic="ffd3"]}, 0x18}}, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x408000, 0x0) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f00000000c0)=0x1, &(0x7f0000000100)=0x4) 12:39:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) r2 = perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) mmap$perf(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x4013, r2, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) [ 378.463481] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 378.496759] openvswitch: netlink: Flow get message rejected, Key attribute missing. 12:39:23 executing program 4 (fault-call:0 fault-nth:10): syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 12:39:23 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x101001, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f00000000c0)={0x0}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000600)={0x0, 0x0, 0x9}, &(0x7f0000000640)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000680)={r3, 0x10001}, 0x8) ioctl$DRM_IOCTL_DMA(r1, 0xc0406429, &(0x7f0000000200)={r2, 0x1, &(0x7f0000000100)=[0x9], &(0x7f0000000140)=[0x80000001, 0xb3, 0x1, 0x2, 0x1], 0x14, 0x2, 0x401, &(0x7f0000000180)=[0x10000, 0xde], &(0x7f00000001c0)=[0xcd0b, 0x2]}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="1800000032001901000000000000000003000000ffd30000e5e1812b6a5b9718d8b105d2aa5ddb95b0d6aeb43339a1501641747fb45a7feb8e2066b2d8a3c3438bc6a85b88ceae33b148640c075af1975bd811402248f575d501ba5ef6da9ba1007fb46ef6970617ef3192a5d46b28e6ef06fcae43626bd16f24e06aa071c2d66a5b0da0720de5eccf3c943d10d22d29934284ee84d600"], 0x18}}, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r1, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="a4010000", @ANYRES16=r4, @ANYBLOB="080029bd7000ffdbdf251100000034000200040004000800020037060000080002000080000008000200020000000400040008000200030000000800020000009a0000040006003c00090008000100080000000800010009000000080002000600000008000100050000000800010007000000080001006d0100000800010008000000440004003400070008000200020000000800010006000000080002004d0600000800030000000000080002000600000008000300ffffff7f0c00010073797a30000000001c0009000800020004000000080001000200000008000100ff0000001400020008000100ffff000008000200050006000000060008000100ffffff7f0800010081000000080001000700000008000100bd6a0000040002000800010008000000780005002c0022000800030009000000080002000000ffff08000100000000000800040004000000080001001d0000000c000200080003000200000008000100756470000800010065746800040002001400020008000400ff7f000008000400010000001400020008000300040000000800010008000000"], 0x1a4}, 0x1, 0x0, 0x0, 0x40000}, 0x40) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000240)=r1, 0x4) 12:39:23 executing program 1: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x80000002, 0x8972, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a62000/0x1000)=nil, 0x200000, 0x10200000008) r0 = syz_open_procfs(0x0, &(0x7f0000000600)='smaps\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") preadv(r0, 0x0, 0x0, 0x400000000000) 12:39:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) [ 378.624294] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 378.639966] FAULT_INJECTION: forcing a failure. [ 378.639966] name failslab, interval 1, probability 0, space 0, times 0 [ 378.651612] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 378.676575] CPU: 0 PID: 18259 Comm: syz-executor.4 Not tainted 4.14.129 #23 [ 378.683937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 378.693304] Call Trace: [ 378.695907] dump_stack+0x138/0x19c [ 378.699564] should_fail.cold+0x10f/0x159 [ 378.703737] should_failslab+0xdb/0x130 [ 378.707725] kmem_cache_alloc_trace+0x2e9/0x790 [ 378.712504] ? __lockdep_init_map+0x10c/0x570 [ 378.717018] ? loop_get_status64+0x120/0x120 [ 378.721532] __kthread_create_on_node+0xe3/0x3e0 [ 378.726301] ? kthread_park+0x140/0x140 [ 378.730563] ? __fget+0x210/0x370 [ 378.734016] ? loop_get_status64+0x120/0x120 [ 378.738419] kthread_create_on_node+0xa8/0xd0 [ 378.742913] ? __kthread_create_on_node+0x3e0/0x3e0 [ 378.748097] ? __lockdep_init_map+0x10c/0x570 [ 378.752670] lo_ioctl+0xcf7/0x1ce0 [ 378.756197] ? debug_check_no_obj_freed+0x2aa/0x7b7 [ 378.761205] ? loop_probe+0x160/0x160 [ 378.764991] blkdev_ioctl+0x96b/0x1860 [ 378.768879] ? blkpg_ioctl+0x980/0x980 [ 378.772770] ? __might_sleep+0x93/0xb0 [ 378.776641] ? __fget+0x210/0x370 [ 378.780343] block_ioctl+0xde/0x120 [ 378.783952] ? blkdev_fallocate+0x3b0/0x3b0 [ 378.788749] do_vfs_ioctl+0x7ae/0x1060 [ 378.792904] ? selinux_file_mprotect+0x5d0/0x5d0 [ 378.797643] ? lock_downgrade+0x6e0/0x6e0 [ 378.801962] ? ioctl_preallocate+0x1c0/0x1c0 [ 378.806443] ? __fget+0x237/0x370 [ 378.809891] ? security_file_ioctl+0x89/0xb0 [ 378.814286] SyS_ioctl+0x8f/0xc0 [ 378.817635] ? do_vfs_ioctl+0x1060/0x1060 [ 378.821779] do_syscall_64+0x1e8/0x640 [ 378.825647] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 378.830489] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 378.835681] RIP: 0033:0x459137 [ 378.838855] RSP: 002b:00007fbd1d1a1a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 378.846546] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000459137 [ 378.853798] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 378.861064] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 378.868490] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 378.875742] R13: 00000000004c8220 R14: 00000000004dea68 R15: 0000000000000003 12:39:26 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x7, 0x0, &(0x7f0000000180)={0x0, r1+30000000}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) tkill(r0, 0x1000100000016) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x400040, 0x0) ioctl$KDSETMODE(r2, 0x4b3a, 0x7) 12:39:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000040)={0x0, 0x0, [], @bt={0x1, 0x6, 0xffffffffffffcee6, 0x200, 0x3, 0x0, 0x8, 0x4}}) r2 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r2, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0xc1105511, &(0x7f0000001000)) 12:39:26 executing program 1: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x80000002, 0x8972, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a62000/0x1000)=nil, 0x200000, 0x10200000008) r0 = syz_open_procfs(0x0, &(0x7f0000000600)='smaps\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") preadv(r0, 0x0, 0x0, 0x400000000000) 12:39:26 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x18}}, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x50000, 0x0) write$P9_RMKDIR(r2, &(0x7f00000000c0)={0xffffffffffffff57, 0x49, 0x1, {0x7f, 0x4, 0x208}}, 0x14) 12:39:26 executing program 4 (fault-call:0 fault-nth:11): syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 12:39:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) [ 381.369946] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 381.378368] FAULT_INJECTION: forcing a failure. [ 381.378368] name failslab, interval 1, probability 0, space 0, times 0 [ 381.414773] CPU: 0 PID: 18281 Comm: syz-executor.4 Not tainted 4.14.129 #23 [ 381.422015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 381.422023] Call Trace: [ 381.433989] dump_stack+0x138/0x19c [ 381.437633] should_fail.cold+0x10f/0x159 [ 381.441800] should_failslab+0xdb/0x130 [ 381.445910] kmem_cache_alloc+0x2d7/0x780 [ 381.450084] ? trace_hardirqs_on+0x10/0x10 [ 381.454505] ? save_trace+0x290/0x290 [ 381.458327] __kernfs_new_node+0x70/0x420 12:39:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x100) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000040)=@assoc_value, &(0x7f0000000080)=0x8) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) open$dir(&(0x7f0000000140)='./file0\x00', 0x600000, 0x8e) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f0000000000)={0x7, 0x0, 0x0, 0x1, 'syz1\x00'}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffff9c, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x1}) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x101000, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000000c0)={r2, 0x80000, r3}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) [ 381.462586] kernfs_new_node+0x80/0xf0 [ 381.466495] kernfs_create_dir_ns+0x41/0x140 [ 381.471005] internal_create_group+0xea/0x7b0 [ 381.475608] sysfs_create_group+0x20/0x30 [ 381.479769] lo_ioctl+0x1176/0x1ce0 [ 381.483390] ? loop_probe+0x160/0x160 [ 381.483402] blkdev_ioctl+0x96b/0x1860 [ 381.483410] ? blkpg_ioctl+0x980/0x980 [ 381.483427] ? __might_sleep+0x93/0xb0 [ 381.483436] ? __fget+0x210/0x370 [ 381.483448] block_ioctl+0xde/0x120 [ 381.483456] ? blkdev_fallocate+0x3b0/0x3b0 [ 381.483466] do_vfs_ioctl+0x7ae/0x1060 12:39:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x3}) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) [ 381.483478] ? selinux_file_mprotect+0x5d0/0x5d0 [ 381.483491] ? lock_downgrade+0x6e0/0x6e0 [ 381.483499] ? ioctl_preallocate+0x1c0/0x1c0 [ 381.483509] ? __fget+0x237/0x370 [ 381.531432] ? security_file_ioctl+0x89/0xb0 [ 381.535861] SyS_ioctl+0x8f/0xc0 [ 381.539251] ? do_vfs_ioctl+0x1060/0x1060 [ 381.543419] do_syscall_64+0x1e8/0x640 [ 381.547320] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 381.552196] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 381.557393] RIP: 0033:0x459137 12:39:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) r2 = openat$hwrng(0xffffffffffffff9c, 0xfffffffffffffffd, 0x10000, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000001000/0x1000)=nil, 0x1000}) 12:39:26 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r1, 0x9, 0x70bd26, 0x25dfdbfd, {{}, 0x0, 0x4109, 0x0, {0x14, 0x18, {0x10001, @bearer=@udp='udp:syz2\x00'}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10080480}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x100, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 12:39:26 executing program 1: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x80000002, 0x8972, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a62000/0x1000)=nil, 0x200000, 0x10200000008) r0 = syz_open_procfs(0x0, &(0x7f0000000600)='smaps\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") preadv(r0, 0x0, 0x0, 0x400000000000) [ 381.560584] RSP: 002b:00007fbd1d1a1a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 381.568413] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000459137 [ 381.575686] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 381.575692] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 381.575697] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 381.575702] R13: 00000000004c8220 R14: 00000000004dea68 R15: 0000000000000003 [ 381.607808] gfs2: not a GFS2 filesystem 12:39:27 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)=0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) wait4(r0, &(0x7f00000001c0), 0x8, &(0x7f0000000200)) clock_nanosleep(0x7, 0x1, &(0x7f00000002c0), 0x0) timer_settime(r1, 0x0, &(0x7f0000000100)={{r3, r4+10000000}}, &(0x7f0000000140)) clock_nanosleep(0x7, 0x0, &(0x7f0000000180)={0x0, r2+30000000}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) tkill(r0, 0x1000100000016) 12:39:27 executing program 4 (fault-call:0 fault-nth:12): syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 12:39:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r4 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r4, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r5, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r5, 0x2007fff) sendfile(r3, r5, 0x0, 0x87ff7) 12:39:27 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="180000003200190100000000000000000300f0fffed30000"], 0x18}}, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000000c0)={@in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xc}}}, 0x0, 0x1000, 0x0, "feda7bc8941702ce8bac19e6aa26207175a2dd68776a8533c87c96a4cc848068b0128edcd910b9dbdb4b45a5ffb86814f16a3b3ef57e4ec2235e31d0d0a73f9c2ba22cb32a2c9cf322cf827232384070"}, 0xd8) 12:39:27 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @multicast2, 0x0, 0x3, [@loopback, @empty, @remote]}, 0x1c) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:27 executing program 1: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x80000002, 0x8972, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a62000/0x1000)=nil, 0x200000, 0x10200000008) r0 = syz_open_procfs(0x0, &(0x7f0000000600)='smaps\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") preadv(r0, &(0x7f0000000100), 0x0, 0x400000000000) [ 382.018249] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 382.038676] FAULT_INJECTION: forcing a failure. [ 382.038676] name failslab, interval 1, probability 0, space 0, times 0 [ 382.050558] CPU: 0 PID: 18334 Comm: syz-executor.4 Not tainted 4.14.129 #23 [ 382.057678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 382.068523] Call Trace: [ 382.071132] dump_stack+0x138/0x19c [ 382.074774] should_fail.cold+0x10f/0x159 [ 382.078925] ? radix_tree_node_alloc.constprop.0+0x1c7/0x310 [ 382.084720] should_failslab+0xdb/0x130 [ 382.088684] kmem_cache_alloc+0x47/0x780 [ 382.092730] ? save_stack_trace+0x16/0x20 [ 382.096856] ? save_stack+0x45/0xd0 [ 382.100462] ? kasan_kmalloc+0xce/0xf0 [ 382.104328] ? kasan_slab_alloc+0xf/0x20 [ 382.108374] ? kmem_cache_alloc+0x12e/0x780 [ 382.112691] ? __kernfs_new_node+0x70/0x420 [ 382.116993] ? kernfs_new_node+0x80/0xf0 [ 382.121054] radix_tree_node_alloc.constprop.0+0x1c7/0x310 [ 382.126663] idr_get_free_cmn+0x563/0x8d0 [ 382.130801] idr_alloc_cmn+0x10e/0x210 [ 382.134672] ? __fprop_inc_percpu_max+0x1e0/0x1e0 [ 382.139501] ? __lock_is_held+0xb6/0x140 [ 382.143542] ? check_preemption_disabled+0x3c/0x250 [ 382.148543] idr_alloc_cyclic+0xd0/0x1e2 [ 382.152588] ? ida_simple_remove+0x60/0x60 [ 382.156816] __kernfs_new_node+0xe4/0x420 [ 382.160949] kernfs_new_node+0x80/0xf0 [ 382.164844] kernfs_create_dir_ns+0x41/0x140 [ 382.169235] internal_create_group+0xea/0x7b0 [ 382.173714] sysfs_create_group+0x20/0x30 [ 382.177843] lo_ioctl+0x1176/0x1ce0 [ 382.181454] ? loop_probe+0x160/0x160 [ 382.185242] blkdev_ioctl+0x96b/0x1860 [ 382.189368] ? blkpg_ioctl+0x980/0x980 [ 382.193255] ? __might_sleep+0x93/0xb0 [ 382.197123] ? __fget+0x210/0x370 [ 382.200557] block_ioctl+0xde/0x120 [ 382.204165] ? blkdev_fallocate+0x3b0/0x3b0 [ 382.208470] do_vfs_ioctl+0x7ae/0x1060 [ 382.212342] ? selinux_file_mprotect+0x5d0/0x5d0 [ 382.217075] ? lock_downgrade+0x6e0/0x6e0 [ 382.221231] ? ioctl_preallocate+0x1c0/0x1c0 [ 382.225620] ? __fget+0x237/0x370 [ 382.229060] ? security_file_ioctl+0x89/0xb0 [ 382.233449] SyS_ioctl+0x8f/0xc0 [ 382.236820] ? do_vfs_ioctl+0x1060/0x1060 [ 382.240952] do_syscall_64+0x1e8/0x640 [ 382.244820] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 382.249647] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 382.254817] RIP: 0033:0x459137 [ 382.257986] RSP: 002b:00007fbd1d1a1a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 12:39:27 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xffff, 0x800) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x91000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r1, @ANYBLOB="000228bd7000ffdbdf25090000003400090008000200dc8d000008000200050000000800010004000000080001001bcd161769f43f000000080001000500000008000200040000002b00010008000300ff0000001c0002000800020001000000080004000400000008000200795a0000100001006574683a687773696d300000240009000800020000000000080001000100000008000200010000000800020001f8ffff"], 0xa4}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r3 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r3, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r3, 0xc1105511, &(0x7f0000001000)) [ 382.265685] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000459137 [ 382.272934] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 382.280191] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 382.287441] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 382.294692] R13: 00000000004c8220 R14: 00000000004dea68 R15: 0000000000000003 [ 382.307294] openvswitch: netlink: Flow get message rejected, Key attribute missing. 12:39:27 executing program 1: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x80000002, 0x8972, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a62000/0x1000)=nil, 0x200000, 0x10200000008) r0 = syz_open_procfs(0x0, &(0x7f0000000600)='smaps\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") preadv(r0, &(0x7f0000000100), 0x0, 0x400000000000) 12:39:27 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x2b0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xdc, 0x0, 0x400, 0x70bd2b, 0x800, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffffffffc00}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x31}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x11}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1f, 0x2}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x4}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x15, 0x20}}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x20}}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netdevsim0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xd82}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x53e}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x18, 0x32, 0x119, 0x0, 0x0, {0x3}, [@generic="ffd3"]}, 0x18}}, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x60800, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r1, 0x4004ae8b, &(0x7f00000003c0)={0x1000, "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"}) [ 382.318867] gfs2: not a GFS2 filesystem 12:39:27 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x600101, 0x0) name_to_handle_at(r1, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={0x90, 0x0, "748d2f037763a0649f178385f5f43690ff29a9fd57b839377a1766f4b926bbf3859bdb2c91642462262101d0f2291fd800e4793367ffdc2485967705ec8c19e655fe7c2da58bb22f615bc470e13028499167a07c87c49a3d183f41895f6f637e221a2d9b616799c70f2cdb0f499fc8977a81d6b4f1f3b0f5dff22e8fa7735a5e44ddd809924831e7"}, &(0x7f0000000140), 0x400) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x7, 0x0, &(0x7f0000000180)={0x0, r2+30000000}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) tkill(r0, 0x1000100000016) 12:39:27 executing program 4 (fault-call:0 fault-nth:13): syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 12:39:27 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) [ 382.456609] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 382.483796] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 382.496979] FAULT_INJECTION: forcing a failure. 12:39:27 executing program 1: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x80000002, 0x8972, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a62000/0x1000)=nil, 0x200000, 0x10200000008) r0 = syz_open_procfs(0x0, &(0x7f0000000600)='smaps\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") preadv(r0, &(0x7f0000000100), 0x0, 0x400000000000) [ 382.496979] name failslab, interval 1, probability 0, space 0, times 0 [ 382.508459] CPU: 0 PID: 18358 Comm: syz-executor.4 Not tainted 4.14.129 #23 [ 382.515565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 382.524946] Call Trace: [ 382.527547] dump_stack+0x138/0x19c [ 382.531198] should_fail.cold+0x10f/0x159 [ 382.535355] ? radix_tree_node_alloc.constprop.0+0x1c7/0x310 [ 382.541171] should_failslab+0xdb/0x130 [ 382.545166] kmem_cache_alloc+0x47/0x780 [ 382.549231] ? save_stack_trace+0x16/0x20 [ 382.549242] ? save_stack+0x45/0xd0 12:39:27 executing program 1: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x80000002, 0x8972, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a62000/0x1000)=nil, 0x200000, 0x10200000008) r0 = syz_open_procfs(0x0, &(0x7f0000000600)='smaps\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") preadv(r0, &(0x7f0000000100)=[{0x0}], 0x1, 0x400000000000) [ 382.549250] ? kasan_kmalloc+0xce/0xf0 [ 382.549258] ? kasan_slab_alloc+0xf/0x20 [ 382.549267] ? kmem_cache_alloc+0x12e/0x780 [ 382.549280] ? __kernfs_new_node+0x70/0x420 [ 382.573579] ? kernfs_new_node+0x80/0xf0 [ 382.577657] radix_tree_node_alloc.constprop.0+0x1c7/0x310 [ 382.583301] idr_get_free_cmn+0x563/0x8d0 [ 382.587473] idr_alloc_cmn+0x10e/0x210 [ 382.591371] ? __fprop_inc_percpu_max+0x1e0/0x1e0 [ 382.596234] ? __lock_is_held+0xb6/0x140 [ 382.600305] ? check_preemption_disabled+0x3c/0x250 [ 382.605361] idr_alloc_cyclic+0xd0/0x1e2 [ 382.609449] ? ida_simple_remove+0x60/0x60 [ 382.613706] __kernfs_new_node+0xe4/0x420 [ 382.617868] kernfs_new_node+0x80/0xf0 [ 382.621761] kernfs_create_dir_ns+0x41/0x140 [ 382.626180] internal_create_group+0xea/0x7b0 [ 382.630683] sysfs_create_group+0x20/0x30 [ 382.634833] lo_ioctl+0x1176/0x1ce0 [ 382.638443] ? loop_probe+0x160/0x160 [ 382.642247] blkdev_ioctl+0x96b/0x1860 [ 382.646122] ? blkpg_ioctl+0x980/0x980 [ 382.650092] ? __might_sleep+0x93/0xb0 [ 382.653958] ? __fget+0x210/0x370 [ 382.657393] block_ioctl+0xde/0x120 [ 382.661002] ? blkdev_fallocate+0x3b0/0x3b0 [ 382.665308] do_vfs_ioctl+0x7ae/0x1060 [ 382.669178] ? selinux_file_mprotect+0x5d0/0x5d0 [ 382.673917] ? lock_downgrade+0x6e0/0x6e0 [ 382.678046] ? ioctl_preallocate+0x1c0/0x1c0 [ 382.682434] ? __fget+0x237/0x370 [ 382.685876] ? security_file_ioctl+0x89/0xb0 [ 382.690281] SyS_ioctl+0x8f/0xc0 [ 382.693627] ? do_vfs_ioctl+0x1060/0x1060 [ 382.697759] do_syscall_64+0x1e8/0x640 [ 382.701629] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 382.706455] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 382.711623] RIP: 0033:0x459137 [ 382.714795] RSP: 002b:00007fbd1d1a1a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 382.722496] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000459137 [ 382.729745] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 382.736995] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 382.744247] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 382.751519] R13: 00000000004c8220 R14: 00000000004dea68 R15: 0000000000000003 12:39:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r4 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r4, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r5, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r5, 0x2007fff) sendfile(r3, r5, 0x0, 0x87ff7) 12:39:27 executing program 1: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x80000002, 0x8972, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a62000/0x1000)=nil, 0x200000, 0x10200000008) r0 = syz_open_procfs(0x0, &(0x7f0000000600)='smaps\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") preadv(r0, &(0x7f0000000100)=[{0x0}], 0x1, 0x400000000000) 12:39:27 executing program 5: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x1, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) write$P9_RMKDIR(r0, 0x0, 0xfffffffffffffd23) syz_extract_tcp_res(&(0x7f0000000200), 0x1f, 0x100) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1800000032001901000000000000000003000000ffd30000de6075fac169b5854da9b5990b48cd7837ded9dd4a753843ac98d854b47d6cc0063a1fae5850c1a558c2d70ff36dc8352bedf7b52f2d1493e076074e48c78e3652e439797c0232b31b49f8770056dde335681cbd03091a5bb6352693710f085b64d53b2513522c8ff4c0ca1962bdfa90fad91f5c9668eb5cdfe4f6652e9e5166246c586ef75b5e3726e00c87af51af41e7c22d0033b9877cb5b7c7bc28adf0c3e8af0d395d25c275c56a2cea64ce997e60f5ceab38172f388d218cd38953ab3304e70fb7e4599204be964ab8a097"], 0x18}}, 0x0) [ 382.807418] gfs2: not a GFS2 filesystem 12:39:27 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400840, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:28 executing program 4 (fault-call:0 fault-nth:14): syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 12:39:28 executing program 5: r0 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x9, 0x20000) write$P9_RUNLINKAT(r0, &(0x7f00000000c0)={0x7, 0x4d, 0x1}, 0x7) write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x18, 0x32, 0x119, 0x0, 0x0, {0x3}, [@generic="ffd3"]}, 0x18}}, 0x0) 12:39:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) [ 382.965363] FAULT_INJECTION: forcing a failure. [ 382.965363] name failslab, interval 1, probability 0, space 0, times 0 [ 383.015370] CPU: 0 PID: 18391 Comm: syz-executor.4 Not tainted 4.14.129 #23 [ 383.022521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 383.022526] Call Trace: [ 383.022548] dump_stack+0x138/0x19c [ 383.022568] should_fail.cold+0x10f/0x159 [ 383.022584] should_failslab+0xdb/0x130 [ 383.022598] kmem_cache_alloc+0x2d7/0x780 [ 383.038191] ? __mutex_unlock_slowpath+0x71/0x800 [ 383.055279] ? __lock_is_held+0xb6/0x140 [ 383.059329] __kernfs_new_node+0x70/0x420 [ 383.063931] kernfs_new_node+0x80/0xf0 [ 383.067802] __kernfs_create_file+0x46/0x323 [ 383.072193] sysfs_add_file_mode_ns+0x1e4/0x450 [ 383.076846] internal_create_group+0x232/0x7b0 [ 383.081413] sysfs_create_group+0x20/0x30 [ 383.085548] lo_ioctl+0x1176/0x1ce0 [ 383.089162] ? loop_probe+0x160/0x160 [ 383.092949] blkdev_ioctl+0x96b/0x1860 [ 383.096819] ? blkpg_ioctl+0x980/0x980 [ 383.100691] ? __might_sleep+0x93/0xb0 [ 383.104562] ? __fget+0x210/0x370 [ 383.108012] block_ioctl+0xde/0x120 [ 383.111618] ? blkdev_fallocate+0x3b0/0x3b0 [ 383.115920] do_vfs_ioctl+0x7ae/0x1060 [ 383.119792] ? selinux_file_mprotect+0x5d0/0x5d0 [ 383.124533] ? lock_downgrade+0x6e0/0x6e0 [ 383.128659] ? ioctl_preallocate+0x1c0/0x1c0 [ 383.133054] ? __fget+0x237/0x370 [ 383.136497] ? security_file_ioctl+0x89/0xb0 [ 383.140887] SyS_ioctl+0x8f/0xc0 [ 383.144501] ? do_vfs_ioctl+0x1060/0x1060 [ 383.148631] do_syscall_64+0x1e8/0x640 [ 383.152498] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 383.157424] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 383.162593] RIP: 0033:0x459137 [ 383.165772] RSP: 002b:00007fbd1d1a1a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 383.173459] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000459137 [ 383.180722] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 383.187970] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 383.195219] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 383.202470] R13: 00000000004c8220 R14: 00000000004dea68 R15: 0000000000000003 [ 383.240296] gfs2: not a GFS2 filesystem 12:39:30 executing program 2: r0 = gettid() r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x7, 0x0, &(0x7f0000000180)={0x0, r2+30000000}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) tkill(r0, 0x1000100000016) 12:39:30 executing program 1: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x80000002, 0x8972, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a62000/0x1000)=nil, 0x200000, 0x10200000008) r0 = syz_open_procfs(0x0, &(0x7f0000000600)='smaps\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") preadv(r0, &(0x7f0000000100)=[{0x0}], 0x1, 0x400000000000) 12:39:30 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000080)='/dev/capi20\x00', 0x8000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x18, 0x32, 0x119, 0x70bd2d, 0x0, {0x3}, [@generic="ffd3"]}, 0x18}}, 0x0) 12:39:30 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@caif=@dgm={0x25, 0xddc, 0x4}, 0x80, &(0x7f0000000380)=[{&(0x7f00000011c0)="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", 0x1000}, {&(0x7f00000021c0)="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", 0x1000}, {&(0x7f0000000200)="cd0329a8475f3d9fb11decd2389574d85611fd72ce634b0ddbb58278a559b34b01282a99e268f021e4be5a02d1bed09a510bb437a2b2e8ba8d4cab3b04fce47919ee05d2c5577174c825e223b50b961b07e5e62dcab029cc81ab9da8a6dd741a0b760db9aed6beacb2f2daff7e5aed06477bfbbac5a629ce55a6b2d191f717888b3428f5c2ab106d3f3e46401d8d03da0a55eb93a3e0e921e3f9955b293d272e1620dae809218eed3a651bc16db1c487499db1307d63ab79e35cfad1bce4b4a6bfd17880a5eaad00bdaea080ea5b53c2b13886abb6c806", 0xd7}, {&(0x7f0000000080)="b2154e2c3861bb2a009feaaaf22bdffbf5cfdfc18ef7b832c328a7e45f66fa4130ab1cf66d1745e198f9718d4c0615cf63aef54461f725f647eb6e5bfd94d5683ce7404b90524d04e5fee9ef28b78a6cf75dbaae2c55eb9018c807b4e6e931bc3a2489385278fea065dd066163ba58c8b9aea1cfcd4b85583b8444028fb0beb0", 0x80}, {&(0x7f0000000140)="5717e7e051b6dcc95711be09ada0f66da2e1e573573a861a275606b28800226d6e8ad0643bee4d543df3c588128843f6f52d5e67f655b5aa805765cccfe08f2cb0efb9c67cd594f63a0b21da1ebaa7d3f5d5d74021184b05dc3decb518d7612e3ded05fb1a7b31131712dae7655a36002f0aa57cb598", 0x76}, {&(0x7f0000000300)="ad20efd4439652f73eb08ae650e695b318a07bdaa34472d03f829e46346589eae62545e01b37e217d9131a857cd677485dc60eaeb37ea9d494c95d654042d27cfb3e4347de32e992121ef74f8b26c90dda0396b98c4b8c0127f0c124322f5af93d3a0c", 0x63}], 0x6, &(0x7f0000000400)=[{0xa8, 0x10c, 0x767, "4f579888e8d1278bc35d477b687392835a92f15c16a7a69a4eaf0083e382a240ceab832e76ea306df9dec4853f1564ec748b25465021ede30d9df11def0a483bc40d8bd2e03d09dcdc187290003df78112344e8c3fda6e474c6cc81b0d1bf5208baff2959ac2ccf79facaa9f4520068ccc77c660844810e04d4edac722c488f0df901855bc1c433480f7d440d73de567819a"}, {0x70, 0x11d, 0x6, "3514612455d14805767af3c67ed5fc991036cd8299fe55a3792f3e8617d8208b61a288e9a69e22b0ccb6f93922c14122087f70635d7a549ad6e6e52c807db8ece3c8c98e3d55c4567efa41eed078688348cfdb78c462e21bc1c31dd94c24"}], 0x118}, 0x4000) 12:39:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r4 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r4, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r5, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r5, 0x2007fff) sendfile(r3, r5, 0x0, 0x87ff7) 12:39:30 executing program 4 (fault-call:0 fault-nth:15): syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 12:39:30 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) memfd_create(&(0x7f0000000000)='systemkeyring\x00', 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f0000000040)={0x7, 0x0, 0x8, 0x1, 'syz1\x00', 0x40000}) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vfio/vfio\x00', 0x900, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8014}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r3, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, 0x0, 0x4107, 0x0, {0x4c, 0x18, {0xfffffffffffffffe, @media='ib\x00'}}}, ["", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8040}, 0x4000000) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000a) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) lsetxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='security.ima\x00', &(0x7f00000011c0)=@v2={0x5, 0x3, 0x8, 0x5, 0x1000, "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"}, 0x100a, 0x2) 12:39:30 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000500)='/dev/hwrng\x00', 0x2000, 0x0) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000540)) write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="38e6ff001200190100000000000000006571f4f809000000"], 0x18}}, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000440)='/dev/usbmon#\x00', 0xfffffffffffffffd, 0x200000) ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000480)="751618ff7c555e99b00b905c0351e008764519cf2c43ed3bc1b10e7d27b85d48155634a90bd665bd10a0b45bf636c3819a1239767b99d8c6522a7a4042ce1984c3f51c7bf32e629bcf4986735732b47230f894fb36476807cf1881c284eeccfefed4ffd98730f9acc0f21300f5ce34f873bec54f7f50ad825b8bd8137a669f") r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c80)='TIPCv2\x00') ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000000c40)) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000400)={&(0x7f0000000080), 0xc, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c020000", @ANYRES16=r3, @ANYBLOB="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"], 0x26c}, 0x1, 0x0, 0x0, 0x24040090}, 0x40000) io_setup(0x0, &(0x7f0000000580)=0x0) io_submit(r4, 0x6, &(0x7f0000000c00)=[&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x7, 0x8, r2, &(0x7f00000005c0)="10cb1d7a99e388f4959980257ace8be4066808fbceb39d889a1fa9ff88c36baa812bf846dfda873b07ac58f20c83cd0e19b5eee05d4885b0ada14acb7dbb5073cbaa28dbe05caf237a434490b3e16bec60e8e667490675752d8f0407d7ba0f80796b572a78b18369c75882b50771b48d7ad9c0320aeebf0efb1f524d0dd268cb20d1c0b7e13d3de96427c3109a93464d2b82d9d08713ef8e61c9b212a502f304331813ff5c815a4d4ba25e351ef7ad9479d437f8640f1d1b00f6929bedbf1739a60c687307cffbc7f424fffc4d2f2719d5df3860", 0xd4, 0x3, 0x0, 0x3, r2}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x7, 0x4, r1, &(0x7f0000000700)="2326de3089947ba573d8f0c50a7deabee460a050c4900d7c52d1dfbae91dc236cabe0eacc825ea3da9fab17a6294cb9addf0941b2d4fbb298f808ea53afae77e235d6b3faadb2929f0227a87821f31f6f76a83e96444bbd273c6b9ad1555f5f8608d20f00b0072270f8f426672c36afe4f2191f1b1", 0x75, 0x8001, 0x0, 0x0, 0xffffffffffffff9c}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x5, 0x7fff, r2, &(0x7f00000007c0)="bb357659e0beec750b7f0ef7e6fdc1d1f126623289a08be6d9ac497cdef2debe403989cce81ee7bd5a776a3287bc1af2818976adaf6711b6509c8267ab63107dc0bcc173ba161e9a43b953dab044f4c1447d722683a78357be2be7809760689d946fb8feb305697d9ed3afcc2a1734658da5cdb2424fcf2fe12c2074c0887a1cab6a8ee500a1153d2a61a5eec4df7dc44515594d10b7a40e722005d72ea8e312b61b6c900853fefdb7", 0xa9, 0x24f, 0x0, 0x0, r2}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x40, r2, &(0x7f00000008c0)="5f64fb98907c684dbd006b88571ce67c82a417f5c28c2906c37e07bad494f407c18fb5bd34fea87066571c5fa54f78365154a080170d9ba25218d7e64513f05ed6a8440bb9ea26035ea916d4a2656f9916554a8cb237708c7c1902438f39c305291d3cfc5e49de3ea726a1d3d35e94144d5f7e41ed973c945ed8b3ef5f33d0d90fd2518ad85ff18a5681efcb61792419ba960660ad180f159204345363c190e87f81", 0xa2, 0x0, 0x0, 0x0, r0}, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x7ff, r0, &(0x7f00000009c0)="9c1ad240613e6b6e1cf3f0e263f3f51dbd1634bdfd93aedb1824d0ae88601c0c7f9932711d530655c2b9f2ee7b477f45af0493fe77bbfd0e4c2b78a6ca2f17a73b783bf630ca72e716cd7fc8c918e40fa72b7b502906157a3a4dae5d5030196598384d625f001285c2f4c4d22acfdfbed19d0173091751ff988660fb734aaf607908b6dffadb7aff8cbeffbd5882c26f3de1805030c62aeae11d6ee192", 0x9d, 0x7, 0x0, 0x3, r0}, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x7, 0x2, r1, &(0x7f0000000ac0)="6f903eb545b220320ebf5d25654340a4b65d202a0e076ea1c109acbfcddbd0894eee3098c98ded5d6eea003cf537bef3efa76994c8fe1975f29bedcea93b285ef960ed42b2836d11e9109df1f44e54914554edb754a70ca17cebddb0b2551d0913b800d08798add7a39d5ca142d40c079f633ec41af2b5b36ff35628aaec2e4de9c34dd843cba1d33273d9d045580c7fe6d71da45b6af152ec04c1380eadc9b9fa4cd18d213eede5923e806208ab61e7bd730a5953398da9f697780f30633323debb88", 0xc3, 0x1f, 0x0, 0x0, r1}]) [ 385.472030] net_ratelimit: 3 callbacks suppressed [ 385.472034] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 385.487132] FAULT_INJECTION: forcing a failure. [ 385.487132] name failslab, interval 1, probability 0, space 0, times 0 [ 385.558853] CPU: 1 PID: 18415 Comm: syz-executor.4 Not tainted 4.14.129 #23 [ 385.566020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 385.575382] Call Trace: [ 385.578001] dump_stack+0x138/0x19c [ 385.581656] should_fail.cold+0x10f/0x159 [ 385.585822] should_failslab+0xdb/0x130 [ 385.589808] kmem_cache_alloc+0x2d7/0x780 [ 385.593961] ? wait_for_completion+0x420/0x420 [ 385.593980] __kernfs_new_node+0x70/0x420 [ 385.593992] kernfs_new_node+0x80/0xf0 [ 385.602702] __kernfs_create_file+0x46/0x323 [ 385.602715] sysfs_add_file_mode_ns+0x1e4/0x450 [ 385.602726] internal_create_group+0x232/0x7b0 [ 385.602742] sysfs_create_group+0x20/0x30 [ 385.602753] lo_ioctl+0x1176/0x1ce0 [ 385.602766] ? loop_probe+0x160/0x160 [ 385.632185] blkdev_ioctl+0x96b/0x1860 [ 385.636055] ? blkpg_ioctl+0x980/0x980 [ 385.639943] ? __might_sleep+0x93/0xb0 [ 385.643814] ? __fget+0x210/0x370 [ 385.647253] block_ioctl+0xde/0x120 [ 385.650859] ? blkdev_fallocate+0x3b0/0x3b0 [ 385.655163] do_vfs_ioctl+0x7ae/0x1060 [ 385.659047] ? selinux_file_mprotect+0x5d0/0x5d0 [ 385.663806] ? lock_downgrade+0x6e0/0x6e0 [ 385.667936] ? ioctl_preallocate+0x1c0/0x1c0 [ 385.672324] ? __fget+0x237/0x370 [ 385.675764] ? security_file_ioctl+0x89/0xb0 [ 385.680156] SyS_ioctl+0x8f/0xc0 [ 385.683504] ? do_vfs_ioctl+0x1060/0x1060 [ 385.687637] do_syscall_64+0x1e8/0x640 [ 385.691508] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 385.696336] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 385.701505] RIP: 0033:0x459137 12:39:30 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) socketpair(0x4, 0x5, 0x2, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) [ 385.704676] RSP: 002b:00007fbd1d1a1a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 385.712364] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000459137 [ 385.719703] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 385.726962] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 385.734215] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 385.741465] R13: 00000000004c8220 R14: 00000000004dea68 R15: 0000000000000003 [ 385.757666] gfs2: not a GFS2 filesystem 12:39:30 executing program 1: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x80000002, 0x8972, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a62000/0x1000)=nil, 0x200000, 0x10200000008) r0 = syz_open_procfs(0x0, &(0x7f0000000600)='smaps\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/236, 0xec}], 0x63, 0x0) 12:39:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, 0x0, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:39:30 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) fstat(r0, &(0x7f0000000140)) ioctl(r0, 0x1000008912, &(0x7f0000000040)='p\x00'/11) r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x800, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x509040) ioctl$KDSETLED(r2, 