fffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:33:05 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)) io_submit(0x0, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 22:33:05 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d71a0220341ea32af193c9fa6511756f0a56cf70ef9158dcc809125b2e55b38415828bd295be8641", 0x9c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, 0x0}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) 22:33:05 executing program 0: 22:33:05 executing program 2: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x0, 0x0) 22:33:05 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x0, 0x40000002}) 22:33:05 executing program 0: 22:33:05 executing program 2: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x0, 0x0) [ 353.927332] hfsplus: unable to find HFS+ superblock 22:33:05 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)) io_submit(0x0, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 22:33:05 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d71a0220341ea32af193c9fa6511756f0a56cf70ef9158dcc809125b2e55b38415828bd295be8641", 0x9c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, 0x0}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) 22:33:05 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x0, 0x40000002}) 22:33:05 executing program 0: [ 354.122710] hfsplus: unable to find HFS+ superblock 22:33:08 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:33:08 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x0, 0x0) 22:33:08 executing program 2: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x0, 0x0) 22:33:08 executing program 0: 22:33:08 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d71a0220341ea32af193c9fa6511756f0a56cf70ef9158dcc809125b2e55b38415828bd295be8641", 0x9c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, 0x0}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) 22:33:08 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x0, 0x40000002}) 22:33:08 executing program 0: 22:33:08 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d71a0220341ea32af193c9fa6511756f0a56cf70ef9158dcc809125b2e55b38415828bd295be8641", 0x9c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, 0x0}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) 22:33:08 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x0, 0x0) [ 357.047007] hfsplus: unable to find HFS+ superblock 22:33:08 executing program 2: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x0, 0x0) 22:33:08 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) futex(0x0, 0x86, 0x0, 0x0, 0x0, 0x0) 22:33:08 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x0, 0x40000002}) 22:33:08 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d71a0220341ea32af193c9fa6511756f0a56cf70ef9158dcc809125b2e55b38415828bd295be8641", 0x9c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, 0x0}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) 22:33:08 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:33:08 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000340)="3e55e72cfb", 0x5}], 0x1) 22:33:08 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x0, 0x0) [ 357.306587] hfsplus: unable to find HFS+ superblock 22:33:08 executing program 2: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x0, 0x0) 22:33:08 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d71a0220341ea32af193c9fa6511756f0a56cf70ef9158dcc809125b2e55b38415828bd295be8641", 0x9c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, 0x0}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) 22:33:08 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000100)=0x6, 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 22:33:08 executing program 2: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x0, 0x0) 22:33:08 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, 0x0}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) 22:33:08 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x0, &(0x7f0000000240)) 22:33:08 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x0, 0x40000002}) 22:33:08 executing program 2: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x0, 0x0) 22:33:09 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x0, &(0x7f0000000240)) 22:33:11 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:33:11 executing program 2: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', 0x0, &(0x7f0000000100)='hfsplus\x00', 0x0, 0x0) 22:33:11 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x0, 0x40000002}) 22:33:11 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x0, &(0x7f0000000240)) 22:33:11 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') read$FUSE(r2, 0x0, 0x116) 22:33:11 executing program 2: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', 0x0, &(0x7f0000000100)='hfsplus\x00', 0x0, 0x0) 22:33:11 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[0x0]) 22:33:11 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, 0x0}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) 22:33:11 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x0, 0x40000002}) 22:33:11 executing program 2: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', 0x0, &(0x7f0000000100)='hfsplus\x00', 0x0, 0x0) 22:33:11 executing program 0: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) dup3(r1, r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) finit_module(r1, 0x0, 0x0) 22:33:11 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:33:12 executing program 2: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 22:33:12 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[0x0]) [ 360.696964] audit: type=1804 audit(1583620391.964:56): pid=15027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir363327683/syzkaller.hP8e67/174/bus" dev="sda1" ino=17106 res=1 [ 360.801339] audit: type=1400 audit(1583620392.004:57): avc: denied { module_load } for pid=15022 comm="syz-executor.0" path="/root/syzkaller-testdir363327683/syzkaller.hP8e67/174/bus" dev="sda1" ino=17106 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=system permissive=1 22:33:12 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x0, 0x40000002}) 22:33:12 executing program 2: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) [ 360.845125] audit: type=1804 audit(1583620392.024:58): pid=15027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir363327683/syzkaller.hP8e67/174/bus" dev="sda1" ino=17106 res=1 22:33:12 executing program 0: clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_SIOCADDDLCI(r0, 0x8980, 0x0) 22:33:12 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[0x0]) 22:33:12 executing program 2: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 22:33:15 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, 0x0}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) 22:33:15 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x0, 0x40000002}) 22:33:15 executing program 0: setrlimit(0x8, &(0x7f0000000000)={0x7, 0x95}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) close(r0) syz_open_pts(0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000240)="63b7afcf3b6abe3e20b92930030935c0f0f7ac8911182ab78f06b4ccd1e6a6770c31b2fce1adddde7241a4c294d9bad31b922a7dba5315", 0x37}, {&(0x7f0000000580)="d77128554bc6f51ad419de78e658df53d663687ce6578a3bc0b9fe1f9df461842bc5dc362a479859b67b75c43bccc3ce9786bec790a8fedbff8f88f08e43b9f632f633b897706703e1589f673c0b8aa2e8442bb3f796c3950bbd0f16", 0x5c}], 0x2) 22:33:15 executing program 2: r0 = msgget(0x3, 0x0) msgsnd(r0, &(0x7f0000000080)={0x0, "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"}, 0x801, 0x0) 22:33:15 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) 22:33:15 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:33:15 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="28000000ffff00000100000000000000", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1], 0x28}, 0x0) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 22:33:15 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) 22:33:15 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:33:15 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x0, 0x0) open$dir(0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/37, 0xfffffde0}], 0x1000000000000159, 0x0) mlock(&(0x7f0000ff2000/0xd000)=nil, 0xd000) 22:33:15 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x0, 0x40000002}) 22:33:15 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:33:18 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, 0x0}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) 22:33:18 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x0, 0x40000002}) 22:33:18 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) 22:33:18 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x0) flock(r0, 0xa) 22:33:18 executing program 2: syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa7289b75c479b86dd6045050002000600fe8000000000000008000081fcabf185fe8000000000000000000000000000aa"], 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_emit_ethernet(0x400e, &(0x7f0000000000), 0x0) 22:33:18 executing program 0: 22:33:18 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x0, 0x40000002}) 22:33:18 executing program 2: 22:33:18 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) 22:33:18 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, 0x0}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) 22:33:18 executing program 2: 22:33:18 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:33:18 executing program 0: 22:33:18 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x0, 0x40000002}) 22:33:18 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, 0x0}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) 22:33:18 executing program 2: 22:33:18 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) 22:33:18 executing program 0: 22:33:18 executing program 2: 22:33:18 executing program 0: 22:33:18 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x0, 0x40000002}) 22:33:18 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) 22:33:18 executing program 2: 22:33:21 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:33:21 executing program 0: 22:33:21 executing program 2: 22:33:21 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, 0x0}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) 22:33:21 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x0, 0x40000002}) 22:33:21 executing program 5: 22:33:21 executing program 0: 22:33:21 executing program 5: 22:33:21 executing program 2: 22:33:21 executing program 0: 22:33:21 executing program 5: 22:33:21 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x0, 0x40000002}) 22:33:24 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:33:24 executing program 0: 22:33:24 executing program 2: 22:33:24 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, 0x0}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) 22:33:24 executing program 5: 22:33:24 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x0, 0x40000002}) 22:33:24 executing program 0: 22:33:24 executing program 2: 22:33:24 executing program 5: 22:33:24 executing program 0: 22:33:24 executing program 2: 22:33:24 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountstats\x00') preadv(0xffffffffffffffff, &(0x7f00000016c0)=[{&(0x7f0000000140)=""/10, 0xa}], 0x1, 0x0) preadv(r0, &(0x7f0000000500), 0x37d, 0x9) [ 375.879410] NOHZ: local_softirq_pending 08 22:33:27 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:33:27 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x49) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_opts(r0, 0x29, 0x39, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 22:33:27 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x0, 0x40000002}) 22:33:27 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, 0x0}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) 22:33:27 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev, 0x0, 0x32}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0x2}}, 0xe8) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) 22:33:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x88) 22:33:27 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x0, 0x40000002}) 22:33:27 executing program 2: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 22:33:27 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x0, 0x40000002}) 22:33:27 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x0, 0x0) 22:33:27 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:33:27 executing program 5: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x0, 0x0) [ 376.809306] hfsplus: unable to find HFS+ superblock [ 377.160034] NOHZ: local_softirq_pending 08 [ 377.164487] NOHZ: local_softirq_pending 08 22:33:30 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:33:30 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x0, 0x40000002}) 22:33:30 executing program 0: r0 = socket$packet(0x11, 0x400000000002, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00000001c0)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ppoll(&(0x7f0000000100), 0x0, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) 22:33:30 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, 0x0}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) 22:33:30 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:33:30 executing program 5: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x0, 0x0) 22:33:30 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x0, 0x40000002}) 22:33:30 executing program 0: r0 = socket$packet(0x11, 0x400000000002, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00000001c0)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ppoll(&(0x7f0000000100), 0x0, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) [ 379.527998] hfsplus: unable to find HFS+ superblock 22:33:30 executing program 5: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x0, 0x0) 22:33:30 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x0, 0x40000002}) [ 379.654251] hfsplus: unable to find HFS+ superblock 22:33:30 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x108, 0x108, 0x108, 0x108, 0x108, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x3, 0x0, {[{{@ipv6={@remote, @local, [], [], 'bond_slave_0\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@rand_addr="dc9a2a575d86b91bc23d3fde2e1bea85", [], 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x8}}}, {{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a], 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) 22:33:31 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x0, 0x40000002}) [ 379.720091] xt_HMARK: spi-set and port-set can't be combined 22:33:33 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:33:33 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000000)) ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f00000002c0), 0x0) 22:33:33 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x108, 0x108, 0x108, 0x108, 0x108, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x3, 0x0, {[{{@ipv6={@remote, @local, [], [], 'bond_slave_0\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@rand_addr="dc9a2a575d86b91bc23d3fde2e1bea85", [], 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x8}}}, {{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a], 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) [ 382.393100] xt_HMARK: spi-set and port-set can't be combined 22:33:33 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, 0x0}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) 22:33:33 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, 0x0) 22:33:33 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000000)) ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f00000002c0), 0x0) 22:33:33 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x108, 0x108, 0x108, 0x108, 0x108, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x3, 0x0, {[{{@ipv6={@remote, @local, [], [], 'bond_slave_0\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@rand_addr="dc9a2a575d86b91bc23d3fde2e1bea85", [], 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x8}}}, {{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a], 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) 22:33:33 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:33:33 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000000)) ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f00000002c0), 0x0) [ 382.567677] xt_HMARK: spi-set and port-set can't be combined 22:33:33 executing program 5 (fault-call:6 fault-nth:0): r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 22:33:33 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, 0x0) 22:33:33 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$cont(0x9, r0, 0x0, 0x0) [ 382.743951] FAULT_INJECTION: forcing a failure. [ 382.743951] name failslab, interval 1, probability 0, space 0, times 1 [ 382.778700] CPU: 0 PID: 16050 Comm: syz-executor.5 Not tainted 4.19.108-syzkaller #0 [ 382.786927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 382.796303] Call Trace: [ 382.799075] dump_stack+0x188/0x20d [ 382.802839] should_fail.cold+0xa/0x1b [ 382.806947] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 382.812642] __should_failslab+0x115/0x180 [ 382.816924] should_failslab+0x5/0xf [ 382.820661] kmem_cache_alloc+0x29f/0x710 [ 382.824924] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 382.829576] ? __get_reqs_available+0x1aa/0x410 [ 382.834660] io_submit_one+0x131/0x2ee0 [ 382.839037] ? find_held_lock+0x2d/0x110 [ 382.843614] ? lookup_ioctx+0x1c0/0x7c0 [ 382.847604] ? aio_complete_rw+0xf50/0xf50 [ 382.852006] ? find_held_lock+0x2d/0x110 [ 382.856622] ? __might_fault+0x11f/0x1d0 [ 382.861132] ? __x64_sys_io_submit+0x1aa/0x520 [ 382.865739] __x64_sys_io_submit+0x1aa/0x520 [ 382.870876] ? __ia32_sys_io_destroy+0x400/0x400 [ 382.875983] ? fput+0x2b/0x190 [ 382.879194] ? __ia32_sys_read+0xb0/0xb0 [ 382.883368] ? __ia32_sys_clock_settime+0x260/0x260 [ 382.888803] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 382.893777] ? trace_hardirqs_off_caller+0x55/0x210 [ 382.898858] ? do_syscall_64+0xf9/0x620 [ 382.902952] do_syscall_64+0xf9/0x620 [ 382.906936] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 382.912221] RIP: 0033:0x45c4a9 [ 382.915444] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 382.934634] RSP: 002b:00007f7ace0e9c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 382.943160] RAX: ffffffffffffffda RBX: 00007f7ace0ea6d4 RCX: 000000000045c4a9 [ 382.950743] RDX: 0000000020000240 RSI: 0000000000000001 RDI: 00007f7ace0c9000 [ 382.959333] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 382.967436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 382.977001] R13: 00000000000001f9 R14: 00000000004c3e7a R15: 0000000000000000 22:33:36 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:33:36 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, 0x0}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) 22:33:36 executing program 0 (fault-call:5 fault-nth:0): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x0, 0x0) 22:33:36 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, 0x0) 22:33:36 executing program 5 (fault-call:6 fault-nth:1): r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) [ 385.444714] FAULT_INJECTION: forcing a failure. [ 385.444714] name failslab, interval 1, probability 0, space 0, times 0 [ 385.465555] FAULT_INJECTION: forcing a failure. [ 385.465555] name failslab, interval 1, probability 0, space 0, times 0 [ 385.473107] CPU: 1 PID: 16065 Comm: syz-executor.5 Not tainted 4.19.108-syzkaller #0 [ 385.484884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 385.494257] Call Trace: [ 385.496871] dump_stack+0x188/0x20d [ 385.500519] should_fail.cold+0xa/0x1b [ 385.504431] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 385.509554] __should_failslab+0x115/0x180 [ 385.513800] should_failslab+0x5/0xf [ 385.517513] __kmalloc+0x2d3/0x770 [ 385.521200] ? snd_pcm_writev+0x2f0/0x570 [ 385.525437] ? avc_policy_seqno+0x9/0x70 [ 385.529589] ? selinux_file_permission+0x87/0x520 [ 385.534439] snd_pcm_writev+0x2f0/0x570 [ 385.538416] ? rw_verify_area+0x10c/0x330 [ 385.542578] aio_write+0x346/0x530 [ 385.546126] ? aio_read+0x3b0/0x3b0 [ 385.549764] ? lock_downgrade+0x740/0x740 [ 385.553940] ? find_held_lock+0x2d/0x110 [ 385.558013] ? lock_downgrade+0x740/0x740 [ 385.562179] io_submit_one+0x100c/0x2ee0 [ 385.566247] ? find_held_lock+0x2d/0x110 [ 385.570306] ? lookup_ioctx+0x1c0/0x7c0 [ 385.574297] ? aio_complete_rw+0xf50/0xf50 [ 385.578552] ? find_held_lock+0x2d/0x110 [ 385.582628] ? __might_fault+0x11f/0x1d0 [ 385.586723] ? __x64_sys_io_submit+0x1aa/0x520 [ 385.588174] ptrace attach of "/root/syz-executor.4"[16073] was attempted by "/root/syz-executor.4"[16074] [ 385.591315] __x64_sys_io_submit+0x1aa/0x520 [ 385.591333] ? __ia32_sys_io_destroy+0x400/0x400 [ 385.591347] ? fput+0x2b/0x190 [ 385.591367] ? __ia32_sys_read+0xb0/0xb0 [ 385.591382] ? __ia32_sys_clock_settime+0x260/0x260 [ 385.591397] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 385.591410] ? trace_hardirqs_off_caller+0x55/0x210 [ 385.591428] ? do_syscall_64+0xf9/0x620 [ 385.591444] do_syscall_64+0xf9/0x620 [ 385.640253] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 385.645449] RIP: 0033:0x45c4a9 [ 385.648640] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 385.667542] RSP: 002b:00007f7ace0e9c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 385.675255] RAX: ffffffffffffffda RBX: 00007f7ace0ea6d4 RCX: 000000000045c4a9 [ 385.682531] RDX: 0000000020000240 RSI: 0000000000000001 RDI: 00007f7ace0c9000 [ 385.689817] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 385.697097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 385.704379] R13: 00000000000001f9 R14: 00000000004c3e7a R15: 0000000000000001 [ 385.711687] CPU: 0 PID: 16064 Comm: syz-executor.0 Not tainted 4.19.108-syzkaller #0 [ 385.719598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 385.728967] Call Trace: [ 385.731582] dump_stack+0x188/0x20d [ 385.735243] should_fail.cold+0xa/0x1b [ 385.739155] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 385.744309] __should_failslab+0x115/0x180 [ 385.748576] should_failslab+0x5/0xf [ 385.752303] __kmalloc_track_caller+0x2cb/0x770 [ 385.757025] ? wait_for_completion+0x3c0/0x3c0 [ 385.761707] ? strndup_user+0x70/0xe0 [ 385.765530] ? vfs_write+0x15b/0x550 [ 385.769277] memdup_user+0x22/0xb0 [ 385.772833] strndup_user+0x70/0xe0 [ 385.776573] ksys_mount+0x38/0x150 [ 385.780136] __x64_sys_mount+0xba/0x150 [ 385.784132] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 385.788739] do_syscall_64+0xf9/0x620 22:33:37 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000}) 22:33:37 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000}) 22:33:37 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000}) [ 385.792567] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 385.797767] RIP: 0033:0x45c4a9 [ 385.801081] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 385.819998] RSP: 002b:00007f081ba2dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 385.827730] RAX: ffffffffffffffda RBX: 00007f081ba2e6d4 RCX: 000000000045c4a9 [ 385.835128] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000020000140 22:33:37 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 385.842419] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 385.849849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 385.857137] R13: 000000000000074a R14: 00000000004c9d80 R15: 0000000000000000 22:33:37 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$cont(0x9, r0, 0x0, 0x0) 22:33:37 executing program 5 (fault-call:6 fault-nth:2): r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 22:33:37 executing program 0 (fault-call:5 fault-nth:1): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x0, 0x0) 22:33:37 executing program 3 (fault-call:5 fault-nth:0): ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x0, 0x40000002}) [ 386.104460] FAULT_INJECTION: forcing a failure. [ 386.104460] name failslab, interval 1, probability 0, space 0, times 0 [ 386.111630] FAULT_INJECTION: forcing a failure. [ 386.111630] name failslab, interval 1, probability 0, space 0, times 0 [ 386.116879] CPU: 0 PID: 16097 Comm: syz-executor.3 Not tainted 4.19.108-syzkaller #0 [ 386.135267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 386.144623] Call Trace: [ 386.147221] dump_stack+0x188/0x20d [ 386.150853] should_fail.cold+0xa/0x1b [ 386.154738] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 386.160707] ? __lock_is_held+0xad/0x140 [ 386.165039] __should_failslab+0x115/0x180 [ 386.169285] should_failslab+0x5/0xf [ 386.172991] __kmalloc+0x2d3/0x770 [ 386.176634] ? ext4_find_extent+0x75d/0x9d0 [ 386.180952] ? __lock_acquire+0x6ee/0x49c0 [ 386.185186] ext4_find_extent+0x75d/0x9d0 [ 386.189333] ext4_ext_map_blocks+0x1a1/0x5100 [ 386.193836] ? ext4_find_delalloc_cluster+0xb0/0xb0 [ 386.198876] ? lock_acquire+0x170/0x400 [ 386.202998] ? ext4_map_blocks+0x883/0x1970 [ 386.207330] ext4_map_blocks+0x8e5/0x1970 [ 386.211479] ? ext4_issue_zeroout+0x160/0x160 [ 386.215977] ? ext4_journal_check_start+0x185/0x220 [ 386.221011] ? __ext4_journal_start_sb+0x12d/0x490 [ 386.225946] ? ext4_alloc_file_blocks+0x24c/0xaf0 [ 386.230803] ext4_alloc_file_blocks+0x287/0xaf0 [ 386.235503] ? ext4_ext_search_right+0xb50/0xb50 [ 386.240268] ? lock_acquire+0x170/0x400 [ 386.244291] ext4_fallocate+0x91a/0x20a0 [ 386.248387] ? ext4_insert_range+0x12d0/0x12d0 [ 386.253037] vfs_fallocate+0x484/0x990 [ 386.256930] ioctl_preallocate+0x186/0x200 [ 386.261174] ? ioctl_file_clone+0x120/0x120 [ 386.265517] do_vfs_ioctl+0x10d1/0x12e0 [ 386.269506] ? selinux_file_ioctl+0x46c/0x5d0 [ 386.274052] ? selinux_file_ioctl+0x125/0x5d0 [ 386.278662] ? check_preemption_disabled+0x41/0x280 [ 386.283681] ? ioctl_preallocate+0x200/0x200 [ 386.288089] ? selinux_file_mprotect+0x600/0x600 [ 386.292842] ? __fget+0x340/0x510 [ 386.296298] ? iterate_fd+0x350/0x350 [ 386.300149] ? security_file_ioctl+0x6c/0xb0 [ 386.304553] ksys_ioctl+0x9b/0xc0 [ 386.308001] __x64_sys_ioctl+0x6f/0xb0 [ 386.311881] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 386.316459] do_syscall_64+0xf9/0x620 [ 386.320345] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 386.325526] RIP: 0033:0x45c4a9 [ 386.328713] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 386.347607] RSP: 002b:00007f8a1d831c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 386.355308] RAX: ffffffffffffffda RBX: 00007f8a1d8326d4 RCX: 000000000045c4a9 [ 386.362567] RDX: 0000000020000040 RSI: 0000000040305828 RDI: 0000000000000004 [ 386.369841] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 386.377114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 386.384395] R13: 0000000000000321 R14: 00000000004c54a5 R15: 0000000000000000 [ 386.391779] CPU: 1 PID: 16099 Comm: syz-executor.0 Not tainted 4.19.108-syzkaller #0 [ 386.399686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 386.409231] Call Trace: [ 386.411848] dump_stack+0x188/0x20d [ 386.415511] should_fail.cold+0xa/0x1b [ 386.419434] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 386.424578] __should_failslab+0x115/0x180 [ 386.428826] should_failslab+0x5/0xf [ 386.432574] __kmalloc_track_caller+0x2cb/0x770 [ 386.437264] ? strndup_user+0x70/0xe0 [ 386.441090] ? __might_fault+0x192/0x1d0 [ 386.445213] ? _copy_from_user+0xd2/0x140 [ 386.449393] memdup_user+0x22/0xb0 [ 386.453072] strndup_user+0x70/0xe0 [ 386.456704] ksys_mount+0x77/0x150 [ 386.460256] __x64_sys_mount+0xba/0x150 [ 386.464239] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 386.468829] do_syscall_64+0xf9/0x620 [ 386.472761] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 386.478052] RIP: 0033:0x45c4a9 [ 386.481254] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 386.500155] RSP: 002b:00007f081ba2dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 386.507863] RAX: ffffffffffffffda RBX: 00007f081ba2e6d4 RCX: 000000000045c4a9 [ 386.515139] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000020000140 [ 386.522402] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 386.529660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 386.536927] R13: 000000000000074a R14: 00000000004c9d80 R15: 0000000000000001 22:33:39 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a", 0x4e}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, 0x0}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) 22:33:39 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 22:33:39 executing program 3 (fault-call:5 fault-nth:1): ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x0, 0x40000002}) 22:33:39 executing program 0 (fault-call:5 fault-nth:2): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x0, 0x0) [ 388.462226] FAULT_INJECTION: forcing a failure. [ 388.462226] name failslab, interval 1, probability 0, space 0, times 0 [ 388.491510] CPU: 1 PID: 16104 Comm: syz-executor.0 Not tainted 4.19.108-syzkaller #0 [ 388.496631] FAULT_INJECTION: forcing a failure. [ 388.496631] name failslab, interval 1, probability 0, space 0, times 0 [ 388.499444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 388.499451] Call Trace: [ 388.499476] dump_stack+0x188/0x20d [ 388.499499] should_fail.cold+0xa/0x1b [ 388.499517] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 388.499541] __should_failslab+0x115/0x180 [ 388.499555] should_failslab+0x5/0xf [ 388.499566] kmem_cache_alloc+0x29f/0x710 [ 388.499582] ? find_held_lock+0x2d/0x110 [ 388.499603] getname_flags+0xd2/0x5b0 [ 388.499619] user_path_at_empty+0x2a/0x50 [ 388.499642] do_mount+0x13d/0x2a40 [ 388.563966] ? copy_mount_string+0x40/0x40 [ 388.568238] ? __might_fault+0x192/0x1d0 [ 388.572488] ? _copy_from_user+0xd2/0x140 [ 388.576693] ? copy_mount_options+0x27a/0x390 [ 388.581212] ksys_mount+0xd7/0x150 [ 388.584835] __x64_sys_mount+0xba/0x150 [ 388.588838] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 388.593543] do_syscall_64+0xf9/0x620 [ 388.597470] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 388.602674] RIP: 0033:0x45c4a9 [ 388.606010] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 388.624919] RSP: 002b:00007f081ba2dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 388.632640] RAX: ffffffffffffffda RBX: 00007f081ba2e6d4 RCX: 000000000045c4a9 [ 388.639926] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000020000140 [ 388.647212] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 388.654504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 388.661934] R13: 000000000000074a R14: 00000000004c9d80 R15: 0000000000000002 [ 388.679764] CPU: 1 PID: 16109 Comm: syz-executor.3 Not tainted 4.19.108-syzkaller #0 [ 388.687687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 388.697060] Call Trace: [ 388.699675] dump_stack+0x188/0x20d [ 388.703323] should_fail.cold+0xa/0x1b [ 388.707236] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 388.712374] ? __lock_is_held+0xad/0x140 [ 388.716472] __should_failslab+0x115/0x180 [ 388.720733] should_failslab+0x5/0xf [ 388.724471] __kmalloc+0x2d3/0x770 [ 388.728134] ? ext4_find_extent+0x75d/0x9d0 [ 388.732490] ? __lock_acquire+0x6ee/0x49c0 [ 388.736763] ext4_find_extent+0x75d/0x9d0 [ 388.740954] ext4_ext_map_blocks+0x1a1/0x5100 [ 388.745489] ? ext4_find_delalloc_cluster+0xb0/0xb0 [ 388.750551] ? lock_acquire+0x170/0x400 [ 388.754557] ? ext4_map_blocks+0x883/0x1970 [ 388.758922] ext4_map_blocks+0x8e5/0x1970 22:33:39 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a", 0x4e}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, 0x0}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) 22:33:40 executing program 0 (fault-call:5 fault-nth:3): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x0, 0x0) [ 388.763101] ? ext4_issue_zeroout+0x160/0x160 [ 388.767633] ? ext4_journal_check_start+0x185/0x220 [ 388.772820] ? __ext4_journal_start_sb+0x12d/0x490 [ 388.777779] ? ext4_alloc_file_blocks+0x24c/0xaf0 [ 388.782659] ext4_alloc_file_blocks+0x287/0xaf0 [ 388.785902] FAULT_INJECTION: forcing a failure. [ 388.785902] name failslab, interval 1, probability 0, space 0, times 0 [ 388.787359] ? ext4_ext_search_right+0xb50/0xb50 [ 388.787379] ? lock_acquire+0x170/0x400 [ 388.787402] ext4_fallocate+0x91a/0x20a0 [ 388.787426] ? ext4_insert_range+0x12d0/0x12d0 [ 388.815984] vfs_fallocate+0x484/0x990 [ 388.819891] ioctl_preallocate+0x186/0x200 [ 388.824131] ? ioctl_file_clone+0x120/0x120 [ 388.828469] do_vfs_ioctl+0x10d1/0x12e0 [ 388.832463] ? selinux_file_ioctl+0x46c/0x5d0 [ 388.837099] ? selinux_file_ioctl+0x125/0x5d0 [ 388.841621] ? check_preemption_disabled+0x41/0x280 [ 388.846680] ? ioctl_preallocate+0x200/0x200 [ 388.851106] ? selinux_file_mprotect+0x600/0x600 [ 388.855882] ? __fget+0x340/0x510 [ 388.859354] ? iterate_fd+0x350/0x350 [ 388.863184] ? security_file_ioctl+0x6c/0xb0 [ 388.867601] ksys_ioctl+0x9b/0xc0 [ 388.871083] __x64_sys_ioctl+0x6f/0xb0 [ 388.874976] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 388.879565] do_syscall_64+0xf9/0x620 [ 388.883390] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 388.888582] RIP: 0033:0x45c4a9 [ 388.891772] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 22:33:40 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 388.910681] RSP: 002b:00007f8a1d831c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 388.918499] RAX: ffffffffffffffda RBX: 00007f8a1d8326d4 RCX: 000000000045c4a9 [ 388.925793] RDX: 0000000020000040 RSI: 0000000040305828 RDI: 0000000000000004 [ 388.933086] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 388.940377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 388.947664] R13: 0000000000000321 R14: 00000000004c54a5 R15: 0000000000000001 [ 388.962401] CPU: 0 PID: 16118 Comm: syz-executor.0 Not tainted 4.19.108-syzkaller #0 [ 388.970318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 388.979687] Call Trace: [ 388.982301] dump_stack+0x188/0x20d [ 388.985961] should_fail.cold+0xa/0x1b [ 388.989873] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 388.995007] __should_failslab+0x115/0x180 [ 388.999267] should_failslab+0x5/0xf [ 389.003000] kmem_cache_alloc+0x29f/0x710 [ 389.007180] ? lock_downgrade+0x740/0x740 [ 389.011354] alloc_vfsmnt+0x23/0x780 [ 389.015096] vfs_kern_mount.part.0+0x27/0x400 [ 389.019746] do_mount+0x4f4/0x2a40 [ 389.023419] ? copy_mount_string+0x40/0x40 [ 389.027683] ? __might_fault+0x192/0x1d0 [ 389.031770] ? _copy_from_user+0xd2/0x140 [ 389.035946] ? copy_mount_options+0x27a/0x390 [ 389.040474] ksys_mount+0xd7/0x150 [ 389.044044] __x64_sys_mount+0xba/0x150 [ 389.048046] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 389.052659] do_syscall_64+0xf9/0x620 [ 389.056498] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 389.061708] RIP: 0033:0x45c4a9 22:33:40 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$cont(0x9, r0, 0x0, 0x0) [ 389.064928] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 389.083839] RSP: 002b:00007f081ba2dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 389.091600] RAX: ffffffffffffffda RBX: 00007f081ba2e6d4 RCX: 000000000045c4a9 [ 389.098968] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000020000140 [ 389.106254] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 22:33:40 executing program 3 (fault-call:5 fault-nth:2): ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x0, 0x40000002}) 22:33:40 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x2, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) [ 389.113538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 389.120803] R13: 000000000000074a R14: 00000000004c9d80 R15: 0000000000000003 22:33:40 executing program 0 (fault-call:5 fault-nth:4): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x0, 0x0) [ 389.247975] FAULT_INJECTION: forcing a failure. [ 389.247975] name failslab, interval 1, probability 0, space 0, times 0 [ 389.275126] CPU: 1 PID: 16136 Comm: syz-executor.0 Not tainted 4.19.108-syzkaller #0 [ 389.283171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 389.292551] Call Trace: [ 389.295162] dump_stack+0x188/0x20d [ 389.298828] should_fail.cold+0xa/0x1b [ 389.302745] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 389.307887] __should_failslab+0x115/0x180 [ 389.312145] should_failslab+0x5/0xf [ 389.315863] kmem_cache_alloc+0x29f/0x710 [ 389.320029] ? lock_downgrade+0x740/0x740 [ 389.324216] alloc_vfsmnt+0x23/0x780 [ 389.328109] vfs_kern_mount.part.0+0x27/0x400 [ 389.332640] do_mount+0x4f4/0x2a40 [ 389.336215] ? copy_mount_string+0x40/0x40 [ 389.340487] ? __might_fault+0x192/0x1d0 [ 389.344574] ? _copy_from_user+0xd2/0x140 [ 389.348754] ? copy_mount_options+0x27a/0x390 [ 389.353277] ksys_mount+0xd7/0x150 [ 389.356840] __x64_sys_mount+0xba/0x150 [ 389.360839] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 389.365443] do_syscall_64+0xf9/0x620 [ 389.369284] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 389.374505] RIP: 0033:0x45c4a9 [ 389.377725] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 22:33:40 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x0, 0x40000002}) 22:33:40 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:33:40 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x2, &(0x7f0000000040)={0x7000000, 0x0, 0x0, 0x40000002}) [ 389.396647] RSP: 002b:00007f081ba2dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 389.404380] RAX: ffffffffffffffda RBX: 00007f081ba2e6d4 RCX: 000000000045c4a9 [ 389.411674] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000020000140 [ 389.419064] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 389.426351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 389.433645] R13: 000000000000074a R14: 00000000004c9d80 R15: 0000000000000004 22:33:40 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x3, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 22:33:40 executing program 0 (fault-call:5 fault-nth:5): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x0, 0x0) [ 389.612093] FAULT_INJECTION: forcing a failure. [ 389.612093] name failslab, interval 1, probability 0, space 0, times 0 [ 389.624677] CPU: 1 PID: 16260 Comm: syz-executor.0 Not tainted 4.19.108-syzkaller #0 [ 389.632598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 389.641967] Call Trace: [ 389.644587] dump_stack+0x188/0x20d [ 389.648302] should_fail.cold+0xa/0x1b [ 389.652229] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 389.657507] __should_failslab+0x115/0x180 [ 389.661808] should_failslab+0x5/0xf [ 389.665537] __kmalloc_track_caller+0x2cb/0x770 [ 389.670408] ? kstrdup_const+0x53/0x80 [ 389.674335] ? kmem_cache_alloc+0x31b/0x710 [ 389.678800] kstrdup+0x36/0x70 [ 389.682005] kstrdup_const+0x53/0x80 [ 389.685719] alloc_vfsmnt+0xb5/0x780 [ 389.689444] vfs_kern_mount.part.0+0x27/0x400 [ 389.693966] do_mount+0x4f4/0x2a40 [ 389.697512] ? copy_mount_string+0x40/0x40 [ 389.701754] ? __might_fault+0x192/0x1d0 [ 389.705822] ? _copy_from_user+0xd2/0x140 [ 389.709979] ? copy_mount_options+0x27a/0x390 [ 389.714478] ksys_mount+0xd7/0x150 [ 389.718018] __x64_sys_mount+0xba/0x150 [ 389.722089] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 389.726696] do_syscall_64+0xf9/0x620 [ 389.730518] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 389.735705] RIP: 0033:0x45c4a9 [ 389.738902] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 389.757811] RSP: 002b:00007f081ba2dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 389.765791] RAX: ffffffffffffffda RBX: 00007f081ba2e6d4 RCX: 000000000045c4a9 [ 389.773072] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000020000140 [ 389.780366] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 389.787753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 389.795129] R13: 000000000000074a R14: 00000000004c9d80 R15: 0000000000000005 22:33:43 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a", 0x4e}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, 0x0}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) 22:33:43 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x4b47, &(0x7f0000000040)={0x7000000, 0x0, 0x0, 0x40000002}) 22:33:43 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x4, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 22:33:43 executing program 0 (fault-call:5 fault-nth:6): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x0, 0x0) 22:33:43 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x4b49, &(0x7f0000000040)={0x7000000, 0x0, 0x0, 0x40000002}) 22:33:43 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:33:43 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d7", 0x75}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, 0x0}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) [ 392.058020] FAULT_INJECTION: forcing a failure. [ 392.058020] name failslab, interval 1, probability 0, space 0, times 0 [ 392.074964] CPU: 0 PID: 16377 Comm: syz-executor.0 Not tainted 4.19.108-syzkaller #0 [ 392.082905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 392.092407] Call Trace: [ 392.095022] dump_stack+0x188/0x20d [ 392.098678] should_fail.cold+0xa/0x1b [ 392.102599] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 392.108434] __should_failslab+0x115/0x180 [ 392.112700] should_failslab+0x5/0xf [ 392.116439] kmem_cache_alloc+0x29f/0x710 [ 392.120622] ? wait_for_completion+0x3c0/0x3c0 [ 392.125239] getname_kernel+0x4e/0x370 [ 392.129156] kern_path+0x1b/0x40 [ 392.132543] lookup_bdev.part.0+0x73/0x1b0 [ 392.136898] ? bd_acquire+0x2c0/0x2c0 [ 392.140825] blkdev_get_by_path+0x79/0x130 [ 392.145091] mount_bdev+0x5b/0x3c0 [ 392.148813] ? hfsplus_iget+0x790/0x790 [ 392.152816] mount_fs+0xa3/0x30c 22:33:43 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x541b, &(0x7f0000000040)={0x7000000, 0x0, 0x0, 0x40000002}) [ 392.156217] vfs_kern_mount.part.0+0x68/0x400 [ 392.160780] do_mount+0x4f4/0x2a40 [ 392.164357] ? copy_mount_string+0x40/0x40 [ 392.168615] ? __might_fault+0x192/0x1d0 [ 392.172695] ? _copy_from_user+0xd2/0x140 [ 392.176861] ? copy_mount_options+0x27a/0x390 [ 392.181559] ksys_mount+0xd7/0x150 [ 392.185155] __x64_sys_mount+0xba/0x150 [ 392.189158] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 392.193778] do_syscall_64+0xf9/0x620 [ 392.197634] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 392.202844] RIP: 0033:0x45c4a9 [ 392.206055] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 392.225082] RSP: 002b:00007f081ba2dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 392.233462] RAX: ffffffffffffffda RBX: 00007f081ba2e6d4 RCX: 000000000045c4a9 [ 392.241823] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000020000140 [ 392.249349] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 392.256661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 392.263938] R13: 000000000000074a R14: 00000000004c9d80 R15: 0000000000000006 22:33:43 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:33:43 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x5421, &(0x7f0000000040)={0x7000000, 0x0, 0x0, 0x40000002}) 22:33:43 executing program 0 (fault-call:5 fault-nth:7): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x0, 0x0) 22:33:43 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x5, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 22:33:43 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x5450, &(0x7f0000000040)={0x7000000, 0x0, 0x0, 0x40000002}) [ 392.523745] FAULT_INJECTION: forcing a failure. [ 392.523745] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 392.535708] CPU: 0 PID: 16488 Comm: syz-executor.0 Not tainted 4.19.108-syzkaller #0 [ 392.543740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 392.553284] Call Trace: [ 392.555994] dump_stack+0x188/0x20d [ 392.559653] should_fail.cold+0xa/0x1b [ 392.563574] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 392.568715] ? mark_held_locks+0xf0/0xf0 [ 392.573079] __alloc_pages_nodemask+0x1c7/0x6a0 [ 392.577780] ? __alloc_pages_slowpath+0x26a0/0x26a0 [ 392.582812] ? fs_reclaim_acquire+0x10/0x10 [ 392.587142] ? should_fail+0x142/0x7bc [ 392.591141] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 392.596472] cache_grow_begin+0x8e/0x8a0 [ 392.600569] kmem_cache_alloc+0x648/0x710 [ 392.604914] ? wait_for_completion+0x3c0/0x3c0 [ 392.609526] getname_kernel+0x4e/0x370 [ 392.613443] kern_path+0x1b/0x40 [ 392.616832] lookup_bdev.part.0+0x73/0x1b0 22:33:43 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x5451, &(0x7f0000000040)={0x7000000, 0x0, 0x0, 0x40000002}) [ 392.621087] ? bd_acquire+0x2c0/0x2c0 [ 392.624916] blkdev_get_by_path+0x79/0x130 [ 392.629174] mount_bdev+0x5b/0x3c0 [ 392.632734] ? hfsplus_iget+0x790/0x790 [ 392.636738] mount_fs+0xa3/0x30c [ 392.640134] vfs_kern_mount.part.0+0x68/0x400 [ 392.644655] do_mount+0x4f4/0x2a40 [ 392.648247] ? copy_mount_string+0x40/0x40 [ 392.652504] ? __might_fault+0x192/0x1d0 [ 392.656599] ? _copy_from_user+0xd2/0x140 [ 392.660778] ? copy_mount_options+0x27a/0x390 [ 392.665301] ksys_mount+0xd7/0x150 [ 392.668930] __x64_sys_mount+0xba/0x150 [ 392.672939] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 392.677550] do_syscall_64+0xf9/0x620 [ 392.681377] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 392.686592] RIP: 0033:0x45c4a9 [ 392.689808] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 392.708870] RSP: 002b:00007f081ba2dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 22:33:44 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x5452, &(0x7f0000000040)={0x7000000, 0x0, 0x0, 0x40000002}) 22:33:44 executing program 0 (fault-call:5 fault-nth:8): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x0, 0x0) [ 392.717612] RAX: ffffffffffffffda RBX: 00007f081ba2e6d4 RCX: 000000000045c4a9 [ 392.725902] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000020000140 [ 392.733211] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 392.740503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 392.747793] R13: 000000000000074a R14: 00000000004c9d80 R15: 0000000000000007 [ 392.760183] hfsplus: unable to find HFS+ superblock [ 392.859232] FAULT_INJECTION: forcing a failure. [ 392.859232] name failslab, interval 1, probability 0, space 0, times 0 [ 392.878667] CPU: 0 PID: 16608 Comm: syz-executor.0 Not tainted 4.19.108-syzkaller #0 [ 392.887023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 392.896664] Call Trace: [ 392.899287] dump_stack+0x188/0x20d [ 392.902957] should_fail.cold+0xa/0x1b [ 392.907199] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 392.912354] ? __lock_is_held+0xad/0x140 [ 392.917192] ? set_bdev_super+0x110/0x110 [ 392.921340] ? set_bdev_super+0x110/0x110 [ 392.925587] __should_failslab+0x115/0x180 [ 392.929915] should_failslab+0x5/0xf [ 392.934426] kmem_cache_alloc_trace+0x2c6/0x7a0 [ 392.939117] ? set_bdev_super+0x110/0x110 [ 392.943387] ? ns_test_super+0x50/0x50 [ 392.947739] sget_userns+0x11f/0xcd0 [ 392.951569] ? set_bdev_super+0x110/0x110 [ 392.955915] ? ns_test_super+0x50/0x50 [ 392.959819] ? set_bdev_super+0x110/0x110 [ 392.963981] ? ns_test_super+0x50/0x50 [ 392.967871] sget+0x10d/0x150 [ 392.970997] mount_bdev+0xf8/0x3c0 [ 392.974549] ? hfsplus_iget+0x790/0x790 [ 392.978546] mount_fs+0xa3/0x30c [ 392.981921] vfs_kern_mount.part.0+0x68/0x400 [ 392.986413] do_mount+0x4f4/0x2a40 [ 392.989976] ? copy_mount_string+0x40/0x40 [ 392.994251] ? __might_fault+0x192/0x1d0 [ 392.998340] ? _copy_from_user+0xd2/0x140 [ 393.002499] ? copy_mount_options+0x27a/0x390 [ 393.007121] ksys_mount+0xd7/0x150 [ 393.010679] __x64_sys_mount+0xba/0x150 [ 393.014871] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 393.019485] do_syscall_64+0xf9/0x620 [ 393.023509] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 393.028714] RIP: 0033:0x45c4a9 [ 393.031939] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 393.051402] RSP: 002b:00007f081ba2dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 393.059505] RAX: ffffffffffffffda RBX: 00007f081ba2e6d4 RCX: 000000000045c4a9 [ 393.067089] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000020000140 [ 393.074363] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 393.081631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 393.089051] R13: 000000000000074a R14: 00000000004c9d80 R15: 0000000000000008 22:33:46 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:33:46 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x7, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 22:33:46 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x5460, &(0x7f0000000040)={0x7000000, 0x0, 0x0, 0x40000002}) 22:33:46 executing program 0 (fault-call:5 fault-nth:9): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x0, 0x0) [ 395.128026] FAULT_INJECTION: forcing a failure. [ 395.128026] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 395.139887] CPU: 1 PID: 16619 Comm: syz-executor.0 Not tainted 4.19.108-syzkaller #0 [ 395.147792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 395.157166] Call Trace: [ 395.159792] dump_stack+0x188/0x20d [ 395.163442] should_fail.cold+0xa/0x1b [ 395.167358] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 395.172514] ? mark_held_locks+0xf0/0xf0 [ 395.176605] __alloc_pages_nodemask+0x1c7/0x6a0 [ 395.181302] ? __alloc_pages_slowpath+0x26a0/0x26a0 [ 395.186351] ? fs_reclaim_acquire+0x10/0x10 [ 395.190707] ? should_fail+0x142/0x7bc [ 395.194643] cache_grow_begin+0x8e/0x8a0 [ 395.198745] kmem_cache_alloc_trace+0x6b5/0x7a0 [ 395.203444] ? set_bdev_super+0x110/0x110 [ 395.207619] ? ns_test_super+0x50/0x50 [ 395.211540] sget_userns+0x11f/0xcd0 [ 395.216583] ? set_bdev_super+0x110/0x110 [ 395.220767] ? ns_test_super+0x50/0x50 [ 395.224697] ? set_bdev_super+0x110/0x110 [ 395.229214] ? ns_test_super+0x50/0x50 [ 395.233118] sget+0x10d/0x150 [ 395.236264] mount_bdev+0xf8/0x3c0 [ 395.240040] ? hfsplus_iget+0x790/0x790 [ 395.244174] mount_fs+0xa3/0x30c [ 395.247573] vfs_kern_mount.part.0+0x68/0x400 [ 395.252098] do_mount+0x4f4/0x2a40 [ 395.255672] ? copy_mount_string+0x40/0x40 [ 395.260026] ? __might_fault+0x192/0x1d0 [ 395.264209] ? _copy_from_user+0xd2/0x140 [ 395.268587] ? copy_mount_options+0x27a/0x390 [ 395.273108] ksys_mount+0xd7/0x150 [ 395.276680] __x64_sys_mount+0xba/0x150 [ 395.280766] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 395.285509] do_syscall_64+0xf9/0x620 [ 395.289448] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 395.294773] RIP: 0033:0x45c4a9 [ 395.298063] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 395.316963] RSP: 002b:00007f081ba2dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 395.325087] RAX: ffffffffffffffda RBX: 00007f081ba2e6d4 RCX: 