0x4b32, 0x100000000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) getegid() ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:31 executing program 2: r0 = gettid() clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x7, 0x0, &(0x7f0000000180)={0x0, r1+30000000}, &(0x7f0000000000)) timer_create(0x5, &(0x7f0000000380)={0x0, 0x3c, 0x2, @thr={&(0x7f00000001c0)="bf67981a99d45f5b994f892c1139eaf25c3df426d35f381bb548694d5751c3e8080126169d9729dff71beafeb61f2ac611ddaa4e6d30be63d5d7f6f15c836dc8d9df69f365dddb847cbecda88a06e63eadbe9cbf2d6f737971e8f5731dc3a6ce67eeacaae3afdfc75389ffa417c8528348a91e7c60714e4e11303004cb78227abf56d27c15bb1dbef87786d8429cefe45bd4d16efddfb84e312c14c18c5ee80b2ac43a0071e8180411de24c8979b98c7a5b5c1dc48b0f15439c08be53fe6ea5eab686bb3014bedde9ec9cb9c039e65d007a822638c94d57643b9ad", &(0x7f00000002c0)="405246c50622af55c99439f3a15721f54bf8f0202b269f5f1882f7a7b4c5ba5c5258eb556e8e2aff01fc03f80fb7b50c238c61c8edd86dafbbcd009d1cc0b3761ae5627bc95cc3cca643e90bace89d610374bf5c22730d057833ca1d8b0560b9aca72e32baaa38be42fb923b040159a967861aee57777da015d4cb39d939d7df4b7127a0b2b2213a11888be694716f"}}, &(0x7f00000003c0)=0x0) timer_settime(r2, 0x4000000000000000, &(0x7f0000000440)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) r3 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, &(0x7f0000000100)=0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000140)='tls\x00', 0xfa1c2983b5930b29) tkill(r0, 0x1000100000016) 12:39:31 executing program 4 (fault-call:0 fault-nth:16): syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 12:39:31 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ppoll(&(0x7f00000000c0)=[{r0, 0x1041}, {r0, 0x2100}, {r0, 0x40}, {r0, 0x200}, {r0, 0x88}, {r0, 0xa000}], 0x6, &(0x7f0000000100)={0x0, 0x989680}, &(0x7f0000000140)={0x79}, 0x8) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x18, 0x32, 0x119, 0x0, 0x0, {0x3}, [@generic="ffd3"]}, 0x18}}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x101000, 0x0) 12:39:31 executing program 1: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x80000002, 0x8972, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a62000/0x1000)=nil, 0x200000, 0x10200000008) r0 = syz_open_procfs(0x0, &(0x7f0000000600)='smaps\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/236, 0xec}], 0x63, 0x0) 12:39:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2, &(0x7f0000000000)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000005200)='/dev/snd/controlC#\x00', 0x2, 0x200) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8999, &(0x7f0000000780)={'veth1_to_bridge\x00', @ifru_addrs=@can={0x1d, 0x0}}) accept4$packet(0xffffffffffffff9c, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000800)=0x14, 0x80000) sendmmsg$inet(r0, &(0x7f0000005140)=[{{&(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000200)="20bb20150f3248b7178a36a08ee135be824ac5b4166ebcfb9f40885b4ea0d8ed5ef9aa9b58a28c0880901ec2ebd2dca5eb43f1d3455ff5b79310717671fbb33f537206622f692b2871d759eb4a4a16aa08a8c1849f8d5341c340a41a362d7199076d9bbb068021dc1a475811e65d99537bbb9edcf0d81003ddb992adedc0fb9e21843c4cc83e70125373", 0x8a}, {&(0x7f0000001080)="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", 0x1000}, {&(0x7f00000002c0)="5bb7adadfc17ee56d998628233e8b4974ddd5947ac94400792fd48651e774d7286c5ba846bcdf967bc869d4f7961cba2d9551c6e26af62db31ff3b6fa2b8acf9cc983a44f1f72a4081b497b43c0a67be3b247e8de0e96a605b15b1a7422bf039ac54e08e9a898f19be29fca956a9a0c227ad2387f018262f1557f50b28826944d42a035aa82652", 0x87}], 0x3, &(0x7f0000000140)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x74}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffff}}], 0x60}}, {{&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000380)="d6ff45985afb23fc0a20e971b7acca2a3008e33152230b77c0fe1db0b6fbcefe513f6e530ac768476fd81cf31e275dc1c076493e66d470e2dcae67afe7d07759dc5bc480c5e3cc058e0087b6508789f1c52cfb59d543342424ae438619a846d0d861757583497fbf4146de20a6ffead58f14718c81e26c406602e9d7c91752203e32143bcf4b03b3c03826c9ad6979337bf4f563cb5caef7ea6db2c2d018", 0x9e}, {&(0x7f0000002080)="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", 0x1000}, {&(0x7f0000000440)="1000d787828d93c2a9e63d95abf87db7ba4040ca626426d2afa506a427c5b0fb0c3190420fe1", 0x26}, {&(0x7f0000000480)="a27f576a512d592dbd908d361048369ddef5aa923b14cc7c2dbbf03ba0afe1dcd008c536eb76e8ef20586b41e8", 0x2d}, {&(0x7f00000004c0)="99eb40d351f4169cbb30c6d456dc23f08508e2cff6d7ae60375c3758abc875504fc3408262ac9f6fad0577bfff5d7517ea800f87eb8f3dd179d53d562b3b83e4932bbc85f197b3bb2a5edeee7f685de74c37b889f815b1621ab514ec32082726cad05def53eaf60fdca47298ba90c245f29c7d5bf5bdd2552e7c7e9b5df555264df285fab6309ea5a3a250df780adfe2b8a4bdade58cae8f36f2907aec196f9159", 0xa1}, {&(0x7f0000000580)="784f1322df048eba30576df27de309a7ca9f13320eb29ca2956cffcba912508612d0520645be976f5ece0deec67eea0cc4316684b0f5dd6d83e4f9e054472d18db6c5c638d489074906c059b1cebbb3381c91560ff5847e28d401c6a301840b70df64e335f97e86eb1cc28eb19c48eb78d22b9c9f13d31ec6ef2cb5b9a0e", 0x7e}, {&(0x7f0000000600)="4a4960fc49a4b8666a1b4b40d4e2ef236679b1e497bd97b86fa7a02b1c6c41a5ce036298af0909f2466e8800e650fbd5398c91d55f91605848a64a57d45e6ca6a7672a16b2da2f2b2e64aa3d0233e07a53cbc4c0c056eef9507cb0f192c5347e8208e973db331edde4d089a9e9297f7683649b137cdc578634753da01242a8af204410361100ad368c76e68f2f6ccb1eaa93b99489fb0964bc218bf2ee7134efdad134a652f558f02756f5e9c8342d8a047b1c4397caaec5d36fcb7cc3d26ecfe052c3115d7252976956b1247ebb3781c619", 0xd2}], 0x7, &(0x7f0000000840)=[@ip_tos_u8={{0x11}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}}}], 0x58}}, {{&(0x7f00000008c0)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000005080)=[{&(0x7f0000000900)="b78dbd23bb03f1f2831ee7087441b9a2efebd548c19b33e83d7c382c5339a3544355079e874e0a86f7a17eb46e7d84968c1ac379c93780554b6f6767310019b1c3bb5481bfb0325e5a61c863b4656e1b172a3e8ffaf26a5b", 0x58}, {&(0x7f0000003080)="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", 0x1000}, {&(0x7f0000000980)="ba3ae3581f299cdfc4720c07bf2c322cc7e0b1ec477c1ec57a3b4e8ff1565461553f799c9c02b51f8dad15103a6b76b09c14f3c4abbc3e2de305dc21e8a6a6dc5bb05fd355edf955e302f3b7ab87728bd0dfcbe4a1b6f0aa10d11f894e60a68a11556ef7493da04d098f744cb0034786a5e6d4e9c3d54d6ea3a67837a37496770d5ad3accf39fb23ae4936010eb702b61583d1e86a0bc5427aaa3815111dfe72579c3a010003990ee3780f081e4e6a5008cc5f8a6f78676e3914d910eb4e8542da791c95af48f063e6b2a32f7c28c76ff2039efa1da041d6f81a3a11faaa2b97b953a1fc31950272f2489b559f7e48566d3bc75f", 0xf4}, {&(0x7f0000000a80)="8c5cc53246cc5eafbf07e7da815a630d01501b15ae4449dbc37cd30090385a39bd96da6df2bd794654f7326fb9cbc23da7bc5d736ef542b6aef3e7571f9b34f282b6b42dd410b4e0495eb70869cfeb170a86c6f1ccf0c53e60933ca0286f7532ee8fce88c4a0313f45c5f9763fb55913661dfddcf799392ebce229a01001e1b025ae3c221f95dff41c29cf77f07428e0ba3cffa9a75fe5155ac00ef466d3f6656c14348fad5546628a669f1b35a0549670daa6fe59419b52d902716560979a54c4d44b9ae3f93e0047c0", 0xca}, {&(0x7f0000004080)="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", 0x1000}, {&(0x7f0000000b80)="7b652d54c037444ac4590397b3ebdb4d84b0235d99da1d5d3abe3f108ebbd8c371f832904f7513e8d67d47fe2f618b302fc78e651cd57b8d3efb6be54166b2accf4fe8152dbc9b3a6775ef65a01faf4ea05628188fa95b62c975231ba9dd56fc954e9bbd33a78db11a2734d14a4a7f0197140338625b3152aa3dde15377e9b30bca8a69a86e9bf4153e2180fea1641be7a98fa7c855ebbe177d8865ad52436e9ac40903ae68362013186fb54902f58a1fcf703b36e869f58eb43c8e0b82aa73680b2c6ba2ac213fa", 0xc8}, {&(0x7f0000000c80)="3e7f5c989c31027382eebfe92184b6de97f190374157846574d7fe7a32900bf0cace4acf13c769f7dd853cbbd9fab667bb727ed7570b5973b836d8fc11961d10a621a708eb8ce4e8a6b434d883956d1fcde2f20a1c7ddf72147114b63253b2ac8caa06b74ab85235be623a5fd231402325b849ac5a2debd3bcecc1f3545f39c3209cb8347c302751c89c0031bcca79095bc15a360c016c5a32f21ba52b92b2855f5e336c616c581bbe4282469b7c982c1b6df929574fe25091f65690fe53e94d0d", 0xc1}, {&(0x7f0000000d80)="e63dea8d14fbbce7db26aeecb24efab68e552e8cc87c79357d08c7292c3cf056d035974c1571550405b40100bf4552167bf848a8177a011e1a2bc599064470949dc0c494bd2bb1cc07378b07a35a3a11302e1f9d48f5656cdec142b989a0127935ab3ac753755f9bd35ac3de4d347c23ed7643c36ae3342a", 0x78}, {&(0x7f0000000e00)="a585361214461fe8e8380f30248d22ba24b87f3e0d57494eabcf4b44518ca3c5ce692862e43a7cc92932ed4a805545693449b04bf009731428bfb018a16dedef4ecca69d6fc0b32891608216981168392e1dbd6c81b0e25d7b11ffe04af615cd11bc469da7babc25c9f30d0f79dfead2c3141b36f7de599fe96b34556a1d19c3965c7cf829591edd476d6772e3cffabfcf8e74711e48352600bbd096f64f5116148cd2fd4956e57d471b72d8dbfff22ce2d30992eceb1ed0547fbdff071e2ce8d24b09c453ae8ffb800b72ab53c8580adbd085e0a05045665e1aa7ebf320e94f9af1ba9cf88bc9299c22a6b047e3b747", 0xf0}, {&(0x7f0000000f00)="d6fc25763c75aed7d861cc5a55186f7d8d1e1fe57af632f0838d163a4ad05eb0dd4995f8e5a313fb222b7911e4f9a41417db3f5abcd0998e3566d542825dbffa5fa43bbee13e0030687c116135340294805eb7726af2aefb6bf19c2455aac04b7df57b1a26e1c8397f272e2f79df50c4c6580e95cb032f46d863e063349bf3af51b924992f393a07c342cc92965f6d1bd381af318e5d4ba593279c5d3ce94ea529525745f29a342f5ac64308bddf", 0xae}], 0xa, &(0x7f0000000fc0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3}}], 0x18}}], 0x3, 0xc0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, 0x0, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:39:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) r2 = msgget(0x1, 0x120) msgctl$MSG_INFO(r2, 0xc, &(0x7f0000000000)=""/199) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) [ 386.137466] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 386.167023] FAULT_INJECTION: forcing a failure. [ 386.167023] name failslab, interval 1, probability 0, space 0, times 0 12:39:31 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000180)=0x2, 0x4) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x1, 0x200, 0x401, 0x0, 0x9}, &(0x7f0000000100)=0x14) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000140)={r2, 0x3}, 0x8) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000000040)={&(0x7f0000000380)={0x18, 0x32, 0x119, 0x0, 0x0, {0x3}, [@generic="ffd3"]}, 0xffffffffffffff14}}, 0x40000) [ 386.240510] CPU: 0 PID: 18466 Comm: syz-executor.4 Not tainted 4.14.129 #23 [ 386.247669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 386.257031] Call Trace: [ 386.259638] dump_stack+0x138/0x19c [ 386.263281] should_fail.cold+0x10f/0x159 [ 386.267444] should_failslab+0xdb/0x130 [ 386.271434] kmem_cache_alloc+0x2d7/0x780 [ 386.275588] ? wait_for_completion+0x420/0x420 [ 386.280180] __kernfs_new_node+0x70/0x420 [ 386.284342] kernfs_new_node+0x80/0xf0 [ 386.288251] __kernfs_create_file+0x46/0x323 [ 386.292666] sysfs_add_file_mode_ns+0x1e4/0x450 [ 386.297345] internal_create_group+0x232/0x7b0 [ 386.301939] sysfs_create_group+0x20/0x30 [ 386.306085] lo_ioctl+0x1176/0x1ce0 [ 386.309707] ? loop_probe+0x160/0x160 [ 386.309721] blkdev_ioctl+0x96b/0x1860 [ 386.309731] ? blkpg_ioctl+0x980/0x980 [ 386.309749] ? __might_sleep+0x93/0xb0 [ 386.309760] ? __fget+0x210/0x370 [ 386.328619] block_ioctl+0xde/0x120 [ 386.332244] ? blkdev_fallocate+0x3b0/0x3b0 [ 386.336550] do_vfs_ioctl+0x7ae/0x1060 [ 386.340420] ? selinux_file_mprotect+0x5d0/0x5d0 [ 386.345157] ? lock_downgrade+0x6e0/0x6e0 [ 386.349295] ? ioctl_preallocate+0x1c0/0x1c0 [ 386.353686] ? __fget+0x237/0x370 [ 386.357132] ? security_file_ioctl+0x89/0xb0 [ 386.361524] SyS_ioctl+0x8f/0xc0 [ 386.364897] ? do_vfs_ioctl+0x1060/0x1060 [ 386.369027] do_syscall_64+0x1e8/0x640 [ 386.372898] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 386.377729] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 386.382898] RIP: 0033:0x459137 12:39:31 executing program 3: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000140)='/dev/md0\x00', 0x8000, 0x0) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000180)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r2 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r2, 0x40405514, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 'syz1\x00'}) r3 = perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = dup(r2) ioctl$TIOCLINUX3(r4, 0x541c, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) getsockopt$inet_dccp_buf(r3, 0x21, 0xf, &(0x7f0000000040)=""/81, &(0x7f00000000c0)=0x51) ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0xc1105511, &(0x7f0000001000)) 12:39:31 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x18, 0x32, 0x119, 0x0, 0x0, {0x3}, [@generic="ffd3"]}, 0x18}}, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x2000}, {r0, 0x500}, {r0, 0x4000}, {r0, 0x1200}], 0x4, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000100), 0x8) [ 386.386067] RSP: 002b:00007fbd1d1a1a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 386.393757] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000459137 [ 386.401010] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 386.408261] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 386.415510] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 386.422761] R13: 00000000004c8220 R14: 00000000004dea68 R15: 0000000000000003 12:39:31 executing program 1: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x80000002, 0x8972, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a62000/0x1000)=nil, 0x200000, 0x10200000008) r0 = syz_open_procfs(0x0, &(0x7f0000000600)='smaps\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/236, 0xec}], 0x63, 0x0) 12:39:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, 0x0, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) [ 386.468320] gfs2: not a GFS2 filesystem [ 386.520541] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 386.534053] openvswitch: netlink: Flow get message rejected, Key attribute missing. 12:39:34 executing program 2: r0 = gettid() r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r1) timer_create(0x6, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000000c0)) clock_nanosleep(0x7, 0x1, &(0x7f0000000180), &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) tkill(r0, 0x1000100000016) 12:39:34 executing program 4 (fault-call:0 fault-nth:17): syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 12:39:34 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) socketpair(0x5, 0x3, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0x2dc, r1, 0x14, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x30, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2a8f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xc32}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_BEARER={0xc8, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x8, @remote, 0x5c60}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x16}}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6fc3}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'hwsim0\x00'}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_NET={0x2c, 0x7, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x400}]}, @TIPC_NLA_MEDIA={0x28, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1800}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x150}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0xb4, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x718}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xaf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0x80, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xfa}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100000001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xeb}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffffffffffe}]}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x20000040}, 0x890) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x18, 0x32, 0x119, 0x0, 0x0, {0x3}, [@generic="ffd3"]}, 0x18}}, 0x0) 12:39:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:34 executing program 1: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x80000002, 0x8972, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a62000/0x1000)=nil, 0x200000, 0x10200000008) r0 = syz_open_procfs(0x0, &(0x7f0000000600)='smaps\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/236, 0xec}], 0x63, 0x0) 12:39:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) [ 389.178321] FAULT_INJECTION: forcing a failure. [ 389.178321] name failslab, interval 1, probability 0, space 0, times 0 [ 389.202587] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 389.217525] CPU: 1 PID: 18512 Comm: syz-executor.4 Not tainted 4.14.129 #23 12:39:34 executing program 3: r0 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000000, r0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r2 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r2, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0xc1105511, &(0x7f0000001000)) socket$inet(0x2, 0x4, 0x9) fcntl$notify(r2, 0x402, 0x0) [ 389.224678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 389.236586] Call Trace: [ 389.239189] dump_stack+0x138/0x19c [ 389.242837] should_fail.cold+0x10f/0x159 [ 389.247003] should_failslab+0xdb/0x130 [ 389.250995] kmem_cache_alloc+0x2d7/0x780 [ 389.255157] ? wait_for_completion+0x420/0x420 [ 389.259763] __kernfs_new_node+0x70/0x420 [ 389.264017] kernfs_new_node+0x80/0xf0 [ 389.268014] __kernfs_create_file+0x46/0x323 [ 389.272436] sysfs_add_file_mode_ns+0x1e4/0x450 [ 389.277123] internal_create_group+0x232/0x7b0 [ 389.281721] sysfs_create_group+0x20/0x30 [ 389.285882] lo_ioctl+0x1176/0x1ce0 [ 389.289528] ? loop_probe+0x160/0x160 [ 389.293343] blkdev_ioctl+0x96b/0x1860 [ 389.297238] ? blkpg_ioctl+0x980/0x980 [ 389.301136] ? __might_sleep+0x93/0xb0 [ 389.305037] ? __fget+0x210/0x370 [ 389.308501] block_ioctl+0xde/0x120 [ 389.312144] ? blkdev_fallocate+0x3b0/0x3b0 [ 389.316474] do_vfs_ioctl+0x7ae/0x1060 [ 389.320379] ? selinux_file_mprotect+0x5d0/0x5d0 [ 389.325154] ? lock_downgrade+0x6e0/0x6e0 12:39:34 executing program 5: openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/mls\x00', 0x0, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x5, 0x8000) write$P9_RMKDIR(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$mice(&(0x7f0000000400)='/dev/input/mice\x00', 0x0, 0x82000) sendto$ax25(r2, &(0x7f0000000440)="89fffe6ff5fcb97b400979e64f7e579dbd583e7b0553b037173ba9fa62108000f4646442e1ac1d735599d2570dadcde89ffa60b4fc641f85a821b843f851220d0267a818e42e46", 0x47, 0x4, 0x0, 0x0) setxattr$security_smack_entry(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.SMACK64MMAP\x00', &(0x7f0000000100)='+#:\x00', 0x4, 0x3) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="1800"/24], 0x18}}, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20c00000}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="48019200e687a4fa7a2972", @ANYRES16=r3, @ANYBLOB="000829bd7000ffdbdf25060000000c00030008000800ff00000008000400060000002800030008000500e00000010800080005000000140006000000000000000000000000000000000108000400050000004c00030014000600fe8000000000000000000000000000aa14000600fe8000000000000000000000000000aa0800010000000000080007004e2100000800010001000000080007004e230000400001000800090003000000080004004e24000014000300ac14140c000000000000000000000000080002007f00000008000600666f000008000500020000000800060001fcffff24000200080002004e21000008000e004e2100000800070089b00000080002004e200000380003000800010002000000080007004e230000080007004e20000014000200626f6e645f736c6176655f31000000000800040001000000"], 0x148}, 0x1, 0x0, 0x0, 0x40}, 0x40000) [ 389.329316] ? ioctl_preallocate+0x1c0/0x1c0 [ 389.333733] ? __fget+0x237/0x370 [ 389.337205] ? security_file_ioctl+0x89/0xb0 [ 389.341616] SyS_ioctl+0x8f/0xc0 [ 389.341625] ? do_vfs_ioctl+0x1060/0x1060 [ 389.341640] do_syscall_64+0x1e8/0x640 [ 389.341647] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 389.341662] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 389.341671] RIP: 0033:0x459137 [ 389.353063] RSP: 002b:00007fbd1d1a1a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 12:39:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000000)=0x4, &(0x7f0000000040)=0x2) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f00000000c0)) 12:39:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, 0x0, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) [ 389.353075] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000459137 [ 389.353081] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 389.353086] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 389.353094] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 389.395999] R13: 00000000004c8220 R14: 00000000004dea68 R15: 0000000000000003 12:39:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:39:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x4fef8be9ceee71cc, 0x0, 0x0, 'syz1\x00', 0x7}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) [ 389.585004] gfs2: not a GFS2 filesystem 12:39:37 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_nanosleep(0x7, 0x0, &(0x7f0000000180), &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) tkill(r0, 0x1000100000016) 12:39:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000080)={'filter\x00'}, &(0x7f0000000140)=0x78) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x5, 0x6082) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4, 0x19010, r0, 0x5) write$FUSE_POLL(r2, &(0x7f0000000040)={0x18, 0x0, 0x5, {0x6}}, 0x18) 12:39:37 executing program 5: r0 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x7, 0x400001) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f00000000c0)) fcntl$setstatus(r0, 0x4, 0x800) write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x18, 0x32, 0x119, 0x0, 0x0, {0x3}, [@generic="ffd3"]}, 0x18}}, 0x0) 12:39:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:39:37 executing program 4 (fault-call:0 fault-nth:18): syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 12:39:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) [ 392.204640] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 392.217657] FAULT_INJECTION: forcing a failure. [ 392.217657] name failslab, interval 1, probability 0, space 0, times 0 [ 392.235773] CPU: 1 PID: 18567 Comm: syz-executor.4 Not tainted 4.14.129 #23 [ 392.242931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 392.242938] Call Trace: [ 392.242961] dump_stack+0x138/0x19c [ 392.242980] should_fail.cold+0x10f/0x159 [ 392.242997] should_failslab+0xdb/0x130 [ 392.243011] kmem_cache_alloc+0x2d7/0x780 [ 392.243019] ? wait_for_completion+0x420/0x420 [ 392.243035] __kernfs_new_node+0x70/0x420 [ 392.243048] kernfs_new_node+0x80/0xf0 [ 392.243062] __kernfs_create_file+0x46/0x323 [ 392.243074] sysfs_add_file_mode_ns+0x1e4/0x450 [ 392.243088] internal_create_group+0x232/0x7b0 [ 392.298076] sysfs_create_group+0x20/0x30 [ 392.302217] lo_ioctl+0x1176/0x1ce0 [ 392.305851] ? loop_probe+0x160/0x160 [ 392.309639] blkdev_ioctl+0x96b/0x1860 [ 392.313526] ? blkpg_ioctl+0x980/0x980 [ 392.317401] ? __might_sleep+0x93/0xb0 [ 392.321270] ? __fget+0x210/0x370 [ 392.324710] block_ioctl+0xde/0x120 [ 392.328320] ? blkdev_fallocate+0x3b0/0x3b0 [ 392.332637] do_vfs_ioctl+0x7ae/0x1060 [ 392.336512] ? selinux_file_mprotect+0x5d0/0x5d0 [ 392.341250] ? lock_downgrade+0x6e0/0x6e0 [ 392.345395] ? ioctl_preallocate+0x1c0/0x1c0 [ 392.349789] ? __fget+0x237/0x370 [ 392.353242] ? security_file_ioctl+0x89/0xb0 [ 392.357633] SyS_ioctl+0x8f/0xc0 [ 392.360980] ? do_vfs_ioctl+0x1060/0x1060 [ 392.365115] do_syscall_64+0x1e8/0x640 [ 392.368984] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 392.373825] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 392.378998] RIP: 0033:0x459137 [ 392.382173] RSP: 002b:00007fbd1d1a1a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 392.389876] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000459137 [ 392.397753] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 12:39:37 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x18, 0x32, 0x119, 0x0, 0x0, {0x3}, [@generic="ffd3"]}, 0x18}}, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000100)={0x26c, r1, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x40, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffff001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8497}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffff}]}, @TIPC_NLA_LINK={0x48, 0x4, [@TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6013}]}]}, @TIPC_NLA_NET={0x14, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xc36f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x200}]}, @TIPC_NLA_NODE={0x44, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8001}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x71a6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}]}, @TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xac0}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x401}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000001}]}, @TIPC_NLA_NODE={0x30, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x7c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x28}, 0x3ff}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x0, @remote, 0x9}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e20, @loopback}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_NET={0x30, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffff00000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}]}]}, 0x26c}, 0x1, 0x0, 0x0, 0x1}, 0x48800) [ 392.405010] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 392.412349] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 392.419614] R13: 00000000004c8220 R14: 00000000004dea68 R15: 0000000000000003 12:39:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x101000, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x4, 0x3, 0x8001}, &(0x7f0000000080)=0x14) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f00000000c0)={r3, 0x7}, &(0x7f0000000140)=0x8) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:37 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)=0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0xfffffffffffffc01) timer_getoverrun(r1) clock_nanosleep(0x7, 0x0, &(0x7f0000000180)={0x0, r2+30000000}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) tkill(r0, 0x1000100000016) [ 392.475806] gfs2: not a GFS2 filesystem 12:39:37 executing program 4 (fault-call:0 fault-nth:19): syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 392.556412] openvswitch: netlink: Flow get message rejected, Key attribute missing. 12:39:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x59, 0x400) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000200)={{0x3, 0x5, 0xcb70, 0x3, 'syz0\x00', 0x6}, 0x3, 0x3, 0x10001, r2, 0x1, 0x10000, 'syz0\x00', &(0x7f00000000c0)=['%GPLloeth0\x00'], 0xb, [], [0x0, 0x2, 0x7fff, 0xfffffffffffff5f7]}) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r3 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r3, 0x40405514, &(0x7f00000001c0)={0x5, 0x4, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r3, 0xc1105511, &(0x7f0000001000)) [ 392.598870] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 392.632773] FAULT_INJECTION: forcing a failure. [ 392.632773] name failslab, interval 1, probability 0, space 0, times 0 [ 392.653713] CPU: 0 PID: 18592 Comm: syz-executor.4 Not tainted 4.14.129 #23 [ 392.660862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 392.660867] Call Trace: [ 392.660889] dump_stack+0x138/0x19c [ 392.660908] should_fail.cold+0x10f/0x159 [ 392.660925] should_failslab+0xdb/0x130 [ 392.660941] kmem_cache_alloc+0x2d7/0x780 [ 392.660953] ? wait_for_completion+0x420/0x420 [ 392.660970] __kernfs_new_node+0x70/0x420 [ 392.660982] kernfs_new_node+0x80/0xf0 [ 392.660995] __kernfs_create_file+0x46/0x323 [ 392.661007] sysfs_add_file_mode_ns+0x1e4/0x450 [ 392.684984] internal_create_group+0x232/0x7b0 [ 392.685000] sysfs_create_group+0x20/0x30 [ 392.720409] lo_ioctl+0x1176/0x1ce0 [ 392.724048] ? loop_probe+0x160/0x160 [ 392.728009] blkdev_ioctl+0x96b/0x1860 [ 392.731880] ? blkpg_ioctl+0x980/0x980 [ 392.735770] ? __might_sleep+0x93/0xb0 [ 392.739990] ? __fget+0x210/0x370 [ 392.743437] block_ioctl+0xde/0x120 [ 392.747047] ? blkdev_fallocate+0x3b0/0x3b0 [ 392.751538] do_vfs_ioctl+0x7ae/0x1060 [ 392.755412] ? selinux_file_mprotect+0x5d0/0x5d0 [ 392.760165] ? lock_downgrade+0x6e0/0x6e0 [ 392.764305] ? ioctl_preallocate+0x1c0/0x1c0 [ 392.768710] ? __fget+0x237/0x370 [ 392.772152] ? security_file_ioctl+0x89/0xb0 [ 392.776555] SyS_ioctl+0x8f/0xc0 [ 392.779992] ? do_vfs_ioctl+0x1060/0x1060 [ 392.784134] do_syscall_64+0x1e8/0x640 [ 392.788004] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 392.792833] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 392.798017] RIP: 0033:0x459137 12:39:37 executing program 3: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) ioctl$PPPIOCCONNECT(r0, 0x4004743a, &(0x7f0000000000)=0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r2 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r2, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f00000000c0), &(0x7f0000000140)=0x4) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0xc1105511, &(0x7f0000001000)) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000080)={0x6b, 0x0, 0x300f, 0x7, 0x2, 0xfffffffffffffffd, 0x200, 0x1}) ioctl$DRM_IOCTL_AGP_ENABLE(r0, 0x40086432, &(0x7f0000000040)=0x8001) 12:39:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r4 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r4, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r5, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r5, 0x2007fff) sendfile(r3, r5, 0x0, 0x87ff7) 12:39:37 executing program 5: r0 = syz_open_dev$amidi(&(0x7f0000000200)='/dev/amidi#\x00', 0xa0, 0x40) write$P9_RMKDIR(r0, 0x0, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="0c7dfe2f14a3f4a6aefa07e9ab2cdd2ff8239be957b0c6375b8813f90462a8b896c042a98752c58e07c2a82b785908a242ad20387347ef8347861fe208847bf2f49fd681c6b1ec161f306fcbbcb61fbf607589"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f00000000c0)={{0x101, 0x8}, 'port1\x00', 0x0, 0x18, 0x400, 0x80, 0x2d, 0x80000000, 0x913c, 0x0, 0x4, 0x7}) [ 392.801191] RSP: 002b:00007fbd1d1a1a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 392.809672] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000459137 [ 392.817034] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 392.824387] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 392.831644] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 392.838908] R13: 00000000004c8220 R14: 00000000004dea68 R15: 0000000000000003 12:39:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, 0x0) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:39:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008915, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x103000, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000080)=0x5, 0x4) 12:39:38 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x10000, 0x0) fsetxattr$security_selinux(r0, &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:sshd_key_t:s0\x00', 0x20, 0x1) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/enforce\x00', 0x101080, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(sm4-ce)\x00'}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="1800f1b839985d213c0d0000000000"], 0x18}}, 0x0) 12:39:38 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="180000003200190100d30000000000002100000000000000"], 0x18}}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x2, 0x2) ioctl$TIOCSSERIAL(r1, 0x541f, &(0x7f0000000100)={0x9470, 0x101, 0x7, 0xfff, 0x7, 0x9, 0x4, 0x1, 0x3, 0x80, 0x200, 0xffffffe000000000, 0x3, 0x6c, &(0x7f00000000c0)=""/53, 0x1, 0x1, 0x4}) ioctl$RTC_VL_CLR(r1, 0x7014) 12:39:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, 0x0) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:39:38 executing program 1: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x80000002, 0x8972, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a62000/0x1000)=nil, 0x200000, 0x10200000008) r0 = syz_open_procfs(0x0, &(0x7f0000000600)='smaps\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") preadv(r0, &(0x7f0000000100), 0x0, 0x400000000000) [ 393.134385] gfs2: not a GFS2 filesystem 12:39:38 executing program 2: r0 = gettid() r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x8c002, 0x0) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f00000001c0)) timer_create(0x1, &(0x7f0000044000)={0x0, 0xc, 0x0, @tid=r0}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x7, 0x0, &(0x7f0000000180)={0x0, r2+30000000}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) tkill(r0, 0x1000100000016) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1ff, 0x141000) ioctl$sock_bt_cmtp_CMTPCONNDEL(r3, 0x400443c9, &(0x7f0000000100)={{0xffffffff80000000, 0x1, 0xe74, 0x2, 0x9}, 0x7}) 12:39:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x101002) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) getresgid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000000080)) write$vhci(r2, &(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 12:39:38 executing program 5: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000100)=0xc4ea) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f00000000c0)) write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCRSACCEPT(r0, 0x89e3) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="1800e6ff00000003000000ffd30000"], 0x18}}, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000140)={0xfff, 0x10001, 0x5, 0x3}, 0x8) 12:39:38 executing program 4 (fault-call:0 fault-nth:20): syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 12:39:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, 0x0) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:39:38 executing program 1: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x80000002, 0x8972, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a62000/0x1000)=nil, 0x200000, 0x10200000008) r0 = syz_open_procfs(0x0, &(0x7f0000000600)='smaps\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") preadv(r0, 0x0, 0x0, 0x400000000000) 12:39:38 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f00000000c0)=0x3, 0x4) write$P9_RMKDIR(r1, 0x0, 0xbffe) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000180)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x7, 0x2, 0x1, r1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="8a110000320019010000d763c317438639812700e7ff0003"], 0x18}}, 0x0) [ 393.407577] FAULT_INJECTION: forcing a failure. [ 393.407577] name failslab, interval 1, probability 0, space 0, times 0 [ 393.441454] CPU: 0 PID: 18655 Comm: syz-executor.4 Not tainted 4.14.129 #23 [ 393.448787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 393.458244] Call Trace: [ 393.461154] dump_stack+0x138/0x19c [ 393.464796] should_fail.cold+0x10f/0x159 [ 393.469082] should_failslab+0xdb/0x130 [ 393.473082] kmem_cache_alloc+0x2d7/0x780 [ 393.477238] ? wait_for_completion+0x420/0x420 [ 393.481860] __kernfs_new_node+0x70/0x420 [ 393.486026] kernfs_new_node+0x80/0xf0 [ 393.489930] __kernfs_create_file+0x46/0x323 [ 393.495131] sysfs_add_file_mode_ns+0x1e4/0x450 [ 393.499818] internal_create_group+0x232/0x7b0 [ 393.504421] sysfs_create_group+0x20/0x30 [ 393.509632] lo_ioctl+0x1176/0x1ce0 [ 393.513274] ? loop_probe+0x160/0x160 [ 393.517093] blkdev_ioctl+0x96b/0x1860 [ 393.520995] ? blkpg_ioctl+0x980/0x980 [ 393.525186] ? __might_sleep+0x93/0xb0 [ 393.529190] ? __fget+0x210/0x370 [ 393.532654] block_ioctl+0xde/0x120 [ 393.532666] ? blkdev_fallocate+0x3b0/0x3b0 [ 393.532675] do_vfs_ioctl+0x7ae/0x1060 [ 393.532689] ? selinux_file_mprotect+0x5d0/0x5d0 [ 393.541873] ? lock_downgrade+0x6e0/0x6e0 [ 393.541884] ? ioctl_preallocate+0x1c0/0x1c0 [ 393.541897] ? __fget+0x237/0x370 [ 393.541914] ? security_file_ioctl+0x89/0xb0 [ 393.563864] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 393.565589] SyS_ioctl+0x8f/0xc0 [ 393.565599] ? do_vfs_ioctl+0x1060/0x1060 [ 393.565615] do_syscall_64+0x1e8/0x640 [ 393.589537] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 393.594371] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 393.599646] RIP: 0033:0x459137 12:39:38 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="1800000032001901000000000800000003000000ffd30000"], 0x18}}, 0x0) r1 = dup(r0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000080)={0x6, 0x8}) 12:39:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000c) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) [ 393.602818] RSP: 002b:00007fbd1d1a1a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 393.610519] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000459137 [ 393.617770] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 393.625033] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 393.632285] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 393.639550] R13: 00000000004c8220 R14: 00000000004dea68 R15: 0000000000000003 12:39:38 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0xf6f8a786aed80322) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="18000000dce004ca1b8a291f33345a799672e80583d639cd9e3e8f819e"], 0x18}}, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x100000000, 0x4000) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000140)=0x7d86, 0x4) ioctl$TIOCLINUX6(r1, 0x541c, &(0x7f0000000580)={0x6, 