000000000045c4a9 [ 395.332368] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000020000140 [ 395.339932] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 395.347409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 395.354882] R13: 000000000000074a R14: 00000000004c9d80 R15: 0000000000000009 [ 395.366018] hfsplus: unable to find HFS+ superblock 22:33:46 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:33:46 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d7", 0x75}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, 0x0}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) 22:33:46 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40049409, &(0x7f0000000040)={0x7000000, 0x0, 0x0, 0x40000002}) 22:33:46 executing program 0 (fault-call:5 fault-nth:10): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x0, 0x0) 22:33:46 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x8, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) [ 395.609863] FAULT_INJECTION: forcing a failure. [ 395.609863] name failslab, interval 1, probability 0, space 0, times 0 [ 395.660675] CPU: 0 PID: 16731 Comm: syz-executor.0 Not tainted 4.19.108-syzkaller #0 [ 395.668646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 395.678117] Call Trace: [ 395.680744] dump_stack+0x188/0x20d [ 395.684717] should_fail.cold+0xa/0x1b [ 395.688633] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 395.693761] ? __lock_is_held+0xad/0x140 [ 395.697961] __should_failslab+0x115/0x180 [ 395.702236] should_failslab+0x5/0xf [ 395.706171] __kmalloc+0x2d3/0x770 [ 395.710059] ? prealloc_shrinker+0xd6/0x340 [ 395.714394] ? __lockdep_init_map+0x100/0x5a0 [ 395.719138] prealloc_shrinker+0xd6/0x340 [ 395.723309] sget_userns+0x773/0xcd0 [ 395.727154] ? set_bdev_super+0x110/0x110 [ 395.731322] ? ns_test_super+0x50/0x50 [ 395.735240] ? set_bdev_super+0x110/0x110 [ 395.739537] ? ns_test_super+0x50/0x50 [ 395.743735] sget+0x10d/0x150 [ 395.747067] mount_bdev+0xf8/0x3c0 [ 395.750666] ? hfsplus_iget+0x790/0x790 [ 395.754667] mount_fs+0xa3/0x30c [ 395.758670] vfs_kern_mount.part.0+0x68/0x400 [ 395.763288] do_mount+0x4f4/0x2a40 [ 395.766943] ? copy_mount_string+0x40/0x40 [ 395.771204] ? __might_fault+0x192/0x1d0 [ 395.775360] ? _copy_from_user+0xd2/0x140 [ 395.779641] ? copy_mount_options+0x27a/0x390 [ 395.784350] ksys_mount+0xd7/0x150 [ 395.788744] __x64_sys_mount+0xba/0x150 [ 395.793669] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 395.798617] do_syscall_64+0xf9/0x620 [ 395.802728] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 395.808863] RIP: 0033:0x45c4a9 [ 395.812060] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 395.833003] RSP: 002b:00007f081ba2dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 395.840918] RAX: ffffffffffffffda RBX: 00007f081ba2e6d4 RCX: 000000000045c4a9 [ 395.849280] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000020000140 22:33:47 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40086602, &(0x7f0000000040)={0x7000000, 0x0, 0x0, 0x40000002}) [ 395.857449] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 395.866656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 395.874819] R13: 000000000000074a R14: 00000000004c9d80 R15: 000000000000000a 22:33:47 executing program 0 (fault-call:5 fault-nth:11): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x0, 0x0) 22:33:47 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x4, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) [ 395.983706] FAULT_INJECTION: forcing a failure. [ 395.983706] name failslab, interval 1, probability 0, space 0, times 0 [ 396.009677] CPU: 1 PID: 16847 Comm: syz-executor.0 Not tainted 4.19.108-syzkaller #0 [ 396.020105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 396.033460] Call Trace: [ 396.037475] dump_stack+0x188/0x20d [ 396.041230] should_fail.cold+0xa/0x1b [ 396.047209] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 396.053825] ? __lock_is_held+0xad/0x140 [ 396.059846] __should_failslab+0x115/0x180 [ 396.067091] should_failslab+0x5/0xf [ 396.072862] __kmalloc+0x2d3/0x770 [ 396.076689] ? __list_lru_init+0xd3/0x700 [ 396.080887] __list_lru_init+0xd3/0x700 [ 396.085061] ? up_write+0x18/0x150 [ 396.088811] sget_userns+0x79f/0xcd0 [ 396.092980] ? set_bdev_super+0x110/0x110 [ 396.097537] ? ns_test_super+0x50/0x50 [ 396.102803] ? set_bdev_super+0x110/0x110 [ 396.107290] ? ns_test_super+0x50/0x50 [ 396.111732] sget+0x10d/0x150 [ 396.114944] mount_bdev+0xf8/0x3c0 [ 396.118501] ? hfsplus_iget+0x790/0x790 [ 396.123284] mount_fs+0xa3/0x30c [ 396.126822] vfs_kern_mount.part.0+0x68/0x400 [ 396.131726] do_mount+0x4f4/0x2a40 [ 396.135718] ? copy_mount_string+0x40/0x40 [ 396.140781] ? __might_fault+0x192/0x1d0 [ 396.147478] ? _copy_from_user+0xd2/0x140 [ 396.152875] ? copy_mount_options+0x27a/0x390 [ 396.157475] ksys_mount+0xd7/0x150 [ 396.162147] __x64_sys_mount+0xba/0x150 [ 396.166717] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 396.171505] do_syscall_64+0xf9/0x620 [ 396.176124] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 396.183626] RIP: 0033:0x45c4a9 [ 396.187562] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 396.209292] RSP: 002b:00007f081ba2dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 396.217095] RAX: ffffffffffffffda RBX: 00007f081ba2e6d4 RCX: 000000000045c4a9 [ 396.224580] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000020000140 [ 396.232149] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 396.239908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 396.248582] R13: 000000000000074a R14: 00000000004c9d80 R15: 000000000000000b 22:33:49 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:33:49 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40087602, &(0x7f0000000040)={0x7000000, 0x0, 0x0, 0x40000002}) 22:33:49 executing program 0 (fault-call:5 fault-nth:12): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x0, 0x0) 22:33:49 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) [ 398.189089] FAULT_INJECTION: forcing a failure. [ 398.189089] name failslab, interval 1, probability 0, space 0, times 0 [ 398.214432] CPU: 0 PID: 16961 Comm: syz-executor.0 Not tainted 4.19.108-syzkaller #0 [ 398.223075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 398.232996] Call Trace: [ 398.235696] dump_stack+0x188/0x20d [ 398.239370] should_fail.cold+0xa/0x1b [ 398.243354] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 398.250213] ? __lock_is_held+0xad/0x140 [ 398.254830] __should_failslab+0x115/0x180 [ 398.259089] should_failslab+0x5/0xf [ 398.262939] kmem_cache_alloc_node_trace+0x272/0x750 [ 398.268643] ? rcu_read_lock_sched_held+0x10a/0x130 [ 398.273668] ? __kmalloc+0x5f8/0x770 [ 398.277482] __kmalloc_node+0x38/0x70 [ 398.281825] kvmalloc_node+0x61/0xf0 [ 398.285630] __list_lru_init+0x4c3/0x700 [ 398.289697] sget_userns+0x79f/0xcd0 [ 398.293412] ? set_bdev_super+0x110/0x110 [ 398.297863] ? ns_test_super+0x50/0x50 [ 398.302103] ? set_bdev_super+0x110/0x110 [ 398.306255] ? ns_test_super+0x50/0x50 [ 398.310496] sget+0x10d/0x150 [ 398.313605] mount_bdev+0xf8/0x3c0 [ 398.317144] ? hfsplus_iget+0x790/0x790 [ 398.321416] mount_fs+0xa3/0x30c [ 398.324777] vfs_kern_mount.part.0+0x68/0x400 [ 398.329265] do_mount+0x4f4/0x2a40 [ 398.332919] ? copy_mount_string+0x40/0x40 [ 398.338650] ? __might_fault+0x192/0x1d0 [ 398.342821] ? _copy_from_user+0xd2/0x140 [ 398.347002] ? copy_mount_options+0x27a/0x390 [ 398.352071] ksys_mount+0xd7/0x150 [ 398.355629] __x64_sys_mount+0xba/0x150 [ 398.359688] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 398.365067] do_syscall_64+0xf9/0x620 [ 398.368866] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 398.374102] RIP: 0033:0x45c4a9 [ 398.377517] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 398.410066] RSP: 002b:00007f081ba2dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 398.418205] RAX: ffffffffffffffda RBX: 00007f081ba2e6d4 RCX: 000000000045c4a9 [ 398.425761] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000020000140 [ 398.434604] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 398.442043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 398.449787] R13: 000000000000074a R14: 00000000004c9d80 R15: 000000000000000c 22:33:49 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:33:49 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x4020940d, &(0x7f0000000040)={0x7000000, 0x0, 0x0, 0x40000002}) 22:33:49 executing program 0 (fault-call:5 fault-nth:13): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x0, 0x0) 22:33:49 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x4, 0x0, 0x1, 0x0, r1, 0x0}]) 22:33:49 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d7", 0x75}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, 0x0}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) [ 398.691914] FAULT_INJECTION: forcing a failure. [ 398.691914] name failslab, interval 1, probability 0, space 0, times 0 [ 398.712182] CPU: 1 PID: 17073 Comm: syz-executor.0 Not tainted 4.19.108-syzkaller #0 [ 398.720237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 398.729610] Call Trace: [ 398.732223] dump_stack+0x188/0x20d [ 398.736685] should_fail.cold+0xa/0x1b [ 398.740798] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 398.745908] ? __lock_is_held+0xad/0x140 [ 398.751372] __should_failslab+0x115/0x180 [ 398.755857] should_failslab+0x5/0xf [ 398.759587] kmem_cache_alloc_trace+0x2c6/0x7a0 [ 398.764265] ? kasan_unpoison_shadow+0x30/0x40 [ 398.768868] ? kasan_kmalloc+0xbf/0xe0 [ 398.772834] __memcg_init_list_lru_node+0x7f/0x1e0 [ 398.777805] __list_lru_init+0x3ff/0x700 [ 398.782141] sget_userns+0x79f/0xcd0 [ 398.785849] ? set_bdev_super+0x110/0x110 [ 398.789994] ? ns_test_super+0x50/0x50 [ 398.793900] ? set_bdev_super+0x110/0x110 [ 398.798164] ? ns_test_super+0x50/0x50 [ 398.802306] sget+0x10d/0x150 [ 398.805419] mount_bdev+0xf8/0x3c0 [ 398.808982] ? hfsplus_iget+0x790/0x790 [ 398.812954] mount_fs+0xa3/0x30c [ 398.816338] vfs_kern_mount.part.0+0x68/0x400 [ 398.820863] do_mount+0x4f4/0x2a40 [ 398.824431] ? copy_mount_string+0x40/0x40 [ 398.828676] ? __might_fault+0x192/0x1d0 [ 398.832765] ? _copy_from_user+0xd2/0x140 [ 398.836922] ? copy_mount_options+0x27a/0x390 [ 398.841613] ksys_mount+0xd7/0x150 [ 398.845157] __x64_sys_mount+0xba/0x150 [ 398.849139] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 398.853865] do_syscall_64+0xf9/0x620 [ 398.857682] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 398.862971] RIP: 0033:0x45c4a9 [ 398.866175] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 22:33:50 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x4030582a, &(0x7f0000000040)={0x7000000, 0x0, 0x0, 0x40000002}) [ 398.885354] RSP: 002b:00007f081ba2dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 398.894223] RAX: ffffffffffffffda RBX: 00007f081ba2e6d4 RCX: 000000000045c4a9 [ 398.902184] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000020000140 [ 398.909636] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 398.917450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 398.924896] R13: 000000000000074a R14: 00000000004c9d80 R15: 000000000000000d 22:33:50 executing program 0 (fault-call:5 fault-nth:14): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x0, 0x0) 22:33:50 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x80086601, &(0x7f0000000040)={0x7000000, 0x0, 0x0, 0x40000002}) [ 399.035369] FAULT_INJECTION: forcing a failure. [ 399.035369] name failslab, interval 1, probability 0, space 0, times 0 [ 399.057166] CPU: 1 PID: 17189 Comm: syz-executor.0 Not tainted 4.19.108-syzkaller #0 [ 399.065107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 399.074481] Call Trace: [ 399.077098] dump_stack+0x188/0x20d [ 399.080762] should_fail.cold+0xa/0x1b [ 399.084793] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 399.090098] ? __lock_is_held+0xad/0x140 [ 399.094197] __should_failslab+0x115/0x180 [ 399.098461] should_failslab+0x5/0xf [ 399.102198] kmem_cache_alloc_trace+0x2c6/0x7a0 [ 399.107063] ? kasan_unpoison_shadow+0x30/0x40 [ 399.111678] ? kasan_kmalloc+0xbf/0xe0 [ 399.115600] __memcg_init_list_lru_node+0x7f/0x1e0 [ 399.120824] __list_lru_init+0x3ff/0x700 [ 399.125909] sget_userns+0x79f/0xcd0 [ 399.129645] ? set_bdev_super+0x110/0x110 [ 399.133868] ? ns_test_super+0x50/0x50 [ 399.137963] ? set_bdev_super+0x110/0x110 [ 399.142226] ? ns_test_super+0x50/0x50 [ 399.146628] sget+0x10d/0x150 [ 399.149808] mount_bdev+0xf8/0x3c0 [ 399.153382] ? hfsplus_iget+0x790/0x790 [ 399.157392] mount_fs+0xa3/0x30c [ 399.161760] vfs_kern_mount.part.0+0x68/0x400 [ 399.166285] do_mount+0x4f4/0x2a40 [ 399.169860] ? copy_mount_string+0x40/0x40 [ 