0xfa57}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="00010128f97d40862f0404e6", @ANYRES16=r2, @ANYBLOB="08022bbd7000ffdbdf250e0000000800050000080000540001000800050004000000080001000a00000008000900600000000800050004000000080001000a000000080009004d000000080009000c0000000800080001000000080009005800000008000800ffffffff280001000c0006006e6f6e650000000008000500030000000800020000000000080002002b00000004000100400001000800080004000000080004004e20000008000800ffffffff08000200bc00000008000b00736970000c00070005000000040000000800060073656400"], 0xdc}, 0x1, 0x0, 0x0, 0x800}, 0x4040080) removexattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=@known='com.apple.FinderInfo\x00') r3 = syz_genetlink_get_family_id$team(&(0x7f00000004c0)='team\x00') accept$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000540)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000005c0)={'vcan0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0xa01000}, 0xc, &(0x7f0000000780)={&(0x7f0000000600)={0x174, r3, 0xcb343329f0909613, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8, 0x1, r4}, {0x158, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x94c}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x951}}}]}}]}, 0x174}, 0x1, 0x0, 0x0, 0xc0}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f00000001c0)={{0x84, @empty, 0x4e21, 0x2, 'wrr\x00', 0x20, 0xfff, 0x20}, {@loopback, 0x4e24, 0x2007, 0x0, 0x4, 0xa5}}, 0x44) mq_unlink(&(0x7f0000000180)='\x00') 12:39:38 executing program 1: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x80000002, 0x8972, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a62000/0x1000)=nil, 0x200000, 0x10200000008) r0 = syz_open_procfs(0x0, &(0x7f0000000600)='smaps\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") preadv(r0, 0x0, 0x0, 0x400000000000) 12:39:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) [ 393.880946] gfs2: not a GFS2 filesystem 12:39:41 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x5, 0x0, &(0x7f0000000680)={0x0, r1+30000000}, &(0x7f00000006c0)) r2 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x20, 0x10000) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x8a, 0x1, 0x0, 0x13, 0x5, 0x10, "a6eed67bcb090a14673dd70c9be3eaf2dc9a4ee6d44df73adb41382a9f309259d649aaff974e2d78d8c260b10d00dcf53b2cf7658eed5710fd8c22766ddcfaf6", "62d1729f6f0b57e40d33bceea329fd4532f263b01eb9ef74091ba602ca2c1b55cf9562b90f5807bf11c949f59fc4ffa9d5f21a4e5d887fca647b95a354244317", "30e7efdb8b76a106aafc4c401519618da7332478778b52b79d3fd27dddd24dc5", [0x0, 0x8]}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x81}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000700)={r5}, 0x8) mq_timedreceive(r2, &(0x7f00000001c0)=""/225, 0xe1, 0x4, &(0x7f0000000140)={r3, r4+10000000}) getsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) ptrace$cont(0x1f, r0, 0x3, 0x0) recvfrom$x25(r2, &(0x7f0000000440)=""/155, 0x9b, 0x2002, &(0x7f0000000500)={0x9, @remote={[], 0x2}}, 0x12) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000540)={'filter\x00', 0xce, "0e5c84f7a3ccd2a7a26f2ccc240c5cb587ce1dc325f1ba64d392928b35442fa34304d41c01a034a8309c9d091632cfe87216af36cb9f595d211dc09d5742875aec316322c319376c5b19b6a1102ce02736dd7833422b921390f70b62f4482c8e8889050bd81a130fa9f46d74318373a91e037ab75672a68c97639e26ab93170b356985ba92c164cd9985c396b1eba7accd57af70cbfda1b97fd3dbd52b837624ab999b6567707a72ee0176fa740ca4397639818f867f3d55f8e3f0183c7f1df4936cfd830eb03507a9d583a13e25"}, &(0x7f0000000640)=0xf2) 12:39:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000408912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:41 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x18, 0x32, 0x119, 0x0, 0x0, {0x3}, [@generic="ffd3"]}, 0x18}}, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0xce8aa73c476f8159, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000000140)={'NETMAP\x00'}, &(0x7f0000000180)=0x1e) r2 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xe596, 0x2ec41) socket$inet6(0xa, 0x8000f, 0x6) ioctl$KVM_ASSIGN_SET_INTX_MASK(r2, 0x4040aea4, &(0x7f00000000c0)={0x200, 0x7, 0x100000000, 0x4, 0xfd}) 12:39:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:39:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:39:41 executing program 4 (fault-call:0 fault-nth:21): syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 396.424793] FAULT_INJECTION: forcing a failure. [ 396.424793] name failslab, interval 1, probability 0, space 0, times 0 [ 396.445719] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 396.451748] CPU: 0 PID: 18701 Comm: syz-executor.4 Not tainted 4.14.129 #23 [ 396.460692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 396.460697] Call Trace: [ 396.460720] dump_stack+0x138/0x19c [ 396.460740] should_fail.cold+0x10f/0x159 [ 396.460757] should_failslab+0xdb/0x130 [ 396.460771] kmem_cache_alloc_node+0x287/0x780 [ 396.489041] __alloc_skb+0x9c/0x500 [ 396.492681] ? skb_scrub_packet+0x4b0/0x4b0 [ 396.497014] ? netlink_has_listeners+0x20a/0x330 [ 396.501782] kobject_uevent_env+0x781/0xc23 [ 396.506118] ? internal_create_group+0x49a/0x7b0 [ 396.511150] kobject_uevent+0x20/0x26 [ 396.514959] lo_ioctl+0x11e7/0x1ce0 [ 396.518591] ? loop_probe+0x160/0x160 [ 396.518606] blkdev_ioctl+0x96b/0x1860 [ 396.518616] ? blkpg_ioctl+0x980/0x980 [ 396.518634] ? __might_sleep+0x93/0xb0 [ 396.534141] ? __fget+0x210/0x370 [ 396.537618] block_ioctl+0xde/0x120 [ 396.541260] ? blkdev_fallocate+0x3b0/0x3b0 [ 396.545589] do_vfs_ioctl+0x7ae/0x1060 [ 396.549482] ? selinux_file_mprotect+0x5d0/0x5d0 [ 396.554246] ? lock_downgrade+0x6e0/0x6e0 [ 396.554261] ? ioctl_preallocate+0x1c0/0x1c0 [ 396.554276] ? __fget+0x237/0x370 [ 396.562834] ? security_file_ioctl+0x89/0xb0 [ 396.562847] SyS_ioctl+0x8f/0xc0 12:39:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) [ 396.562855] ? do_vfs_ioctl+0x1060/0x1060 [ 396.562868] do_syscall_64+0x1e8/0x640 [ 396.562875] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 396.562890] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 396.582601] RIP: 0033:0x459137 [ 396.582608] RSP: 002b:00007fbd1d1a1a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 396.582620] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000459137 [ 396.582626] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 12:39:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:39:41 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x7, 0x0, &(0x7f0000000180)={0x0, r1+30000000}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) tkill(r0, 0x1000100000016) [ 396.582630] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 396.582637] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 396.592693] R13: 00000000004c8220 R14: 00000000004dea68 R15: 0000000000000003 [ 396.606984] gfs2: not a GFS2 filesystem [ 396.665259] openvswitch: netlink: Flow get message rejected, Key attribute missing. 12:39:41 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCAX25ADDFWD(r1, 0x89ea, &(0x7f00000000c0)={@null, @default}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x18, 0x32, 0x119, 0x0, 0x0, {0x3}, [@generic="ffd3"]}, 0x18}}, 0x0) 12:39:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000000040)) 12:39:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:39:41 executing program 4 (fault-call:0 fault-nth:22): syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 12:39:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(0x0, 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) [ 396.792090] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 396.811673] openvswitch: netlink: Flow get message rejected, Key attribute missing. 12:39:42 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0xfffffffffffffdc2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x18, 0x32, 0x119, 0x0, 0x0, {0x3}, [@generic="ffd3"]}, 0x18}}, 0x0) 12:39:42 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="00000100") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) [ 396.951720] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 396.960405] FAULT_INJECTION: forcing a failure. [ 396.960405] name failslab, interval 1, probability 0, space 0, times 0 [ 396.973849] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 396.982385] CPU: 1 PID: 18743 Comm: syz-executor.4 Not tainted 4.14.129 #23 [ 396.989524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 396.998890] Call Trace: [ 397.001495] dump_stack+0x138/0x19c [ 397.005147] should_fail.cold+0x10f/0x159 [ 397.009306] should_failslab+0xdb/0x130 [ 397.009323] __kmalloc+0x2f0/0x7a0 [ 397.016818] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 397.016832] ? kobject_uevent_env+0x378/0xc23 [ 397.026773] ? rcu_read_lock_sched_held+0x110/0x130 [ 397.031801] ? kobject_get_path+0xbb/0x1a0 [ 397.036040] kobject_get_path+0xbb/0x1a0 [ 397.040110] ? devm_device_remove_groups+0x50/0x50 [ 397.045049] kobject_uevent_env+0x39c/0xc23 [ 397.049421] ? internal_create_group+0x49a/0x7b0 [ 397.054204] kobject_uevent+0x20/0x26 [ 397.058013] lo_ioctl+0x11e7/0x1ce0 [ 397.061632] ? loop_probe+0x160/0x160 [ 397.065420] blkdev_ioctl+0x96b/0x1860 [ 397.069292] ? blkpg_ioctl+0x980/0x980 [ 397.073168] ? __might_sleep+0x93/0xb0 [ 397.077041] ? __fget+0x210/0x370 [ 397.080489] block_ioctl+0xde/0x120 [ 397.084097] ? blkdev_fallocate+0x3b0/0x3b0 [ 397.088403] do_vfs_ioctl+0x7ae/0x1060 [ 397.092294] ? selinux_file_mprotect+0x5d0/0x5d0 [ 397.097037] ? lock_downgrade+0x6e0/0x6e0 [ 397.101614] ? ioctl_preallocate+0x1c0/0x1c0 [ 397.106180] ? __fget+0x237/0x370 [ 397.109624] ? security_file_ioctl+0x89/0xb0 [ 397.114021] SyS_ioctl+0x8f/0xc0 [ 397.117373] ? do_vfs_ioctl+0x1060/0x1060 [ 397.121511] do_syscall_64+0x1e8/0x640 [ 397.125400] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 397.130257] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 397.135434] RIP: 0033:0x459137 [ 397.138606] RSP: 002b:00007fbd1d1a1a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 12:39:42 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0xa0000, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000040)=0x800) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r2 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x1, 0x80000) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r2, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0xc1105511, &(0x7f0000001000)) [ 397.146319] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000459137 [ 397.153569] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 397.160914] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 397.168259] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 397.175513] R13: 00000000004c8220 R14: 00000000004dea68 R15: 0000000000000003 12:39:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(0x0, 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:39:42 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz0\x00'}) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x100, 0x80000) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:42 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) fremovexattr(r0, &(0x7f00000000c0)=@known='trusted.overlay.metacopy\x00') r1 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x7, 0x80440) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000140)={0x7f, 0x8001}) r2 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x7, 0x200) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x18, 0x32, 0x119, 0x0, 0x0, {0x3}, [@generic="ffd3"]}, 0x18}}, 0x0) [ 397.239785] gfs2: not a GFS2 filesystem [ 397.320011] openvswitch: netlink: Flow get message rejected, Key attribute missing. 12:39:44 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x7, 0x0, &(0x7f0000000180)={0x0, r1+30000000}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) tkill(r0, 0x1000100000016) r2 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000100)=0xf0, 0x4) 12:39:44 executing program 4 (fault-call:0 fault-nth:23): syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 12:39:44 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0xa0000, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000040)=0x800) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r2 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x1, 0x80000) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r2, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0xc1105511, &(0x7f0000001000)) 12:39:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x3f, 0x101200) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x4000, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x8001, 0x0, 0x0, r3}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000140)={0x10200, 0x1, 0x5000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:44 executing program 5: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vfio/vfio\x00', 0x800, 0x0) write$P9_RMKDIR(r0, 0x0, 0xfffffffffffffed6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x18}}, 0x0) ioctl$TIOCLINUX7(r0, 0x541c, &(0x7f0000000500)={0x7, 0x80000000}) recvfrom(0xffffffffffffffff, &(0x7f0000000140)=""/115, 0x73, 0x2000, &(0x7f00000001c0)=@un=@file={0x1, './file0\x00'}, 0x80) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000080)=0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000540)=""/73, &(0x7f00000005c0)=0x49) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f00000003c0)={{0x5, 0x0, 0x28000000000, 0x0, 'syz0\x00', 0x99}, 0x1, 0x40, 0xff, r1, 0x2, 0x81, 'syz1\x00', &(0x7f00000000c0)=['/dev/vfio/vfio\x00', '-\x00'], 0x11, [], [0x4, 0x3, 0x2, 0x44]}) accept$ax25(r0, &(0x7f0000000600)={{}, [@null, @rose, @default, @null, @bcast, @bcast, @default, @netrom]}, &(0x7f0000000680)=0x48) 12:39:44 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(0x0, 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) [ 399.759345] FAULT_INJECTION: forcing a failure. [ 399.759345] name failslab, interval 1, probability 0, space 0, times 0 [ 399.785314] CPU: 0 PID: 18781 Comm: syz-executor.4 Not tainted 4.14.129 #23 [ 399.792572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 399.792578] Call Trace: [ 399.792599] dump_stack+0x138/0x19c [ 399.792620] should_fail.cold+0x10f/0x159 [ 399.792637] should_failslab+0xdb/0x130 [ 399.792655] kmem_cache_alloc_node+0x287/0x780 [ 399.792676] __alloc_skb+0x9c/0x500 [ 399.792689] ? skb_scrub_packet+0x4b0/0x4b0 [ 399.816370] ? netlink_has_listeners+0x20a/0x330 [ 399.816386] kobject_uevent_env+0x781/0xc23 [ 399.816401] kobject_uevent+0x20/0x26 [ 399.816413] lo_ioctl+0x11e7/0x1ce0 [ 399.816424] ? loop_probe+0x160/0x160 [ 399.816434] blkdev_ioctl+0x96b/0x1860 [ 399.824853] ? blkpg_ioctl+0x980/0x980 [ 399.824873] ? __might_sleep+0x93/0xb0 [ 399.824885] ? __fget+0x210/0x370 [ 399.824898] block_ioctl+0xde/0x120 [ 399.868453] ? blkdev_fallocate+0x3b0/0x3b0 [ 399.872785] do_vfs_ioctl+0x7ae/0x1060 [ 399.876690] ? selinux_file_mprotect+0x5d0/0x5d0 [ 399.881555] ? lock_downgrade+0x6e0/0x6e0 [ 399.885712] ? ioctl_preallocate+0x1c0/0x1c0 [ 399.890126] ? __fget+0x237/0x370 [ 399.893590] ? security_file_ioctl+0x89/0xb0 [ 399.898094] SyS_ioctl+0x8f/0xc0 [ 399.901484] ? do_vfs_ioctl+0x1060/0x1060 [ 399.905642] do_syscall_64+0x1e8/0x640 12:39:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x0, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:39:45 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0xa0000, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000040)=0x800) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r2 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x1, 0x80000) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r2, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0xc1105511, &(0x7f0000001000)) 12:39:45 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f0000000100)={0x6, &(0x7f00000000c0)=[{}, {}, {}, {}, {0x0}, {}]}) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000180)='trusted.overlay.upper\x00', &(0x7f00000001c0)={0x0, 0xfb, 0xb1, 0x1, 0x0, "eceab841209fd393aaee140ef836b013", "d0dd01b2ccf374eb4c838d933a3a2324db23857b75535d07d62daf72d4a07db6a79e257a0dfb0f47dbfb3ecba9388596a1f7c1614825f812f255e95e7908091e11c1dd0fbf2742bace0cd76b7c328de5ea47453e52337e598215e4e2c206c5762907cb1b3dcb042f4047cf57808b543f66977debe89e264dc6f5a8cb7a349173d77c2aeae02192afdb2ef51eac1ff322651aaff6317833bae63821aa"}, 0xb1, 0x1) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000140)={r1, 0x2}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="68cf180000003200190700000000000700000000000000d3"], 0x18}}, 0x0) 12:39:45 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0xa0000, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000040)=0x800) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r2 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x1, 0x80000) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r2, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0xc1105511, &(0x7f0000001000)) [ 399.905652] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 399.905668] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 399.905675] RIP: 0033:0x459137 [ 399.905680] RSP: 002b:00007fbd1d1a1a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 399.923700] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000459137 12:39:45 executing program 4 (fault-call:0 fault-nth:24): syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 399.923703] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 12:39:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x0, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) [ 399.923707] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 399.923711] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 399.923715] R13: 00000000004c8220 R14: 00000000004dea68 R15: 0000000000000003 [ 399.968172] gfs2: not a GFS2 filesystem [ 400.165523] FAULT_INJECTION: forcing a failure. [ 400.165523] name failslab, interval 1, probability 0, space 0, times 0 [ 400.181687] CPU: 0 PID: 18814 Comm: syz-executor.4 Not tainted 4.14.129 #23 [ 400.188956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 400.198330] Call Trace: [ 400.200932] dump_stack+0x138/0x19c [ 400.204575] should_fail.cold+0x10f/0x159 [ 400.208738] should_failslab+0xdb/0x130 [ 400.212731] kmem_cache_alloc_node+0x287/0x780 [ 400.217332] __alloc_skb+0x9c/0x500 [ 400.220968] ? skb_scrub_packet+0x4b0/0x4b0 [ 400.220984] ? netlink_has_listeners+0x20a/0x330 [ 400.221000] kobject_uevent_env+0x781/0xc23 [ 400.221016] kobject_uevent+0x20/0x26 [ 400.230097] lo_ioctl+0x11e7/0x1ce0 [ 400.230112] ? loop_probe+0x160/0x160 [ 400.230125] blkdev_ioctl+0x96b/0x1860 [ 400.230134] ? blkpg_ioctl+0x980/0x980 [ 400.230152] ? __might_sleep+0x93/0xb0 [ 400.230165] ? __fget+0x210/0x370 [ 400.261283] block_ioctl+0xde/0x120 [ 400.264899] ? blkdev_fallocate+0x3b0/0x3b0 [ 400.269226] do_vfs_ioctl+0x7ae/0x1060 [ 400.273128] ? selinux_file_mprotect+0x5d0/0x5d0 [ 400.277885] ? lock_downgrade+0x6e0/0x6e0 [ 400.282043] ? ioctl_preallocate+0x1c0/0x1c0 [ 400.286443] ? __fget+0x237/0x370 [ 400.289903] ? security_file_ioctl+0x89/0xb0 [ 400.294404] SyS_ioctl+0x8f/0xc0 [ 400.297772] ? do_vfs_ioctl+0x1060/0x1060 [ 400.301959] do_syscall_64+0x1e8/0x640 [ 400.305914] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 400.311530] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 400.317053] RIP: 0033:0x459137 [ 400.320310] RSP: 002b:00007fbd1d1a1a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 400.328087] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000459137 [ 400.335341] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 400.342593] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 400.349848] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 400.357102] R13: 00000000004c8220 R14: 00000000004dea68 R15: 0000000000000003 [ 400.378240] gfs2: not a GFS2 filesystem 12:39:45 executing program 2: r0 = gettid() r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x5, 0x40001) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000100)={0xa, @time={0x77359400}, 0x3f, {0x5, 0x1f}, 0xffffffffffff7fff}) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x7, 0x0, &(0x7f0000000180)={0x0, r2+30000000}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) tkill(r0, 0x1000100000016) 12:39:45 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0xa0000, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000040)=0x800) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r2 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x1, 0x80000) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r2, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0xc1105511, &(0x7f0000001000)) 12:39:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x4, &(0x7f0000002000/0x4000)=nil, 0x0) 12:39:45 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="18000000320019010000000000000000fb000010ffd30000"], 0x18}}, 0x0) 12:39:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x0, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:39:45 executing program 4 (fault-call:0 fault-nth:25): syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 12:39:45 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0xa0000, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000040)=0x800) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r2 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x1, 0x80000) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r2, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0xc1105511, &(0x7f0000001000)) 12:39:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1, &(0x7f0000000000)="11dca5057be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:45 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000000c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0xa, [@broadcast, @loopback, @local, @empty, @remote, @multicast1, @local, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}, 0x38) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x18, 0x32, 0x119, 0x0, 0x0, {0x3}, [@generic="ffd3"]}, 0x18}}, 0x0) 12:39:45 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0xa0000, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000040)=0x800) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r2 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x1, 0x80000) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r2, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0xc1105511, &(0x7f0000001000)) [ 400.672028] FAULT_INJECTION: forcing a failure. [ 400.672028] name failslab, interval 1, probability 0, space 0, times 0 [ 400.728973] CPU: 0 PID: 18834 Comm: syz-executor.4 Not tainted 4.14.129 #23 [ 400.736219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 400.742462] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 400.745580] Call Trace: [ 400.745606] dump_stack+0x138/0x19c [ 400.745625] should_fail.cold+0x10f/0x159 [ 400.764225] should_failslab+0xdb/0x130 [ 400.765995] openvswitch: netlink: Flow get message rejected, Key attribute missing. 12:39:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x3, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000000)={{{@in6=@initdev, @in=@empty}}, {{@in6=@mcast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000140)=0xe8) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) r2 = syz_open_dev$cec(&(0x7f0000000180)='/dev/cec#\x00', 0x3, 0x2) write$P9_RLOPEN(r2, &(0x7f0000000200)={0x18, 0xd, 0x1, {{0x80, 0x1, 0x8}, 0x80000000}}, 0x18) 12:39:45 executing program 3: uname(&(0x7f0000000000)=""/158) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4600130}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="810000007ab98104d24fda1fc81ee4c5365f582a8b0f899cdacfc509c1bb8f29285471582536b9c7f0f4e09702836d07199b1dfca22bd87cd93af285ca28d89e08fc49e6e8a606326ca890ee5d02d98c247957d7f8d2bbc4b3ba77aa6b5f84787560276cc3f40d57806efcd3cba372b8c2b1c1909565a3a1bc8328449263eba31361b05e606ab00394ac7aca6c93fe7ea97205091903cb75609014ed7d1b3b971f6ea8be9b5cf6a3bd038a84dfa1a85763dd868e41a4b82715ed3c8f282736532c8e3585b284adb830ae314ef1c230569dbe426edd2d804f2fd0c6f5afb30493b552a98e4faa584497d9dd3bf702efcb76da64f4a56ba5b532f9257a04952759ecf683671a706d9886e65ff403a0395fd8c4f262315fe509b0aba693602d52ce6bee67383b32e969def805c836fbb85b3bae7b3f01d654f3", @ANYRES16=r2, @ANYBLOB="08002abd7000fcdbdf2508000000380001000800030000000000080003000300000014000200080004000800000008000400090000001000010069623a626174616476300000"], 0x4c}, 0x1, 0x0, 0x0, 0x20000800}, 0x40000) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) [ 400.768212] kmem_cache_alloc_node_trace+0x280/0x770 [ 400.768228] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 400.786916] __kmalloc_node_track_caller+0x3d/0x80 [ 400.791870] __kmalloc_reserve.isra.0+0x40/0xe0 [ 400.796671] __alloc_skb+0xcf/0x500 [ 400.800306] ? skb_scrub_packet+0x4b0/0x4b0 [ 400.804637] ? netlink_has_listeners+0x20a/0x330 [ 400.809419] kobject_uevent_env+0x781/0xc23 [ 400.813761] kobject_uevent+0x20/0x26 [ 400.817571] lo_ioctl+0x11e7/0x1ce0 [ 400.821205] ? loop_probe+0x160/0x160 [ 400.825007] blkdev_ioctl+0x96b/0x1860 [ 400.828896] ? blkpg_ioctl+0x980/0x980 [ 400.832811] ? __might_sleep+0x93/0xb0 [ 400.836698] ? __fget+0x210/0x370 [ 400.836713] block_ioctl+0xde/0x120 [ 400.836723] ? blkdev_fallocate+0x3b0/0x3b0 [ 400.843779] do_vfs_ioctl+0x7ae/0x1060 [ 400.843792] ? selinux_file_mprotect+0x5d0/0x5d0 [ 400.843808] ? lock_downgrade+0x6e0/0x6e0 [ 400.860890] ? ioctl_preallocate+0x1c0/0x1c0 [ 400.865299] ? __fget+0x237/0x370 [ 400.868741] ? security_file_ioctl+0x89/0xb0 [ 400.873134] SyS_ioctl+0x8f/0xc0 [ 400.876527] ? do_vfs_ioctl+0x1060/0x1060 [ 400.880684] do_syscall_64+0x1e8/0x640 [ 400.884559] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 400.889389] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 400.894565] RIP: 0033:0x459137 [ 400.897737] RSP: 002b:00007fbd1d1a1a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 400.905444] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000459137 [ 400.912702] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 400.919959] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 400.927230] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 400.934502] R13: 00000000004c8220 R14: 00000000004dea68 R15: 0000000000000003 [ 400.988753] gfs2: not a GFS2 filesystem 12:39:46 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r1 = semget(0x2, 0x3, 0x1) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) semtimedop(r1, &(0x7f0000000000)=[{0x2, 0x80000001, 0x800}, {0x3, 0x0, 0x3c34bae56b7b73ed}, {0x0, 0x0, 0x1800}, {0x4, 0x5, 0x1000}, {0x0, 0x2, 0x800}], 0x5, &(0x7f0000000340)={r2, r3+10000000}) r4 = openat$selinux_access(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/access\x00', 0x2, 0x0) fsetxattr$security_ima(r4, &(0x7f00000001c0)='security.ima\x00', &(0x7f0000000200)=@md5={0x1, "dda5a0f8ba3e969c27573b7efb8859fc"}, 0x11, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300)='/dev/zero\x00', 0x8000, 0x0) ioctl$KVM_ENABLE_CAP(r6, 0x4068aea3, &(0x7f0000000240)={0x7d, 0x0, [0x0, 0x9, 0x3, 0x1000]}) clock_nanosleep(0x9, 0x1, &(0x7f0000000180)={0x0, r5+30000000}, &(0x7f00000002c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) tkill(r0, 0x1000100000016) r7 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0xfff, 0x2080) ioctl$sock_inet_sctp_SIOCINQ(r7, 0x541b, &(0x7f0000000100)) 12:39:46 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) msgget$private(0x0, 0x1) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x18, 0x32, 0x119, 0x0, 0x0, {0x3}, [@generic="ffd3"]}, 0x18}}, 0x0) 12:39:46 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0xa0000, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000040)=0x800) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r2 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x1, 0x80000) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r2, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0xc1105511, &(0x7f0000001000)) 12:39:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x0) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:39:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x9, 0x80) ioctl$KVM_S390_INTERRUPT_CPU(r1, 0x4010ae94, &(0x7f0000000040)={0xbd4, 0xa73, 0x3ff}) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r2 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r2, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0xc1105511, &(0x7f0000001000)) 12:39:46 executing program 4 (fault-call:0 fault-nth:26): syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 12:39:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000080)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x301102, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000600)={&(0x7f0000000200)={0x3c4, r3, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf6ea}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffffffffffc}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x70, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x14c, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x28}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, [], 0x23}, 0x5}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xf2, @ipv4={[], [], @remote}, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x26}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x7d0a, @loopback, 0xffffffff}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x8, @mcast1, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x81, @dev={0xfe, 0x80, [], 0x23}, 0x3b}}}}]}, @TIPC_NLA_LINK={0x108, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffc01}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffffffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff7}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffff9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_NET={0x44, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xb1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf88}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2000000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffffffff800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_LINK={0x28, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}]}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4800) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f0000000680)='syz0\x00') perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:46 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0xa0000, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000040)=0x800) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r2 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x1, 0x80000) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r2, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0xc1105511, &(0x7f0000001000)) [ 401.497627] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 401.523105] FAULT_INJECTION: forcing a failure. [ 401.523105] name failslab, interval 1, probability 0, space 0, times 0 [ 401.547803] CPU: 0 PID: 18882 Comm: syz-executor.4 Not tainted 4.14.129 #23 [ 401.555052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 401.564419] Call Trace: [ 401.567117] dump_stack+0x138/0x19c [ 401.570764] should_fail.cold+0x10f/0x159 [ 401.574955] should_failslab+0xdb/0x130 [ 401.579123] kmem_cache_alloc_node+0x287/0x780 [ 401.583766] __alloc_skb+0x9c/0x500 [ 401.587503] ? skb_scrub_packet+0x4b0/0x4b0 [ 401.591861] ? netlink_has_listeners+0x20a/0x330 12:39:46 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0xa0000, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000040)=0x800) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r2 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x1, 0x80000) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0xc1105511, &(0x7f0000001000)) [ 401.596626] kobject_uevent_env+0x781/0xc23 [ 401.596646] kobject_uevent+0x20/0x26 [ 401.596660] lo_ioctl+0x11e7/0x1ce0 [ 401.604773] ? loop_probe+0x160/0x160 [ 401.604787] blkdev_ioctl+0x96b/0x1860 [ 401.604798] ? blkpg_ioctl+0x980/0x980 [ 401.620339] ? __might_sleep+0x93/0xb0 [ 401.624331] ? __fget+0x210/0x370 [ 401.627798] block_ioctl+0xde/0x120 [ 401.631436] ? blkdev_fallocate+0x3b0/0x3b0 [ 401.635772] do_vfs_ioctl+0x7ae/0x1060 [ 401.639693] ? selinux_file_mprotect+0x5d0/0x5d0 12:39:46 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0xa0000, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000040)=0x800) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0xc1105511, &(0x7f0000001000)) 12:39:46 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x7, 0x0, &(0x7f0000000080)={0x0, r1+30000000}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x1, 0x2) write$eventfd(r2, &(0x7f0000000140)=0x7, 0x8) syz_init_net_socket$ax25(0x3, 0x5, 0xf3) tkill(r0, 0x1000100000016) 12:39:46 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0xa0000, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000040)=0x800) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0xc1105511, &(0x7f0000001000)) [ 401.644552] ? lock_downgrade+0x6e0/0x6e0 [ 401.650029] ? ioctl_preallocate+0x1c0/0x1c0 [ 401.654475] ? __fget+0x237/0x370 [ 401.658037] ? security_file_ioctl+0x89/0xb0 [ 401.662457] SyS_ioctl+0x8f/0xc0 [ 401.665835] ? do_vfs_ioctl+0x1060/0x1060 [ 401.669991] do_syscall_64+0x1e8/0x640 [ 401.673882] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 401.678729] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 401.684007] RIP: 0033:0x459137 [ 401.687197] RSP: 002b:00007fbd1d1a1a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 12:39:46 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0xa0000, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000040)=0x800) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0xc1105511, &(0x7f0000001000)) 12:39:46 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="180000003200190100009a416ccda5651e99c770b13c1400"], 0x18}}, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x501080, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f00000003c0)={'filter\x00', 0x7, 0x4, 0x480, 0x0, 0x280, 0x0, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000300), {[{{@arp={@loopback, @remote, 0xff, 0xffffffff, @empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}, @empty, {[0x0, 0xff, 0x0, 0xff, 0xff]}, 0x0, 0x9, 0x5e, 0x0, 0x458, 0x8000, 'team_slave_1\x00', 'ip6tnl0\x00', {0xff}, {0xff}, 0x0, 0x20}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={[], 0x22}, @rand_addr=0x8, @rand_addr=0x10000, 0x4, 0xffffffff}}}, {{@arp={@empty, @empty, 0x0, 0xffffff00, @mac=@random="47290d4cf2b7", {[0xff, 0x0, 0x0, 0x0, 0xff]}, @empty, {[0xff, 0x0, 0xff, 0xff, 0xff]}, 0x20, 0x9, 0x5, 0x7, 0x3, 0xfff, 'hsr0\x00', 'veth0_to_team\x00', {0xff}, {0xff}, 0x0, 0x40}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@dev={[], 0x11}, @remote, @remote, 0xf, 0xffffffff}}}, {{@uncond, 0xf0, 0x118}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x9, 0x109c}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0) getresuid(&(0x7f0000000140), &(0x7f0000000180)=0x0, &(0x7f00000001c0)) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@mcast2, @in6=@dev={0xfe, 0x80, [], 0x19}, 0x4e21, 0x3, 0x4e21, 0x913, 0x0, 0xa0, 0x20, 0x0, r2, r3}, {0x2, 0x9, 0xfffffffffffffffb, 0x2, 0x8, 0xff, 0x7, 0x6}, {0xffffffff, 0x100000001, 0xb8ec, 0x10001}, 0xe5, 0x6e6bbe, 0x2, 0x0, 0x2, 0x3}, {{@in=@local, 0x4d2, 0xff}, 0xa, @in6=@local, 0x3501, 0x4, 0x3, 0x1, 0xcb3, 0x4, 0x9}}, 0xe8) 12:39:46 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0xa0000, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000040)=0x800) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x1, 0x80000) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) [ 401.694919] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000459137 [ 401.702376] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 401.709671] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 401.717039] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 401.724403] R13: 00000000004c8220 R14: 00000000004dea68 R15: 0000000000000003 12:39:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x0) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:39:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x8000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00', 0xfffffffffffffffc}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x2172, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x4000, 0x3, &(0x7f0000ff1000/0x4000)=nil) sysinfo(&(0x7f0000000200)=""/47) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000004) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x200000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) [ 401.809435] gfs2: not a GFS2 filesystem 12:39:47 executing program 4 (fault-call:0 fault-nth:27): syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 12:39:47 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0xa0000, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000040)=0x800) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x1, 0x80000) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:47 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x18, 0x32, 0x119, 0x0, 0x0, {0x3}, [@generic="ffd3"]}, 0x18}}, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x2, 0x2) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}}, 0x6, 0x6d4d}, &(0x7f0000000180)=0x90) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000001c0)={r2, 0xc75, 0x1ff, 0x1}, 0x10) 12:39:47 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x800) ioctl$VHOST_SET_VRING_ENDIAN(r2, 0x4008af13, &(0x7f0000000040)={0x0, 0xb8}) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) [ 401.956420] openvswitch: netlink: Flow get message rejected, Key attribute missing. 