399.174288] ? __might_fault+0x192/0x1d0 [ 399.178568] ? _copy_from_user+0xd2/0x140 [ 399.182833] ? copy_mount_options+0x27a/0x390 [ 399.187655] ksys_mount+0xd7/0x150 [ 399.191201] __x64_sys_mount+0xba/0x150 [ 399.195186] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 399.199828] do_syscall_64+0xf9/0x620 [ 399.203642] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 399.208988] RIP: 0033:0x45c4a9 [ 399.212193] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 399.231650] RSP: 002b:00007f081ba2dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 399.239684] RAX: ffffffffffffffda RBX: 00007f081ba2e6d4 RCX: 000000000045c4a9 [ 399.247062] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000020000140 [ 399.255046] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 399.262424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 399.269704] R13: 000000000000074a R14: 00000000004c9d80 R15: 000000000000000e 22:33:52 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:33:52 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x80087601, &(0x7f0000000040)={0x7000000, 0x0, 0x0, 0x40000002}) 22:33:52 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x4000, 0x0, 0x1, 0x0, r1, 0x0}]) 22:33:52 executing program 0 (fault-call:5 fault-nth:15): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x0, 0x0) [ 401.233842] FAULT_INJECTION: forcing a failure. [ 401.233842] name failslab, interval 1, probability 0, space 0, times 0 [ 401.271339] CPU: 1 PID: 17204 Comm: syz-executor.0 Not tainted 4.19.108-syzkaller #0 [ 401.279299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 401.289065] Call Trace: [ 401.291677] dump_stack+0x188/0x20d [ 401.295955] should_fail.cold+0xa/0x1b [ 401.299899] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 401.305047] ? __lock_is_held+0xad/0x140 [ 401.309151] __should_failslab+0x115/0x180 [ 401.313413] should_failslab+0x5/0xf [ 401.317322] kmem_cache_alloc_trace+0x2c6/0x7a0 [ 401.322465] ? kasan_unpoison_shadow+0x30/0x40 [ 401.327087] ? kasan_kmalloc+0xbf/0xe0 [ 401.331170] __memcg_init_list_lru_node+0x7f/0x1e0 [ 401.336598] __list_lru_init+0x3ff/0x700 [ 401.340918] sget_userns+0x79f/0xcd0 [ 401.345194] ? set_bdev_super+0x110/0x110 [ 401.349366] ? ns_test_super+0x50/0x50 [ 401.353272] ? set_bdev_super+0x110/0x110 [ 401.357901] ? ns_test_super+0x50/0x50 [ 401.361811] sget+0x10d/0x150 [ 401.364952] mount_bdev+0xf8/0x3c0 [ 401.369048] ? hfsplus_iget+0x790/0x790 [ 401.373035] mount_fs+0xa3/0x30c [ 401.376565] vfs_kern_mount.part.0+0x68/0x400 [ 401.381998] do_mount+0x4f4/0x2a40 [ 401.387031] ? copy_mount_string+0x40/0x40 [ 401.393338] ? __might_fault+0x192/0x1d0 [ 401.398635] ? _copy_from_user+0xd2/0x140 [ 401.408398] ? copy_mount_options+0x27a/0x390 [ 401.416059] ksys_mount+0xd7/0x150 [ 401.420168] __x64_sys_mount+0xba/0x150 [ 401.425072] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 401.432498] do_syscall_64+0xf9/0x620 [ 401.440294] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 401.448949] RIP: 0033:0x45c4a9 [ 401.453249] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 401.474610] RSP: 002b:00007f081ba2dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 401.483430] RAX: ffffffffffffffda RBX: 00007f081ba2e6d4 RCX: 000000000045c4a9 [ 401.492437] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000020000140 [ 401.500320] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 401.507619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 401.515345] R13: 000000000000074a R14: 00000000004c9d80 R15: 000000000000000f 22:33:52 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:33:52 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0xc0045878, &(0x7f0000000040)={0x7000000, 0x0, 0x0, 0x40000002}) 22:33:52 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:33:52 executing program 0 (fault-call:5 fault-nth:16): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x0, 0x0) 22:33:52 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x1000000, 0x0, 0x1, 0x0, r1, 0x0}]) 22:33:52 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d71a0220341ea32af193c9fa6511756f0a56cf70ef", 0x89}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, 0x0}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) [ 401.753799] FAULT_INJECTION: forcing a failure. [ 401.753799] name failslab, interval 1, probability 0, space 0, times 0 22:33:53 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0xc0045878, &(0x7f0000000040)={0x7000000, 0x0, 0x0, 0x40000002}) [ 401.842870] CPU: 1 PID: 17318 Comm: syz-executor.0 Not tainted 4.19.108-syzkaller #0 [ 401.852007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 401.861737] Call Trace: [ 401.864354] dump_stack+0x188/0x20d [ 401.868107] should_fail.cold+0xa/0x1b [ 401.872245] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 401.879254] ? __lock_is_held+0xad/0x140 [ 401.884010] __should_failslab+0x115/0x180 [ 401.888993] should_failslab+0x5/0xf [ 401.892735] kmem_cache_alloc_trace+0x2c6/0x7a0 [ 401.897429] ? kasan_unpoison_shadow+0x30/0x40 [ 401.902671] ? kasan_kmalloc+0xbf/0xe0 [ 401.906763] __memcg_init_list_lru_node+0x7f/0x1e0 [ 401.912980] __list_lru_init+0x3ff/0x700 [ 401.918461] sget_userns+0x79f/0xcd0 [ 401.922898] ? set_bdev_super+0x110/0x110 [ 401.927795] ? ns_test_super+0x50/0x50 [ 401.932866] ? set_bdev_super+0x110/0x110 [ 401.937075] ? ns_test_super+0x50/0x50 22:33:53 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:33:53 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 401.941984] sget+0x10d/0x150 [ 401.945538] mount_bdev+0xf8/0x3c0 [ 401.949361] ? hfsplus_iget+0x790/0x790 [ 401.953362] mount_fs+0xa3/0x30c [ 401.957277] vfs_kern_mount.part.0+0x68/0x400 [ 401.962268] do_mount+0x4f4/0x2a40 [ 401.966384] ? copy_mount_string+0x40/0x40 [ 401.970837] ? __might_fault+0x192/0x1d0 [ 401.976100] ? _copy_from_user+0xd2/0x140 [ 401.981056] ? copy_mount_options+0x27a/0x390 [ 401.986077] ksys_mount+0xd7/0x150 22:33:53 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0xc0189436, &(0x7f0000000040)={0x7000000, 0x0, 0x0, 0x40000002}) [ 401.990034] __x64_sys_mount+0xba/0x150 [ 401.995522] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 402.000944] do_syscall_64+0xf9/0x620 [ 402.005078] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 402.011369] RIP: 0033:0x45c4a9 [ 402.014593] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 402.033695] RSP: 002b:00007f081ba2dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 402.041425] RAX: ffffffffffffffda RBX: 00007f081ba2e6d4 RCX: 000000000045c4a9 [ 402.048714] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000020000140 [ 402.056149] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 402.063524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 402.070990] R13: 000000000000074a R14: 00000000004c9d80 R15: 0000000000000010 22:33:53 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x4000000, 0x0, 0x1, 0x0, r1, 0x0}]) 22:33:53 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0xc020660b, &(0x7f0000000040)={0x7000000, 0x0, 0x0, 0x40000002}) 22:33:53 executing program 0 (fault-call:5 fault-nth:17): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x0, 0x0) 22:33:53 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 402.223840] FAULT_INJECTION: forcing a failure. [ 402.223840] name failslab, interval 1, probability 0, space 0, times 0 [ 402.247681] CPU: 1 PID: 17475 Comm: syz-executor.0 Not tainted 4.19.108-syzkaller #0 [ 402.255887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 402.265440] Call Trace: [ 402.268059] dump_stack+0x188/0x20d [ 402.271748] should_fail.cold+0xa/0x1b [ 402.276944] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 402.282116] ? __lock_is_held+0xad/0x140 [ 402.286687] __should_failslab+0x115/0x180 [ 402.291238] should_failslab+0x5/0xf [ 402.295502] kmem_cache_alloc_trace+0x2c6/0x7a0 [ 402.300480] ? kasan_unpoison_shadow+0x30/0x40 [ 402.306725] ? kasan_kmalloc+0xbf/0xe0 [ 402.310675] __memcg_init_list_lru_node+0x7f/0x1e0 [ 402.316058] __list_lru_init+0x3ff/0x700 [ 402.320184] sget_userns+0x79f/0xcd0 22:33:53 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x40000002}) [ 402.323918] ? set_bdev_super+0x110/0x110 [ 402.328289] ? ns_test_super+0x50/0x50 [ 402.332203] ? set_bdev_super+0x110/0x110 [ 402.336462] ? ns_test_super+0x50/0x50 [ 402.340375] sget+0x10d/0x150 [ 402.343793] mount_bdev+0xf8/0x3c0 [ 402.348091] ? hfsplus_iget+0x790/0x790 [ 402.352108] mount_fs+0xa3/0x30c [ 402.355513] vfs_kern_mount.part.0+0x68/0x400 [ 402.360224] do_mount+0x4f4/0x2a40 [ 402.363971] ? copy_mount_string+0x40/0x40 [ 402.368236] ? __might_fault+0x192/0x1d0 [ 402.372341] ? _copy_from_user+0xd2/0x140 [ 402.376521] ? copy_mount_options+0x27a/0x390 [ 402.381060] ksys_mount+0xd7/0x150 [ 402.384626] __x64_sys_mount+0xba/0x150 [ 402.388635] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 402.393361] do_syscall_64+0xf9/0x620 [ 402.397193] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 402.403113] RIP: 0033:0x45c4a9 22:33:53 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x40000002}) 22:33:53 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 402.406508] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 402.428805] RSP: 002b:00007f081ba2dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 402.437231] RAX: ffffffffffffffda RBX: 00007f081ba2e6d4 RCX: 000000000045c4a9 [ 402.444949] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000020000140 [ 402.453783] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 402.462916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 402.471174] R13: 000000000000074a R14: 00000000004c9d80 R15: 0000000000000011 22:33:56 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d71a0220341ea32af193c9fa6511756f0a56cf70ef", 0x89}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, 0x0}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) 22:33:56 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x40000000, 0x0, 0x1, 0x0, r1, 0x0}]) 22:33:56 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) pipe(&(0x7f0000000540)) socket$inet6_tcp(0xa, 0x1, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:33:56 executing program 0 (fault-call:5 fault-nth:18): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x0, 0x0) 22:33:56 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:33:56 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x40000002}) 22:33:56 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) [ 405.034513] FAULT_INJECTION: forcing a failure. [ 405.034513] name failslab, interval 1, probability 0, space 0, times 0 [ 405.075762] CPU: 0 PID: 17686 Comm: syz-executor.0 Not tainted 4.19.108-syzkaller #0 [ 405.083699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 405.093073] Call Trace: [ 405.095694] dump_stack+0x188/0x20d [ 405.099369] should_fail.cold+0xa/0x1b [ 405.103288] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 405.108511] ? __lock_is_held+0xad/0x140 [ 405.112606] __should_failslab+0x115/0x180 [ 405.117291] should_failslab+0x5/0xf [ 405.121024] kmem_cache_alloc_trace+0x2c6/0x7a0 [ 405.125712] ? kasan_unpoison_shadow+0x30/0x40 [ 405.130313] ? kasan_kmalloc+0xbf/0xe0 [ 405.134338] __memcg_init_list_lru_node+0x7f/0x1e0 [ 405.139386] __list_lru_init+0x3ff/0x700 [ 405.143567] sget_userns+0x79f/0xcd0 [ 405.147652] ? set_bdev_super+0x110/0x110 [ 405.151957] ? ns_test_super+0x50/0x50 [ 405.155868] ? set_bdev_super+0x110/0x110 [ 405.160334] ? ns_test_super+0x50/0x50 [ 405.164694] sget+0x10d/0x150 [ 405.168263] mount_bdev+0xf8/0x3c0 [ 405.171931] ? hfsplus_iget+0x790/0x790 22:33:56 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x40000002}) 22:33:56 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x8, 0x0, 0x0, 0x40000002}) [ 405.175933] mount_fs+0xa3/0x30c [ 405.179339] vfs_kern_mount.part.0+0x68/0x400 [ 405.183866] do_mount+0x4f4/0x2a40 [ 405.187429] ? copy_mount_string+0x40/0x40 [ 405.191686] ? __might_fault+0x192/0x1d0 [ 405.195777] ? _copy_from_user+0xd2/0x140 [ 405.200339] ? copy_mount_options+0x27a/0x390 [ 405.204963] ksys_mount+0xd7/0x150 [ 405.208542] __x64_sys_mount+0xba/0x150 [ 405.212556] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 405.217278] do_syscall_64+0xf9/0x620 [ 405.221106] entry_SYSCALL_64_after_hwframe+0x49/0xbe 22:33:56 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0xc, 0x0, 0x0, 0x40000002}) [ 405.226310] RIP: 0033:0x45c4a9 [ 405.229536] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 405.248457] RSP: 002b:00007f081ba2dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 405.256303] RAX: ffffffffffffffda RBX: 00007f081ba2e6d4 RCX: 000000000045c4a9 [ 405.263600] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000020000140 