12:39:47 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0xa0000, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000040)=0x800) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x1, 0x80000) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) [ 402.004136] FAULT_INJECTION: forcing a failure. [ 402.004136] name failslab, interval 1, probability 0, space 0, times 0 [ 402.007278] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 402.043234] CPU: 0 PID: 18931 Comm: syz-executor.4 Not tainted 4.14.129 #23 [ 402.050493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 402.061916] Call Trace: [ 402.064710] dump_stack+0x138/0x19c [ 402.068359] should_fail.cold+0x10f/0x159 [ 402.072621] should_failslab+0xdb/0x130 [ 402.076695] kmem_cache_alloc_node+0x287/0x780 [ 402.081343] __alloc_skb+0x9c/0x500 [ 402.085342] ? skb_scrub_packet+0x4b0/0x4b0 [ 402.089656] ? netlink_has_listeners+0x20a/0x330 [ 402.094604] kobject_uevent_env+0x781/0xc23 [ 402.098925] kobject_uevent+0x20/0x26 [ 402.102723] lo_ioctl+0x11e7/0x1ce0 [ 402.106347] ? loop_probe+0x160/0x160 [ 402.110134] blkdev_ioctl+0x96b/0x1860 [ 402.114010] ? blkpg_ioctl+0x980/0x980 [ 402.117884] ? __might_sleep+0x93/0xb0 [ 402.121756] ? __fget+0x210/0x370 [ 402.125227] block_ioctl+0xde/0x120 [ 402.129117] ? blkdev_fallocate+0x3b0/0x3b0 [ 402.133475] do_vfs_ioctl+0x7ae/0x1060 [ 402.137348] ? selinux_file_mprotect+0x5d0/0x5d0 [ 402.142100] ? lock_downgrade+0x6e0/0x6e0 [ 402.146262] ? ioctl_preallocate+0x1c0/0x1c0 [ 402.150661] ? __fget+0x237/0x370 [ 402.154107] ? security_file_ioctl+0x89/0xb0 [ 402.158770] SyS_ioctl+0x8f/0xc0 [ 402.162141] ? do_vfs_ioctl+0x1060/0x1060 [ 402.166339] do_syscall_64+0x1e8/0x640 [ 402.170229] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 402.175242] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 402.180416] RIP: 0033:0x459137 [ 402.183591] RSP: 002b:00007fbd1d1a1a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 402.191297] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000459137 [ 402.198557] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 402.205901] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 402.213252] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 402.220522] R13: 00000000004c8220 R14: 00000000004dea68 R15: 0000000000000003 [ 402.233550] gfs2: not a GFS2 filesystem 12:39:47 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x7, 0x1, &(0x7f0000000180)={0x0, r1+30000000}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) tkill(r0, 0x1000100000016) 12:39:47 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0xa0000, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000040)=0x800) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x1, 0x80000) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:47 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="18000000ec2c1ebfe02caf3600"], 0x18}}, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000640)='/dev/dlm-monitor\x00', 0x8000, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000680)) 12:39:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x0) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:39:47 executing program 4 (fault-call:0 fault-nth:28): syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 12:39:47 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) rt_sigreturn() perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:47 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000000)) 12:39:47 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0xa0000, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000040)=0x800) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x1, 0x80000) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) [ 402.587442] FAULT_INJECTION: forcing a failure. [ 402.587442] name failslab, interval 1, probability 0, space 0, times 0 [ 402.605586] CPU: 0 PID: 18962 Comm: syz-executor.4 Not tainted 4.14.129 #23 [ 402.612735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 402.622539] Call Trace: [ 402.625171] dump_stack+0x138/0x19c [ 402.628818] should_fail.cold+0x10f/0x159 [ 402.632982] should_failslab+0xdb/0x130 12:39:47 executing program 5: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000380)={{{@in=@broadcast, @in6=@ipv4={[], [], @initdev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x48000, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cachetag={'cachetag', 0x3d, '/selinux/status\x00'}}, {@access_client='access=client'}, {@dfltuid={'dfltuid', 0x3d, r2}}], [{@euid_lt={'euid<', r3}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@dont_hash='dont_hash'}]}}) r4 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x7, 0x12000) open(&(0x7f0000000140)='./file0\x00', 0x10000, 0x4) write$P9_RMKDIR(r4, &(0x7f0000000200)={0x14, 0x49, 0x1, {0x0, 0x2, 0x28}}, 0x14) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000580)='/dev/sequencer2\x00', 0x101001, 0x0) write$P9_RMKDIR(r1, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="180000003200190100000000000000f5ec000000ffd30000d46ac1d99bca1eb15c4772b686d84a3e125f678712c181451aa23e806c1a0fdd8995b81668578d02adba15c22fdb3f78d2ad11ee6797c42d102e"], 0x18}}, 0x0) [ 402.637154] kmem_cache_alloc_node+0x287/0x780 [ 402.641750] __alloc_skb+0x9c/0x500 [ 402.645384] ? skb_scrub_packet+0x4b0/0x4b0 [ 402.649719] ? netlink_has_listeners+0x20a/0x330 [ 402.654487] kobject_uevent_env+0x781/0xc23 [ 402.658831] kobject_uevent+0x20/0x26 [ 402.663687] lo_ioctl+0x11e7/0x1ce0 [ 402.667596] ? loop_probe+0x160/0x160 [ 402.671440] blkdev_ioctl+0x96b/0x1860 [ 402.675336] ? blkpg_ioctl+0x980/0x980 [ 402.679231] ? __might_sleep+0x93/0xb0 [ 402.683116] ? __fget+0x210/0x370 12:39:47 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x7, 0x0, &(0x7f0000000080)={0x0, r1+30000000}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x1, 0x2) write$eventfd(r2, &(0x7f0000000140)=0x7, 0x8) syz_init_net_socket$ax25(0x3, 0x5, 0xf3) tkill(r0, 0x1000100000016) [ 402.683132] block_ioctl+0xde/0x120 [ 402.683143] ? blkdev_fallocate+0x3b0/0x3b0 [ 402.683153] do_vfs_ioctl+0x7ae/0x1060 [ 402.683167] ? selinux_file_mprotect+0x5d0/0x5d0 [ 402.690221] ? lock_downgrade+0x6e0/0x6e0 [ 402.690231] ? ioctl_preallocate+0x1c0/0x1c0 [ 402.690241] ? __fget+0x237/0x370 [ 402.690257] ? security_file_ioctl+0x89/0xb0 [ 402.690267] SyS_ioctl+0x8f/0xc0 [ 402.690275] ? do_vfs_ioctl+0x1060/0x1060 [ 402.690299] do_syscall_64+0x1e8/0x640 [ 402.690309] ? trace_hardirqs_off_thunk+0x1a/0x1c 12:39:47 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0xa0000, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000040)=0x800) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x1, 0x80000) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:47 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x18, 0x32, 0x119, 0x0, 0x0, {0x3}, [@generic="ffd3"]}, 0x18}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountstats\x00') ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f00000000c0)=""/131) [ 402.735908] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 402.741193] RIP: 0033:0x459137 [ 402.744384] RSP: 002b:00007fbd1d1a1a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 402.752101] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000459137 [ 402.759374] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 402.766664] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 402.773940] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 402.781226] R13: 00000000004c8220 R14: 00000000004dea68 R15: 0000000000000003 12:39:47 executing program 1: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0xa0000, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x1, 0x80000) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) [ 402.806559] openvswitch: netlink: Flow get message rejected, Key attribute missing. 12:39:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) [ 402.846788] gfs2: not a GFS2 filesystem 12:39:48 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000040)=0x8, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x1, 0x80000) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) [ 402.871038] openvswitch: netlink: Flow get message rejected, Key attribute missing. 12:39:48 executing program 4 (fault-call:0 fault-nth:29): syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 12:39:48 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x18, 0x32, 0x119, 0x0, 0x0, {0x3}, [@generic="ffd3"]}, 0x18}}, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x81000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x98, r1, 0x400, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x100000000}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x101}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7f0}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xbf}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x2}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x80}, 0x8000) 12:39:48 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x1, 0x80000) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105511, &(0x7f0000001000)) 12:39:48 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2002, 0x0) ioctl$sock_netrom_SIOCDELRT(r2, 0x890c, &(0x7f0000000040)={0x0, @null, @bpq0='bpq0\x00', 0x1, 'syz0\x00', @null, 0x1, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) [ 403.015004] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 403.035591] FAULT_INJECTION: forcing a failure. [ 403.035591] name failslab, interval 1, probability 0, space 0, times 0 [ 403.042601] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 403.089091] CPU: 1 PID: 19004 Comm: syz-executor.4 Not tainted 4.14.129 #23 [ 403.096253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 403.105615] Call Trace: [ 403.108231] dump_stack+0x138/0x19c [ 403.111887] should_fail.cold+0x10f/0x159 [ 403.116055] should_failslab+0xdb/0x130 [ 403.120045] kmem_cache_alloc_node+0x287/0x780 [ 403.124654] __alloc_skb+0x9c/0x500 [ 403.128343] ? skb_scrub_packet+0x4b0/0x4b0 [ 403.132701] ? netlink_has_listeners+0x20a/0x330 12:39:48 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x100) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, &(0x7f0000000200)={"f37bd224560939ce9a17622c302e8a0750b7a2b999c10aabc62568db5adfe780c5af7d0ebcc58bbb5e3215aef86002eed00ce28c97cde9ce92e3c1a00543a58eb981234a79749e9becd4d3c97f08282dc601492b70243ac0514d4b8a4409588b7e14855073a61ffe9bfb4f62519e11a6f4a7ab699dfd893620b85b415fe7491a1e312a65c366dd4ae7cb4ce2558bfd8c0cb98bf1e5ee1413521fc0445ba814cd71582c23243c8b1c15e3bd295c42fdeef8afaf398bfa5d10792ef16bfd27e4d6a80ffa9a5864534e70cd7b3388d3143d6d990b4b64aca817f9fc6e7b6c37513f9a2d13965fab82f2b29bc6c1fcde6977606be12718538136eb10b43a9a3c8c2fbe171721b6ac28dc4391865ac88af5fe58eec304b723eeec73ac9ee1990106ed517254d8c67cdab671fb21f0d2411f74533c53a3c86e6e5e4b0ed85590026e3eb03ca615aa1ee004d859209d9130ce959ef4a0ae6dc621fd20d06ad55172024d11ca8d661e72d0a92b151a83060316145b1a64f5e6f4e9a22c869017d2d4410edc58ec553df2dea38827631349661df9c77ce5da9681b9ffebf0bc36375a2c2b68f590b2e3246d4d387ea4914316d7e1ab79916fa20f9f3860ce986ccdb4c40e4dc636d857988cad04ef7c5120d01e0c3673e6782206672d7158c49ea3beb1ff9099d3a46b4fbb089ea5187cf0969c3e3a21d9c8547ebe2301c9ed48f1a8edaf9a19ef9d0701033819c58a33da70943e50c51d2c97a1552863c87e92bab427205ec52821ea8b61167a31e6e1cda2e4f0a477cca33b5c2f8c7158df895f95767d8a51e117d94e4fc80335f2af4d6a76e586fb46afd96c868abad36422b44519c1117119f7b8a695bb1482fd9b04db795205b4842628281e96ce93f07562ee83dbc3d82920bb71af48d441358978d4c2121bbfe5832226c0718649c76956eef5d67aeac65e4f351ca5d4beba3c3e5f87f22cb22100d71ee4be9b8409e89a9ba256f631c90515c20d3a33af30ea0ade5bb9b5f930d4d5e0cfad665f31dc396aea3d3d60d8a9dfff504ff8be3b1929a14abdb81c8bb89280620e275eea732505640e966644fd05e09bd306bff2498aef97e55e4a537b9764117d670a31885abf473d4d4b5f7591eaf0c5f6dffc0765cef295ba6a118ccd92a35b13e8ad52191ee27f1eb70d2c4ebd4ee2283719dc68c80cd7e86c79fa6b5b843ad8b86f8decda9a35fd9e1cfd5c0149c91c412d2cacaa4371b0d576d11ba6930867b263979d0bc8cbc5598c4aa302df9092ef84c3b68263d617177cf18f29d0fa56ad96c68be713734fc1d48fa1032b99caa6e65899258494cb1b98342470323c763e940bae41ad99bdba193f73a7c710d4b50710ecb0b0fd705b27aff9ff6539c1c4c702be4cec3811a24f6ec6b48357d4c9737a435663b1b9223b6f2b98fe3c3fb5f5727456ccb3"}) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000080)={0x1, 0x2, 0x2}) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) [ 403.137470] kobject_uevent_env+0x781/0xc23 [ 403.141812] kobject_uevent+0x20/0x26 [ 403.145622] lo_ioctl+0x11e7/0x1ce0 [ 403.149261] ? loop_probe+0x160/0x160 [ 403.153072] blkdev_ioctl+0x96b/0x1860 [ 403.157220] ? blkpg_ioctl+0x980/0x980 [ 403.161154] ? __might_sleep+0x93/0xb0 [ 403.165031] ? __fget+0x210/0x370 [ 403.168466] block_ioctl+0xde/0x120 [ 403.172086] ? blkdev_fallocate+0x3b0/0x3b0 [ 403.176430] do_vfs_ioctl+0x7ae/0x1060 [ 403.180308] ? selinux_file_mprotect+0x5d0/0x5d0 [ 403.185050] ? lock_downgrade+0x6e0/0x6e0 [ 403.189242] ? ioctl_preallocate+0x1c0/0x1c0 [ 403.193728] ? __fget+0x237/0x370 [ 403.197371] ? security_file_ioctl+0x89/0xb0 [ 403.201786] SyS_ioctl+0x8f/0xc0 [ 403.205145] ? do_vfs_ioctl+0x1060/0x1060 [ 403.209421] do_syscall_64+0x1e8/0x640 [ 403.213297] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 403.218127] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 403.224357] RIP: 0033:0x459137 [ 403.227616] RSP: 002b:00007fbd1d1a1a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 403.235688] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000459137 [ 403.243003] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 403.250262] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 403.257562] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 403.264839] R13: 00000000004c8220 R14: 00000000004dea68 R15: 0000000000000003 [ 403.277254] gfs2: not a GFS2 filesystem 12:39:48 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2002, 0x0) ioctl$sock_netrom_SIOCDELRT(r2, 0x890c, &(0x7f0000000040)={0x0, @null, @bpq0='bpq0\x00', 0x1, 'syz0\x00', @null, 0x1, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:48 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x18, 0x32, 0x119, 0x0, 0x0, {0x3}, [@generic="ffd3"]}, 0x18}}, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) 12:39:48 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) 12:39:48 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x1, 0x80000) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105511, &(0x7f0000001000)) 12:39:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:39:48 executing program 4 (fault-call:0 fault-nth:30): syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 12:39:48 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x1, 0x80000) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105511, &(0x7f0000001000)) [ 403.587461] FAULT_INJECTION: forcing a failure. [ 403.587461] name failslab, interval 1, probability 0, space 0, times 0 [ 403.595283] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 403.627774] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 403.651410] CPU: 1 PID: 19033 Comm: syz-executor.4 Not tainted 4.14.129 #23 [ 403.658579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 403.668208] Call Trace: [ 403.670815] dump_stack+0x138/0x19c 12:39:48 executing program 5: prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0) listen(r0, 0xf52d) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0x2, @rand_addr="d0cc36e1518390b5069a93cbbe1e0414", 0x1d2}}, [0xfffffffffffff778, 0x4, 0x1000, 0x9, 0x401, 0x3f, 0x2, 0x54ca, 0xff, 0x1ff, 0x0, 0x6, 0x10001, 0x3, 0x5]}, &(0x7f00000000c0)=0x100) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000100)={r1, 0x1}, &(0x7f0000000140)=0x8) ioctl$KVM_SET_SIGNAL_MASK(r0, 0x4004ae8b, &(0x7f00000003c0)={0x1000, "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"}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000180)={0x4336, 0x7, 0x8000}, 0x4) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) mq_timedsend(r0, &(0x7f00000002c0)="8c929c0bf34a8e0c58db3f01bbbdb71395bd407474f7cdef70e88f566cd00196e18d0be541bfdcd7f59f7a5f97b98ba16c5339aad7d374bf4e497420eae20bd2068aba4567779626f9e0b81e75458632f2138aebc0c24ca2a0795a9ad05b024bcb9a3cf662f6aab64bd3956c9ba639b4178209e3b7cdf5775c626098", 0x7c, 0xcbf8, &(0x7f0000001400)={r2, r3+30000000}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="180000a032091901d30000"], 0x18}}, 0x0) 12:39:48 executing program 5: dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x2000, 0x0) write$P9_RMKDIR(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x18, 0x32, 0x119, 0x0, 0x0, {0x3}, [@generic="ffd3"]}, 0x18}}, 0x0) [ 403.674897] should_fail.cold+0x10f/0x159 [ 403.680108] should_failslab+0xdb/0x130 [ 403.684102] kmem_cache_alloc_node+0x287/0x780 [ 403.688717] __alloc_skb+0x9c/0x500 [ 403.692352] ? skb_scrub_packet+0x4b0/0x4b0 [ 403.696694] ? netlink_has_listeners+0x20a/0x330 [ 403.701468] kobject_uevent_env+0x781/0xc23 [ 403.705901] kobject_uevent+0x20/0x26 [ 403.709726] lo_ioctl+0x11e7/0x1ce0 [ 403.713372] ? loop_probe+0x160/0x160 [ 403.717182] blkdev_ioctl+0x96b/0x1860 [ 403.721083] ? blkpg_ioctl+0x980/0x980 12:39:48 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:48 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="1800000032009901000000000000000003000000ffd30000"], 0x18}}, 0x0) [ 403.725330] ? __might_sleep+0x93/0xb0 [ 403.729402] ? __fget+0x210/0x370 [ 403.732867] block_ioctl+0xde/0x120 [ 403.736625] ? blkdev_fallocate+0x3b0/0x3b0 [ 403.740175] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 403.742528] do_vfs_ioctl+0x7ae/0x1060 [ 403.742542] ? selinux_file_mprotect+0x5d0/0x5d0 [ 403.742559] ? lock_downgrade+0x6e0/0x6e0 [ 403.756885] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 403.759075] ? ioctl_preallocate+0x1c0/0x1c0 [ 403.759089] ? __fget+0x237/0x370 [ 403.779447] ? security_file_ioctl+0x89/0xb0 [ 403.783878] SyS_ioctl+0x8f/0xc0 [ 403.787282] ? do_vfs_ioctl+0x1060/0x1060 [ 403.787990] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 403.791445] do_syscall_64+0x1e8/0x640 [ 403.791454] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 403.791470] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 403.791478] RIP: 0033:0x459137 [ 403.791486] RSP: 002b:00007fbd1d1a1a88 EFLAGS: 00000246 12:39:48 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x0, 0x80) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1800000032001901000000000000000003000000ffd300009d90f10c3bf3acb8f245b7511a185ed74d1acf66e62a2557abafd5cf91c70fda66f28f952fbf81bee605449641ea06016b74a79e0c0f300a80dafcc439f4bb072665a23b6e242252932a7f4e5309f62f61253de0e94b3a870e6d26656e92b1b1fe857288ba12cc971ea28f1ab6c7e95a47239b8e1fc0b139fbc43dd6c50d4e3565ac984b06b3a4c70d70545f5c81b3eb49209bac554e7437cb4cee8b589141e0467b"], 0x18}}, 0x0) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x8000, 0x8) setsockopt$rose(r2, 0x104, 0x0, &(0x7f0000000240), 0x4) openat$cgroup_int(r2, &(0x7f0000000200)='notify_on_release\x00', 0x2, 0x0) 12:39:49 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2002, 0x0) ioctl$sock_netrom_SIOCDELRT(r2, 0x890c, &(0x7f0000000040)={0x0, @null, @bpq0='bpq0\x00', 0x1, 'syz0\x00', @null, 0x1, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:49 executing program 5: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x400, 0x0) sendto$rose(r0, &(0x7f00000000c0)="563d47e9e782fa4dc318bc9506f298852c0374b1afbd7642c6534828ad43c8a7b866299a46b260943c7e7d8d50b0d9aaec4509ac23434c38e94a4b2542dc90837f4b430bf61d159af9036a896bb5a22cccf308f9aabca53cf9371ad64a289f7638b500514d576ffe51a326f9bd8e74f221836dd57a", 0x75, 0x0, &(0x7f0000000140)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @bcast]}, 0x40) write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x18, 0x32, 0x119, 0x0, 0x0, {0x3}, [@generic="ffd3"]}, 0x18}}, 0x0) 12:39:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x1, 0x80000) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) [ 403.803286] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 403.804891] ORIG_RAX: 0000000000000010 [ 403.804898] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000459137 [ 403.804904] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 403.804909] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 403.804914] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 403.804923] R13: 00000000004c8220 R14: 00000000004dea68 R15: 0000000000000003 12:39:49 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:49 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2002, 0x0) ioctl$sock_netrom_SIOCDELRT(r2, 0x890c, &(0x7f0000000040)={0x0, @null, @bpq0='bpq0\x00', 0x1, 'syz0\x00', @null, 0x1, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) [ 403.913263] gfs2: not a GFS2 filesystem 12:39:49 executing program 4 (fault-call:0 fault-nth:31): syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 12:39:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:39:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x1, 0x80000) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:49 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x100000001, 0x2) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:49 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x20) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="1800000032001901000000000000000003020000ffd30000"], 0x18}}, 0x0) 12:39:49 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2002, 0x0) ioctl$sock_netrom_SIOCDELRT(r2, 0x890c, &(0x7f0000000040)={0x0, @null, @bpq0='bpq0\x00', 0x1, 'syz0\x00', @null, 0x1, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) [ 404.099626] FAULT_INJECTION: forcing a failure. [ 404.099626] name failslab, interval 1, probability 0, space 0, times 0 12:39:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x1, 0x80000) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) [ 404.174233] CPU: 0 PID: 19089 Comm: syz-executor.4 Not tainted 4.14.129 #23 [ 404.181490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 404.191030] Call Trace: [ 404.193648] dump_stack+0x138/0x19c [ 404.197465] should_fail.cold+0x10f/0x159 [ 404.202065] should_failslab+0xdb/0x130 [ 404.206153] kmem_cache_alloc_node_trace+0x280/0x770 [ 404.211358] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 404.216827] __kmalloc_node_track_caller+0x3d/0x80 [ 404.221866] __kmalloc_reserve.isra.0+0x40/0xe0 [ 404.226550] __alloc_skb+0xcf/0x500 [ 404.230203] ? skb_scrub_packet+0x4b0/0x4b0 [ 404.234542] ? netlink_has_listeners+0x20a/0x330 [ 404.239406] kobject_uevent_env+0x781/0xc23 [ 404.243769] kobject_uevent+0x20/0x26 [ 404.247585] lo_ioctl+0x11e7/0x1ce0 [ 404.251263] ? loop_probe+0x160/0x160 [ 404.255075] blkdev_ioctl+0x96b/0x1860 [ 404.258981] ? blkpg_ioctl+0x980/0x980 [ 404.262887] ? __might_sleep+0x93/0xb0 [ 404.266786] ? __fget+0x210/0x370 [ 404.270252] block_ioctl+0xde/0x120 [ 404.273892] ? blkdev_fallocate+0x3b0/0x3b0 [ 404.278227] do_vfs_ioctl+0x7ae/0x1060 [ 404.282140] ? selinux_file_mprotect+0x5d0/0x5d0 [ 404.287168] ? lock_downgrade+0x6e0/0x6e0 [ 404.291329] ? ioctl_preallocate+0x1c0/0x1c0 [ 404.297487] ? __fget+0x237/0x370 [ 404.300957] ? security_file_ioctl+0x89/0xb0 [ 404.305381] SyS_ioctl+0x8f/0xc0 [ 404.308762] ? do_vfs_ioctl+0x1060/0x1060 [ 404.312924] do_syscall_64+0x1e8/0x640 [ 404.316850] ? trace_hardirqs_off_thunk+0x1a/0x1c 12:39:49 executing program 5: clock_getres(0x7, &(0x7f0000000080)) write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x18, 0x32, 0x119, 0x0, 0x0, {0x3}, [@generic="ffd3"]}, 0x18}}, 0x0) 12:39:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x1, 0x80000) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x1, 0x80000) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x1, 0x80000) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)) r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x1, 0x80000) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) [ 404.322148] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 404.327345] RIP: 0033:0x459137 [ 404.330534] RSP: 002b:00007fbd1d1a1a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 404.338256] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000459137 [ 404.345628] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 404.352995] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 404.360367] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 404.367647] R13: 00000000004c8220 R14: 00000000004dea68 R15: 0000000000000003 [ 404.411820] gfs2: not a GFS2 filesystem 12:39:49 executing program 4 (fault-call:0 fault-nth:32): syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 12:39:49 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x3, 0x24000) ioctl$RTC_PLL_GET(r2, 0x80207011, &(0x7f0000000040)) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0xc1105511, &(0x7f0000000140)) 12:39:49 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2002, 0x0) ioctl$sock_netrom_SIOCDELRT(r2, 0x890c, &(0x7f0000000040)={0x0, @null, @bpq0='bpq0\x00', 0x1, 'syz0\x00', @null, 0x1, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:39:49 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) write$P9_RSETATTR(r0, &(0x7f00000000c0)={0x7, 0x1b, 0x1}, 0x3c9) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x18, 0x32, 0x119, 0x0, 0x0, {0x3}, [@generic="ffd3"]}, 0x18}}, 0x0) 12:39:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)) r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x1, 0x80000) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, 0xffffffffffffffff, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:39:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)) r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x1, 0x80000) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:49 executing program 5: openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0xffffffffffff7fff, 0x10000) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x50280, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f00000001c0)='/dev/dmmidi#\x00', 0x40000000000, 0x800) write$P9_RMKDIR(r0, 0x0, 0x2d675e8a53eca4d1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x18, 0x32, 0x119, 0x0, 0x0, {0x3}, [@generic="ffd3"]}, 0x18}, 0x1, 0x0, 0x0, 0xfffffffffffffffc}, 0x0) [ 404.566724] FAULT_INJECTION: forcing a failure. [ 404.566724] name failslab, interval 1, probability 0, space 0, times 0 [ 404.610194] CPU: 1 PID: 19134 Comm: syz-executor.4 Not tainted 4.14.129 #23 [ 404.617348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 404.627403] Call Trace: [ 404.630000] dump_stack+0x138/0x19c [ 404.633669] should_fail.cold+0x10f/0x159 [ 404.637823] should_failslab+0xdb/0x130 [ 404.641784] kmem_cache_alloc_node+0x287/0x780 [ 404.646373] __alloc_skb+0x9c/0x500 [ 404.649986] ? skb_scrub_packet+0x4b0/0x4b0 [ 404.654297] ? netlink_has_listeners+0x20a/0x330 [ 404.659560] kobject_uevent_env+0x781/0xc23 [ 404.663869] kobject_uevent+0x20/0x26 [ 404.667657] lo_ioctl+0x11e7/0x1ce0 [ 404.671274] ? loop_probe+0x160/0x160 [ 404.675203] blkdev_ioctl+0x96b/0x1860 [ 404.679160] ? blkpg_ioctl+0x980/0x980 [ 404.683054] ? __might_sleep+0x93/0xb0 [ 404.687113] ? __fget+0x210/0x370 [ 404.690562] block_ioctl+0xde/0x120 [ 404.694201] ? blkdev_fallocate+0x3b0/0x3b0 [ 404.698518] do_vfs_ioctl+0x7ae/0x1060 [ 404.702392] ? selinux_file_mprotect+0x5d0/0x5d0 [ 404.707130] ? lock_downgrade+0x6e0/0x6e0 [ 404.711261] ? ioctl_preallocate+0x1c0/0x1c0 [ 404.715671] ? __fget+0x237/0x370 [ 404.719120] ? security_file_ioctl+0x89/0xb0 [ 404.723514] SyS_ioctl+0x8f/0xc0 [ 404.727037] ? do_vfs_ioctl+0x1060/0x1060 [ 404.731173] do_syscall_64+0x1e8/0x640 [ 404.735138] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 404.739968] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 404.745152] RIP: 0033:0x459137 [ 404.748410] RSP: 002b:00007fbd1d1a1a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 12:39:49 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000080)={{0x100000001, 0x3, 0x4, 0x4}, 'syz1\x00', 0x8}) r3 = getpgrp(0x0) kcmp(r1, r3, 0x7, r0, r0) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r4 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r4, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) gettid() perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r4, 0xc1105511, &(0x7f0000001000)) 12:39:49 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2002, 0x0) ioctl$sock_netrom_SIOCDELRT(r2, 0x890c, &(0x7f0000000040)={0x0, @null, @bpq0='bpq0\x00', 0x1, 'syz0\x00', @null, 0x1, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 12:39:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0b") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x1, 0x80000) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) [ 404.756113] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000459137 [ 404.763538] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 404.770802] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 404.778054] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 404.785317] R13: 00000000004c8220 R14: 00000000004dea68 R15: 0000000000000003 12:39:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2002, 0x0) [ 404.938729] gfs2: not a GFS2 filesystem 12:39:50 executing program 4 (fault-call:0 fault-nth:33): syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 12:39:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, 0xffffffffffffffff, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:39:50 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f00000001c0)={&(0x7f0000ffc000/0x2000)=nil, 0x9, 0x3, 0x84, &(0x7f0000ffc000/0x2000)=nil, 0xff}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x18, 0x32, 0x119, 0x0, 0x0, {0x1}, [@generic="ffd3"]}, 0x18}}, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x10203, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x3f, 0x9}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000140)={r3, 0x101, 0x0, 0x621309c1}, 0x10) 12:39:50 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x4040, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0b") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x1, 0x80000) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2002, 0x0) 12:39:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0b") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x1, 0x80000) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2002, 0x0) 12:39:50 executing program 5: r0 = gettid() ioprio_get$pid(0x2, r0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) mq_notify(r1, &(0x7f0000000280)={0x0, 0x16, 0x0, @thr={&(0x7f00000000c0)="4c4e3182f179d35e184e03b2ff1fe5a077f9c36dc4ec36e1c85a173d7f682d1ab21b6cf298d8086f8108e7285e5928f2a2f040393b50f19a378776318c88d86dc579f9bad7c362d006abc85d14f5a7b98ec1644164fcd987f41ffb695ce38d5e93c35b188a05e1d0d23cb4c4851c065e4b82d18243aaa3c8e3d1836c0327fc79e2d3eb46639e6adf016922fe9cd8a46df52bd39467c175e49e7ef7254acc889f07184ec1e626e15c09a3bde0b6b5fad25eee69413e154bee2a3607", &(0x7f0000000180)="1d50bc29437b367e4eaecaa4e32494b6bdd44a22cf4d181c472eff1da6402e234b07e005ab0705c94314f70970275472031b73ee2801322851b3163f418cd955678a10b45ce6ba7cf05a10d84249b62c5b9472c54f9b9157b066bae653b5ce1cc75b552eb4ac609aa819d2312d762ba4aae347f3acc5ed543214857d535611a0cb8e3c30536f4ee4459ff4f6d9dec01cfd918873ae14ce4ecdfa6911ae2aaf0a87ec1cc3f5fc0dea825b1ffc999726d2870a86158a9bd7302c40c26df36de2317b5f0aab0a8eba2dd924a91c3a33328ff257da92175cdf8e"}}) write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x18, 0x32, 0x119, 0x0, 0x0, {0x3}, [@generic="ffd3"]}, 0x18}}, 0x0) 12:39:50 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x8002, &(0x7f0000000500)="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") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) [ 405.135649] FAULT_INJECTION: forcing a failure. [ 405.135649] name failslab, interval 1, probability 0, space 0, times 0 12:39:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7b") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x1, 0x80000) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2002, 0x0) [ 405.214606] CPU: 1 PID: 19182 Comm: syz-executor.4 Not tainted 4.14.129 #23 [ 405.221784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 405.234392] Call Trace: [ 405.237004] dump_stack+0x138/0x19c [ 405.240658] should_fail.cold+0x10f/0x159 [ 405.244834] should_failslab+0xdb/0x130 [ 405.248825] kmem_cache_alloc_node+0x287/0x780 [ 405.253518] __alloc_skb+0x9c/0x500 [ 405.257257] ? skb_scrub_packet+0x4b0/0x4b0 [ 405.261591] ? netlink_has_listeners+0x20a/0x330 [ 405.266360] kobject_uevent_env+0x781/0xc23 [ 405.270703] kobject_uevent+0x20/0x26 [ 405.274513] lo_ioctl+0x11e7/0x1ce0 [ 405.278153] ? loop_probe+0x160/0x160 [ 405.281966] blkdev_ioctl+0x96b/0x1860 [ 405.285860] ? blkpg_ioctl+0x980/0x980 [ 405.289752] ? __might_sleep+0x93/0xb0 [ 405.293639] ? __fget+0x210/0x370 [ 405.297098] block_ioctl+0xde/0x120 [ 405.300714] ? blkdev_fallocate+0x3b0/0x3b0 [ 405.305059] do_vfs_ioctl+0x7ae/0x1060 [ 405.309068] ? selinux_file_mprotect+0x5d0/0x5d0 [ 405.313825] ? lock_downgrade+0x6e0/0x6e0 [ 405.317962] ? ioctl_preallocate+0x1c0/0x1c0 [ 405.322359] ? __fget+0x237/0x370 [ 405.325801] ? security_file_ioctl+0x89/0xb0 [ 405.330221] SyS_ioctl+0x8f/0xc0 [ 405.333587] ? do_vfs_ioctl+0x1060/0x1060 [ 405.338067] do_syscall_64+0x1e8/0x640 [ 405.341948] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 405.346781] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 405.351972] RIP: 0033:0x459137 [ 405.355146] RSP: 002b:00007fbd1d1a1a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 405.362838] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000459137 [ 405.370092] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 405.377346] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 405.384597] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 405.391852] R13: 00000000004c8220 R14: 00000000004dea68 R15: 0000000000000003 [ 405.430195] gfs2: not a GFS2 filesystem 12:39:50 executing program 4 (fault-call:0 fault-nth:34): syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 12:39:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2002, 0x0) 12:39:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7b") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x1, 0x80000) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:50 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0xf2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x18, 0x32, 0x119, 0x0, 0x0, {0x3}, [@generic="ffd3"]}, 0x18}}, 0x0) 12:39:50 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000040)={0x0, "58f700e76c14f067c4f72359df038443c0d6c1709bfbdb0b55b7f196dc092e684f845697131bc6414e8e42d8fb5b868963ac38a112a5b36857664661cd070cd237250cf6c16322ef0844611a2e78ead3cad8b731e40340317edaf28545fa813d4a11845d7063dc13aab47dfde28e5444f9a01d37ea08a23258d4980a42ff0de0"}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r2 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r2, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0xc1105511, &(0x7f0000001000)) 12:39:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, 0xffffffffffffffff, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:39:50 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2002, 0x0) 12:39:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7b") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x1, 0x80000) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:50 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x8481, 0x0) ioctl$IMCLEAR_L2(r2, 0x80044946, &(0x7f0000000040)) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:50 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x18, 0x32, 0x119, 0x0, 0x0, {0x3}, [@generic="ffd3"]}, 0x18}}, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x80100) ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f00000000c0)) [ 405.558369] FAULT_INJECTION: forcing a failure. [ 405.558369] name failslab, interval 1, probability 0, space 0, times 0 [ 405.628064] CPU: 0 PID: 19222 Comm: syz-executor.4 Not tainted 4.14.129 #23 [ 405.635238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 405.644600] Call Trace: [ 405.647212] dump_stack+0x138/0x19c [ 405.650876] should_fail.cold+0x10f/0x159 [ 405.655041] should_failslab+0xdb/0x130 [ 405.659123] kmem_cache_alloc_node+0x287/0x780 [ 405.663916] __alloc_skb+0x9c/0x500 [ 405.667555] ? skb_scrub_packet+0x4b0/0x4b0 [ 405.671891] ? netlink_has_listeners+0x20a/0x330 [ 405.676659] kobject_uevent_env+0x781/0xc23 [ 405.680995] kobject_uevent+0x20/0x26 [ 405.684799] lo_ioctl+0x11e7/0x1ce0 [ 405.688436] ? loop_probe+0x160/0x160 [ 405.692334] blkdev_ioctl+0x96b/0x1860 [ 405.696236] ? blkpg_ioctl+0x980/0x980 [ 405.700144] ? __might_sleep+0x93/0xb0 [ 405.704035] ? __fget+0x210/0x370 [ 405.707617] block_ioctl+0xde/0x120 [ 405.711233] ? blkdev_fallocate+0x3b0/0x3b0 [ 405.715541] do_vfs_ioctl+0x7ae/0x1060 [ 405.719426] ? selinux_file_mprotect+0x5d0/0x5d0 [ 405.724171] ? lock_downgrade+0x6e0/0x6e0 [ 405.728299] ? ioctl_preallocate+0x1c0/0x1c0 [ 405.732691] ? __fget+0x237/0x370 [ 405.736134] ? security_file_ioctl+0x89/0xb0 [ 405.740533] SyS_ioctl+0x8f/0xc0 [ 405.743902] ? do_vfs_ioctl+0x1060/0x1060 [ 405.748041] do_syscall_64+0x1e8/0x640 [ 405.751910] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 405.756739] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 405.761918] RIP: 0033:0x459137 [ 405.765098] RSP: 002b:00007fbd1d1a1a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 12:39:50 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2002, 0x0) 12:39:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be0") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x1, 0x80000) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) [ 405.773231] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000459137 [ 405.780492] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 405.787768] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 405.795028] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 405.802296] R13: 00000000004c8220 R14: 00000000004dea68 R15: 0000000000000003 [ 405.830967] gfs2: not a GFS2 filesystem 12:39:51 executing program 4 (fault-call:0 fault-nth:35): syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 12:39:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x7, 0x0, 0x5, 0x200, 'syz1\x00', 0x2}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, 0x0) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:39:51 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x44, 0x32, 0x119, 0x70bd28, 0x0, {0x3}, [@nested={0x30, 0x96, [@typed={0x8, 0x3e, @ipv4=@multicast1}, @typed={0x24, 0x32, @binary="afe971d0a1365cbd3efb7d2b8dfdb2652688a7a5bc53125791652fc395f74055"}]}]}, 0x44}}, 0x0) 12:39:51 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2002, 0x0) 12:39:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be0") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x1, 0x80000) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) [ 406.007605] FAULT_INJECTION: forcing a failure. [ 406.007605] name failslab, interval 1, probability 0, space 0, times 0 [ 406.061736] CPU: 0 PID: 19259 Comm: syz-executor.4 Not tainted 4.14.129 #23 [ 406.068889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 406.078254] Call Trace: [ 406.080858] dump_stack+0x138/0x19c [ 406.084501] should_fail.cold+0x10f/0x159 [ 406.088670] should_failslab+0xdb/0x130 [ 406.092660] kmem_cache_alloc_node+0x287/0x780 [ 406.097267] __alloc_skb+0x9c/0x500 [ 406.100908] ? skb_scrub_packet+0x4b0/0x4b0 [ 406.105237] ? netlink_has_listeners+0x20a/0x330 12:39:51 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x4200, 0x0) sendmsg$nl_generic(r1, &(0x7f0000001a00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000004c0)={0x1508, 0x41, 0x100, 0x70bd25, 0x25dfdbff, {0x1b}, [@generic="13ad9fe65c2ecffdf81815cbd8bd91787ea0c351c2640d2b66616e729ddb60afb682b692efa364e5effb3d233f7a20aceaf6a0732f42ec9f6cd8b91065f9a3ee27835459b5bc4c128daa5c19d29aca87a92f4512f0166c6d8bd6cf0e16f4106d33f8b551e3be33baa218beceae77074b140c0bbc2518ed1d7399d97de46833fceef203bb037b40211f76beead18635ec76e50eeb1fcacfa1ed3448b04c95b523d26cf95ffb467e9c0bb53188f145a086764c3c3be7e463b1b59b180a131d19c7619591ef555ef7751d7f28926cf0c56e51ea3139dda65c08978783149f5d8b839d4230bb7c7d6b0466213ec2", @nested={0x114c, 0x8a, [@generic="4791d32d36329086334d1744011429cb88f10379431d653a2399c24365b324daaf57f2ba9370258990253c7a455db4572232f4335121f1851b67f9c1804302e04342a879037ffdade89c98d615d97b2d7c8c979e9fd408d8a502d2683dbe9a2f0846603b84d26d70d887fe3ad6e7ddb1456423bfa5fb", @typed={0xc, 0x9, @u64=0x7ff}, @typed={0x8, 0x1d, @fd=r0}, @typed={0xc, 0x1, @u64=0x8}, @typed={0xc, 0x3c, @u64=0x2}, @generic="4ec97962879016309329193792835c25ad1ce2a12e68ded69c35871ee4e0bf63c61ca317d5444f2d7481dde0915a6b665b93b861e8900a16284dd9a70c7c8963938a16f8280f0350471066ad554e643bb8e01e87cb11918ba82c9b8b7bb94902cda6d10b1679d1db3a6b307510fedec7571d6070a0a25202cf5503bb248f6195a9be917841408e450105f46836e78ff8df7e6599b109572e9a1fe1624963121936b62607157b", @generic="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"]}, @generic="04eae307a155e3006e3a89aef98023166ff8ed6d40fe8169a18b19373e9df3ce3c5939e64c215115743430a58a5184a49e2d57563a80512e101163a940fdf68fe84c03556a4a68f23aa4352ea2ff9a0a2a913183d069cfbf220af476ed19382ff3bfce90b68f877fe2776272ea16ee3098a7ea0ba0604614e6600526ac199bb4c0a9e5450f3b3ca97dcd482a53ab54a31e3efe471ed3f51277cd02902372dd9e978f65a44322b4ae16d407459e7b", @typed={0x4, 0x77}, @nested={0x208, 0x11, [@generic="9dd07cadce0c7b8b382d4643897740cf24f606d1fba7b3e7034479c36e27fa85a28c93eebae20010ec293a45cb8b36ad1fc68e3c5459b68367410b214668c40c70e77345258f8e28d94ce7172a5b46c04be63a904db4fb2873e7120979391c8c0819a0dfa5bd28db8466cfe9945150141e8e90807c833aa3738a797bf8479d0205c29887738da9dd454d6aa614526b0f57a1131c950b617ce209d7c41c1b8d5002bb0866c7435a753d0ef79beb270417666edacf98969389bc80461e253b2a83fa153690f71c300cb5b6b0f830d31172896041107e66", @generic="095614939ea0f070a0a97c486febead82854059a8f4b31116ebbdc06f73c78eca897fa5d5f6cecad3da4e88291d96423cb35e25dc21940c860ec0ba074f7096cefd0b3b4bcba035dc7e0d39cb50528725f880bcbbe", @generic="9e0017468f74860f7bbd956f544912c96afe400b67c4912353f0c3646226e192218e99df54adc5c6beb021acc23042569be223377f8c77f6f33e6c5707b597797e691a4527c6947b5d547eec9eca17407c", @generic="94cd08ee47ee52e341cc7c8cbd52593678788de5e6a34ea6828cf5be5022363304034fea2207582dbda7a6884159fc34039c945c893048b1605c35bcf0c05f7436c4ebe0f600984d354d8e2d3b132c1fdf683362200118eb6b7747a12c60dc1ba8f7e330267326d4b5a895675eb9e2ac3b2fba7a8eb7dc857d06ada4fb84aa0c9e9e27848c09"]}]}, 0x1508}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000080)={'gre0\x00', {0x2, 0x4e22, @rand_addr=0x7000000000000}}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000180)='gre0\x00', 0xffffffffffffffff}, 0x30) wait4(r2, &(0x7f0000000200), 0xa, &(0x7f0000000240)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], 0x18}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001a80)={r1, 0x28, &(0x7f0000001a40)}, 0x10) [ 406.110017] kobject_uevent_env+0x781/0xc23 [ 406.114353] kobject_uevent+0x20/0x26 [ 406.118164] lo_ioctl+0x11e7/0x1ce0 [ 406.121882] ? loop_probe+0x160/0x160 [ 406.125680] blkdev_ioctl+0x96b/0x1860 [ 406.129563] ? blkpg_ioctl+0x980/0x980 [ 406.129583] ? __might_sleep+0x93/0xb0 [ 406.129595] ? __fget+0x210/0x370 [ 406.137349] block_ioctl+0xde/0x120 [ 406.137360] ? blkdev_fallocate+0x3b0/0x3b0 [ 406.137371] do_vfs_ioctl+0x7ae/0x1060 [ 406.152617] ? selinux_file_mprotect+0x5d0/0x5d0 [ 406.157391] ? lock_downgrade+0x6e0/0x6e0 12:39:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be0") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x1, 0x80000) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:51 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0xffbf) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x18, 0x32, 0x119, 0x0, 0x0, {0x3}, [@generic="ffd3"]}, 0x18}}, 0x0) [ 406.161547] ? ioctl_preallocate+0x1c0/0x1c0 [ 406.165961] ? __fget+0x237/0x370 [ 406.169428] ? security_file_ioctl+0x89/0xb0 [ 406.174013] SyS_ioctl+0x8f/0xc0 [ 406.177381] ? do_vfs_ioctl+0x1060/0x1060 [ 406.181889] do_syscall_64+0x1e8/0x640 [ 406.185781] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 406.190635] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 406.195844] RIP: 0033:0x459137 [ 406.199033] RSP: 002b:00007fbd1d1a1a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 12:39:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(0x0, 0x1, 0x80000) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) r2 = fcntl$dupfd(r1, 0x406, r1) getsockopt$inet6_tcp_int(r2, 0x6, 0x1b, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$CAPI_GET_FLAGS(r2, 0x80044323, &(0x7f0000000080)) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) write$P9_RLOCK(r2, &(0x7f00000000c0)={0x8, 0x35, 0x2, 0x3}, 0x10e) [ 406.206924] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000459137 [ 406.214199] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 406.221823] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 406.229102] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 406.236373] R13: 00000000004c8220 R14: 00000000004dea68 R15: 0000000000000003 [ 406.284611] gfs2: not a GFS2 filesystem 12:39:51 executing program 4 (fault-call:0 fault-nth:36): syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 12:39:51 executing program 2: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2002, 0x0) 12:39:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, 0x0) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:39:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) r2 = perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) r3 = getpgid(0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r3, r2, 0x0, 0xfffffffffffffee3, &(0x7f0000000000)='syz1\x00'}, 0xffffffffffffff2d) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f00000000c0), &(0x7f0000000140)=0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000200)={{0x6, 0x5, 0x950, 0x7, 'syz0\x00', 0x100000001}, 0x3, 0x400, 0x800, r4, 0x2, 0x3, 'syz0\x00', &(0x7f0000000080)=['/dev/snd/controlC#\x00', '/dev/snd/controlC#\x00'], 0x26, [], [0x20, 0x3, 0x3ff, 0x80000000]}) 12:39:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(0x0, 0x1, 0x80000) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:51 executing program 5: uselib(&(0x7f0000000080)='./file0\x00') write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x18, 0x32, 0x119, 0x0, 0x0, {0x3}, [@generic="ffd3"]}, 0x18}}, 0x0) 12:39:51 executing program 2: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2002, 0x0) [ 406.387288] FAULT_INJECTION: forcing a failure. [ 406.387288] name failslab, interval 1, probability 0, space 0, times 0 [ 406.473935] CPU: 1 PID: 19297 Comm: syz-executor.4 Not tainted 4.14.129 #23 [ 406.481457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 406.490823] Call Trace: [ 406.493438] dump_stack+0x138/0x19c [ 406.497092] should_fail.cold+0x10f/0x159 [ 406.501266] should_failslab+0xdb/0x130 [ 406.505250] kmem_cache_alloc+0x2d7/0x780 [ 406.509412] ? selinux_file_mprotect+0x5d0/0x5d0 [ 406.514185] ? lock_downgrade+0x6e0/0x6e0 [ 406.518351] ? ioctl_preallocate+0x1c0/0x1c0 [ 406.522761] getname_flags+0xcb/0x580 [ 406.522773] SyS_mkdir+0x7e/0x200 [ 406.522786] ? SyS_mkdirat+0x210/0x210 [ 406.533941] ? do_syscall_64+0x53/0x640 [ 406.537932] ? SyS_mkdirat+0x210/0x210 [ 406.541818] do_syscall_64+0x1e8/0x640 [ 406.541829] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 406.541847] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 406.541856] RIP: 0033:0x4586e7 [ 406.541860] RSP: 002b:00007fbd1d1a1a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 406.541871] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000004586e7 12:39:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(0x0, 0x1, 0x80000) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0xfffffffffffffffc, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x80000) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:51 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x18, 0x32, 0x119, 0x0, 0x0, {0xe}, [@generic="ffd3"]}, 0x18}}, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x1006, 0xf000, 0x0, 0xd52, 0x7fff}) socket$can_raw(0x1d, 0x3, 0x1) 12:39:51 executing program 2: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2002, 0x0) [ 406.541875] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 00000000200003c0 [ 406.541882] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 406.588500] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 406.588508] R13: 00000000004c8220 R14: 00000000004dea68 R15: 0000000000000003 12:39:51 executing program 4 (fault-call:0 fault-nth:37): syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 12:39:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000000)='security/\x00', 0xffffffffffffffff}, 0x30) sched_rr_get_interval(r2, &(0x7f00000000c0)) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000000040)) 12:39:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, 0x0) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:39:51 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="18000000321c7ecb1c400019010000000000000000030000"], 0x18}}, 0x0) 12:39:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x80000) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) [ 406.837765] FAULT_INJECTION: forcing a failure. [ 406.837765] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 406.849629] CPU: 0 PID: 19343 Comm: syz-executor.4 Not tainted 4.14.129 #23 [ 406.856728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 406.856733] Call Trace: [ 406.856754] dump_stack+0x138/0x19c [ 406.856772] should_fail.cold+0x10f/0x159 [ 406.856791] __alloc_pages_nodemask+0x1d6/0x7a0 [ 406.881191] ? fs_reclaim_acquire+0x20/0x20 12:39:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x80000) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) r2 = perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000000c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000200)={{0x7, 0x1, 0xfffffffffffffffe, 0x9e11, '\x00', 0x100}, 0x3, 0x20c, 0x1, r3, 0x2, 0x4, 'syz0\x00', &(0x7f0000000140)=['/dev/snd/controlC#\x00', '/dev/snd/controlC#\x00'], 0x26, [], [0x5, 0x2, 0xb4b, 0x10000]}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x42000, 0x0) io_setup(0x18be, &(0x7f0000000180)=0x0) io_submit(r5, 0x2, &(0x7f0000000500)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f0000000340)="9618574fbb7323c84dc0954e6beb26f0f530499bae0df71d4982fc5450bc4064cf40441612d61fd71cd58b7babefbd8ba2607e273696e09a600bd9ba5a93d3542ee5a749735a40f4846905f3792f63bcc24eca258ebe19491dd10d065aca2561f8db0ee1025b45cba9cd1e3d21a6c65f6fb948bfa510e3f6ab79f55387c3585160c67c8938b2caa4c75c9c046a30955eb03a1e1ab596e3c5f15423d31432bde4dbc46f86391e518bdb5144ab123b7f51dffa6b108952aae2cd60d1161f0fc97b00397bdbf9df", 0xc6, 0x4, 0x0, 0x1, r4}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x8001, r2, &(0x7f0000000480)="5169044c4206d69b855741af1b2cba79028d00268cda13ab9ef9e514c5138c5b35ec3969e8e52a8243c638d682af808bb1", 0x31, 0x9, 0x0, 0x0, r4}]) getsockname$tipc(r4, &(0x7f0000000040), &(0x7f0000000080)=0x10) ioctl$TIOCSRS485(r4, 0x542f, &(0x7f00000005c0)={0x3, 0x8, 0xf80000000000}) write$capi20_data(r4, &(0x7f0000000600)={{0x10, 0x40, 0x82, 0x83, 0x2, 0xc0}, 0x4c, "9c203c5b6328725edfb730ead6619f3976f0ef3884e62f084fa2c11682c7c0ec6b91aefadd244c1637ad6977dc6b83ac9eaf55cd12a41c40e444656f27db3a9fa0fe073b6d091d84dda74938"}, 0x5e) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)={&(0x7f0000000540)='./file0\x00', 0x0, 0x18}, 0x10) [ 406.885534] ? __alloc_pages_slowpath+0x2930/0x2930 [ 406.890756] cache_grow_begin+0x80/0x400 [ 406.894842] kmem_cache_alloc+0x6a6/0x780 [ 406.899001] ? selinux_file_mprotect+0x5d0/0x5d0 [ 406.903773] ? lock_downgrade+0x6e0/0x6e0 [ 406.907934] getname_flags+0xcb/0x580 [ 406.911751] SyS_mkdir+0x7e/0x200 [ 406.915224] ? SyS_mkdirat+0x210/0x210 [ 406.919123] ? do_syscall_64+0x53/0x640 [ 406.923101] ? SyS_mkdirat+0x210/0x210 [ 406.923118] do_syscall_64+0x1e8/0x640 [ 406.923127] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 406.923142] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 406.941088] RIP: 0033:0x4586e7 [ 406.944285] RSP: 002b:00007fbd1d1a1a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 406.952003] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000004586e7 [ 406.959297] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 00000000200003c0 [ 406.966578] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 406.973855] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 406.973861] R13: 00000000004c8220 R14: 00000000004dea68 R15: 0000000000000003 12:39:52 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2002, 0x0) 12:39:52 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000140)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000280)={{{@in=@broadcast, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@local}}, &(0x7f0000000380)=0xe8) r4 = accept4(r1, &(0x7f00000003c0)=@hci={0x1f, 0x0}, &(0x7f0000000440)=0x80, 0x800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000480)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000580)=0xe8) r7 = accept4$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000600)=0x14, 0x80800) setsockopt$RDS_GET_MR(r4, 0x114, 0x2, &(0x7f0000000640)={{&(0x7f0000000200)=""/38, 0x26}, &(0x7f0000000240), 0x24}, 0x20) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000880)={@mcast1, 0x0}, &(0x7f00000008c0)=0x14) accept4$packet(r7, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000001940)={@broadcast, @initdev, 0x0}, &(0x7f0000001980)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001a40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000001f00)={&(0x7f0000000100), 0xc, &(0x7f0000001ec0)={&(0x7f0000001a80)={0x414, r2, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x218, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r6}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x100}}}, {0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x2c, 0x4, [{0x1, 0x0, 0x1068400, 0x7fffffff}, {0x0, 0xffff, 0xffff, 0xd554}, {0x8, 0x59c0, 0x0, 0x6}, {0xfffffffffffffffa, 0x1, 0x100, 0x20}, {0x4, 0x0, 0x4, 0x4}]}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x101}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x1c, 0x4, [{0x800, 0x4, 0x10001, 0x4}, {0xfffffffffffffffe, 0x9, 0xfffffffffffffd80, 0x8}, {0xea11, 0x6, 0xfffffffffffffff8, 0xffffffffffffff80}]}}}]}}, {{0x8, 0x1, r9}, {0x40, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r11}, {0x190, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0xf2e0}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r12}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x414}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000032001901000000000000000003000000ffd300001d9321bb1ccc0614a59cfdcc203ae12e213c9d5fcd89711c27d5c1c2700ed1dc23784723a9b4df7901249e1a6fd19e"], 0x18}}, 0x0) 12:39:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:52 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2002, 0x0) 12:39:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) [ 407.063957] gfs2: not a GFS2 filesystem 12:39:52 executing program 4 (fault-call:0 fault-nth:38): syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 12:39:52 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x1, 0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f00000000c0)=0x7fffffff, 0x4) write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x18, 0x32, 0x119, 0x0, 0x0, {0x3}, [@generic="ffd3"]}, 0x18}}, 0x0) 12:39:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:52 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2002, 0x0) 12:39:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) fcntl$setsig(r1, 0xa, 0x2) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:39:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000001180)="11dca5055e0bcfec7be070") syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2002, 0x0) 12:39:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x6, 0x100010, r1, 0x0) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000200)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@multicast1}}, &(0x7f0000000040)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000080)={@empty, 0x2e, r3}) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) [ 407.186902] FAULT_INJECTION: forcing a failure. [ 407.186902] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 407.198790] CPU: 0 PID: 19384 Comm: syz-executor.4 Not tainted 4.14.129 #23 [ 407.205989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 407.215449] Call Trace: [ 407.218065] dump_stack+0x138/0x19c [ 407.221719] should_fail.cold+0x10f/0x159 [ 407.225882] __alloc_pages_nodemask+0x1d6/0x7a0 [ 407.232394] ? fs_reclaim_acquire+0x20/0x20 12:39:52 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$int_out(r0, 0x5460, &(0x7f0000000080)) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x18, 0x32, 0x119, 0x0, 0x0, {0x3}, [@generic="ffd3"]}, 0x18}}, 0x0) [ 407.236745] ? __alloc_pages_slowpath+0x2930/0x2930 [ 407.241887] cache_grow_begin+0x80/0x400 [ 407.245962] kmem_cache_alloc+0x6a6/0x780 [ 407.250128] ? selinux_file_mprotect+0x5d0/0x5d0 [ 407.254903] ? lock_downgrade+0x6e0/0x6e0 [ 407.259232] getname_flags+0xcb/0x580 [ 407.263043] SyS_mkdir+0x7e/0x200 [ 407.266505] ? SyS_mkdirat+0x210/0x210 [ 407.270397] ? do_syscall_64+0x53/0x640 [ 407.274375] ? SyS_mkdirat+0x210/0x210 [ 407.278364] do_syscall_64+0x1e8/0x640 [ 407.282259] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 407.287113] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 407.292308] RIP: 0033:0x4586e7 [ 407.295511] RSP: 002b:00007fbd1d1a1a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 407.303235] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000004586e7 [ 407.310517] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 00000000200003c0 [ 407.317796] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 407.325077] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 12:39:52 executing program 3: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x46000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000080)=0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r2, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0xc1105511, &(0x7f0000001000)) finit_module(r2, &(0x7f00000000c0)='\\keyring\x00', 0x2) [ 407.332363] R13: 00000000004c8220 R14: 00000000004dea68 R15: 0000000000000003 12:39:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000001180)="11dca5055e0bcfec7be070") syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2002, 0x0) 12:39:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) [ 407.502295] gfs2: not a GFS2 filesystem 12:39:52 executing program 4 (fault-call:0 fault-nth:39): syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 12:39:52 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200, 0x0) write$P9_RMKDIR(r1, &(0x7f00000000c0)={0xffffff8c, 0x49, 0x2, {0x100020, 0x4, 0x2}}, 0x12f) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="1803000000000000000000000000000003000000ffd30000"], 0x18}}, 0x0) 12:39:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:39:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000001180)="11dca5055e0bcfec7be070") syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2002, 0x0) 12:39:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) connect$l2tp(r2, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @local}, 0x1, 0x2}}, 0x26) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) [ 407.609502] FAULT_INJECTION: forcing a failure. [ 407.609502] name failslab, interval 1, probability 0, space 0, times 0 [ 407.635340] CPU: 0 PID: 19436 Comm: syz-executor.4 Not tainted 4.14.129 #23 [ 407.642494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 407.651847] Call Trace: [ 407.654436] dump_stack+0x138/0x19c [ 407.658055] should_fail.cold+0x10f/0x159 [ 407.662194] should_failslab+0xdb/0x130 [ 407.666157] kmem_cache_alloc+0x2d7/0x780 [ 407.670289] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 407.675809] ? ext4_sync_fs+0x800/0x800 [ 407.679947] ext4_alloc_inode+0x1d/0x610 [ 407.684260] alloc_inode+0x64/0x180 [ 407.687907] new_inode_pseudo+0x19/0xf0 [ 407.691885] new_inode+0x1f/0x40 [ 407.695235] __ext4_new_inode+0x32c/0x4860 [ 407.699561] ? avc_has_perm+0x2df/0x4b0 [ 407.703528] ? ext4_free_inode+0x1210/0x1210 [ 407.708012] ? dquot_get_next_dqblk+0x160/0x160 [ 407.712671] ext4_mkdir+0x331/0xc20 [ 407.716283] ? ext4_init_dot_dotdot+0x4c0/0x4c0 [ 407.720943] ? security_inode_mkdir+0xd0/0x110 [ 407.725511] vfs_mkdir+0x3ca/0x610 [ 407.729030] SyS_mkdir+0x1b7/0x200 [ 407.732555] ? SyS_mkdirat+0x210/0x210 [ 407.736433] ? do_syscall_64+0x53/0x640 [ 407.740391] ? SyS_mkdirat+0x210/0x210 [ 407.744262] do_syscall_64+0x1e8/0x640 [ 407.748127] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 407.752959] entry_SYSCALL_64_after_hwframe+0x42/0xb7 12:39:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2002, 0x0) 12:39:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = creat(&(0x7f0000000000)='./file1\x00', 0x0) clone(0x4000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40286608, &(0x7f00000000c0)=0x80000000405) r2 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r2, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10001}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x90, r4, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x54, 0x5, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x484}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0xc1105511, &(0x7f0000001000)) 12:39:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:52 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfd, 0x8000}, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000320900002e7b412cbef64f4050100000000000000b8d"], 0x18}}, 0x0) lsetxattr$security_evm(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.evm\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="050205008fb90002002bd989000000000000006fc1e659009a975e9d00a5e2870000000000"], 0x35, 0x3) [ 407.758131] RIP: 0033:0x4586e7 [ 407.761302] RSP: 002b:00007fbd1d1a1a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 407.768991] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000004586e7 [ 407.776252] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 00000000200003c0 [ 407.783602] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 407.790854] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 407.798105] R13: 00000000004c8220 R14: 00000000004dea68 R15: 0000000000000003 12:39:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2002, 0x0) 12:39:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) [ 407.890673] EXT4-fs warning (device sda1): verify_group_input:104: Cannot add at group 1029 (only 16 groups) [ 407.906179] audit: type=1400 audit(1561207193.020:108): avc: denied { bind } for pid=19448 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 12:39:53 executing program 4 (fault-call:0 fault-nth:40): syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 12:39:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) r2 = perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) r3 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000040)={0xc89, 0x4, 0x0, 0x2, 0x4, 0xe5, 0x6, 0x2, 0x80, 0x7f}) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000000c0)={r0}) connect$bt_rfcomm(r4, &(0x7f0000000140)={0x1f, {0x2, 0x8, 0x6, 0x1, 0x7, 0x6}, 0x3}, 0xa) 12:39:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:39:53 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x18, 0x32, 0x119, 0x0, 0x0, {0x3}, [@generic="ffd3"]}, 0x18}}, 0x0) getegid() 12:39:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2002, 0x0) 12:39:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)) syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2002, 0x0) 12:39:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) [ 408.078991] net_ratelimit: 24 callbacks suppressed [ 408.078996] openvswitch: netlink: Flow get message rejected, Key attribute missing. 12:39:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x7ffe, &(0x7f0000001180)="cd2052a8") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000008ac0)=[{{&(0x7f0000000200)=@x25, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)=""/242, 0xf2}, {&(0x7f0000000380)=""/224, 0xe0}, {&(0x7f0000000480)=""/134, 0x86}, {&(0x7f0000000540)=""/171, 0xab}, {&(0x7f00000011c0)=""/4096, 0x1000}], 0x5, &(0x7f0000000680)=""/127, 0x7f}, 0x1}, {{&(0x7f0000000700)=@ax25={{0x3, @rose}, [@null, @rose, @bcast, @bcast, @default, @default, @remote, @rose]}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000780)=""/120, 0x78}, {&(0x7f0000000800)=""/158, 0x9e}, {&(0x7f0000000180)=""/32, 0x20}, {&(0x7f00000008c0)=""/113, 0x71}, {&(0x7f00000021c0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/107, 0x6b}, {&(0x7f00000009c0)=""/9, 0x9}], 0x7, &(0x7f0000000a80)=""/90, 0x5a}, 0x7}, {{&(0x7f0000000b00)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000b80)=""/87, 0x57}, {&(0x7f00000031c0)=""/4096, 0x1000}, {&(0x7f0000000c00)=""/175, 0xaf}], 0x3, &(0x7f0000000d00)=""/90, 0x5a}, 0x3}, {{0x0, 0x0, &(0x7f00000044c0)=[{&(0x7f0000000d80)=""/209, 0xd1}, {&(0x7f0000000e80)=""/195, 0xc3}, {&(0x7f0000001080)=""/204, 0xcc}, {&(0x7f0000000f80)=""/17, 0x11}, {&(0x7f00000041c0)=""/141, 0x8d}, {&(0x7f0000004280)=""/246, 0xf6}, {&(0x7f0000004380)=""/159, 0x9f}, {&(0x7f0000000fc0)=""/29, 0x1d}, {&(0x7f0000004440)=""/88, 0x58}], 0x9}, 0x80000000}, {{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f0000004580)=""/9, 0x9}, {&(0x7f00000045c0)=""/88, 0x58}, {&(0x7f0000004640)=""/99, 0x63}, {&(0x7f00000046c0)=""/18, 0x12}], 0x4}, 0x7}, {{&(0x7f0000004740)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004cc0)=[{&(0x7f00000047c0)=""/211, 0xd3}, {&(0x7f00000048c0)=""/94, 0x5e}, {&(0x7f0000004940)=""/243, 0xf3}, {&(0x7f0000004a40)=""/110, 0x6e}, {&(0x7f0000004ac0)=""/119, 0x77}, {&(0x7f0000004b40)=""/224, 0xe0}, {&(0x7f0000004c40)=""/90, 0x5a}], 0x7, &(0x7f0000004d40)=""/4096, 0x1000}, 0xffffffff}, {{&(0x7f0000005d40)=@xdp, 0x80, &(0x7f00000070c0)=[{&(0x7f0000005dc0)}, {&(0x7f0000005e00)=""/4096, 0x1000}, {&(0x7f0000006e00)=""/208, 0xd0}, {&(0x7f0000006f00)=""/221, 0xdd}, {&(0x7f0000007000)=""/191, 0xbf}], 0x5, &(0x7f0000007140)=""/185, 0xb9}, 0x9}, {{&(0x7f0000007200)=@hci, 0x80, &(0x7f00000085c0)=[{&(0x7f0000007280)=""/28, 0x1c}, {&(0x7f00000072c0)=""/149, 0x95}, {&(0x7f0000007380)=""/4096, 0x1000}, {&(0x7f0000008380)=""/61, 0x3d}, {&(0x7f00000083c0)=""/231, 0xe7}, {&(0x7f00000084c0)=""/78, 0x4e}, {&(0x7f0000008540)=""/66, 0x42}], 0x7, &(0x7f0000008640)=""/37, 0x25}, 0xe5be}, {{&(0x7f0000008680)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000008a00)=[{&(0x7f0000008700)=""/137, 0x89}, {&(0x7f00000087c0)=""/210, 0xd2}, {&(0x7f00000088c0)=""/41, 0x29}, {&(0x7f0000008900)=""/96, 0x60}, {&(0x7f0000008980)=""/72, 0x48}], 0x5, &(0x7f0000008a80)}, 0x3}], 0x9, 0x20, &(0x7f0000008d00)={0x77359400}) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000008d40)={r2, @local, @multicast1}, 0xc) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) [ 408.122072] FAULT_INJECTION: forcing a failure. [ 408.122072] name failslab, interval 1, probability 0, space 0, times 0 [ 408.163278] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 408.201658] CPU: 0 PID: 19480 Comm: syz-executor.4 Not tainted 4.14.129 #23 12:39:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) [ 408.208806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 408.218157] Call Trace: [ 408.220743] dump_stack+0x138/0x19c [ 408.224454] should_fail.cold+0x10f/0x159 [ 408.228625] should_failslab+0xdb/0x130 [ 408.232616] kmem_cache_alloc+0x2d7/0x780 [ 408.236772] ? __debug_object_init+0x171/0x8e0 [ 408.241370] ? ext4_alloc_inode+0x1d/0x610 [ 408.245623] selinux_inode_alloc_security+0xb6/0x2a0 [ 408.250743] security_inode_alloc+0x94/0xd0 [ 408.255104] inode_init_always+0x552/0xaf0 [ 408.259346] alloc_inode+0x81/0x180 12:39:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) [ 408.262976] new_inode_pseudo+0x19/0xf0 [ 408.266961] new_inode+0x1f/0x40 [ 408.270331] __ext4_new_inode+0x32c/0x4860 [ 408.274576] ? avc_has_perm+0x2df/0x4b0 [ 408.278553] ? ext4_free_inode+0x1210/0x1210 [ 408.282993] ? dquot_get_next_dqblk+0x160/0x160 [ 408.283011] ext4_mkdir+0x331/0xc20 [ 408.291273] ? ext4_init_dot_dotdot+0x4c0/0x4c0 [ 408.291287] ? security_inode_mkdir+0xd0/0x110 [ 408.291303] vfs_mkdir+0x3ca/0x610 [ 408.291313] SyS_mkdir+0x1b7/0x200 [ 408.291322] ? SyS_mkdirat+0x210/0x210 12:39:53 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{}]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="1800000032001906650000000000000003180000ffd30000"], 0x18}}, 0x0) [ 408.291335] ? do_syscall_64+0x53/0x640 [ 408.291345] ? SyS_mkdirat+0x210/0x210 [ 408.291356] do_syscall_64+0x1e8/0x640 [ 408.323201] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 408.328062] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 408.333259] RIP: 0033:0x4586e7 [ 408.336450] RSP: 002b:00007fbd1d1a1a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 408.344259] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000004586e7 [ 408.344265] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 00000000200003c0 [ 408.344270] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 408.344275] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 408.344281] R13: 00000000004c8220 R14: 00000000004dea68 R15: 0000000000000003 [ 408.370568] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 408.416009] openvswitch: netlink: Flow get message rejected, Key attribute missing. 12:39:53 executing program 4 (fault-call:0 fault-nth:41): syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 12:39:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)) syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2002, 0x0) 12:39:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0xc1105511, &(0x7f0000001000)) 12:39:53 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1800000032001901000000000000000003000000ffd30000e5de9fd485aaf43ab13ffd653608ba4bd6b8a6a6b658ccee7764cb82fec1fa08f478808531273f5dd7346a52f7f5bb1426016ad6e8b11d67994175cd20ef0942bd49673ccfb79c6513337bd6926d06ae6c35c35bb41776960eb4ec34ef495aed962a2ca10a6a7423b541eb9dd13b232ab7389d0193abbf49f6d4ddfdf7c3e4385b2dbc9bd020da85"], 0x18}}, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffffd09, 0x200001) 12:39:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) [ 408.701694] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 408.743523] FAULT_INJECTION: forcing a failure. [ 408.743523] name failslab, interval 1, probability 0, space 0, times 0 [ 408.755428] CPU: 1 PID: 19518 Comm: syz-executor.4 Not tainted 4.14.129 #23 [ 408.760522] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 408.762581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 408.779726] Call Trace: [ 408.782325] dump_stack+0x138/0x19c [ 408.785968] should_fail.cold+0x10f/0x159 [ 408.790127] should_failslab+0xdb/0x130 [ 408.794109] __kmalloc+0x71/0x7a0 [ 408.797558] ? mls_compute_context_len+0x3f6/0x5e0 [ 408.802491] ? context_struct_to_string+0x33a/0x630 [ 408.802503] context_struct_to_string+0x33a/0x630 [ 408.802515] ? dump_masked_av_helper+0x90/0x90 [ 408.802531] security_sid_to_context_core+0x18a/0x200 [ 408.812379] security_sid_to_context_force+0x2b/0x40 [ 408.827307] selinux_inode_init_security+0x493/0x700 [ 408.832397] ? selinux_inode_create+0x30/0x30 [ 408.836876] ? kfree+0x20a/0x270 [ 408.840403] security_inode_init_security+0x18d/0x360 [ 408.845589] ? ext4_init_acl+0x1f0/0x1f0 [ 408.849632] ? security_kernel_post_read_file+0xd0/0xd0 [ 408.854982] ? posix_acl_create+0xf5/0x3a0 [ 408.859207] ? ext4_set_acl+0x400/0x400 [ 408.863175] ? lock_downgrade+0x6e0/0x6e0 [ 408.867304] ext4_init_security+0x34/0x40 [ 408.871441] __ext4_new_inode+0x3385/0x4860 [ 408.875751] ? ext4_free_inode+0x1210/0x1210 [ 408.880149] ? dquot_get_next_dqblk+0x160/0x160 [ 408.884802] ext4_mkdir+0x331/0xc20 [ 408.888419] ? ext4_init_dot_dotdot+0x4c0/0x4c0 [ 408.893070] ? security_inode_mkdir+0xd0/0x110 [ 408.897633] vfs_mkdir+0x3ca/0x610 [ 408.901174] SyS_mkdir+0x1b7/0x200 [ 408.904694] ? SyS_mkdirat+0x210/0x210 [ 408.908561] ? do_syscall_64+0x53/0x640 [ 408.912515] ? SyS_mkdirat+0x210/0x210 [ 408.916384] do_syscall_64+0x1e8/0x640 [ 408.920254] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 408.925081] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 408.930252] RIP: 0033:0x4586e7 [ 408.933421] RSP: 002b:00007fbd1d1a1a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 12:39:54 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)) syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2002, 0x0) 12:39:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0xc1105511, &(0x7f0000001000)) [ 408.941221] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000004586e7 [ 408.948471] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 00000000200003c0 [ 408.955722] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 408.962971] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 408.970221] R13: 00000000004c8220 R14: 00000000004dea68 R15: 0000000000000003 12:39:54 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r0], 0x1}}, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) 12:39:54 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x200040, 0x0) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x3, 0x0) write$binfmt_elf64(r0, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x4, 0x8, 0xffffffffffff829d, 0x3, 0x3f, 0x6433, 0x2ef, 0x40, 0x375, 0xfffffffffffffffc, 0x7, 0x38, 0x1, 0x80000001, 0x2, 0x9}, [{0x70000007, 0x5, 0x40, 0x49d, 0x72, 0x1e, 0x10000, 0x6}], "e29129f9fbf331f7fda788758e5ce8ec0c4c1c17bc76d7fcc6aa213557cf38db12c8cc8b66aa55d101d33a5faaab26441b0c3d30945a0b601b30af0a3d8afd27ad02bcd71334e8748df36f852a573a7d4c6e4fc788532b93134b5983cc5a0fdce52510053051cdea08c6074b28534aa2bb31264b161338abf816720e30602b4aae08f21a42461490fbbe26815d40b5c57cdf26715a4012d01fdf974440a9e3daecfa31aa", [[], [], [], [], [], []]}, 0x71c) connect$bt_l2cap(r1, &(0x7f0000000180)={0x1f, 0x7, {0x100000001, 0xe3a7, 0x0, 0x8, 0x319, 0xfff}, 0x5, 0xde5}, 0xe) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x0) flistxattr(r0, &(0x7f00000011c0)=""/4096, 0x1000) r3 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x40400000001, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x31ab9d2b7bd7311, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x140, 0x0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f0000000080)={@local, @empty, @multicast2}, &(0x7f0000000140)=0xc) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r3, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r3, 0xc1105511, &(0x7f0000001000)) 12:39:54 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0b") syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2002, 0x0) 12:39:54 executing program 5: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x50001000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x80, r1, 0x200, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4001}]}, @TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9f03}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1000000}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_NET={0x2c, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x8800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e23, @rand_addr=0x2}], 0x20) ioctl$UI_SET_KEYBIT(r3, 0x40045565, 0x1bc) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x18, 0x32, 0x119, 0x0, 0x0, {0x3}, [@generic="ffd3"]}, 0x18}}, 0x0) 12:39:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0xc1105511, &(0x7f0000001000)) [ 409.164757] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 409.216561] openvswitch: netlink: Flow get message rejected, Key attribute missing. 12:39:54 executing program 4 (fault-call:0 fault-nth:42): syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 12:39:54 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0b") syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2002, 0x0) 12:39:54 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x7ffe, &(0x7f0000001180)="cd2052a8") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000008ac0)=[{{&(0x7f0000000200)=@x25, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)=""/242, 0xf2}, {&(0x7f0000000380)=""/224, 0xe0}, {&(0x7f0000000480)=""/134, 0x86}, {&(0x7f0000000540)=""/171, 0xab}, {&(0x7f00000011c0)=""/4096, 0x1000}], 0x5, &(0x7f0000000680)=""/127, 0x7f}, 0x1}, {{&(0x7f0000000700)=@ax25={{0x3, @rose}, [@null, @rose, @bcast, @bcast, @default, @default, @remote, @rose]}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000780)=""/120, 0x78}, {&(0x7f0000000800)=""/158, 0x9e}, {&(0x7f0000000180)=""/32, 0x20}, {&(0x7f00000008c0)=""/113, 0x71}, {&(0x7f00000021c0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/107, 0x6b}, {&(0x7f00000009c0)=""/9, 0x9}], 0x7, &(0x7f0000000a80)=""/90, 0x5a}, 0x7}, {{&(0x7f0000000b00)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000b80)=""/87, 0x57}, {&(0x7f00000031c0)=""/4096, 0x1000}, {&(0x7f0000000c00)=""/175, 0xaf}], 0x3, &(0x7f0000000d00)=""/90, 0x5a}, 0x3}, {{0x0, 0x0, &(0x7f00000044c0)=[{&(0x7f0000000d80)=""/209, 0xd1}, {&(0x7f0000000e80)=""/195, 0xc3}, {&(0x7f0000001080)=""/204, 0xcc}, {&(0x7f0000000f80)=""/17, 0x11}, {&(0x7f00000041c0)=""/141, 0x8d}, {&(0x7f0000004280)=""/246, 0xf6}, {&(0x7f0000004380)=""/159, 0x9f}, {&(0x7f0000000fc0)=""/29, 0x1d}, {&(0x7f0000004440)=""/88, 0x58}], 0x9}, 0x80000000}, {{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f0000004580)=""/9, 0x9}, {&(0x7f00000045c0)=""/88, 0x58}, {&(0x7f0000004640)=""/99, 0x63}, {&(0x7f00000046c0)=""/18, 0x12}], 0x4}, 0x7}, {{&(0x7f0000004740)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004cc0)=[{&(0x7f00000047c0)=""/211, 0xd3}, {&(0x7f00000048c0)=""/94, 0x5e}, {&(0x7f0000004940)=""/243, 0xf3}, {&(0x7f0000004a40)=""/110, 0x6e}, {&(0x7f0000004ac0)=""/119, 0x77}, {&(0x7f0000004b40)=""/224, 0xe0}, {&(0x7f0000004c40)=""/90, 0x5a}], 0x7, &(0x7f0000004d40)=""/4096, 0x1000}, 0xffffffff}, {{&(0x7f0000005d40)=@xdp, 0x80, &(0x7f00000070c0)=[{&(0x7f0000005dc0)}, {&(0x7f0000005e00)=""/4096, 0x1000}, {&(0x7f0000006e00)=""/208, 0xd0}, {&(0x7f0000006f00)=""/221, 0xdd}, {&(0x7f0000007000)=""/191, 0xbf}], 0x5, &(0x7f0000007140)=""/185, 0xb9}, 0x9}, {{&(0x7f0000007200)=@hci, 0x80, &(0x7f00000085c0)=[{&(0x7f0000007280)=""/28, 0x1c}, {&(0x7f00000072c0)=""/149, 0x95}, {&(0x7f0000007380)=""/4096, 0x1000}, {&(0x7f0000008380)=""/61, 0x3d}, {&(0x7f00000083c0)=""/231, 0xe7}, {&(0x7f00000084c0)=""/78, 0x4e}, {&(0x7f0000008540)=""/66, 0x42}], 0x7, &(0x7f0000008640)=""/37, 0x25}, 0xe5be}, {{&(0x7f0000008680)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000008a00)=[{&(0x7f0000008700)=""/137, 0x89}, {&(0x7f00000087c0)=""/210, 0xd2}, {&(0x7f00000088c0)=""/41, 0x29}, {&(0x7f0000008900)=""/96, 0x60}, {&(0x7f0000008980)=""/72, 0x48}], 0x5, &(0x7f0000008a80)}, 0x3}], 0x9, 0x20, &(0x7f0000008d00)={0x77359400}) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000008d40)={r2, @local, @multicast1}, 0xc) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, 0x0) 12:39:54 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/mixer\x00', 0x1, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000480)={0x0, 0xff, 0x4, [0x0, 0x5, 0xa6b4, 0x7fff]}, &(0x7f00000004c0)=0x10) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000500)={r1, 0x3}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000000080)={0x7, 0x6, 0x7703, @local, 'team_slave_0\x00'}) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x18, 0x32, 0x119, 0x0, 0x0, {0x3}, [@generic="ffd3"]}, 0x18}}, 0x0) 12:39:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:39:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, 0x0) 12:39:54 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0b") syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2002, 0x0) [ 409.323731] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 409.363097] openvswitch: netlink: Flow get message rejected, Key attribute missing. 12:39:54 executing program 5: r0 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0xff, 0x141100) write$P9_RMKDIR(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="50df0012", @ANYRES16=r2, @ANYBLOB="050227bd7000fddbdf25040000000800050000000000080004000104000008000400090000003000020014000100ff0200000000000000000000000000010800080000000000080008000600000008000d0000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x404c8d0}, 0x4000004) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x18, 0x32, 0x119, 0x0, 0xfffffffffffffffd, {0x3}, [@generic="ffd3"]}, 0x18}}, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x20000) write$apparmor_current(r3, &(0x7f00000000c0)=@profile={'stack ', 'md5sum\'posix_acl_access/\x00'}, 0x1f) [ 409.418960] FAULT_INJECTION: forcing a failure. [ 409.418960] name failslab, interval 1, probability 0, space 0, times 0 [ 409.483086] CPU: 0 PID: 19566 Comm: syz-executor.4 Not tainted 4.14.129 #23 [ 409.490244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 409.499602] Call Trace: [ 409.502230] dump_stack+0x138/0x19c [ 409.505864] should_fail.cold+0x10f/0x159 [ 409.505881] should_failslab+0xdb/0x130 [ 409.513979] __kmalloc+0x2f0/0x7a0 [ 409.517528] ? ext4_find_extent+0x709/0x960 [ 409.521861] ext4_find_extent+0x709/0x960 [ 409.526020] ? rcu_lockdep_current_cpu_online+0xf2/0x140 12:39:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, 0x0) 12:39:54 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x0, 0x0) write$P9_RMKDIR(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000320019010000000019086a3869f41c34278ecd35c12a4260062b1f89a3c8fdf9a2e00409d39b113e9ee2b3e3de283b01102f5d7ddf60c208fdb1e96a5fd5114db9ff00"/93], 0x18}}, 0x0) [ 409.531499] ext4_ext_map_blocks+0x1a3/0x4fa0 [ 409.536020] ? save_trace+0x290/0x290 [ 409.539842] ? ext4_find_delalloc_cluster+0xb0/0xb0 [ 409.544872] ? __lock_is_held+0xb6/0x140 [ 409.548954] ? lock_acquire+0x16f/0x430 [ 409.552947] ? ext4_map_blocks+0x354/0x16e0 [ 409.557297] ext4_map_blocks+0xc8a/0x16e0 [ 409.561545] ? __lock_is_held+0xb6/0x140 [ 409.565612] ? check_preemption_disabled+0x3c/0x250 [ 409.570646] ? ext4_issue_zeroout+0x160/0x160 [ 409.575148] ? __brelse+0x50/0x60 [ 409.578616] ext4_getblk+0xac/0x450 12:39:54 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="0600007f87a30032"], 0x18}}, 0x0) [ 409.582251] ? ext4_iomap_begin+0x8a0/0x8a0 [ 409.587818] ? ext4_free_inode+0x1210/0x1210 [ 409.592240] ext4_bread+0x6e/0x1a0 [ 409.595786] ? ext4_getblk+0x450/0x450 [ 409.599688] ext4_append+0x14b/0x360 [ 409.603412] ext4_mkdir+0x531/0xc20 [ 409.607046] ? ext4_init_dot_dotdot+0x4c0/0x4c0 [ 409.611718] ? security_inode_mkdir+0xd0/0x110 [ 409.611735] vfs_mkdir+0x3ca/0x610 [ 409.611747] SyS_mkdir+0x1b7/0x200 [ 409.611755] ? SyS_mkdirat+0x210/0x210 [ 409.611767] ? do_syscall_64+0x53/0x640 [ 409.611776] ? SyS_mkdirat+0x210/0x210 [ 409.611787] do_syscall_64+0x1e8/0x640 [ 409.611800] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 409.611818] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 409.619912] RIP: 0033:0x4586e7 [ 409.619917] RSP: 002b:00007fbd1d1a1a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 409.619929] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000004586e7 [ 409.619934] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 00000000200003c0 [ 409.619941] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 409.667236] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 409.667242] R13: 00000000004c8220 R14: 00000000004dea68 R15: 0000000000000003 [ 409.694199] gfs2: not a GFS2 filesystem 12:39:54 executing program 4 (fault-call:0 fault-nth:43): syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 12:39:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, 0x0, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r5, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r5, 0x2007fff) sendfile(r3, r5, 0x0, 0x87ff7) [ 409.774601] FAULT_INJECTION: forcing a failure. [ 409.774601] name failslab, interval 1, probability 0, space 0, times 0 [ 409.786587] CPU: 0 PID: 19601 Comm: syz-executor.4 Not tainted 4.14.129 #23 [ 409.793703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 409.803086] Call Trace: [ 409.805686] dump_stack+0x138/0x19c [ 409.809503] should_fail.cold+0x10f/0x159 [ 409.813659] ? __es_tree_search.isra.0+0x15f/0x1c0 [ 409.818594] should_failslab+0xdb/0x130 [ 409.822560] kmem_cache_alloc+0x47/0x780 [ 409.826614] __es_insert_extent+0x26c/0xe60 [ 409.830928] ext4_es_insert_extent+0x1f0/0x590 [ 409.835496] ? check_preemption_disabled+0x3c/0x250 [ 409.840613] ? ext4_es_find_delayed_extent_range+0x960/0x960 [ 409.846397] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 409.851830] ? ext4_es_find_delayed_extent_range+0x31d/0x960 [ 409.857612] ext4_ext_put_gap_in_cache+0xcb/0x110 [ 409.862435] ? ext4_zeroout_es+0x170/0x170 [ 409.866654] ? ext4_find_extent+0x64c/0x960 [ 409.870962] ext4_ext_map_blocks+0x1d4b/0x4fa0 [ 409.875529] ? save_trace+0x290/0x290 [ 409.879314] ? ext4_find_delalloc_cluster+0xb0/0xb0 [ 409.884308] ? __lock_is_held+0xb6/0x140 [ 409.888356] ? lock_acquire+0x16f/0x430 [ 409.892494] ? ext4_map_blocks+0x354/0x16e0 [ 409.896800] ext4_map_blocks+0xc8a/0x16e0 [ 409.900928] ? __lock_is_held+0xb6/0x140 [ 409.904971] ? check_preemption_disabled+0x3c/0x250 [ 409.909971] ? ext4_issue_zeroout+0x160/0x160 [ 409.914455] ? __brelse+0x50/0x60 [ 409.917893] ext4_getblk+0xac/0x450 [ 409.921501] ? ext4_iomap_begin+0x8a0/0x8a0 [ 409.925804] ? ext4_free_inode+0x1210/0x1210 [ 409.930196] ext4_bread+0x6e/0x1a0 [ 409.933717] ? ext4_getblk+0x450/0x450 [ 409.937602] ext4_append+0x14b/0x360 [ 409.941319] ext4_mkdir+0x531/0xc20 [ 409.944944] ? ext4_init_dot_dotdot+0x4c0/0x4c0 [ 409.949596] ? security_inode_mkdir+0xd0/0x110 [ 409.954178] vfs_mkdir+0x3ca/0x610 [ 409.957699] SyS_mkdir+0x1b7/0x200 [ 409.961310] ? SyS_mkdirat+0x210/0x210 [ 409.965184] ? do_syscall_64+0x53/0x640 [ 409.969139] ? SyS_mkdirat+0x210/0x210 [ 409.973007] do_syscall_64+0x1e8/0x640 [ 409.976888] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 409.981715] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 409.986892] RIP: 0033:0x4586e7 [ 409.990060] RSP: 002b:00007fbd1d1a1a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 409.997748] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000004586e7 [ 410.005001] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 00000000200003c0 [ 410.012249] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 410.021431] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 410.030417] R13: 00000000004c8220 R14: 00000000004dea68 R15: 0000000000000003 [ 410.057571] gfs2: not a GFS2 filesystem 12:39:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x7ffe, &(0x7f0000001180)="cd2052a8") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000008ac0)=[{{&(0x7f0000000200)=@x25, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)=""/242, 0xf2}, {&(0x7f0000000380)=""/224, 0xe0}, {&(0x7f0000000480)=""/134, 0x86}, {&(0x7f0000000540)=""/171, 0xab}, {&(0x7f00000011c0)=""/4096, 0x1000}], 0x5, &(0x7f0000000680)=""/127, 0x7f}, 0x1}, {{&(0x7f0000000700)=@ax25={{0x3, @rose}, [@null, @rose, @bcast, @bcast, @default, @default, @remote, @rose]}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000780)=""/120, 0x78}, {&(0x7f0000000800)=""/158, 0x9e}, {&(0x7f0000000180)=""/32, 0x20}, {&(0x7f00000008c0)=""/113, 0x71}, {&(0x7f00000021c0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/107, 0x6b}, {&(0x7f00000009c0)=""/9, 0x9}], 0x7, &(0x7f0000000a80)=""/90, 0x5a}, 0x7}, {{&(0x7f0000000b00)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000b80)=""/87, 0x57}, {&(0x7f00000031c0)=""/4096, 0x1000}, {&(0x7f0000000c00)=""/175, 0xaf}], 0x3, &(0x7f0000000d00)=""/90, 0x5a}, 0x3}, {{0x0, 0x0, &(0x7f00000044c0)=[{&(0x7f0000000d80)=""/209, 0xd1}, {&(0x7f0000000e80)=""/195, 0xc3}, {&(0x7f0000001080)=""/204, 0xcc}, {&(0x7f0000000f80)=""/17, 0x11}, {&(0x7f00000041c0)=""/141, 0x8d}, {&(0x7f0000004280)=""/246, 0xf6}, {&(0x7f0000004380)=""/159, 0x9f}, {&(0x7f0000000fc0)=""/29, 0x1d}, {&(0x7f0000004440)=""/88, 0x58}], 0x9}, 0x80000000}, {{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f0000004580)=""/9, 0x9}, {&(0x7f00000045c0)=""/88, 0x58}, {&(0x7f0000004640)=""/99, 0x63}, {&(0x7f00000046c0)=""/18, 0x12}], 0x4}, 0x7}, {{&(0x7f0000004740)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004cc0)=[{&(0x7f00000047c0)=""/211, 0xd3}, {&(0x7f00000048c0)=""/94, 0x5e}, {&(0x7f0000004940)=""/243, 0xf3}, {&(0x7f0000004a40)=""/110, 0x6e}, {&(0x7f0000004ac0)=""/119, 0x77}, {&(0x7f0000004b40)=""/224, 0xe0}, {&(0x7f0000004c40)=""/90, 0x5a}], 0x7, &(0x7f0000004d40)=""/4096, 0x1000}, 0xffffffff}, {{&(0x7f0000005d40)=@xdp, 0x80, &(0x7f00000070c0)=[{&(0x7f0000005dc0)}, {&(0x7f0000005e00)=""/4096, 0x1000}, {&(0x7f0000006e00)=""/208, 0xd0}, {&(0x7f0000006f00)=""/221, 0xdd}, {&(0x7f0000007000)=""/191, 0xbf}], 0x5, &(0x7f0000007140)=""/185, 0xb9}, 0x9}, {{&(0x7f0000007200)=@hci, 0x80, &(0x7f00000085c0)=[{&(0x7f0000007280)=""/28, 0x1c}, {&(0x7f00000072c0)=""/149, 0x95}, {&(0x7f0000007380)=""/4096, 0x1000}, {&(0x7f0000008380)=""/61, 0x3d}, {&(0x7f00000083c0)=""/231, 0xe7}, {&(0x7f00000084c0)=""/78, 0x4e}, {&(0x7f0000008540)=""/66, 0x42}], 0x7, &(0x7f0000008640)=""/37, 0x25}, 0xe5be}, {{&(0x7f0000008680)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000008a00)=[{&(0x7f0000008700)=""/137, 0x89}, {&(0x7f00000087c0)=""/210, 0xd2}, {&(0x7f00000088c0)=""/41, 0x29}, {&(0x7f0000008900)=""/96, 0x60}, {&(0x7f0000008980)=""/72, 0x48}], 0x5, &(0x7f0000008a80)}, 0x3}], 0x9, 0x20, &(0x7f0000008d00)={0x77359400}) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000008d40)={r2, @local, @multicast1}, 0xc) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7b") syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2002, 0x0) 12:39:55 executing program 5: prctl$PR_GET_THP_DISABLE(0x2a) write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x1, 0x0) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000020000007e0b00400000000006000000000000002f3095540188769bbb5146ecc4988b771101666cd8f1e7fde5977c84d479309ca415fa688ab472e600cd0a84f90294dd685f5bbfa0c8c89c090b7c786ad0a49635db78494eb665dac7a569b17e40b0bc4fb55498711144bed6a5b44ff9f126b68652c19a6ac74f7f48145e6e88"]) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x8000, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRES32], 0x1}}, 0x400000000002) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/access\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f00000000c0)=0xbee385f800000000, 0x4) ioctl$RTC_UIE_OFF(r1, 0x7004) 12:39:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x7ffe, &(0x7f0000001180)="cd2052a8") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000008ac0)=[{{&(0x7f0000000200)=@x25, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)=""/242, 0xf2}, {&(0x7f0000000380)=""/224, 0xe0}, {&(0x7f0000000480)=""/134, 0x86}, {&(0x7f0000000540)=""/171, 0xab}, {&(0x7f00000011c0)=""/4096, 0x1000}], 0x5, &(0x7f0000000680)=""/127, 0x7f}, 0x1}, {{&(0x7f0000000700)=@ax25={{0x3, @rose}, [@null, @rose, @bcast, @bcast, @default, @default, @remote, @rose]}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000780)=""/120, 0x78}, {&(0x7f0000000800)=""/158, 0x9e}, {&(0x7f0000000180)=""/32, 0x20}, {&(0x7f00000008c0)=""/113, 0x71}, {&(0x7f00000021c0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/107, 0x6b}, {&(0x7f00000009c0)=""/9, 0x9}], 0x7, &(0x7f0000000a80)=""/90, 0x5a}, 0x7}, {{&(0x7f0000000b00)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000b80)=""/87, 0x57}, {&(0x7f00000031c0)=""/4096, 0x1000}, {&(0x7f0000000c00)=""/175, 0xaf}], 0x3, &(0x7f0000000d00)=""/90, 0x5a}, 0x3}, {{0x0, 0x0, &(0x7f00000044c0)=[{&(0x7f0000000d80)=""/209, 0xd1}, {&(0x7f0000000e80)=""/195, 0xc3}, {&(0x7f0000001080)=""/204, 0xcc}, {&(0x7f0000000f80)=""/17, 0x11}, {&(0x7f00000041c0)=""/141, 0x8d}, {&(0x7f0000004280)=""/246, 0xf6}, {&(0x7f0000004380)=""/159, 0x9f}, {&(0x7f0000000fc0)=""/29, 0x1d}, {&(0x7f0000004440)=""/88, 0x58}], 0x9}, 0x80000000}, {{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f0000004580)=""/9, 0x9}, {&(0x7f00000045c0)=""/88, 0x58}, {&(0x7f0000004640)=""/99, 0x63}, {&(0x7f00000046c0)=""/18, 0x12}], 0x4}, 0x7}, {{&(0x7f0000004740)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004cc0)=[{&(0x7f00000047c0)=""/211, 0xd3}, {&(0x7f00000048c0)=""/94, 0x5e}, {&(0x7f0000004940)=""/243, 0xf3}, {&(0x7f0000004a40)=""/110, 0x6e}, {&(0x7f0000004ac0)=""/119, 0x77}, {&(0x7f0000004b40)=""/224, 0xe0}, {&(0x7f0000004c40)=""/90, 0x5a}], 0x7, &(0x7f0000004d40)=""/4096, 0x1000}, 0xffffffff}, {{&(0x7f0000005d40)=@xdp, 0x80, &(0x7f00000070c0)=[{&(0x7f0000005dc0)}, {&(0x7f0000005e00)=""/4096, 0x1000}, {&(0x7f0000006e00)=""/208, 0xd0}, {&(0x7f0000006f00)=""/221, 0xdd}, {&(0x7f0000007000)=""/191, 0xbf}], 0x5, &(0x7f0000007140)=""/185, 0xb9}, 0x9}, {{&(0x7f0000007200)=@hci, 0x80, &(0x7f00000085c0)=[{&(0x7f0000007280)=""/28, 0x1c}, {&(0x7f00000072c0)=""/149, 0x95}, {&(0x7f0000007380)=""/4096, 0x1000}, {&(0x7f0000008380)=""/61, 0x3d}, {&(0x7f00000083c0)=""/231, 0xe7}, {&(0x7f00000084c0)=""/78, 0x4e}, {&(0x7f0000008540)=""/66, 0x42}], 0x7, &(0x7f0000008640)=""/37, 0x25}, 0xe5be}, {{&(0x7f0000008680)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000008a00)=[{&(0x7f0000008700)=""/137, 0x89}, {&(0x7f00000087c0)=""/210, 0xd2}, {&(0x7f00000088c0)=""/41, 0x29}, {&(0x7f0000008900)=""/96, 0x60}, {&(0x7f0000008980)=""/72, 0x48}], 0x5, &(0x7f0000008a80)}, 0x3}], 0x9, 0x20, &(0x7f0000008d00)={0x77359400}) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000008d40)={r2, @local, @multicast1}, 0xc) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:55 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, 0x0, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r5, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r5, 0x2007fff) sendfile(r3, r5, 0x0, 0x87ff7) 12:39:55 executing program 4 (fault-call:0 fault-nth:44): syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 12:39:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7b") syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2002, 0x0) [ 410.185252] FAULT_INJECTION: forcing a failure. [ 410.185252] name failslab, interval 1, probability 0, space 0, times 0 [ 410.221426] CPU: 0 PID: 19621 Comm: syz-executor.4 Not tainted 4.14.129 #23 [ 410.228586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 410.237942] Call Trace: [ 410.240536] dump_stack+0x138/0x19c [ 410.244268] should_fail.cold+0x10f/0x159 [ 410.248430] should_failslab+0xdb/0x130 [ 410.252416] __kmalloc+0x2f0/0x7a0 [ 410.255970] ? check_preemption_disabled+0x3c/0x250 [ 410.261005] ? ext4_find_extent+0x709/0x960 [ 410.265337] ext4_find_extent+0x709/0x960 [ 410.269493] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 410.274955] ext4_ext_map_blocks+0x1a3/0x4fa0 [ 410.279461] ? save_trace+0x290/0x290 [ 410.283260] ? ext4_find_delalloc_cluster+0xb0/0xb0 [ 410.283268] ? __lock_is_held+0xb6/0x140 [ 410.283283] ? lock_acquire+0x16f/0x430 [ 410.283294] ? ext4_map_blocks+0x77b/0x16e0 [ 410.283310] ext4_map_blocks+0x7d3/0x16e0 [ 410.283325] ? ext4_issue_zeroout+0x160/0x160 [ 410.292376] ? __brelse+0x50/0x60 [ 410.300650] ext4_getblk+0xac/0x450 [ 410.300662] ? ext4_iomap_begin+0x8a0/0x8a0 [ 410.300673] ? ext4_free_inode+0x1210/0x1210 [ 410.300684] ext4_bread+0x6e/0x1a0 [ 410.300693] ? ext4_getblk+0x450/0x450 12:39:55 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="1810000032001901000000008000000003000000ffd30000"], 0x18}}, 0x0) [ 410.300707] ext4_append+0x14b/0x360 [ 410.300719] ext4_mkdir+0x531/0xc20 [ 410.300739] ? ext4_init_dot_dotdot+0x4c0/0x4c0 [ 410.309467] ? security_inode_mkdir+0xd0/0x110 [ 410.309485] vfs_mkdir+0x3ca/0x610 [ 410.309499] SyS_mkdir+0x1b7/0x200 [ 410.309508] ? SyS_mkdirat+0x210/0x210 [ 410.309523] ? do_syscall_64+0x53/0x640 [ 410.328793] ? SyS_mkdirat+0x210/0x210 [ 410.328808] do_syscall_64+0x1e8/0x640 [ 410.328818] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 410.328835] entry_SYSCALL_64_after_hwframe+0x42/0xb7 12:39:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7b") syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2002, 0x0) 12:39:55 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, 0x0, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r5, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r5, 0x2007fff) sendfile(r3, r5, 0x0, 0x87ff7) 12:39:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be0") syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2002, 0x0) [ 410.336534] RIP: 0033:0x4586e7 [ 410.356606] RSP: 002b:00007fbd1d1a1a88 EFLAGS: 00000246 [ 410.364522] ORIG_RAX: 0000000000000053 [ 410.364530] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000004586e7 [ 410.364536] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 00000000200003c0 [ 410.364542] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 410.364548] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 410.364554] R13: 00000000004c8220 R14: 00000000004dea68 R15: 0000000000000003 12:39:55 executing program 4 (fault-call:0 fault-nth:45): syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 410.488144] FAULT_INJECTION: forcing a failure. [ 410.488144] name failslab, interval 1, probability 0, space 0, times 0 [ 410.500634] CPU: 1 PID: 19642 Comm: syz-executor.4 Not tainted 4.14.129 #23 [ 410.507751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 410.517126] Call Trace: [ 410.517150] dump_stack+0x138/0x19c [ 410.517169] should_fail.cold+0x10f/0x159 [ 410.517185] should_failslab+0xdb/0x130 [ 410.531471] kmem_cache_alloc+0x2d7/0x780 [ 410.535652] ? rcu_read_lock_sched_held+0x110/0x130 [ 410.540678] ? __mark_inode_dirty+0x2b7/0x1040 [ 410.545273] ext4_mb_new_blocks+0x509/0x3990 [ 410.549674] ? ext4_find_extent+0x709/0x960 [ 410.553985] ext4_ext_map_blocks+0x26cd/0x4fa0 [ 410.558556] ? ext4_find_delalloc_cluster+0xb0/0xb0 [ 410.563567] ? __lock_is_held+0xb6/0x140 [ 410.567615] ? lock_acquire+0x16f/0x430 [ 410.571590] ext4_map_blocks+0x7d3/0x16e0 [ 410.575723] ? ext4_issue_zeroout+0x160/0x160 [ 410.580208] ? __brelse+0x50/0x60 [ 410.583650] ext4_getblk+0xac/0x450 [ 410.587260] ? ext4_iomap_begin+0x8a0/0x8a0 [ 410.591616] ? ext4_free_inode+0x1210/0x1210 [ 410.596008] ext4_bread+0x6e/0x1a0 [ 410.599533] ? ext4_getblk+0x450/0x450 [ 410.603405] ext4_append+0x14b/0x360 [ 410.607123] ext4_mkdir+0x531/0xc20 [ 410.610740] ? ext4_init_dot_dotdot+0x4c0/0x4c0 [ 410.615503] ? security_inode_mkdir+0xd0/0x110 [ 410.620071] vfs_mkdir+0x3ca/0x610 [ 410.623598] SyS_mkdir+0x1b7/0x200 [ 410.627125] ? SyS_mkdirat+0x210/0x210 [ 410.631013] ? do_syscall_64+0x53/0x640 [ 410.634980] ? SyS_mkdirat+0x210/0x210 [ 410.638872] do_syscall_64+0x1e8/0x640 [ 410.642741] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 410.647591] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 410.652776] RIP: 0033:0x4586e7 [ 410.655946] RSP: 002b:00007fbd1d1a1a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 410.663635] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000004586e7 [ 410.671059] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 00000000200003c0 [ 410.678313] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 410.685564] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 410.692819] R13: 00000000004c8220 R14: 00000000004dea68 R15: 0000000000000003 12:39:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x7ffe, &(0x7f0000001180)="cd2052a8") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000008ac0)=[{{&(0x7f0000000200)=@x25, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)=""/242, 0xf2}, {&(0x7f0000000380)=""/224, 0xe0}, {&(0x7f0000000480)=""/134, 0x86}, {&(0x7f0000000540)=""/171, 0xab}, {&(0x7f00000011c0)=""/4096, 0x1000}], 0x5, &(0x7f0000000680)=""/127, 0x7f}, 0x1}, {{&(0x7f0000000700)=@ax25={{0x3, @rose}, [@null, @rose, @bcast, @bcast, @default, @default, @remote, @rose]}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000780)=""/120, 0x78}, {&(0x7f0000000800)=""/158, 0x9e}, {&(0x7f0000000180)=""/32, 0x20}, {&(0x7f00000008c0)=""/113, 0x71}, {&(0x7f00000021c0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/107, 0x6b}, {&(0x7f00000009c0)=""/9, 0x9}], 0x7, &(0x7f0000000a80)=""/90, 0x5a}, 0x7}, {{&(0x7f0000000b00)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000b80)=""/87, 0x57}, {&(0x7f00000031c0)=""/4096, 0x1000}, {&(0x7f0000000c00)=""/175, 0xaf}], 0x3, &(0x7f0000000d00)=""/90, 0x5a}, 0x3}, {{0x0, 0x0, &(0x7f00000044c0)=[{&(0x7f0000000d80)=""/209, 0xd1}, {&(0x7f0000000e80)=""/195, 0xc3}, {&(0x7f0000001080)=""/204, 0xcc}, {&(0x7f0000000f80)=""/17, 0x11}, {&(0x7f00000041c0)=""/141, 0x8d}, {&(0x7f0000004280)=""/246, 0xf6}, {&(0x7f0000004380)=""/159, 0x9f}, {&(0x7f0000000fc0)=""/29, 0x1d}, {&(0x7f0000004440)=""/88, 0x58}], 0x9}, 0x80000000}, {{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f0000004580)=""/9, 0x9}, {&(0x7f00000045c0)=""/88, 0x58}, {&(0x7f0000004640)=""/99, 0x63}, {&(0x7f00000046c0)=""/18, 0x12}], 0x4}, 0x7}, {{&(0x7f0000004740)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004cc0)=[{&(0x7f00000047c0)=""/211, 0xd3}, {&(0x7f00000048c0)=""/94, 0x5e}, {&(0x7f0000004940)=""/243, 0xf3}, {&(0x7f0000004a40)=""/110, 0x6e}, {&(0x7f0000004ac0)=""/119, 0x77}, {&(0x7f0000004b40)=""/224, 0xe0}, {&(0x7f0000004c40)=""/90, 0x5a}], 0x7, &(0x7f0000004d40)=""/4096, 0x1000}, 0xffffffff}, {{&(0x7f0000005d40)=@xdp, 0x80, &(0x7f00000070c0)=[{&(0x7f0000005dc0)}, {&(0x7f0000005e00)=""/4096, 0x1000}, {&(0x7f0000006e00)=""/208, 0xd0}, {&(0x7f0000006f00)=""/221, 0xdd}, {&(0x7f0000007000)=""/191, 0xbf}], 0x5, &(0x7f0000007140)=""/185, 0xb9}, 0x9}, {{&(0x7f0000007200)=@hci, 0x80, &(0x7f00000085c0)=[{&(0x7f0000007280)=""/28, 0x1c}, {&(0x7f00000072c0)=""/149, 0x95}, {&(0x7f0000007380)=""/4096, 0x1000}, {&(0x7f0000008380)=""/61, 0x3d}, {&(0x7f00000083c0)=""/231, 0xe7}, {&(0x7f00000084c0)=""/78, 0x4e}, {&(0x7f0000008540)=""/66, 0x42}], 0x7, &(0x7f0000008640)=""/37, 0x25}, 0xe5be}, {{&(0x7f0000008680)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000008a00)=[{&(0x7f0000008700)=""/137, 0x89}, {&(0x7f00000087c0)=""/210, 0xd2}, {&(0x7f00000088c0)=""/41, 0x29}, {&(0x7f0000008900)=""/96, 0x60}, {&(0x7f0000008980)=""/72, 0x48}], 0x5, &(0x7f0000008a80)}, 0x3}], 0x9, 0x20, &(0x7f0000008d00)={0x77359400}) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000008d40)={r2, @local, @multicast1}, 0xc) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:56 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x60) getresuid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)=0x0) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r2, r3) accept$nfc_llcp(r1, &(0x7f0000000140), &(0x7f00000001c0)=0x60) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="1800080000000000000000000080000003000000ffd300c7"], 0x18}}, 0x0) 12:39:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be0") syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2002, 0x0) 12:39:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, 0x0, 0x0) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:39:56 executing program 4 (fault-call:0 fault-nth:46): syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 12:39:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x7ffe, &(0x7f0000001180)="cd2052a8") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000008ac0)=[{{&(0x7f0000000200)=@x25, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)=""/242, 0xf2}, {&(0x7f0000000380)=""/224, 0xe0}, {&(0x7f0000000480)=""/134, 0x86}, {&(0x7f0000000540)=""/171, 0xab}, {&(0x7f00000011c0)=""/4096, 0x1000}], 0x5, &(0x7f0000000680)=""/127, 0x7f}, 0x1}, {{&(0x7f0000000700)=@ax25={{0x3, @rose}, [@null, @rose, @bcast, @bcast, @default, @default, @remote, @rose]}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000780)=""/120, 0x78}, {&(0x7f0000000800)=""/158, 0x9e}, {&(0x7f0000000180)=""/32, 0x20}, {&(0x7f00000008c0)=""/113, 0x71}, {&(0x7f00000021c0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/107, 0x6b}, {&(0x7f00000009c0)=""/9, 0x9}], 0x7, &(0x7f0000000a80)=""/90, 0x5a}, 0x7}, {{&(0x7f0000000b00)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000b80)=""/87, 0x57}, {&(0x7f00000031c0)=""/4096, 0x1000}, {&(0x7f0000000c00)=""/175, 0xaf}], 0x3, &(0x7f0000000d00)=""/90, 0x5a}, 0x3}, {{0x0, 0x0, &(0x7f00000044c0)=[{&(0x7f0000000d80)=""/209, 0xd1}, {&(0x7f0000000e80)=""/195, 0xc3}, {&(0x7f0000001080)=""/204, 0xcc}, {&(0x7f0000000f80)=""/17, 0x11}, {&(0x7f00000041c0)=""/141, 0x8d}, {&(0x7f0000004280)=""/246, 0xf6}, {&(0x7f0000004380)=""/159, 0x9f}, {&(0x7f0000000fc0)=""/29, 0x1d}, {&(0x7f0000004440)=""/88, 0x58}], 0x9}, 0x80000000}, {{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f0000004580)=""/9, 0x9}, {&(0x7f00000045c0)=""/88, 0x58}, {&(0x7f0000004640)=""/99, 0x63}, {&(0x7f00000046c0)=""/18, 0x12}], 0x4}, 0x7}, {{&(0x7f0000004740)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004cc0)=[{&(0x7f00000047c0)=""/211, 0xd3}, {&(0x7f00000048c0)=""/94, 0x5e}, {&(0x7f0000004940)=""/243, 0xf3}, {&(0x7f0000004a40)=""/110, 0x6e}, {&(0x7f0000004ac0)=""/119, 0x77}, {&(0x7f0000004b40)=""/224, 0xe0}, {&(0x7f0000004c40)=""/90, 0x5a}], 0x7, &(0x7f0000004d40)=""/4096, 0x1000}, 0xffffffff}, {{&(0x7f0000005d40)=@xdp, 0x80, &(0x7f00000070c0)=[{&(0x7f0000005dc0)}, {&(0x7f0000005e00)=""/4096, 0x1000}, {&(0x7f0000006e00)=""/208, 0xd0}, {&(0x7f0000006f00)=""/221, 0xdd}, {&(0x7f0000007000)=""/191, 0xbf}], 0x5, &(0x7f0000007140)=""/185, 0xb9}, 0x9}, {{&(0x7f0000007200)=@hci, 0x80, &(0x7f00000085c0)=[{&(0x7f0000007280)=""/28, 0x1c}, {&(0x7f00000072c0)=""/149, 0x95}, {&(0x7f0000007380)=""/4096, 0x1000}, {&(0x7f0000008380)=""/61, 0x3d}, {&(0x7f00000083c0)=""/231, 0xe7}, {&(0x7f00000084c0)=""/78, 0x4e}, {&(0x7f0000008540)=""/66, 0x42}], 0x7, &(0x7f0000008640)=""/37, 0x25}, 0xe5be}, {{&(0x7f0000008680)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000008a00)=[{&(0x7f0000008700)=""/137, 0x89}, {&(0x7f00000087c0)=""/210, 0xd2}, {&(0x7f00000088c0)=""/41, 0x29}, {&(0x7f0000008900)=""/96, 0x60}, {&(0x7f0000008980)=""/72, 0x48}], 0x5, &(0x7f0000008a80)}, 0x3}], 0x9, 0x20, &(0x7f0000008d00)={0x77359400}) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000008d40)={r2, @local, @multicast1}, 0xc) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be0") syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2002, 0x0) [ 411.022892] FAULT_INJECTION: forcing a failure. [ 411.022892] name failslab, interval 1, probability 0, space 0, times 0 [ 411.034326] CPU: 0 PID: 19663 Comm: syz-executor.4 Not tainted 4.14.129 #23 [ 411.041427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 411.041435] Call Trace: [ 411.053839] dump_stack+0x138/0x19c [ 411.057471] should_fail.cold+0x10f/0x159 [ 411.062154] ? __es_tree_search.isra.0+0x15f/0x1c0 [ 411.067102] should_failslab+0xdb/0x130 12:39:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") syz_open_dev$sndctrl(0x0, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2002, 0x0) [ 411.071084] kmem_cache_alloc+0x47/0x780 [ 411.075161] ? ext4_es_can_be_merged+0x16e/0x230 [ 411.079934] __es_insert_extent+0x26c/0xe60 [ 411.084283] ext4_es_insert_extent+0x1f0/0x590 [ 411.088883] ? ext4_es_find_delayed_extent_range+0x960/0x960 [ 411.094714] ext4_map_blocks+0xa03/0x16e0 [ 411.098974] ? ext4_issue_zeroout+0x160/0x160 [ 411.103476] ? __brelse+0x50/0x60 [ 411.106958] ext4_getblk+0xac/0x450 [ 411.106971] ? ext4_iomap_begin+0x8a0/0x8a0 [ 411.106982] ? ext4_free_inode+0x1210/0x1210 [ 411.106993] ext4_bread+0x6e/0x1a0 [ 411.123044] ? ext4_getblk+0x450/0x450 [ 411.127029] ext4_append+0x14b/0x360 [ 411.130755] ext4_mkdir+0x531/0xc20 [ 411.134398] ? ext4_init_dot_dotdot+0x4c0/0x4c0 [ 411.139079] ? security_inode_mkdir+0xd0/0x110 [ 411.143685] vfs_mkdir+0x3ca/0x610 [ 411.147234] SyS_mkdir+0x1b7/0x200 [ 411.150779] ? SyS_mkdirat+0x210/0x210 [ 411.154685] ? do_syscall_64+0x53/0x640 [ 411.158680] ? SyS_mkdirat+0x210/0x210 [ 411.162580] do_syscall_64+0x1e8/0x640 [ 411.166474] ? trace_hardirqs_off_thunk+0x1a/0x1c 12:39:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") syz_open_dev$sndctrl(0x0, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x2002, 0x0) [ 411.171326] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 411.176527] RIP: 0033:0x4586e7 [ 411.179714] RSP: 002b:00007fbd1d1a1a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 411.179726] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000004586e7 [ 411.179731] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 00000000200003c0 [ 411.179739] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 411.194696] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 12:39:56 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x18, 0x2f, 0x119, 0x0, 0x0, {0x3}, [@generic="ffd3"]}, 0x18}}, 0x0) 12:39:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x7ffe, &(0x7f0000001180)="cd2052a8") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000008ac0)=[{{&(0x7f0000000200)=@x25, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)=""/242, 0xf2}, {&(0x7f0000000380)=""/224, 0xe0}, {&(0x7f0000000480)=""/134, 0x86}, {&(0x7f0000000540)=""/171, 0xab}, {&(0x7f00000011c0)=""/4096, 0x1000}], 0x5, &(0x7f0000000680)=""/127, 0x7f}, 0x1}, {{&(0x7f0000000700)=@ax25={{0x3, @rose}, [@null, @rose, @bcast, @bcast, @default, @default, @remote, @rose]}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000780)=""/120, 0x78}, {&(0x7f0000000800)=""/158, 0x9e}, {&(0x7f0000000180)=""/32, 0x20}, {&(0x7f00000008c0)=""/113, 0x71}, {&(0x7f00000021c0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/107, 0x6b}, {&(0x7f00000009c0)=""/9, 0x9}], 0x7, &(0x7f0000000a80)=""/90, 0x5a}, 0x7}, {{&(0x7f0000000b00)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000b80)=""/87, 0x57}, {&(0x7f00000031c0)=""/4096, 0x1000}, {&(0x7f0000000c00)=""/175, 0xaf}], 0x3, &(0x7f0000000d00)=""/90, 0x5a}, 0x3}, {{0x0, 0x0, &(0x7f00000044c0)=[{&(0x7f0000000d80)=""/209, 0xd1}, {&(0x7f0000000e80)=""/195, 0xc3}, {&(0x7f0000001080)=""/204, 0xcc}, {&(0x7f0000000f80)=""/17, 0x11}, {&(0x7f00000041c0)=""/141, 0x8d}, {&(0x7f0000004280)=""/246, 0xf6}, {&(0x7f0000004380)=""/159, 0x9f}, {&(0x7f0000000fc0)=""/29, 0x1d}, {&(0x7f0000004440)=""/88, 0x58}], 0x9}, 0x80000000}, {{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f0000004580)=""/9, 0x9}, {&(0x7f00000045c0)=""/88, 0x58}, {&(0x7f0000004640)=""/99, 0x63}, {&(0x7f00000046c0)=""/18, 0x12}], 0x4}, 0x7}, {{&(0x7f0000004740)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004cc0)=[{&(0x7f00000047c0)=""/211, 0xd3}, {&(0x7f00000048c0)=""/94, 0x5e}, {&(0x7f0000004940)=""/243, 0xf3}, {&(0x7f0000004a40)=""/110, 0x6e}, {&(0x7f0000004ac0)=""/119, 0x77}, {&(0x7f0000004b40)=""/224, 0xe0}, {&(0x7f0000004c40)=""/90, 0x5a}], 0x7, &(0x7f0000004d40)=""/4096, 0x1000}, 0xffffffff}, {{&(0x7f0000005d40)=@xdp, 0x80, &(0x7f00000070c0)=[{&(0x7f0000005dc0)}, {&(0x7f0000005e00)=""/4096, 0x1000}, {&(0x7f0000006e00)=""/208, 0xd0}, {&(0x7f0000006f00)=""/221, 0xdd}, {&(0x7f0000007000)=""/191, 0xbf}], 0x5, &(0x7f0000007140)=""/185, 0xb9}, 0x9}, {{&(0x7f0000007200)=@hci, 0x80, &(0x7f00000085c0)=[{&(0x7f0000007280)=""/28, 0x1c}, {&(0x7f00000072c0)=""/149, 0x95}, {&(0x7f0000007380)=""/4096, 0x1000}, {&(0x7f0000008380)=""/61, 0x3d}, {&(0x7f00000083c0)=""/231, 0xe7}, {&(0x7f00000084c0)=""/78, 0x4e}, {&(0x7f0000008540)=""/66, 0x42}], 0x7, &(0x7f0000008640)=""/37, 0x25}, 0xe5be}, {{&(0x7f0000008680)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000008a00)=[{&(0x7f0000008700)=""/137, 0x89}, {&(0x7f00000087c0)=""/210, 0xd2}, {&(0x7f00000088c0)=""/41, 0x29}, {&(0x7f0000008900)=""/96, 0x60}, {&(0x7f0000008980)=""/72, 0x48}], 0x5, &(0x7f0000008a80)}, 0x3}], 0x9, 0x20, &(0x7f0000008d00)={0x77359400}) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000008d40)={r2, @local, @multicast1}, 0xc) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) [ 411.194703] R13: 00000000004c8220 R14: 00000000004dea68 R15: 0000000000000003 [ 411.212805] gfs2: not a GFS2 filesystem 12:39:56 executing program 4 (fault-call:0 fault-nth:47): syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 411.341129] FAULT_INJECTION: forcing a failure. [ 411.341129] name failslab, interval 1, probability 0, space 0, times 0 [ 411.352804] CPU: 1 PID: 19693 Comm: syz-executor.4 Not tainted 4.14.129 #23 [ 411.362180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 411.371715] Call Trace: [ 411.374326] dump_stack+0x138/0x19c [ 411.377976] should_fail.cold+0x10f/0x159 [ 411.382142] ? __es_tree_search.isra.0+0x15f/0x1c0 [ 411.387087] should_failslab+0xdb/0x130 [ 411.391077] kmem_cache_alloc+0x47/0x780 [ 411.395156] ? ext4_es_can_be_merged+0x16e/0x230 [ 411.399925] __es_insert_extent+0x26c/0xe60 [ 411.404249] ext4_es_insert_extent+0x1f0/0x590 [ 411.408838] ? ext4_es_find_delayed_extent_range+0x960/0x960 [ 411.414650] ext4_map_blocks+0xa03/0x16e0 [ 411.414666] ? ext4_issue_zeroout+0x160/0x160 [ 411.423294] ? __brelse+0x50/0x60 [ 411.426766] ext4_getblk+0xac/0x450 [ 411.430404] ? ext4_iomap_begin+0x8a0/0x8a0 [ 411.434733] ? ext4_free_inode+0x1210/0x1210 [ 411.439156] ext4_bread+0x6e/0x1a0 [ 411.442703] ? ext4_getblk+0x450/0x450 [ 411.446837] ext4_append+0x14b/0x360 [ 411.450555] ext4_mkdir+0x531/0xc20 [ 411.454189] ? ext4_init_dot_dotdot+0x4c0/0x4c0 [ 411.458849] ? security_inode_mkdir+0xd0/0x110 [ 411.463419] vfs_mkdir+0x3ca/0x610 [ 411.466942] SyS_mkdir+0x1b7/0x200 [ 411.470481] ? SyS_mkdirat+0x210/0x210 [ 411.474543] ? do_syscall_64+0x53/0x640 [ 411.478510] ? SyS_mkdirat+0x210/0x210 [ 411.482399] do_syscall_64+0x1e8/0x640 [ 411.486277] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 411.491106] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 411.496323] RIP: 0033:0x4586e7 [ 411.499495] RSP: 002b:00007fbd1d1a1a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 411.507187] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000004586e7 [ 411.514446] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 00000000200003c0 [ 411.521741] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 411.529003] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 411.536255] R13: 00000000004c8220 R14: 00000000004dea68 R15: 0000000000000003 [ 411.546641] gfs2: not a GFS2 filesystem 12:39:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x7ffe, &(0x7f0000001180)="cd2052a8") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000008ac0)=[{{&(0x7f0000000200)=@x25, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)=""/242, 0xf2}, {&(0x7f0000000380)=""/224, 0xe0}, {&(0x7f0000000480)=""/134, 0x86}, {&(0x7f0000000540)=""/171, 0xab}, {&(0x7f00000011c0)=""/4096, 0x1000}], 0x5, &(0x7f0000000680)=""/127, 0x7f}, 0x1}, {{&(0x7f0000000700)=@ax25={{0x3, @rose}, [@null, @rose, @bcast, @bcast, @default, @default, @remote, @rose]}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000780)=""/120, 0x78}, {&(0x7f0000000800)=""/158, 0x9e}, {&(0x7f0000000180)=""/32, 0x20}, {&(0x7f00000008c0)=""/113, 0x71}, {&(0x7f00000021c0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/107, 0x6b}, {&(0x7f00000009c0)=""/9, 0x9}], 0x7, &(0x7f0000000a80)=""/90, 0x5a}, 0x7}, {{&(0x7f0000000b00)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000b80)=""/87, 0x57}, {&(0x7f00000031c0)=""/4096, 0x1000}, {&(0x7f0000000c00)=""/175, 0xaf}], 0x3, &(0x7f0000000d00)=""/90, 0x5a}, 0x3}, {{0x0, 0x0, &(0x7f00000044c0)=[{&(0x7f0000000d80)=""/209, 0xd1}, {&(0x7f0000000e80)=""/195, 0xc3}, {&(0x7f0000001080)=""/204, 0xcc}, {&(0x7f0000000f80)=""/17, 0x11}, {&(0x7f00000041c0)=""/141, 0x8d}, {&(0x7f0000004280)=""/246, 0xf6}, {&(0x7f0000004380)=""/159, 0x9f}, {&(0x7f0000000fc0)=""/29, 0x1d}, {&(0x7f0000004440)=""/88, 0x58}], 0x9}, 0x80000000}, {{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f0000004580)=""/9, 0x9}, {&(0x7f00000045c0)=""/88, 0x58}, {&(0x7f0000004640)=""/99, 0x63}, {&(0x7f00000046c0)=""/18, 0x12}], 0x4}, 0x7}, {{&(0x7f0000004740)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004cc0)=[{&(0x7f00000047c0)=""/211, 0xd3}, {&(0x7f00000048c0)=""/94, 0x5e}, {&(0x7f0000004940)=""/243, 0xf3}, {&(0x7f0000004a40)=""/110, 0x6e}, {&(0x7f0000004ac0)=""/119, 0x77}, {&(0x7f0000004b40)=""/224, 0xe0}, {&(0x7f0000004c40)=""/90, 0x5a}], 0x7, &(0x7f0000004d40)=""/4096, 0x1000}, 0xffffffff}, {{&(0x7f0000005d40)=@xdp, 0x80, &(0x7f00000070c0)=[{&(0x7f0000005dc0)}, {&(0x7f0000005e00)=""/4096, 0x1000}, {&(0x7f0000006e00)=""/208, 0xd0}, {&(0x7f0000006f00)=""/221, 0xdd}, {&(0x7f0000007000)=""/191, 0xbf}], 0x5, &(0x7f0000007140)=""/185, 0xb9}, 0x9}, {{&(0x7f0000007200)=@hci, 0x80, &(0x7f00000085c0)=[{&(0x7f0000007280)=""/28, 0x1c}, {&(0x7f00000072c0)=""/149, 0x95}, {&(0x7f0000007380)=""/4096, 0x1000}, {&(0x7f0000008380)=""/61, 0x3d}, {&(0x7f00000083c0)=""/231, 0xe7}, {&(0x7f00000084c0)=""/78, 0x4e}, {&(0x7f0000008540)=""/66, 0x42}], 0x7, &(0x7f0000008640)=""/37, 0x25}, 0xe5be}, {{&(0x7f0000008680)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000008a00)=[{&(0x7f0000008700)=""/137, 0x89}, {&(0x7f00000087c0)=""/210, 0xd2}, {&(0x7f00000088c0)=""/41, 0x29}, {&(0x7f0000008900)=""/96, 0x60}, {&(0x7f0000008980)=""/72, 0x48}], 0x5, &(0x7f0000008a80)}, 0x3}], 0x9, 0x20, &(0x7f0000008d00)={0x77359400}) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000008d40)={r2, @local, @multicast1}, 0xc) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:56 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000032090000000000000000000003000000ffd3000053e3be3faaded4e300ebbc3b81f474"], 0x18}}, 0x0) 12:39:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") syz_open_dev$sndctrl(0x0, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x2002, 0x0) 12:39:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, 0x0, 0x0) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:39:56 executing program 4 (fault-call:0 fault-nth:48): syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 411.848623] FAULT_INJECTION: forcing a failure. [ 411.848623] name failslab, interval 1, probability 0, space 0, times 0 [ 411.888943] CPU: 0 PID: 19708 Comm: syz-executor.4 Not tainted 4.14.129 #23 [ 411.896109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 411.905461] Call Trace: [ 411.905485] dump_stack+0x138/0x19c [ 411.905503] should_fail.cold+0x10f/0x159 [ 411.905520] should_failslab+0xdb/0x130 [ 411.911744] __kmalloc_track_caller+0x2ec/0x790 [ 411.911763] ? strndup_user+0x62/0xf0 [ 411.911774] memdup_user+0x26/0xa0 [ 411.911784] strndup_user+0x62/0xf0 [ 411.911800] SyS_mount+0x3c/0x120 12:39:57 executing program 5: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004020000000000"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x4, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00', 0x5, 0xba, &(0x7f00000001c0)=""/186, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000140), 0x100000}, 0x70) 12:39:57 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) read$alg(r1, &(0x7f0000000100)=""/195, 0x27c) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004020000000000abff5e508704213dfe3ea9d1b96b2d07bba0c9c01ce619e28747252fcd18f560"], 0x0, 0x46}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x4, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00', 0x5, 0xba, &(0x7f00000001c0)=""/186, 0x0, 0x0, [], 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000140)={0x1}, 0x10}, 0x70) 12:39:57 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/111, 0x6f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) readv(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/64, 0x40}, {0x0}], 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r5, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r4, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r5, 0x0) shutdown(r2, 0x0) 12:39:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") syz_open_dev$sndctrl(0x0, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x2002, 0x0) [ 411.911809] ? copy_mnt_ns+0x8c0/0x8c0 [ 411.943196] do_syscall_64+0x1e8/0x640 [ 411.947102] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 411.951968] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 411.957251] RIP: 0033:0x45bd1a [ 411.960454] RSP: 002b:00007fbd1d1a1a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 411.968184] RAX: ffffffffffffffda RBX: 00007fbd1d1a1b40 RCX: 000000000045bd1a [ 411.975465] RDX: 00007fbd1d1a1ae0 RSI: 00000000200003c0 RDI: 00007fbd1d1a1b00 12:39:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") syz_open_dev$sndctrl(0x0, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) [ 411.982818] RBP: 0000000000000000 R08: 00007fbd1d1a1b40 R09: 00007fbd1d1a1ae0 [ 411.982824] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 411.982830] R13: 00000000004c8220 R14: 00000000004dea68 R15: 0000000000000003 12:39:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x7ffe, &(0x7f0000001180)="cd2052a8") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000008ac0)=[{{&(0x7f0000000200)=@x25, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)=""/242, 0xf2}, {&(0x7f0000000380)=""/224, 0xe0}, {&(0x7f0000000480)=""/134, 0x86}, {&(0x7f0000000540)=""/171, 0xab}, {&(0x7f00000011c0)=""/4096, 0x1000}], 0x5, &(0x7f0000000680)=""/127, 0x7f}, 0x1}, {{&(0x7f0000000700)=@ax25={{0x3, @rose}, [@null, @rose, @bcast, @bcast, @default, @default, @remote, @rose]}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000780)=""/120, 0x78}, {&(0x7f0000000800)=""/158, 0x9e}, {&(0x7f0000000180)=""/32, 0x20}, {&(0x7f00000008c0)=""/113, 0x71}, {&(0x7f00000021c0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/107, 0x6b}, {&(0x7f00000009c0)=""/9, 0x9}], 0x7, &(0x7f0000000a80)=""/90, 0x5a}, 0x7}, {{&(0x7f0000000b00)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000b80)=""/87, 0x57}, {&(0x7f00000031c0)=""/4096, 0x1000}, {&(0x7f0000000c00)=""/175, 0xaf}], 0x3, &(0x7f0000000d00)=""/90, 0x5a}, 0x3}, {{0x0, 0x0, &(0x7f00000044c0)=[{&(0x7f0000000d80)=""/209, 0xd1}, {&(0x7f0000000e80)=""/195, 0xc3}, {&(0x7f0000001080)=""/204, 0xcc}, {&(0x7f0000000f80)=""/17, 0x11}, {&(0x7f00000041c0)=""/141, 0x8d}, {&(0x7f0000004280)=""/246, 0xf6}, {&(0x7f0000004380)=""/159, 0x9f}, {&(0x7f0000000fc0)=""/29, 0x1d}, {&(0x7f0000004440)=""/88, 0x58}], 0x9}, 0x80000000}, {{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f0000004580)=""/9, 0x9}, {&(0x7f00000045c0)=""/88, 0x58}, {&(0x7f0000004640)=""/99, 0x63}, {&(0x7f00000046c0)=""/18, 0x12}], 0x4}, 0x7}, {{&(0x7f0000004740)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004cc0)=[{&(0x7f00000047c0)=""/211, 0xd3}, {&(0x7f00000048c0)=""/94, 0x5e}, {&(0x7f0000004940)=""/243, 0xf3}, {&(0x7f0000004a40)=""/110, 0x6e}, {&(0x7f0000004ac0)=""/119, 0x77}, {&(0x7f0000004b40)=""/224, 0xe0}, {&(0x7f0000004c40)=""/90, 0x5a}], 0x7, &(0x7f0000004d40)=""/4096, 0x1000}, 0xffffffff}, {{&(0x7f0000005d40)=@xdp, 0x80, &(0x7f00000070c0)=[{&(0x7f0000005dc0)}, {&(0x7f0000005e00)=""/4096, 0x1000}, {&(0x7f0000006e00)=""/208, 0xd0}, {&(0x7f0000006f00)=""/221, 0xdd}, {&(0x7f0000007000)=""/191, 0xbf}], 0x5, &(0x7f0000007140)=""/185, 0xb9}, 0x9}, {{&(0x7f0000007200)=@hci, 0x80, &(0x7f00000085c0)=[{&(0x7f0000007280)=""/28, 0x1c}, {&(0x7f00000072c0)=""/149, 0x95}, {&(0x7f0000007380)=""/4096, 0x1000}, {&(0x7f0000008380)=""/61, 0x3d}, {&(0x7f00000083c0)=""/231, 0xe7}, {&(0x7f00000084c0)=""/78, 0x4e}, {&(0x7f0000008540)=""/66, 0x42}], 0x7, &(0x7f0000008640)=""/37, 0x25}, 0xe5be}, {{&(0x7f0000008680)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000008a00)=[{&(0x7f0000008700)=""/137, 0x89}, {&(0x7f00000087c0)=""/210, 0xd2}, {&(0x7f00000088c0)=""/41, 0x29}, {&(0x7f0000008900)=""/96, 0x60}, {&(0x7f0000008980)=""/72, 0x48}], 0x5, &(0x7f0000008a80)}, 0x3}], 0x9, 0x20, &(0x7f0000008d00)={0x77359400}) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000008d40)={r2, @local, @multicast1}, 0xc) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) 12:39:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, 0x0, 0x0) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:39:57 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x7ffe, &(0x7f0000001180)="cd2052a8") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000008ac0)=[{{&(0x7f0000000200)=@x25, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)=""/242, 0xf2}, {&(0x7f0000000380)=""/224, 0xe0}, {&(0x7f0000000480)=""/134, 0x86}, {&(0x7f0000000540)=""/171, 0xab}, {&(0x7f00000011c0)=""/4096, 0x1000}], 0x5, &(0x7f0000000680)=""/127, 0x7f}, 0x1}, {{&(0x7f0000000700)=@ax25={{0x3, @rose}, [@null, @rose, @bcast, @bcast, @default, @default, @remote, @rose]}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000780)=""/120, 0x78}, {&(0x7f0000000800)=""/158, 0x9e}, {&(0x7f0000000180)=""/32, 0x20}, {&(0x7f00000008c0)=""/113, 0x71}, {&(0x7f00000021c0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/107, 0x6b}, {&(0x7f00000009c0)=""/9, 0x9}], 0x7, &(0x7f0000000a80)=""/90, 0x5a}, 0x7}, {{&(0x7f0000000b00)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000b80)=""/87, 0x57}, {&(0x7f00000031c0)=""/4096, 0x1000}, {&(0x7f0000000c00)=""/175, 0xaf}], 0x3, &(0x7f0000000d00)=""/90, 0x5a}, 0x3}, {{0x0, 0x0, &(0x7f00000044c0)=[{&(0x7f0000000d80)=""/209, 0xd1}, {&(0x7f0000000e80)=""/195, 0xc3}, {&(0x7f0000001080)=""/204, 0xcc}, {&(0x7f0000000f80)=""/17, 0x11}, {&(0x7f00000041c0)=""/141, 0x8d}, {&(0x7f0000004280)=""/246, 0xf6}, {&(0x7f0000004380)=""/159, 0x9f}, {&(0x7f0000000fc0)=""/29, 0x1d}, {&(0x7f0000004440)=""/88, 0x58}], 0x9}, 0x80000000}, {{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f0000004580)=""/9, 0x9}, {&(0x7f00000045c0)=""/88, 0x58}, {&(0x7f0000004640)=""/99, 0x63}, {&(0x7f00000046c0)=""/18, 0x12}], 0x4}, 0x7}, {{&(0x7f0000004740)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004cc0)=[{&(0x7f00000047c0)=""/211, 0xd3}, {&(0x7f00000048c0)=""/94, 0x5e}, {&(0x7f0000004940)=""/243, 0xf3}, {&(0x7f0000004a40)=""/110, 0x6e}, {&(0x7f0000004ac0)=""/119, 0x77}, {&(0x7f0000004b40)=""/224, 0xe0}, {&(0x7f0000004c40)=""/90, 0x5a}], 0x7, &(0x7f0000004d40)=""/4096, 0x1000}, 0xffffffff}, {{&(0x7f0000005d40)=@xdp, 0x80, &(0x7f00000070c0)=[{&(0x7f0000005dc0)}, {&(0x7f0000005e00)=""/4096, 0x1000}, {&(0x7f0000006e00)=""/208, 0xd0}, {&(0x7f0000006f00)=""/221, 0xdd}, {&(0x7f0000007000)=""/191, 0xbf}], 0x5, &(0x7f0000007140)=""/185, 0xb9}, 0x9}, {{&(0x7f0000007200)=@hci, 0x80, &(0x7f00000085c0)=[{&(0x7f0000007280)=""/28, 0x1c}, {&(0x7f00000072c0)=""/149, 0x95}, {&(0x7f0000007380)=""/4096, 0x1000}, {&(0x7f0000008380)=""/61, 0x3d}, {&(0x7f00000083c0)=""/231, 0xe7}, {&(0x7f00000084c0)=""/78, 0x4e}, {&(0x7f0000008540)=""/66, 0x42}], 0x7, &(0x7f0000008640)=""/37, 0x25}, 0xe5be}, {{&(0x7f0000008680)=@hci, 0x80, &(0x7f0000008a00)=[{&(0x7f0000008700)=""/137, 0x89}, {&(0x7f00000087c0)=""/210, 0xd2}, {&(0x7f00000088c0)=""/41, 0x29}, {&(0x7f0000008900)=""/96, 0x60}, {&(0x7f0000008980)=""/72, 0x48}], 0x5, &(0x7f0000008a80)}, 0x3}], 0x9, 0x20, &(0x7f0000008d00)={0x77359400}) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:57 executing program 4 (fault-call:0 fault-nth:49): syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 12:39:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") syz_open_dev$sndctrl(0x0, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) 12:39:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0), 0x0) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:39:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") syz_open_dev$sndctrl(0x0, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) [ 412.721633] FAULT_INJECTION: forcing a failure. [ 412.721633] name failslab, interval 1, probability 0, space 0, times 0 12:39:57 executing program 2: 12:39:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0), 0x0) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) [ 412.794115] CPU: 0 PID: 19752 Comm: syz-executor.4 Not tainted 4.14.129 #23 [ 412.801289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 412.810783] Call Trace: [ 412.813391] dump_stack+0x138/0x19c [ 412.817067] should_fail.cold+0x10f/0x159 [ 412.821248] should_failslab+0xdb/0x130 [ 412.825278] __kmalloc_track_caller+0x2ec/0x790 [ 412.829989] ? kasan_check_write+0x14/0x20 [ 412.834237] ? strndup_user+0x62/0xf0 [ 412.838051] memdup_user+0x26/0xa0 [ 412.841606] strndup_user+0x62/0xf0 [ 412.845247] SyS_mount+0x6b/0x120 [ 412.848708] ? copy_mnt_ns+0x8c0/0x8c0 [ 412.852607] do_syscall_64+0x1e8/0x640 [ 412.856521] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 412.861385] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 412.866579] RIP: 0033:0x45bd1a [ 412.869764] RSP: 002b:00007fbd1d1a1a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 412.877472] RAX: ffffffffffffffda RBX: 00007fbd1d1a1b40 RCX: 000000000045bd1a [ 412.884733] RDX: 00007fbd1d1a1ae0 RSI: 00000000200003c0 RDI: 00007fbd1d1a1b00 [ 412.891993] RBP: 0000000000000000 R08: 00007fbd1d1a1b40 R09: 00007fbd1d1a1ae0 [ 412.899248] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 412.906519] R13: 00000000004c8220 R14: 00000000004dea68 R15: 0000000000000003 12:39:58 executing program 5: 12:39:58 executing program 2: 12:39:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x7ffe, &(0x7f0000001180)="cd2052a8") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000008ac0)=[{{&(0x7f0000000200)=@x25, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)=""/242, 0xf2}, {&(0x7f0000000380)=""/224, 0xe0}, {&(0x7f0000000480)=""/134, 0x86}, {&(0x7f0000000540)=""/171, 0xab}, {&(0x7f00000011c0)=""/4096, 0x1000}], 0x5, &(0x7f0000000680)=""/127, 0x7f}, 0x1}, {{&(0x7f0000000700)=@ax25={{0x3, @rose}, [@null, @rose, @bcast, @bcast, @default, @default, @remote, @rose]}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000780)=""/120, 0x78}, {&(0x7f0000000800)=""/158, 0x9e}, {&(0x7f0000000180)=""/32, 0x20}, {&(0x7f00000008c0)=""/113, 0x71}, {&(0x7f00000021c0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/107, 0x6b}, {&(0x7f00000009c0)=""/9, 0x9}], 0x7, &(0x7f0000000a80)=""/90, 0x5a}, 0x7}, {{&(0x7f0000000b00)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000b80)=""/87, 0x57}, {&(0x7f00000031c0)=""/4096, 0x1000}, {&(0x7f0000000c00)=""/175, 0xaf}], 0x3, &(0x7f0000000d00)=""/90, 0x5a}, 0x3}, {{0x0, 0x0, &(0x7f00000044c0)=[{&(0x7f0000000d80)=""/209, 0xd1}, {&(0x7f0000000e80)=""/195, 0xc3}, {&(0x7f0000001080)=""/204, 0xcc}, {&(0x7f0000000f80)=""/17, 0x11}, {&(0x7f00000041c0)=""/141, 0x8d}, {&(0x7f0000004280)=""/246, 0xf6}, {&(0x7f0000004380)=""/159, 0x9f}, {&(0x7f0000000fc0)=""/29, 0x1d}, {&(0x7f0000004440)=""/88, 0x58}], 0x9}, 0x80000000}, {{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f0000004580)=""/9, 0x9}, {&(0x7f00000045c0)=""/88, 0x58}, {&(0x7f0000004640)=""/99, 0x63}, {&(0x7f00000046c0)=""/18, 0x12}], 0x4}, 0x7}, {{&(0x7f0000004740)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004cc0)=[{&(0x7f00000047c0)=""/211, 0xd3}, {&(0x7f00000048c0)=""/94, 0x5e}, {&(0x7f0000004940)=""/243, 0xf3}, {&(0x7f0000004a40)=""/110, 0x6e}, {&(0x7f0000004ac0)=""/119, 0x77}, {&(0x7f0000004b40)=""/224, 0xe0}, {&(0x7f0000004c40)=""/90, 0x5a}], 0x7, &(0x7f0000004d40)=""/4096, 0x1000}, 0xffffffff}, {{&(0x7f0000005d40)=@xdp, 0x80, &(0x7f00000070c0)=[{&(0x7f0000005dc0)}, {&(0x7f0000005e00)=""/4096, 0x1000}, {&(0x7f0000006e00)=""/208, 0xd0}, {&(0x7f0000006f00)=""/221, 0xdd}, {&(0x7f0000007000)=""/191, 0xbf}], 0x5, &(0x7f0000007140)=""/185, 0xb9}, 0x9}, {{&(0x7f0000007200)=@hci, 0x80, &(0x7f00000085c0)=[{&(0x7f0000007280)=""/28, 0x1c}, {&(0x7f00000072c0)=""/149, 0x95}, {&(0x7f0000007380)=""/4096, 0x1000}, {&(0x7f0000008380)=""/61, 0x3d}, {&(0x7f00000083c0)=""/231, 0xe7}, {&(0x7f00000084c0)=""/78, 0x4e}, {&(0x7f0000008540)=""/66, 0x42}], 0x7, &(0x7f0000008640)=""/37, 0x25}, 0xe5be}, {{&(0x7f0000008680)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000008a00)=[{&(0x7f0000008700)=""/137, 0x89}, {&(0x7f00000087c0)=""/210, 0xd2}, {&(0x7f00000088c0)=""/41, 0x29}, {&(0x7f0000008900)=""/96, 0x60}, {&(0x7f0000008980)=""/72, 0x48}], 0x5, &(0x7f0000008a80)}, 0x3}], 0x9, 0x20, &(0x7f0000008d00)={0x77359400}) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000008d40)={r2, @local, @multicast1}, 0xc) 12:39:58 executing program 4 (fault-call:0 fault-nth:50): syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 12:39:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0), 0x0) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) [ 413.118768] FAULT_INJECTION: forcing a failure. [ 413.118768] name failslab, interval 1, probability 0, space 0, times 0 [ 413.144584] CPU: 0 PID: 19777 Comm: syz-executor.4 Not tainted 4.14.129 #23 [ 413.151741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 413.151747] Call Trace: [ 413.151767] dump_stack+0x138/0x19c [ 413.151788] should_fail.cold+0x10f/0x159 [ 413.151804] should_failslab+0xdb/0x130 [ 413.151815] kmem_cache_alloc_trace+0x2e9/0x790 [ 413.151824] ? kasan_check_write+0x14/0x20 [ 413.151833] ? _copy_from_user+0x99/0x110 [ 413.151848] copy_mount_options+0x5c/0x2f0 [ 413.186470] SyS_mount+0x87/0x120 [ 413.186483] ? copy_mnt_ns+0x8c0/0x8c0 [ 413.186498] do_syscall_64+0x1e8/0x640 [ 413.195225] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 413.195243] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 413.195251] RIP: 0033:0x45bd1a [ 413.195257] RSP: 002b:00007fbd1d1a1a88 EFLAGS: 00000206 [ 413.202565] ORIG_RAX: 00000000000000a5 [ 413.202571] RAX: ffffffffffffffda RBX: 00007fbd1d1a1b40 RCX: 000000000045bd1a [ 413.202577] RDX: 00007fbd1d1a1ae0 RSI: 00000000200003c0 RDI: 00007fbd1d1a1b00 [ 413.202583] RBP: 0000000000000000 R08: 00007fbd1d1a1b40 R09: 00007fbd1d1a1ae0 [ 413.202589] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 413.202594] R13: 00000000004c8220 R14: 00000000004dea68 R15: 0000000000000003 12:39:58 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x7ffe, &(0x7f0000001180)="cd2052a8") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:58 executing program 5: 12:39:58 executing program 2: 12:39:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d607", 0x17) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:39:58 executing program 4 (fault-call:0 fault-nth:51): syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 12:39:58 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x7ffe, &(0x7f0000001180)="cd2052a8") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:58 executing program 2: 12:39:58 executing program 5: [ 413.620851] FAULT_INJECTION: forcing a failure. [ 413.620851] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 413.632728] CPU: 1 PID: 19795 Comm: syz-executor.4 Not tainted 4.14.129 #23 [ 413.640114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 413.649476] Call Trace: [ 413.649499] dump_stack+0x138/0x19c [ 413.649517] should_fail.cold+0x10f/0x159 [ 413.659994] __alloc_pages_nodemask+0x1d6/0x7a0 [ 413.664689] ? fs_reclaim_acquire+0x20/0x20 12:39:58 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x7ffe, &(0x7f0000001180)="cd2052a8") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) [ 413.669028] ? __alloc_pages_slowpath+0x2930/0x2930 [ 413.674075] cache_grow_begin+0x80/0x400 [ 413.678152] kmem_cache_alloc_trace+0x6b2/0x790 [ 413.678166] ? kasan_check_write+0x14/0x20 [ 413.678184] copy_mount_options+0x5c/0x2f0 [ 413.678195] SyS_mount+0x87/0x120 [ 413.694968] ? copy_mnt_ns+0x8c0/0x8c0 [ 413.698878] do_syscall_64+0x1e8/0x640 [ 413.702783] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 413.707639] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 413.707649] RIP: 0033:0x45bd1a [ 413.707655] RSP: 002b:00007fbd1d1a1a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 413.707665] RAX: ffffffffffffffda RBX: 00007fbd1d1a1b40 RCX: 000000000045bd1a [ 413.707673] RDX: 00007fbd1d1a1ae0 RSI: 00000000200003c0 RDI: 00007fbd1d1a1b00 [ 413.716134] RBP: 0000000000000000 R08: 00007fbd1d1a1b40 R09: 00007fbd1d1a1ae0 [ 413.716140] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 413.716146] R13: 00000000004c8220 R14: 00000000004dea68 R15: 0000000000000003 [ 413.758793] gfs2: not a GFS2 filesystem 12:39:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x7ffe, &(0x7f0000001180)="cd2052a8") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000008ac0)=[{{&(0x7f0000000200)=@x25, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)=""/242, 0xf2}, {&(0x7f0000000380)=""/224, 0xe0}, {&(0x7f0000000480)=""/134, 0x86}, {&(0x7f0000000540)=""/171, 0xab}, {&(0x7f00000011c0)=""/4096, 0x1000}], 0x5, &(0x7f0000000680)=""/127, 0x7f}, 0x1}, {{&(0x7f0000000700)=@ax25={{0x3, @rose}, [@null, @rose, @bcast, @bcast, @default, @default, @remote, @rose]}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000780)=""/120, 0x78}, {&(0x7f0000000800)=""/158, 0x9e}, {&(0x7f0000000180)=""/32, 0x20}, {&(0x7f00000008c0)=""/113, 0x71}, {&(0x7f00000021c0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/107, 0x6b}, {&(0x7f00000009c0)=""/9, 0x9}], 0x7, &(0x7f0000000a80)=""/90, 0x5a}, 0x7}, {{&(0x7f0000000b00)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000b80)=""/87, 0x57}, {&(0x7f00000031c0)=""/4096, 0x1000}, {&(0x7f0000000c00)=""/175, 0xaf}], 0x3, &(0x7f0000000d00)=""/90, 0x5a}, 0x3}, {{0x0, 0x0, &(0x7f00000044c0)=[{&(0x7f0000000d80)=""/209, 0xd1}, {&(0x7f0000000e80)=""/195, 0xc3}, {&(0x7f0000001080)=""/204, 0xcc}, {&(0x7f0000000f80)=""/17, 0x11}, {&(0x7f00000041c0)=""/141, 0x8d}, {&(0x7f0000004280)=""/246, 0xf6}, {&(0x7f0000004380)=""/159, 0x9f}, {&(0x7f0000000fc0)=""/29, 0x1d}, {&(0x7f0000004440)=""/88, 0x58}], 0x9}, 0x80000000}, {{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f0000004580)=""/9, 0x9}, {&(0x7f00000045c0)=""/88, 0x58}, {&(0x7f0000004640)=""/99, 0x63}, {&(0x7f00000046c0)=""/18, 0x12}], 0x4}, 0x7}, {{&(0x7f0000004740)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004cc0)=[{&(0x7f00000047c0)=""/211, 0xd3}, {&(0x7f00000048c0)=""/94, 0x5e}, {&(0x7f0000004940)=""/243, 0xf3}, {&(0x7f0000004a40)=""/110, 0x6e}, {&(0x7f0000004ac0)=""/119, 0x77}, {&(0x7f0000004b40)=""/224, 0xe0}, {&(0x7f0000004c40)=""/90, 0x5a}], 0x7, &(0x7f0000004d40)=""/4096, 0x1000}, 0xffffffff}, {{&(0x7f0000005d40)=@xdp, 0x80, &(0x7f00000070c0)=[{&(0x7f0000005dc0)}, {&(0x7f0000005e00)=""/4096, 0x1000}, {&(0x7f0000006e00)=""/208, 0xd0}, {&(0x7f0000006f00)=""/221, 0xdd}, {&(0x7f0000007000)=""/191, 0xbf}], 0x5, &(0x7f0000007140)=""/185, 0xb9}, 0x9}, {{&(0x7f0000007200)=@hci, 0x80, &(0x7f00000085c0)=[{&(0x7f0000007280)=""/28, 0x1c}, {&(0x7f00000072c0)=""/149, 0x95}, {&(0x7f0000007380)=""/4096, 0x1000}, {&(0x7f0000008380)=""/61, 0x3d}, {&(0x7f00000083c0)=""/231, 0xe7}, {&(0x7f00000084c0)=""/78, 0x4e}, {&(0x7f0000008540)=""/66, 0x42}], 0x7, &(0x7f0000008640)=""/37, 0x25}, 0xe5be}, {{&(0x7f0000008680)=@hci, 0x80, &(0x7f0000008a00)=[{&(0x7f0000008700)=""/137, 0x89}, {&(0x7f00000087c0)=""/210, 0xd2}, {&(0x7f00000088c0)=""/41, 0x29}, {&(0x7f0000008900)=""/96, 0x60}, {&(0x7f0000008980)=""/72, 0x48}], 0x5, &(0x7f0000008a80)}, 0x3}], 0x9, 0x20, &(0x7f0000008d00)={0x77359400}) 12:39:59 executing program 2: 12:39:59 executing program 5: 12:39:59 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x7ffe, &(0x7f0000001180)="cd2052a8") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d607", 0x17) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:39:59 executing program 4 (fault-call:0 fault-nth:52): syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 12:39:59 executing program 5: 12:39:59 executing program 2: 12:39:59 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x7ffe, &(0x7f0000001180)="cd2052a8") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:39:59 executing program 2: [ 413.955153] FAULT_INJECTION: forcing a failure. [ 413.955153] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 413.967017] CPU: 0 PID: 19820 Comm: syz-executor.4 Not tainted 4.14.129 #23 [ 413.974135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 413.983501] Call Trace: [ 413.986110] dump_stack+0x138/0x19c [ 413.989763] should_fail.cold+0x10f/0x159 [ 413.993931] __alloc_pages_nodemask+0x1d6/0x7a0 [ 413.999064] ? fs_reclaim_acquire+0x20/0x20 12:39:59 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = dup(0xffffffffffffffff) name_to_handle_at(r0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=ANY=[], &(0x7f0000000240), 0x400) 12:39:59 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x7ffe, &(0x7f0000001180)="cd2052a8") perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0xc1105511, &(0x7f0000001000)) [ 414.003404] ? __alloc_pages_slowpath+0x2930/0x2930 [ 414.008457] cache_grow_begin+0x80/0x400 [ 414.012625] kmem_cache_alloc_trace+0x6b2/0x790 [ 414.018107] ? kasan_check_write+0x14/0x20 [ 414.022533] copy_mount_options+0x5c/0x2f0 [ 414.028092] SyS_mount+0x87/0x120 [ 414.031553] ? copy_mnt_ns+0x8c0/0x8c0 [ 414.035479] do_syscall_64+0x1e8/0x640 [ 414.039377] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 414.044237] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 414.049437] RIP: 0033:0x45bd1a [ 414.052638] RSP: 002b:00007fbd1d1a1a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 414.062928] RAX: ffffffffffffffda RBX: 00007fbd1d1a1b40 RCX: 000000000045bd1a [ 414.070350] RDX: 00007fbd1d1a1ae0 RSI: 00000000200003c0 RDI: 00007fbd1d1a1b00 [ 414.077711] RBP: 0000000000000000 R08: 00007fbd1d1a1b40 R09: 00007fbd1d1a1ae0 [ 414.085078] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 414.092796] R13: 00000000004c8220 R14: 00000000004dea68 R15: 0000000000000003 [ 414.157883] gfs2: not a GFS2 filesystem 12:39:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x7ffe, &(0x7f0000001180)="cd2052a8") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:39:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d607", 0x17) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:39:59 executing program 5: r0 = socket(0x800800000000011, 0x3, 0x81) bind(r0, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendmmsg$alg(r0, &(0x7f0000001240)=[{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000001080)="354938aa8314cd1d3902ab611162", 0xe}], 0x1, 0x0, 0x0, 0x4000041}], 0x1, 0x8800) 12:39:59 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x7ffe, &(0x7f0000001180)="cd2052a8") perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0xc1105511, &(0x7f0000001000)) 12:39:59 executing program 4 (fault-call:0 fault-nth:53): syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 12:39:59 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, 0x0) sendmmsg$inet(r0, &(0x7f0000000b40), 0x0, 0x40) [ 414.785583] FAULT_INJECTION: forcing a failure. [ 414.785583] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 414.799208] CPU: 1 PID: 19858 Comm: syz-executor.4 Not tainted 4.14.129 #23 [ 414.807812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 414.817794] Call Trace: [ 414.820447] dump_stack+0x138/0x19c [ 414.824115] should_fail.cold+0x10f/0x159 [ 414.828307] __alloc_pages_nodemask+0x1d6/0x7a0 12:39:59 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x7ffe, &(0x7f0000001180)="cd2052a8") perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0xc1105511, &(0x7f0000001000)) 12:39:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x7ffe, &(0x7f0000001180)="cd2052a8") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) 12:39:59 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105511, &(0x7f0000001000)) 12:40:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x7ffe, &(0x7f0000001180)="cd2052a8") ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) [ 414.833262] ? fs_reclaim_acquire+0x20/0x20 [ 414.837726] ? __alloc_pages_slowpath+0x2930/0x2930 [ 414.842791] cache_grow_begin+0x80/0x400 [ 414.846884] kmem_cache_alloc+0x6a6/0x780 [ 414.851074] ? cache_grow_end.part.0+0x92/0x160 [ 414.855904] getname_flags+0xcb/0x580 [ 414.859720] ? lock_downgrade+0x6e0/0x6e0 [ 414.863873] user_path_at_empty+0x2f/0x50 [ 414.863890] do_mount+0x12b/0x27d0 [ 414.863900] ? copy_mount_options+0x5c/0x2f0 [ 414.863916] ? rcu_read_lock_sched_held+0x110/0x130 [ 414.884641] ? copy_mount_string+0x40/0x40 [ 414.889023] ? copy_mount_options+0x1fe/0x2f0 [ 414.893714] SyS_mount+0xab/0x120 [ 414.897319] ? copy_mnt_ns+0x8c0/0x8c0 [ 414.897336] do_syscall_64+0x1e8/0x640 [ 414.897345] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 414.897360] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 414.917901] RIP: 0033:0x45bd1a [ 414.926336] RSP: 002b:00007fbd1d1a1a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 12:40:00 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105511, &(0x7f0000001000)) 12:40:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, 0x0, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r5, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r5, 0x2007fff) sendfile(r3, r5, 0x0, 0x87ff7) [ 414.934945] RAX: ffffffffffffffda RBX: 00007fbd1d1a1b40 RCX: 000000000045bd1a [ 414.942207] RDX: 00007fbd1d1a1ae0 RSI: 00000000200003c0 RDI: 00007fbd1d1a1b00 [ 414.949474] RBP: 0000000000000000 R08: 00007fbd1d1a1b40 R09: 00007fbd1d1a1ae0 [ 414.956993] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 414.964247] R13: 00000000004c8220 R14: 00000000004dea68 R15: 0000000000000003 12:40:00 executing program 3: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105511, &(0x7f0000001000)) [ 415.118383] gfs2: not a GFS2 filesystem 12:40:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5", 0x22) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:40:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x7ffe, &(0x7f0000001180)="cd2052a8") ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) 12:40:00 executing program 3: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105511, &(0x7f0000001000)) 12:40:00 executing program 4 (fault-call:0 fault-nth:54): syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 12:40:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:40:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x7ffe, &(0x7f0000001180)="cd2052a8") ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) 12:40:00 executing program 3: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105511, &(0x7f0000001000)) [ 415.330464] FAULT_INJECTION: forcing a failure. [ 415.330464] name failslab, interval 1, probability 0, space 0, times 0 12:40:00 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) 12:40:00 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105511, &(0x7f0000001000)) [ 415.447733] CPU: 0 PID: 19904 Comm: syz-executor.4 Not tainted 4.14.129 #23 [ 415.454902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 415.464285] Call Trace: [ 415.466899] dump_stack+0x138/0x19c [ 415.470544] should_fail.cold+0x10f/0x159 [ 415.474710] should_failslab+0xdb/0x130 [ 415.478727] kmem_cache_alloc+0x2d7/0x780 [ 415.482889] ? lock_downgrade+0x6e0/0x6e0 [ 415.487054] alloc_vfsmnt+0x28/0x7d0 [ 415.490787] vfs_kern_mount.part.0+0x2a/0x3d0 12:40:00 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) [ 415.495296] do_mount+0x417/0x27d0 [ 415.498844] ? copy_mount_options+0x5c/0x2f0 [ 415.503256] ? rcu_read_lock_sched_held+0x110/0x130 [ 415.508289] ? copy_mount_string+0x40/0x40 [ 415.512541] ? copy_mount_options+0x1fe/0x2f0 [ 415.517050] SyS_mount+0xab/0x120 [ 415.522507] ? copy_mnt_ns+0x8c0/0x8c0 [ 415.526408] do_syscall_64+0x1e8/0x640 [ 415.530311] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 415.535163] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 415.535171] RIP: 0033:0x45bd1a 12:40:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d607", 0x17) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) [ 415.535179] RSP: 002b:00007fbd1d1a1a88 EFLAGS: 00000206 [ 415.543542] ORIG_RAX: 00000000000000a5 [ 415.543549] RAX: ffffffffffffffda RBX: 00007fbd1d1a1b40 RCX: 000000000045bd1a [ 415.543555] RDX: 00007fbd1d1a1ae0 RSI: 00000000200003c0 RDI: 00007fbd1d1a1b00 [ 415.543561] RBP: 0000000000000000 R08: 00007fbd1d1a1b40 R09: 00007fbd1d1a1ae0 [ 415.543567] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 415.543572] R13: 00000000004c8220 R14: 00000000004dea68 R15: 0000000000000003 12:40:00 executing program 1: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) 12:40:00 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105511, &(0x7f0000001000)) 12:40:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5", 0x22) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:40:00 executing program 1: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) 12:40:00 executing program 4 (fault-call:0 fault-nth:55): syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 12:40:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:40:01 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105511, &(0x7f0000001000)) 12:40:01 executing program 1: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) 12:40:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5", 0x22) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:40:01 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) [ 415.978708] FAULT_INJECTION: forcing a failure. [ 415.978708] name failslab, interval 1, probability 0, space 0, times 0 12:40:01 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105511, &(0x7f0000001000)) [ 416.087361] CPU: 1 PID: 19946 Comm: syz-executor.4 Not tainted 4.14.129 #23 [ 416.094516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 416.103990] Call Trace: [ 416.106671] dump_stack+0x138/0x19c [ 416.110327] should_fail.cold+0x10f/0x159 [ 416.114503] should_failslab+0xdb/0x130 [ 416.119025] __kmalloc_track_caller+0x2ec/0x790 [ 416.123729] ? kstrdup_const+0x48/0x60 [ 416.127656] kstrdup+0x3a/0x70 [ 416.130868] kstrdup_const+0x48/0x60 [ 416.134603] alloc_vfsmnt+0xe5/0x7d0 [ 416.138331] vfs_kern_mount.part.0+0x2a/0x3d0 [ 416.142857] do_mount+0x417/0x27d0 [ 416.146407] ? copy_mount_options+0x5c/0x2f0 [ 416.150824] ? rcu_read_lock_sched_held+0x110/0x130 [ 416.155853] ? copy_mount_string+0x40/0x40 [ 416.160203] ? copy_mount_options+0x1fe/0x2f0 [ 416.164727] SyS_mount+0xab/0x120 [ 416.168188] ? copy_mnt_ns+0x8c0/0x8c0 [ 416.172096] do_syscall_64+0x1e8/0x640 [ 416.176154] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 416.181436] entry_SYSCALL_64_after_hwframe+0x42/0xb7 12:40:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, 0x0) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:40:01 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105511, &(0x7f0000001000)) 12:40:01 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) [ 416.186648] RIP: 0033:0x45bd1a [ 416.189834] RSP: 002b:00007fbd1d1a1a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 416.197534] RAX: ffffffffffffffda RBX: 00007fbd1d1a1b40 RCX: 000000000045bd1a [ 416.197540] RDX: 00007fbd1d1a1ae0 RSI: 00000000200003c0 RDI: 00007fbd1d1a1b00 [ 416.197545] RBP: 0000000000000000 R08: 00007fbd1d1a1b40 R09: 00007fbd1d1a1ae0 [ 416.197551] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 416.197557] R13: 00000000004c8220 R14: 00000000004dea68 R15: 0000000000000003 12:40:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69c", 0x28) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:40:01 executing program 4 (fault-call:0 fault-nth:56): syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 12:40:01 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) [ 416.455978] FAULT_INJECTION: forcing a failure. [ 416.455978] name failslab, interval 1, probability 0, space 0, times 0 [ 416.553282] CPU: 1 PID: 19975 Comm: syz-executor.4 Not tainted 4.14.129 #23 [ 416.560453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 416.569919] Call Trace: [ 416.572536] dump_stack+0x138/0x19c [ 416.576278] should_fail.cold+0x10f/0x159 [ 416.580449] should_failslab+0xdb/0x130 [ 416.584661] kmem_cache_alloc_trace+0x2e9/0x790 [ 416.589356] ? lock_downgrade+0x6e0/0x6e0 [ 416.593528] ? gfs2_open+0x170/0x170 [ 416.597350] sget_userns+0xfe/0xc30 [ 416.600993] ? gfs2_kill_sb+0x1a0/0x1a0 [ 416.605260] ? gfs2_kill_sb+0x1a0/0x1a0 [ 416.609331] ? gfs2_open+0x170/0x170 [ 416.613123] ? gfs2_open+0x170/0x170 [ 416.616861] ? gfs2_kill_sb+0x1a0/0x1a0 [ 416.620885] sget+0xd6/0x120 [ 416.623971] gfs2_mount+0x13e/0x556 [ 416.627640] ? fill_super+0x22f0/0x22f0 [ 416.631644] ? trace_hardirqs_on+0xd/0x10 [ 416.635909] ? __free_pages+0x54/0x90 [ 416.639889] ? free_pages+0x46/0x50 [ 416.643710] ? selinux_sb_copy_data+0x21e/0x390 [ 416.648398] ? security_sb_copy_data+0x81/0xb0 [ 416.652999] mount_fs+0x97/0x2a1 [ 416.658576] vfs_kern_mount.part.0+0x5e/0x3d0 [ 416.663529] do_mount+0x417/0x27d0 [ 416.667261] ? copy_mount_options+0x5c/0x2f0 [ 416.671814] ? rcu_read_lock_sched_held+0x110/0x130 [ 416.676850] ? copy_mount_string+0x40/0x40 [ 416.681109] ? copy_mount_options+0x1fe/0x2f0 [ 416.681122] SyS_mount+0xab/0x120 [ 416.681129] ? copy_mnt_ns+0x8c0/0x8c0 [ 416.681143] do_syscall_64+0x1e8/0x640 [ 416.681152] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 416.681165] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 416.681173] RIP: 0033:0x45bd1a [ 416.681178] RSP: 002b:00007fbd1d1a1a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 416.681189] RAX: ffffffffffffffda RBX: 00007fbd1d1a1b40 RCX: 000000000045bd1a [ 416.681194] RDX: 00007fbd1d1a1ae0 RSI: 00000000200003c0 RDI: 00007fbd1d1a1b00 [ 416.681200] RBP: 0000000000000000 R08: 00007fbd1d1a1b40 R09: 00007fbd1d1a1ae0 [ 416.681205] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 416.681209] R13: 00000000004c8220 R14: 00000000004dea68 R15: 0000000000000003 12:40:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, 0x0) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:40:01 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105511, &(0x7f0000001000)) 12:40:01 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, 0x0) 12:40:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69c", 0x28) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:40:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0b") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x1, 0x80000) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:40:01 executing program 4 (fault-call:0 fault-nth:57): syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 12:40:02 executing program 3: syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0xc1105511, &(0x7f0000001000)) [ 416.953290] FAULT_INJECTION: forcing a failure. [ 416.953290] name failslab, interval 1, probability 0, space 0, times 0 [ 416.970632] CPU: 0 PID: 20001 Comm: syz-executor.4 Not tainted 4.14.129 #23 [ 416.977953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 416.977960] Call Trace: [ 416.977980] dump_stack+0x138/0x19c [ 416.978000] should_fail.cold+0x10f/0x159 [ 416.998312] should_failslab+0xdb/0x130 [ 417.002493] kmem_cache_alloc+0x2d7/0x780 [ 417.006667] ? debug_check_no_obj_freed+0x2aa/0x7b7 [ 417.011796] getname_kernel+0x53/0x350 [ 417.015881] kern_path+0x20/0x40 [ 417.019355] lookup_bdev.part.0+0x63/0x160 [ 417.023611] ? blkdev_open+0x260/0x260 [ 417.023624] ? debug_check_no_obj_freed+0x2aa/0x7b7 [ 417.023636] blkdev_get_by_path+0x76/0xf0 [ 417.036966] gfs2_mount+0xb7/0x556 [ 417.040756] ? fill_super+0x22f0/0x22f0 [ 417.044852] ? trace_hardirqs_on+0xd/0x10 [ 417.049023] ? __free_pages+0x54/0x90 [ 417.053116] ? free_pages+0x46/0x50 [ 417.056760] ? selinux_sb_copy_data+0x21e/0x390 [ 417.061615] ? security_sb_copy_data+0x81/0xb0 [ 417.066396] mount_fs+0x97/0x2a1 [ 417.069785] vfs_kern_mount.part.0+0x5e/0x3d0 [ 417.074505] do_mount+0x417/0x27d0 [ 417.078075] ? copy_mount_options+0x5c/0x2f0 [ 417.082588] ? rcu_read_lock_sched_held+0x110/0x130 [ 417.087806] ? copy_mount_string+0x40/0x40 [ 417.092588] ? copy_mount_options+0x1fe/0x2f0 [ 417.097413] SyS_mount+0xab/0x120 [ 417.101221] ? copy_mnt_ns+0x8c0/0x8c0 [ 417.105584] do_syscall_64+0x1e8/0x640 [ 417.109486] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 417.114582] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 417.119873] RIP: 0033:0x45bd1a [ 417.123069] RSP: 002b:00007fbd1d1a1a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 417.130795] RAX: ffffffffffffffda RBX: 00007fbd1d1a1b40 RCX: 000000000045bd1a [ 417.138655] RDX: 00007fbd1d1a1ae0 RSI: 00000000200003c0 RDI: 00007fbd1d1a1b00 [ 417.146184] RBP: 0000000000000000 R08: 00007fbd1d1a1b40 R09: 00007fbd1d1a1ae0 12:40:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0b") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x1, 0x80000) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:40:02 executing program 3: syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0xc1105511, &(0x7f0000001000)) 12:40:02 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, 0x0) [ 417.153958] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 417.162325] R13: 00000000004c8220 R14: 00000000004dea68 R15: 0000000000000003 12:40:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69c", 0x28) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:40:02 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, 0x0) 12:40:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69c", 0x28) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:40:02 executing program 3: syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0xc1105511, &(0x7f0000001000)) 12:40:02 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:40:02 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) 12:40:02 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105511, 0x0) 12:40:02 executing program 4 (fault-call:0 fault-nth:58): syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 12:40:02 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105511, 0x0) 12:40:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdeb", 0x2b) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:40:02 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) 12:40:02 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69c", 0x28) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:40:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x0, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) [ 417.773019] FAULT_INJECTION: forcing a failure. [ 417.773019] name failslab, interval 1, probability 0, space 0, times 0 12:40:02 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105511, 0x0) 12:40:02 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) [ 417.897511] CPU: 1 PID: 20051 Comm: syz-executor.4 Not tainted 4.14.129 #23 [ 417.904841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 417.904846] Call Trace: [ 417.904867] dump_stack+0x138/0x19c [ 417.904886] should_fail.cold+0x10f/0x159 [ 417.925770] should_failslab+0xdb/0x130 [ 417.929764] kmem_cache_alloc+0x2d7/0x780 [ 417.929780] ? debug_check_no_obj_freed+0x2aa/0x7b7 [ 417.929796] getname_kernel+0x53/0x350 [ 417.943047] kern_path+0x20/0x40 12:40:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(0x0, 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) [ 417.946710] lookup_bdev.part.0+0x63/0x160 [ 417.950980] ? blkdev_open+0x260/0x260 [ 417.955019] ? debug_check_no_obj_freed+0x2aa/0x7b7 [ 417.960841] blkdev_get_by_path+0x76/0xf0 [ 417.965016] gfs2_mount+0xb7/0x556 [ 417.968573] ? fill_super+0x22f0/0x22f0 [ 417.972652] ? trace_hardirqs_on+0xd/0x10 [ 417.976823] ? __free_pages+0x54/0x90 [ 417.980640] ? free_pages+0x46/0x50 [ 417.984283] ? selinux_sb_copy_data+0x21e/0x390 [ 417.989124] ? security_sb_copy_data+0x81/0xb0 [ 417.993809] mount_fs+0x97/0x2a1 [ 417.997330] vfs_kern_mount.part.0+0x5e/0x3d0 [ 418.001840] do_mount+0x417/0x27d0 [ 418.005384] ? copy_mount_options+0x5c/0x2f0 [ 418.005398] ? rcu_read_lock_sched_held+0x110/0x130 [ 418.005411] ? copy_mount_string+0x40/0x40 [ 418.005425] ? copy_mount_options+0x1fe/0x2f0 [ 418.023921] SyS_mount+0xab/0x120 [ 418.027550] ? copy_mnt_ns+0x8c0/0x8c0 [ 418.031640] do_syscall_64+0x1e8/0x640 [ 418.031650] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 418.031665] entry_SYSCALL_64_after_hwframe+0x42/0xb7 12:40:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdeb", 0x2b) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) [ 418.031674] RIP: 0033:0x45bd1a [ 418.031680] RSP: 002b:00007fbd1d1a1a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 418.031691] RAX: ffffffffffffffda RBX: 00007fbd1d1a1b40 RCX: 000000000045bd1a [ 418.031696] RDX: 00007fbd1d1a1ae0 RSI: 00000000200003c0 RDI: 00007fbd1d1a1b00 [ 418.031700] RBP: 0000000000000000 R08: 00007fbd1d1a1b40 R09: 00007fbd1d1a1ae0 [ 418.031705] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 418.031709] R13: 00000000004c8220 R14: 00000000004dea68 R15: 0000000000000003 12:40:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:40:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdeb", 0x2b) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:40:03 executing program 4 (fault-call:0 fault-nth:59): syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 12:40:03 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:40:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:40:03 executing program 3: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x80000002, 0x8972, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a62000/0x1000)=nil, 0x200000, 0x10200000008) r0 = syz_open_procfs(0x0, &(0x7f0000000600)='smaps\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/236, 0xec}], 0x63, 0x400000000000) 12:40:03 executing program 1 (fault-call:1 fault-nth:0): r0 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) 12:40:03 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, &(0x7f0000000080)={0x6a}) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000040)) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f00000001c0)={0x7, 0x2000003, 0x0, 0x0, 'syz1\x00', 0xfffffffffffffffe}) 12:40:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8", 0x2c) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) [ 418.556381] FAULT_INJECTION: forcing a failure. [ 418.556381] name failslab, interval 1, probability 0, space 0, times 0 [ 418.691314] CPU: 0 PID: 20096 Comm: syz-executor.4 Not tainted 4.14.129 #23 [ 418.698750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 418.708389] Call Trace: [ 418.711010] dump_stack+0x138/0x19c [ 418.714669] should_fail.cold+0x10f/0x159 [ 418.718848] should_failslab+0xdb/0x130 [ 418.722940] __kmalloc+0x2f0/0x7a0 [ 418.726497] ? __list_lru_init+0x6b/0x660 [ 418.730887] __list_lru_init+0x6b/0x660 [ 418.734909] sget_userns+0x4e0/0xc30 [ 418.738640] ? gfs2_kill_sb+0x1a0/0x1a0 [ 418.742635] ? gfs2_open+0x170/0x170 [ 418.746367] ? gfs2_open+0x170/0x170 [ 418.750302] ? gfs2_kill_sb+0x1a0/0x1a0 [ 418.754288] sget+0xd6/0x120 [ 418.757324] gfs2_mount+0x13e/0x556 [ 418.760984] ? fill_super+0x22f0/0x22f0 [ 418.765078] ? trace_hardirqs_on+0xd/0x10 [ 418.769413] ? __free_pages+0x54/0x90 [ 418.773411] ? free_pages+0x46/0x50 [ 418.777164] ? selinux_sb_copy_data+0x21e/0x390 [ 418.781858] ? security_sb_copy_data+0x81/0xb0 [ 418.786534] mount_fs+0x97/0x2a1 12:40:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8", 0x2c) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) [ 418.789907] vfs_kern_mount.part.0+0x5e/0x3d0 [ 418.794421] do_mount+0x417/0x27d0 [ 418.798318] ? retint_kernel+0x2d/0x2d [ 418.802398] ? copy_mount_string+0x40/0x40 [ 418.806808] ? copy_mount_options+0x154/0x2f0 [ 418.811490] ? copy_mount_options+0x1fe/0x2f0 [ 418.816890] SyS_mount+0xab/0x120 [ 418.820483] ? copy_mnt_ns+0x8c0/0x8c0 [ 418.824492] do_syscall_64+0x1e8/0x640 [ 418.828385] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 418.833433] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 418.833443] RIP: 0033:0x45bd1a 12:40:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8", 0x2c) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:40:04 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x20) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) [ 418.833449] RSP: 002b:00007fbd1d1a1a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 418.833459] RAX: ffffffffffffffda RBX: 00007fbd1d1a1b40 RCX: 000000000045bd1a [ 418.833464] RDX: 00007fbd1d1a1ae0 RSI: 00000000200003c0 RDI: 00007fbd1d1a1b00 [ 418.833469] RBP: 0000000000000000 R08: 00007fbd1d1a1b40 R09: 00007fbd1d1a1ae0 [ 418.833474] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 418.833479] R13: 00000000004c8220 R14: 00000000004dea68 R15: 0000000000000003 12:40:04 executing program 3 (fault-call:2 fault-nth:0): r0 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105511, &(0x7f0000001000)) 12:40:04 executing program 2 (fault-call:3 fault-nth:0): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") syz_open_dev$sndctrl(0x0, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2002, 0x0) [ 419.014543] FAULT_INJECTION: forcing a failure. [ 419.014543] name failslab, interval 1, probability 0, space 0, times 0 [ 419.056690] CPU: 0 PID: 20128 Comm: syz-executor.2 Not tainted 4.14.129 #23 [ 419.063860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 419.073241] Call Trace: [ 419.075857] dump_stack+0x138/0x19c [ 419.079606] should_fail.cold+0x10f/0x159 [ 419.083775] should_failslab+0xdb/0x130 [ 419.087779] kmem_cache_alloc+0x2d7/0x780 [ 419.091943] ? lock_downgrade+0x6e0/0x6e0 [ 419.096114] getname_flags+0xcb/0x580 [ 419.099939] getname+0x1a/0x20 [ 419.103260] do_sys_open+0x1e7/0x430 [ 419.106985] ? filp_open+0x70/0x70 [ 419.110540] SyS_openat+0x30/0x40 [ 419.113985] ? SyS_open+0x40/0x40 [ 419.113999] do_syscall_64+0x1e8/0x640 [ 419.114008] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 419.114026] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 419.114035] RIP: 0033:0x4592c9 [ 419.134784] RSP: 002b:00007f9bd8fa9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 419.142577] RAX: ffffffffffffffda RBX: 00007f9bd8fa9c90 RCX: 00000000004592c9 [ 419.149834] RDX: 0000000000002002 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 419.157226] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 419.164484] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9bd8faa6d4 [ 419.171923] R13: 00000000004c59cb R14: 00000000004da0a0 R15: 0000000000000004 12:40:04 executing program 4 (fault-call:0 fault-nth:60): syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 12:40:04 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00', 0x1}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x10040, 0x0) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x7fff) 12:40:04 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) set_thread_area(&(0x7f0000000000)={0x3, 0x100000, 0x1400, 0x80000000, 0x3f, 0x6, 0x1, 0x6, 0x3, 0x6}) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105511, &(0x7f0000000080)) 12:40:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8", 0x2c) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:40:04 executing program 5 (fault-call:5 fault-nth:0): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:40:04 executing program 2 (fault-call:3 fault-nth:1): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") syz_open_dev$sndctrl(0x0, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2002, 0x0) 12:40:04 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) finit_module(r0, &(0x7f0000000180)='*([bdev\\lo\x00', 0x3) io_setup(0x6, &(0x7f0000000000)=0x0) io_destroy(r1) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105511, &(0x7f0000001000)) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x2000, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000080)={0x0, 0x29, "ade251a18e51cebf6af37e3037dc5f63a2d3ee35ded4f02ab373a1cf0257d13c8542b1bfd4cb17e205"}, &(0x7f00000000c0)=0x31) inotify_init1(0x80000) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000140)=r3, 0x4) 12:40:04 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="911c06420ea37ef1039d1a3bd9f58c18", 0x10) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:40:04 executing program 1: get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x132, &(0x7f0000ffa000/0x3000)=nil, 0x4) r0 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x10000000, 0x10000, 0x1a}) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) [ 419.297044] FAULT_INJECTION: forcing a failure. [ 419.297044] name failslab, interval 1, probability 0, space 0, times 0 [ 419.371787] FAULT_INJECTION: forcing a failure. [ 419.371787] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 419.376810] CPU: 1 PID: 20146 Comm: syz-executor.4 Not tainted 4.14.129 #23 [ 419.390881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 419.400246] Call Trace: [ 419.402848] dump_stack+0x138/0x19c [ 419.406477] should_fail.cold+0x10f/0x159 [ 419.410673] should_failslab+0xdb/0x130 [ 419.414665] kmem_cache_alloc_trace+0x2e9/0x790 [ 419.419342] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 419.424825] ? sget_userns+0xfe/0xc30 [ 419.428620] ? rcu_read_lock_sched_held+0x110/0x130 [ 419.433720] selinux_sb_alloc_security+0x46/0x220 [ 419.438560] security_sb_alloc+0x6d/0xa0 [ 419.442623] ? gfs2_open+0x170/0x170 [ 419.446340] sget_userns+0x196/0xc30 [ 419.450048] ? gfs2_kill_sb+0x1a0/0x1a0 [ 419.454042] ? gfs2_kill_sb+0x1a0/0x1a0 [ 419.458015] ? gfs2_open+0x170/0x170 [ 419.461724] ? gfs2_open+0x170/0x170 [ 419.465444] ? gfs2_kill_sb+0x1a0/0x1a0 [ 419.469416] sget+0xd6/0x120 [ 419.472487] gfs2_mount+0x13e/0x556 [ 419.476287] ? fill_super+0x22f0/0x22f0 [ 419.480269] ? trace_hardirqs_on+0xd/0x10 [ 419.484421] ? __free_pages+0x54/0x90 [ 419.488306] ? free_pages+0x46/0x50 [ 419.491988] ? selinux_sb_copy_data+0x21e/0x390 [ 419.496661] ? security_sb_copy_data+0x81/0xb0 [ 419.501243] mount_fs+0x97/0x2a1 [ 419.504613] vfs_kern_mount.part.0+0x5e/0x3d0 [ 419.509117] do_mount+0x417/0x27d0 [ 419.512663] ? copy_mount_string+0x40/0x40 [ 419.516890] ? copy_mount_options+0x151/0x2f0 [ 419.521417] ? __sanitizer_cov_trace_pc+0x4e/0x60 [ 419.526298] ? copy_mount_options+0x1fe/0x2f0 [ 419.530803] SyS_mount+0xab/0x120 [ 419.534251] ? copy_mnt_ns+0x8c0/0x8c0 [ 419.538133] do_syscall_64+0x1e8/0x640 [ 419.542024] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 419.547041] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 419.552226] RIP: 0033:0x45bd1a [ 419.555497] RSP: 002b:00007fbd1d1a1a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 419.563289] RAX: ffffffffffffffda RBX: 00007fbd1d1a1b40 RCX: 000000000045bd1a [ 419.570555] RDX: 00007fbd1d1a1ae0 RSI: 00000000200003c0 RDI: 00007fbd1d1a1b00 [ 419.577850] RBP: 0000000000000000 R08: 00007fbd1d1a1b40 R09: 00007fbd1d1a1ae0 [ 419.585222] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 419.592491] R13: 00000000004c8220 R14: 00000000004dea68 R15: 0000000000000003 [ 419.599970] CPU: 0 PID: 20152 Comm: syz-executor.2 Not tainted 4.14.129 #23 [ 419.607682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 419.617069] Call Trace: 12:40:04 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xb) ioctl$SIOCRSSL2CALL(r1, 0x89e2, &(0x7f0000000000)=@null) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) [ 419.619681] dump_stack+0x138/0x19c [ 419.623422] should_fail.cold+0x10f/0x159 [ 419.627708] __alloc_pages_nodemask+0x1d6/0x7a0 [ 419.632403] ? fs_reclaim_acquire+0x20/0x20 [ 419.637300] ? __alloc_pages_slowpath+0x2930/0x2930 [ 419.642361] cache_grow_begin+0x80/0x400 [ 419.646458] kmem_cache_alloc+0x6a6/0x780 [ 419.650712] ? lock_downgrade+0x6e0/0x6e0 [ 419.654973] getname_flags+0xcb/0x580 [ 419.658821] getname+0x1a/0x20 [ 419.662113] do_sys_open+0x1e7/0x430 [ 419.665839] ? filp_open+0x70/0x70 [ 419.669482] SyS_openat+0x30/0x40 12:40:04 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) r1 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x2, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000000080)) [ 419.673114] ? SyS_open+0x40/0x40 [ 419.676754] do_syscall_64+0x1e8/0x640 [ 419.680670] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 419.685710] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 419.690917] RIP: 0033:0x4592c9 [ 419.694115] RSP: 002b:00007f9bd8fa9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 419.701933] RAX: ffffffffffffffda RBX: 00007f9bd8fa9c90 RCX: 00000000004592c9 [ 419.710436] RDX: 0000000000002002 RSI: 0000000020000000 RDI: ffffffffffffff9c 12:40:04 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x6337, 0x101000) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000000080)) r1 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) 12:40:04 executing program 4 (fault-call:0 fault-nth:61): syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 12:40:04 executing program 2 (fault-call:3 fault-nth:2): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") syz_open_dev$sndctrl(0x0, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2002, 0x0) [ 419.710442] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 419.710448] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9bd8faa6d4 [ 419.710453] R13: 00000000004c59cb R14: 00000000004da0a0 R15: 0000000000000004 12:40:04 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x200, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105511, &(0x7f0000001000)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) r3 = dup3(r1, r1, 0x80000) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r3, 0x4008ae48, &(0x7f0000000080)=0x3000) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000200)={{0x6, 0x1, 0x2, 0x0, 'syz1\x00', 0x1}, 0x3, 0x2, 0x1, r2, 0x7, 0x6, 'syz1\x00', &(0x7f0000000140)=['\x00', '/dev/snd/controlC#\x00', '/dev/snd/controlC#\x00', '/dev/snd/controlC#\x00', 'em0posix_acl_accessnodevmime_typeppp1selfmd5sum{ppp0%systembdevposix_acl_access^\x00', '/dev/snd/controlC#\x00', 'em0\\%nodev\f]nodev\xce[(#\x00'], 0xb4, [], [0x0, 0x8, 0x7, 0x4]}) [ 419.851360] FAULT_INJECTION: forcing a failure. [ 419.851360] name failslab, interval 1, probability 0, space 0, times 0 [ 419.881137] FAULT_INJECTION: forcing a failure. [ 419.881137] name failslab, interval 1, probability 0, space 0, times 0 [ 419.887044] CPU: 1 PID: 20179 Comm: syz-executor.2 Not tainted 4.14.129 #23 [ 419.900296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 419.910047] Call Trace: [ 419.913600] dump_stack+0x138/0x19c [ 419.917497] should_fail.cold+0x10f/0x159 [ 419.921665] should_failslab+0xdb/0x130 [ 419.925771] kmem_cache_alloc+0x2d7/0x780 [ 419.930402] ? save_stack+0xa9/0xd0 [ 419.934071] get_empty_filp+0x8c/0x3b0 [ 419.937962] path_openat+0x8f/0x3f70 [ 419.941767] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 419.947224] ? trace_hardirqs_on+0x10/0x10 [ 419.951549] ? check_preemption_disabled+0x3c/0x250 [ 419.956788] ? save_trace+0x290/0x290 [ 419.960593] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 419.965790] ? __lock_is_held+0xb6/0x140 [ 419.969896] ? save_trace+0x290/0x290 [ 419.974312] ? __alloc_fd+0x1d4/0x4a0 [ 419.978227] do_filp_open+0x18e/0x250 [ 419.982326] ? __alloc_fd+0x1d4/0x4a0 [ 419.986232] ? may_open_dev+0xe0/0xe0 [ 419.990217] ? lock_downgrade+0x6e0/0x6e0 [ 419.994469] ? _raw_spin_unlock+0x2d/0x50 [ 419.999153] ? __alloc_fd+0x1d4/0x4a0 [ 420.003193] do_sys_open+0x2c5/0x430 [ 420.006914] ? filp_open+0x70/0x70 [ 420.010565] SyS_openat+0x30/0x40 [ 420.014348] ? SyS_open+0x40/0x40 [ 420.017902] do_syscall_64+0x1e8/0x640 [ 420.021803] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 420.026650] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 420.032398] RIP: 0033:0x4592c9 [ 420.035586] RSP: 002b:00007f9bd8fa9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 420.043489] RAX: ffffffffffffffda RBX: 00007f9bd8fa9c90 RCX: 00000000004592c9 12:40:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(0x0, 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:40:05 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 12:40:05 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x10002004}) connect$netlink(r1, &(0x7f00000000c0)=@unspec, 0xc) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x400001, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) 12:40:05 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x101000, 0x10) connect$pppoe(r1, &(0x7f00000002c0)={0x18, 0x0, {0x4, @local, 'syzkaller1\x00'}}, 0x1e) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105511, &(0x7f0000000340)) r2 = add_key(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000140)="d74d", 0x2, 0xfffffffffffffff8) add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r2) socket$bt_cmtp(0x1f, 0x3, 0x5) add_key(&(0x7f0000000180)='trusted\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000240)="7e6be7c778960a19d4a62faa7eb91219753f3529", 0x14, r2) [ 420.050851] RDX: 0000000000002002 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 420.059788] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 420.067061] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9bd8faa6d4 [ 420.076178] R13: 00000000004c59cb R14: 00000000004da0a0 R15: 0000000000000004 [ 420.085473] CPU: 0 PID: 20181 Comm: syz-executor.4 Not tainted 4.14.129 #23 [ 420.092833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 420.103262] Call Trace: [ 420.106201] dump_stack+0x138/0x19c [ 420.111372] should_fail.cold+0x10f/0x159 [ 420.115694] should_failslab+0xdb/0x130 [ 420.120569] __kmalloc+0x2f0/0x7a0 [ 420.124393] ? lock_downgrade+0x6e0/0x6e0 [ 420.129087] ? register_shrinker+0xbd/0x220 [ 420.133553] register_shrinker+0xbd/0x220 [ 420.138103] sget_userns+0x9bf/0xc30 [ 420.143070] ? gfs2_kill_sb+0x1a0/0x1a0 [ 420.148204] ? gfs2_open+0x170/0x170 [ 420.152270] ? gfs2_open+0x170/0x170 [ 420.156070] ? gfs2_kill_sb+0x1a0/0x1a0 [ 420.160123] sget+0xd6/0x120 [ 420.163308] gfs2_mount+0x13e/0x556 [ 420.167328] ? fill_super+0x22f0/0x22f0 [ 420.172057] ? trace_hardirqs_on+0xd/0x10 [ 420.177064] ? __free_pages+0x54/0x90 [ 420.180864] ? free_pages+0x46/0x50 [ 420.185406] ? selinux_sb_copy_data+0x21e/0x390 [ 420.191460] ? security_sb_copy_data+0x81/0xb0 [ 420.196047] mount_fs+0x97/0x2a1 [ 420.199409] vfs_kern_mount.part.0+0x5e/0x3d0 [ 420.204244] do_mount+0x417/0x27d0 [ 420.207771] ? copy_mount_options+0x5c/0x2f0 [ 420.212344] ? rcu_read_lock_sched_held+0x110/0x130 [ 420.219219] ? copy_mount_string+0x40/0x40 [ 420.223448] ? copy_mount_options+0x1fe/0x2f0 [ 420.227939] SyS_mount+0xab/0x120 [ 420.231504] ? copy_mnt_ns+0x8c0/0x8c0 [ 420.235998] do_syscall_64+0x1e8/0x640 [ 420.240186] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 420.245042] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 420.250655] RIP: 0033:0x45bd1a [ 420.253834] RSP: 002b:00007fbd1d1a1a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 420.262665] RAX: ffffffffffffffda RBX: 00007fbd1d1a1b40 RCX: 000000000045bd1a [ 420.270081] RDX: 00007fbd1d1a1ae0 RSI: 00000000200003c0 RDI: 00007fbd1d1a1b00 [ 420.277607] RBP: 0000000000000000 R08: 00007fbd1d1a1b40 R09: 00007fbd1d1a1ae0 [ 420.285051] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 420.292494] R13: 00000000004c8220 R14: 00000000004dea68 R15: 0000000000000003 12:40:05 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f00000001c0)={0x5, 0x10000000, 0x0, 0x0, 'syz1\x00', 0x40000000}) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x7, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000040)=0x8001, 0x8) 12:40:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000180), 0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x7fff) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x4100) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) r5 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) r6 = open(0x0, 0x141042, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000400)={0x5, 0xe0000000000, 0x4, 0x201}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x87ff7) 12:40:05 executing program 2 (fault-call:3 fault-nth:3): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") syz_open_dev$sndctrl(0x0, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2002, 0x0) 12:40:05 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0xffffffffffff0002, 0x0) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105511, &(0x7f0000001000)) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x34000, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000040)={0x1, 0x35303553, 0x501, 0x7f, 0x3, @discrete={0x59, 0x8}}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r2, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x5, @link='broadcast-link\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4004080) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f0000000240)={0x101, 0x8001, 0xa22, 0x6}) 12:40:05 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x100000890f, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x1, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x80000, 0x0) ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f0000000040)=""/33) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000000140)) [ 420.471913] FAULT_INJECTION: forcing a failure. [ 420.471913] name failslab, interval 1, probability 0, space 0, times 0 [ 420.505085] CPU: 0 PID: 20211 Comm: syz-executor.2 Not tainted 4.14.129 #23 [ 420.512606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 420.522472] Call Trace: [ 420.525088] dump_stack+0x138/0x19c [ 420.529008] should_fail.cold+0x10f/0x159 [ 420.533183] should_failslab+0xdb/0x130 [ 420.537268] kmem_cache_alloc+0x2d7/0x780 [ 420.541445] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 420.546921] ? check_preemption_disabled+0x3c/0x250 [ 420.552043] selinux_file_alloc_security+0xb4/0x190 [ 420.557177] security_file_alloc+0x6d/0xa0 [ 420.557194] get_empty_filp+0x130/0x3b0 [ 420.557207] path_openat+0x8f/0x3f70 [ 420.565448] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 420.565467] ? trace_hardirqs_on+0x10/0x10 [ 420.565481] ? check_preemption_disabled+0x3c/0x250 [ 420.574544] ? save_trace+0x290/0x290 [ 420.574560] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 420.574568] ? __lock_is_held+0xb6/0x140 [ 420.574578] ? save_trace+0x290/0x290 [ 420.574593] ? __alloc_fd+0x1d4/0x4a0 [ 420.574604] do_filp_open+0x18e/0x250 [ 420.574627] ? __alloc_fd+0x1d4/0x4a0 [ 420.583850] ? may_open_dev+0xe0/0xe0 [ 420.583867] ? lock_downgrade+0x6e0/0x6e0 [ 420.583887] ? _raw_spin_unlock+0x2d/0x50 [ 420.583895] ? __alloc_fd+0x1d4/0x4a0 [ 420.583915] do_sys_open+0x2c5/0x430 [ 420.616657] ------------[ cut here ]------------ [ 420.619898] ? filp_open+0x70/0x70 [ 420.624145] WARNING: CPU: 1 PID: 20181 at fs/super.c:1163 kill_block_super+0xc9/0xf0 [ 420.627933] SyS_openat+0x30/0x40 [ 420.631618] Kernel panic - not syncing: panic_on_warn set ... [ 420.631618] [ 420.636357] ? SyS_open+0x40/0x40 [ 420.662097] do_syscall_64+0x1e8/0x640 [ 420.666063] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 420.671167] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 420.676364] RIP: 0033:0x4592c9 [ 420.679549] RSP: 002b:00007f9bd8fa9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 420.687262] RAX: ffffffffffffffda RBX: 00007f9bd8fa9c90 RCX: 00000000004592c9 [ 420.694614] RDX: 0000000000002002 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 420.702172] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 420.709618] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9bd8faa6d4 [ 420.716966] R13: 00000000004c59cb R14: 00000000004da0a0 R15: 0000000000000004 [ 420.724259] CPU: 1 PID: 20181 Comm: syz-executor.4 Not tainted 4.14.129 #23 [ 420.729601] kobject: 'loop5' (ffff8880a4a68120): kobject_uevent_env [ 420.731603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 420.731608] Call Trace: [ 420.731627] dump_stack+0x138/0x19c [ 420.731641] panic+0x1f2/0x426 [ 420.731650] ? add_taint.cold+0x16/0x16 [ 420.731662] ? kill_block_super+0xc9/0xf0 [ 420.731670] ? __warn.cold+0x14/0x36 [ 420.731682] ? kill_block_super+0xc9/0xf0 [ 420.731688] __warn.cold+0x2f/0x36 [ 420.731698] ? ist_end_non_atomic+0x10/0x10 [ 420.731706] ? kill_block_super+0xc9/0xf0 [ 420.731716] report_bug+0x216/0x254 [ 420.731729] do_error_trap+0x1bb/0x310 [ 420.731739] ? math_error+0x360/0x360 [ 420.731752] ? save_trace+0x290/0x290 [ 420.731766] ? generic_shutdown_super+0x27c/0x370 [ 420.731780] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 420.740144] kobject: 'loop5' (ffff8880a4a68120): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 420.748563] do_invalid_op+0x1b/0x20 [ 420.828665] invalid_op+0x1b/0x40 [ 420.832250] RIP: 0010:kill_block_super+0xc9/0xf0 [ 420.836993] RSP: 0018:ffff88808fdb7a48 EFLAGS: 00010246 [ 420.842350] RAX: 0000000000040000 RBX: 0000000000000000 RCX: ffffc9000ac54000 [ 420.849697] RDX: 0000000000040000 RSI: ffffffff818d9da9 RDI: ffff88808720b560 [ 420.856991] RBP: ffff88808fdb7a60 R08: ffff888091742400 R09: 0000000000000001 [ 420.864263] R10: 0000000000000000 R11: ffff888091742400 R12: ffff888060b18280 [ 420.871535] R13: ffff88808720b1c0 R14: ffff888060b18280 R15: dffffc0000000000 [ 420.878862] ? kill_block_super+0xc9/0xf0 [ 420.883114] ? kill_block_super+0xc9/0xf0 [ 420.887254] gfs2_kill_sb+0x14e/0x1a0 [ 420.891405] deactivate_locked_super+0x74/0xe0 [ 420.895973] sget_userns+0x9d9/0xc30 [ 420.899816] ? gfs2_kill_sb+0x1a0/0x1a0 [ 420.903944] ? gfs2_open+0x170/0x170 [ 420.907647] ? gfs2_open+0x170/0x170 [ 420.911434] ? gfs2_kill_sb+0x1a0/0x1a0 [ 420.915483] sget+0xd6/0x120 [ 420.918491] gfs2_mount+0x13e/0x556 [ 420.922115] ? fill_super+0x22f0/0x22f0 [ 420.926113] ? trace_hardirqs_on+0xd/0x10 [ 420.930258] ? __free_pages+0x54/0x90 [ 420.934135] ? free_pages+0x46/0x50 [ 420.937751] ? selinux_sb_copy_data+0x21e/0x390 [ 420.942591] ? security_sb_copy_data+0x81/0xb0 [ 420.947600] mount_fs+0x97/0x2a1 [ 420.951027] vfs_kern_mount.part.0+0x5e/0x3d0 [ 420.955575] do_mount+0x417/0x27d0 [ 420.959109] ? copy_mount_options+0x5c/0x2f0 [ 420.963715] ? rcu_read_lock_sched_held+0x110/0x130 [ 420.968884] ? copy_mount_string+0x40/0x40 [ 420.973318] ? copy_mount_options+0x1fe/0x2f0 [ 420.978085] SyS_mount+0xab/0x120 [ 420.981626] ? copy_mnt_ns+0x8c0/0x8c0 [ 420.985512] do_syscall_64+0x1e8/0x640 [ 420.989753] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 420.994682] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 421.000046] RIP: 0033:0x45bd1a [ 421.003327] RSP: 002b:00007fbd1d1a1a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 421.011114] RAX: ffffffffffffffda RBX: 00007fbd1d1a1b40 RCX: 000000000045bd1a [ 421.018806] RDX: 00007fbd1d1a1ae0 RSI: 00000000200003c0 RDI: 00007fbd1d1a1b00 [ 421.028108] RBP: 0000000000000000 R08: 00007fbd1d1a1b40 R09: 00007fbd1d1a1ae0 [ 421.036199] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 421.045254] R13: 00000000004c8220 R14: 00000000004dea68 R15: 0000000000000003 [ 421.054853] Kernel Offset: disabled [ 421.058776] Rebooting in 86400 seconds..