22:33:56 executing program 0 (fault-call:5 fault-nth:19): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x0, 0x0) [ 405.270976] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 405.278375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 405.285670] R13: 000000000000074a R14: 00000000004c9d80 R15: 0000000000000012 22:33:56 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x4, 0x1, 0x0, r1, 0x0}]) [ 405.382678] FAULT_INJECTION: forcing a failure. [ 405.382678] name failslab, interval 1, probability 0, space 0, times 0 [ 405.413234] CPU: 1 PID: 17802 Comm: syz-executor.0 Not tainted 4.19.108-syzkaller #0 [ 405.422846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 405.436390] Call Trace: [ 405.439003] dump_stack+0x188/0x20d [ 405.442651] should_fail.cold+0xa/0x1b [ 405.446569] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 405.452122] ? __lock_is_held+0xad/0x140 [ 405.456190] __should_failslab+0x115/0x180 [ 405.460424] should_failslab+0x5/0xf [ 405.464150] kmem_cache_alloc_trace+0x2c6/0x7a0 [ 405.468831] ? kasan_unpoison_shadow+0x30/0x40 [ 405.473428] ? kasan_kmalloc+0xbf/0xe0 [ 405.477606] __memcg_init_list_lru_node+0x7f/0x1e0 [ 405.482560] __list_lru_init+0x3ff/0x700 [ 405.486846] sget_userns+0x79f/0xcd0 [ 405.490709] ? set_bdev_super+0x110/0x110 [ 405.495913] ? ns_test_super+0x50/0x50 [ 405.499810] ? set_bdev_super+0x110/0x110 [ 405.503978] ? ns_test_super+0x50/0x50 [ 405.507883] sget+0x10d/0x150 [ 405.511043] mount_bdev+0xf8/0x3c0 [ 405.514587] ? hfsplus_iget+0x790/0x790 [ 405.518586] mount_fs+0xa3/0x30c [ 405.522072] vfs_kern_mount.part.0+0x68/0x400 [ 405.526587] do_mount+0x4f4/0x2a40 [ 405.530737] ? copy_mount_string+0x40/0x40 [ 405.535052] ? __might_fault+0x192/0x1d0 [ 405.539324] ? _copy_from_user+0xd2/0x140 [ 405.544637] ? copy_mount_options+0x27a/0x390 [ 405.549222] ksys_mount+0xd7/0x150 [ 405.552773] __x64_sys_mount+0xba/0x150 [ 405.556761] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 405.561350] do_syscall_64+0xf9/0x620 [ 405.565257] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 405.570540] RIP: 0033:0x45c4a9 [ 405.573727] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 405.592733] RSP: 002b:00007f081ba2dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 405.600440] RAX: ffffffffffffffda RBX: 00007f081ba2e6d4 RCX: 000000000045c4a9 [ 405.609810] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000020000140 [ 405.617219] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 405.624587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 405.631859] R13: 000000000000074a R14: 00000000004c9d80 R15: 0000000000000013 22:33:59 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0xd, 0x0, 0x0, 0x40000002}) 22:33:59 executing program 0 (fault-call:5 fault-nth:20): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x0, 0x0) [ 407.822309] FAULT_INJECTION: forcing a failure. [ 407.822309] name failslab, interval 1, probability 0, space 0, times 0 [ 407.837023] CPU: 1 PID: 17914 Comm: syz-executor.0 Not tainted 4.19.108-syzkaller #0 [ 407.847192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 407.856997] Call Trace: [ 407.859729] dump_stack+0x188/0x20d [ 407.863475] should_fail.cold+0xa/0x1b [ 407.867460] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 407.872794] ? __lock_is_held+0xad/0x140 [ 407.877124] __should_failslab+0x115/0x180 [ 407.881502] should_failslab+0x5/0xf [ 407.885322] kmem_cache_alloc_trace+0x2c6/0x7a0 [ 407.889996] ? kasan_unpoison_shadow+0x30/0x40 [ 407.894585] ? kasan_kmalloc+0xbf/0xe0 [ 407.898512] __memcg_init_list_lru_node+0x7f/0x1e0 [ 407.903673] __list_lru_init+0x3ff/0x700 [ 407.907753] sget_userns+0x79f/0xcd0 [ 407.911463] ? set_bdev_super+0x110/0x110 [ 407.915622] ? ns_test_super+0x50/0x50 [ 407.919500] ? set_bdev_super+0x110/0x110 [ 407.923671] ? ns_test_super+0x50/0x50 [ 407.927751] sget+0x10d/0x150 [ 407.930866] mount_bdev+0xf8/0x3c0 [ 407.934529] ? hfsplus_iget+0x790/0x790 [ 407.938663] mount_fs+0xa3/0x30c [ 407.942040] vfs_kern_mount.part.0+0x68/0x400 [ 407.946538] do_mount+0x4f4/0x2a40 [ 407.950251] ? copy_mount_string+0x40/0x40 [ 407.955207] ? __might_fault+0x192/0x1d0 [ 407.959915] ? _copy_from_user+0xd2/0x140 [ 407.964064] ? copy_mount_options+0x27a/0x390 [ 407.968663] ksys_mount+0xd7/0x150 [ 407.972215] __x64_sys_mount+0xba/0x150 [ 407.976721] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 407.981358] do_syscall_64+0xf9/0x620 [ 407.985158] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 407.994088] RIP: 0033:0x45c4a9 [ 407.997306] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 22:33:59 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) pipe(&(0x7f0000000540)) socket$inet6_tcp(0xa, 0x1, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:33:59 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d71a0220341ea32af193c9fa6511756f0a56cf70ef", 0x89}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, 0x0}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) 22:33:59 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x4000, 0x1, 0x0, r1, 0x0}]) 22:33:59 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000002}) 22:33:59 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 408.016393] RSP: 002b:00007f081ba2dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 408.024291] RAX: ffffffffffffffda RBX: 00007f081ba2e6d4 RCX: 000000000045c4a9 [ 408.031710] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000020000140 [ 408.039036] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 408.046325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 408.054045] R13: 000000000000074a R14: 00000000004c9d80 R15: 0000000000000014 22:33:59 executing program 0 (fault-call:5 fault-nth:21): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x0, 0x0) 22:33:59 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x12, 0x0, 0x0, 0x40000002}) [ 408.214641] FAULT_INJECTION: forcing a failure. [ 408.214641] name failslab, interval 1, probability 0, space 0, times 0 22:33:59 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x1000000, 0x1, 0x0, r1, 0x0}]) 22:33:59 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x78, 0x0, 0x0, 0x40000002}) [ 408.256376] CPU: 0 PID: 18034 Comm: syz-executor.0 Not tainted 4.19.108-syzkaller #0 [ 408.264328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 408.273724] Call Trace: [ 408.276340] dump_stack+0x188/0x20d [ 408.280079] should_fail.cold+0xa/0x1b [ 408.283992] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 408.289126] ? __lock_is_held+0xad/0x140 [ 408.293236] __should_failslab+0x115/0x180 [ 408.297496] should_failslab+0x5/0xf [ 408.301233] kmem_cache_alloc_node_trace+0x272/0x750 [ 408.306452] ? kasan_kmalloc+0xbf/0xe0 [ 408.310363] __kmalloc_node+0x38/0x70 [ 408.314183] kvmalloc_node+0x61/0xf0 [ 408.317911] __list_lru_init+0x4c3/0x700 [ 408.321994] sget_userns+0x79f/0xcd0 [ 408.325730] ? set_bdev_super+0x110/0x110 [ 408.329895] ? ns_test_super+0x50/0x50 [ 408.333801] ? set_bdev_super+0x110/0x110 [ 408.337968] ? ns_test_super+0x50/0x50 [ 408.345518] sget+0x10d/0x150 [ 408.348650] mount_bdev+0xf8/0x3c0 [ 408.352207] ? hfsplus_iget+0x790/0x790 22:33:59 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0xf8, 0x0, 0x0, 0x40000002}) [ 408.356546] mount_fs+0xa3/0x30c [ 408.359985] vfs_kern_mount.part.0+0x68/0x400 [ 408.364513] do_mount+0x4f4/0x2a40 [ 408.368080] ? copy_mount_string+0x40/0x40 [ 408.374088] ? __might_fault+0x192/0x1d0 [ 408.378227] ? _copy_from_user+0xd2/0x140 [ 408.382494] ? copy_mount_options+0x27a/0x390 [ 408.387193] ksys_mount+0xd7/0x150 [ 408.390859] __x64_sys_mount+0xba/0x150 [ 408.395310] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 408.399920] do_syscall_64+0xf9/0x620 22:33:59 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x500, 0x0, 0x0, 0x40000002}) [ 408.403768] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 408.409040] RIP: 0033:0x45c4a9 [ 408.412340] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 408.432089] RSP: 002b:00007f081ba2dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 408.440098] RAX: ffffffffffffffda RBX: 00007f081ba2e6d4 RCX: 000000000045c4a9 [ 408.447582] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000020000140 [ 408.454869] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 408.462154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 408.469789] R13: 000000000000074a R14: 00000000004c9d80 R15: 0000000000000015 22:33:59 executing program 0 (fault-call:5 fault-nth:22): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x0, 0x0) [ 408.593156] FAULT_INJECTION: forcing a failure. [ 408.593156] name failslab, interval 1, probability 0, space 0, times 0 [ 408.604977] CPU: 1 PID: 18153 Comm: syz-executor.0 Not tainted 4.19.108-syzkaller #0 [ 408.613618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 408.623563] Call Trace: [ 408.626205] dump_stack+0x188/0x20d [ 408.629891] should_fail.cold+0xa/0x1b [ 408.633804] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 408.639016] ? __lock_is_held+0xad/0x140 [ 408.643077] __should_failslab+0x115/0x180 [ 408.647329] should_failslab+0x5/0xf [ 408.651435] kmem_cache_alloc_trace+0x2c6/0x7a0 [ 408.657645] ? kasan_unpoison_shadow+0x30/0x40 [ 408.662562] ? kasan_kmalloc+0xbf/0xe0 [ 408.667103] __memcg_init_list_lru_node+0x7f/0x1e0 [ 408.673342] __list_lru_init+0x3ff/0x700 [ 408.678018] sget_userns+0x79f/0xcd0 [ 408.682583] ? set_bdev_super+0x110/0x110 [ 408.688188] ? ns_test_super+0x50/0x50 [ 408.692796] ? set_bdev_super+0x110/0x110 [ 408.697236] ? ns_test_super+0x50/0x50 [ 408.701906] sget+0x10d/0x150 [ 408.705414] mount_bdev+0xf8/0x3c0 [ 408.709163] ? hfsplus_iget+0x790/0x790 [ 408.713429] mount_fs+0xa3/0x30c [ 408.716980] vfs_kern_mount.part.0+0x68/0x400 [ 408.722125] do_mount+0x4f4/0x2a40 [ 408.726131] ? copy_mount_string+0x40/0x40 [ 408.730633] ? __might_fault+0x192/0x1d0 [ 408.734999] ? _copy_from_user+0xd2/0x140 [ 408.739337] ? copy_mount_options+0x27a/0x390 [ 408.743843] ksys_mount+0xd7/0x150 [ 408.747396] __x64_sys_mount+0xba/0x150 [ 408.751462] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 408.756069] do_syscall_64+0xf9/0x620 [ 408.759892] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 408.765315] RIP: 0033:0x45c4a9 [ 408.768544] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 408.787584] RSP: 002b:00007f081ba2dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 408.795621] RAX: ffffffffffffffda RBX: 00007f081ba2e6d4 RCX: 000000000045c4a9 [ 408.803161] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000020000140 [ 408.811129] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 408.818412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 408.825720] R13: 000000000000074a R14: 00000000004c9d80 R15: 0000000000000016 22:34:02 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) pipe(&(0x7f0000000540)) socket$inet6_tcp(0xa, 0x1, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:34:02 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x4000000, 0x1, 0x0, r1, 0x0}]) 22:34:02 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0xc00, 0x0, 0x0, 0x40000002}) 22:34:02 executing program 0 (fault-call:5 fault-nth:23): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x0, 0x0) 22:34:02 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:34:02 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d71a0220341ea32af193c9fa6511756f0a56cf70ef9158dcc809125b2e55b3", 0x93}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, 0x0}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) [ 411.215593] FAULT_INJECTION: forcing a failure. [ 411.215593] name failslab, interval 1, probability 0, space 0, times 0 [ 411.256616] CPU: 1 PID: 18165 Comm: syz-executor.0 Not tainted 4.19.108-syzkaller #0 [ 411.264738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 411.274696] Call Trace: [ 411.277310] dump_stack+0x188/0x20d [ 411.281320] should_fail.cold+0xa/0x1b [ 411.285237] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 411.290558] ? __lock_is_held+0xad/0x140 [ 411.294697] __should_failslab+0x115/0x180 [ 411.298964] should_failslab+0x5/0xf 22:34:02 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0xd00, 0x0, 0x0, 0x40000002}) 22:34:02 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x1200, 0x0, 0x0, 0x40000002}) [ 411.302718] kmem_cache_alloc_node_trace+0x272/0x750 [ 411.307854] ? kasan_kmalloc+0xbf/0xe0 [ 411.311775] __kmalloc_node+0x38/0x70 [ 411.315602] kvmalloc_node+0x61/0xf0 [ 411.319429] __list_lru_init+0x4c3/0x700 [ 411.323524] sget_userns+0x79f/0xcd0 [ 411.327412] ? set_bdev_super+0x110/0x110 [ 411.331677] ? ns_test_super+0x50/0x50 [ 411.335597] ? set_bdev_super+0x110/0x110 [ 411.340029] ? ns_test_super+0x50/0x50 [ 411.344070] sget+0x10d/0x150 [ 411.348191] mount_bdev+0xf8/0x3c0 [ 411.351762] ? hfsplus_iget+0x790/0x790 [ 411.355775] mount_fs+0xa3/0x30c [ 411.359176] vfs_kern_mount.part.0+0x68/0x400 [ 411.363738] do_mount+0x4f4/0x2a40 [ 411.367310] ? copy_mount_string+0x40/0x40 [ 411.371575] ? __might_fault+0x192/0x1d0 [ 411.375674] ? _copy_from_user+0xd2/0x140 [ 411.379877] ? copy_mount_options+0x27a/0x390 [ 411.384518] ksys_mount+0xd7/0x150 [ 411.388097] __x64_sys_mount+0xba/0x150 [ 411.392184] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 411.396801] do_syscall_64+0xf9/0x620 [ 411.400634] entry_SYSCALL_64_after_hwframe+0x49/0xbe 22:34:02 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x3f00, 0x0, 0x0, 0x40000002}) [ 411.405949] RIP: 0033:0x45c4a9 [ 411.409163] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 411.428272] RSP: 002b:00007f081ba2dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 411.436127] RAX: ffffffffffffffda RBX: 00007f081ba2e6d4 RCX: 000000000045c4a9 [ 411.443669] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000020000140 22:34:02 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x77ff, 0x0, 0x0, 0x40000002}) [ 411.451053] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 411.458350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 411.465656] R13: 000000000000074a R14: 00000000004c9d80 R15: 0000000000000017 22:34:02 executing program 0 (fault-call:5 fault-nth:24): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x0, 0x0) 22:34:02 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x40000000, 0x1, 0x0, r1, 0x0}]) [ 411.636880] FAULT_INJECTION: forcing a failure. [ 411.636880] name failslab, interval 1, probability 0, space 0, times 0 [ 411.658937] CPU: 1 PID: 18293 Comm: syz-executor.0 Not tainted 4.19.108-syzkaller #0 [ 411.666876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 411.676491] Call Trace: [ 411.679115] dump_stack+0x188/0x20d [ 411.682779] should_fail.cold+0xa/0x1b [ 411.686695] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 411.691820] ? __lock_is_held+0xad/0x140 [ 411.695913] __should_failslab+0x115/0x180 [ 411.700168] should_failslab+0x5/0xf [ 411.703890] kmem_cache_alloc_trace+0x2c6/0x7a0 [ 411.708662] ? kasan_unpoison_shadow+0x30/0x40 [ 411.713250] ? kasan_kmalloc+0xbf/0xe0 [ 411.717149] __memcg_init_list_lru_node+0x7f/0x1e0 [ 411.722088] __list_lru_init+0x3ff/0x700 [ 411.726295] sget_userns+0x79f/0xcd0 [ 411.730019] ? set_bdev_super+0x110/0x110 [ 411.734183] ? ns_test_super+0x50/0x50 [ 411.738158] ? set_bdev_super+0x110/0x110 [ 411.742664] ? ns_test_super+0x50/0x50 [ 411.746643] sget+0x10d/0x150 [ 411.749761] mount_bdev+0xf8/0x3c0 [ 411.753405] ? hfsplus_iget+0x790/0x790 [ 411.757382] mount_fs+0xa3/0x30c [ 411.761018] vfs_kern_mount.part.0+0x68/0x400 [ 411.765521] do_mount+0x4f4/0x2a40 [ 411.769075] ? copy_mount_string+0x40/0x40 [ 411.773328] ? __might_fault+0x192/0x1d0 [ 411.777390] ? _copy_from_user+0xd2/0x140 [ 411.781629] ? copy_mount_options+0x27a/0x390 [ 411.786134] ksys_mount+0xd7/0x150 [ 411.789698] __x64_sys_mount+0xba/0x150 [ 411.793674] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 411.798831] do_syscall_64+0xf9/0x620 [ 411.802647] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 411.808765] RIP: 0033:0x45c4a9 [ 411.812008] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 411.830919] RSP: 002b:00007f081ba2dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 411.838889] RAX: ffffffffffffffda RBX: 00007f081ba2e6d4 RCX: 000000000045c4a9 [ 411.846328] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000020000140 [ 411.853861] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 411.861162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 411.868570] R13: 000000000000074a R14: 00000000004c9d80 R15: 0000000000000018 22:34:05 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) pipe(&(0x7f0000000540)) ppoll(&(0x7f00000000c0)=[{}, {}, {}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:34:05 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7800, 0x0, 0x0, 0x40000002}) 22:34:05 executing program 0 (fault-call:5 fault-nth:25): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x0, 0x0) 22:34:05 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x2, 0x0, r1, 0x0}]) 22:34:05 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d71a0220341ea32af193c9fa6511756f0a56cf70ef9158dcc809125b2e55b3", 0x93}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, 0x0}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) 22:34:05 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:34:05 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 414.295509] FAULT_INJECTION: forcing a failure. [ 414.295509] name failslab, interval 1, probability 0, space 0, times 0 [ 414.375625] CPU: 0 PID: 18408 Comm: syz-executor.0 Not tainted 4.19.108-syzkaller #0 [ 414.383685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 414.393192] Call Trace: [ 414.395808] dump_stack+0x188/0x20d [ 414.399474] should_fail.cold+0xa/0x1b [ 414.403393] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 414.408626] ? __lock_is_held+0xad/0x140 [ 414.412746] __should_failslab+0x115/0x180 [ 414.417129] should_failslab+0x5/0xf [ 414.420980] kmem_cache_alloc_trace+0x2c6/0x7a0 22:34:05 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:34:05 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0xf800, 0x0, 0x0, 0x40000002}) [ 414.425943] ? kasan_unpoison_shadow+0x30/0x40 [ 414.431669] ? kasan_kmalloc+0xbf/0xe0 [ 414.435589] __memcg_init_list_lru_node+0x7f/0x1e0 [ 414.440904] __list_lru_init+0x3ff/0x700 [ 414.445040] sget_userns+0x79f/0xcd0 [ 414.448919] ? set_bdev_super+0x110/0x110 [ 414.453137] ? ns_test_super+0x50/0x50 [ 414.457057] ? set_bdev_super+0x110/0x110 [ 414.461414] ? ns_test_super+0x50/0x50 [ 414.465338] sget+0x10d/0x150 [ 414.468478] mount_bdev+0xf8/0x3c0 [ 414.472046] ? hfsplus_iget+0x790/0x790 22:34:05 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 414.476140] mount_fs+0xa3/0x30c [ 414.479537] vfs_kern_mount.part.0+0x68/0x400 [ 414.484279] do_mount+0x4f4/0x2a40 [ 414.487857] ? copy_mount_string+0x40/0x40 [ 414.492134] ? __might_fault+0x192/0x1d0 [ 414.496249] ? _copy_from_user+0xd2/0x140 [ 414.500438] ? copy_mount_options+0x27a/0x390 [ 414.505192] ksys_mount+0xd7/0x150 [ 414.508762] __x64_sys_mount+0xba/0x150 [ 414.512766] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 414.517536] do_syscall_64+0xf9/0x620 [ 414.521423] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 414.526640] RIP: 0033:0x45c4a9 [ 414.529856] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 414.548889] RSP: 002b:00007f081ba2dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 414.556709] RAX: ffffffffffffffda RBX: 00007f081ba2e6d4 RCX: 000000000045c4a9 [ 414.564003] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000020000140 [ 414.571380] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 414.579342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 414.588179] R13: 000000000000074a R14: 00000000004c9d80 R15: 0000000000000019 22:34:05 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0xff01, 0x0, 0x0, 0x40000002}) 22:34:05 executing program 0 (fault-call:5 fault-nth:26): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x0, 0x0) [ 414.729395] FAULT_INJECTION: forcing a failure. [ 414.729395] name failslab, interval 1, probability 0, space 0, times 0 [ 414.741155] CPU: 0 PID: 18537 Comm: syz-executor.0 Not tainted 4.19.108-syzkaller #0 [ 414.749068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 414.758610] Call Trace: [ 414.761593] dump_stack+0x188/0x20d [ 414.765348] should_fail.cold+0xa/0x1b [ 414.769266] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 414.774573] ? __lock_is_held+0xad/0x140 [ 414.778705] __should_failslab+0x115/0x180 [ 414.783085] should_failslab+0x5/0xf [ 414.787176] kmem_cache_alloc_trace+0x2c6/0x7a0 [ 414.792554] ? kasan_unpoison_shadow+0x30/0x40 [ 414.797557] ? kasan_kmalloc+0xbf/0xe0 [ 414.802366] __memcg_init_list_lru_node+0x7f/0x1e0 [ 414.808165] __list_lru_init+0x3ff/0x700 [ 414.813135] sget_userns+0x79f/0xcd0 [ 414.817188] ? set_bdev_super+0x110/0x110 [ 414.821800] ? ns_test_super+0x50/0x50 [ 414.825885] ? set_bdev_super+0x110/0x110 [ 414.832072] ? ns_test_super+0x50/0x50 [ 414.836695] sget+0x10d/0x150 [ 414.840882] mount_bdev+0xf8/0x3c0 [ 414.845516] ? hfsplus_iget+0x790/0x790 [ 414.849514] mount_fs+0xa3/0x30c [ 414.853363] vfs_kern_mount.part.0+0x68/0x400 [ 414.858056] do_mount+0x4f4/0x2a40 [ 414.861606] ? copy_mount_string+0x40/0x40 [ 414.866146] ? __might_fault+0x192/0x1d0 [ 414.870736] ? _copy_from_user+0xd2/0x140 [ 414.875193] ? copy_mount_options+0x27a/0x390 [ 414.880141] ksys_mount+0xd7/0x150 [ 414.884583] __x64_sys_mount+0xba/0x150 [ 414.890535] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 414.898783] do_syscall_64+0xf9/0x620 [ 414.903047] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 414.908421] RIP: 0033:0x45c4a9 [ 414.912042] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 414.931740] RSP: 002b:00007f081ba2dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 414.939549] RAX: ffffffffffffffda RBX: 00007f081ba2e6d4 RCX: 000000000045c4a9 [ 414.946960] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000020000140 [ 414.954435] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 414.961722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 414.969000] R13: 000000000000074a R14: 00000000004c9d80 R15: 000000000000001a 22:34:08 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) pipe(&(0x7f0000000540)) ppoll(&(0x7f00000000c0)=[{}, {}, {}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:34:08 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x3, 0x0, r1, 0x0}]) 22:34:08 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0xff0f, 0x0, 0x0, 0x40000002}) 22:34:08 executing program 0 (fault-call:5 fault-nth:27): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x0, 0x0) 22:34:08 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d71a0220341ea32af193c9fa6511756f0a56cf70ef9158dcc809125b2e55b3", 0x93}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, 0x0}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) [ 417.372008] FAULT_INJECTION: forcing a failure. [ 417.372008] name failslab, interval 1, probability 0, space 0, times 0 [ 417.388846] CPU: 1 PID: 18549 Comm: syz-executor.0 Not tainted 4.19.108-syzkaller #0 [ 417.397097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 417.407107] Call Trace: [ 417.409732] dump_stack+0x188/0x20d [ 417.414447] should_fail.cold+0xa/0x1b 22:34:08 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0xff77, 0x0, 0x0, 0x40000002}) [ 417.418695] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 417.424262] ? __lock_is_held+0xad/0x140 [ 417.429229] __should_failslab+0x115/0x180 [ 417.433756] should_failslab+0x5/0xf [ 417.441007] kmem_cache_alloc_trace+0x2c6/0x7a0 [ 417.446156] ? kasan_unpoison_shadow+0x30/0x40 [ 417.450953] ? kasan_kmalloc+0xbf/0xe0 [ 417.455413] __memcg_init_list_lru_node+0x7f/0x1e0 [ 417.462825] __list_lru_init+0x3ff/0x700 [ 417.467324] sget_userns+0x79f/0xcd0 [ 417.471504] ? set_bdev_super+0x110/0x110 [ 417.476383] ? ns_test_super+0x50/0x50 [ 417.480412] ? set_bdev_super+0x110/0x110 [ 417.484828] ? ns_test_super+0x50/0x50 [ 417.489197] sget+0x10d/0x150 [ 417.492381] mount_bdev+0xf8/0x3c0 [ 417.495942] ? hfsplus_iget+0x790/0x790 [ 417.500031] mount_fs+0xa3/0x30c [ 417.506386] vfs_kern_mount.part.0+0x68/0x400 [ 417.512240] do_mount+0x4f4/0x2a40 22:34:08 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0xff7f, 0x0, 0x0, 0x40000002}) [ 417.517565] ? copy_mount_string+0x40/0x40 [ 417.523570] ? __might_fault+0x192/0x1d0 [ 417.527766] ? _copy_from_user+0xd2/0x140 [ 417.532305] ? copy_mount_options+0x27a/0x390 [ 417.537207] ksys_mount+0xd7/0x150 [ 417.542225] __x64_sys_mount+0xba/0x150 [ 417.546749] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 417.552999] do_syscall_64+0xf9/0x620 [ 417.556839] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 417.562167] RIP: 0033:0x45c4a9 [ 417.565701] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 417.585552] RSP: 002b:00007f081ba2dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 417.593826] RAX: ffffffffffffffda RBX: 00007f081ba2e6d4 RCX: 000000000045c4a9 [ 417.601382] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000020000140 [ 417.609311] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 22:34:08 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 417.617762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 417.625332] R13: 000000000000074a R14: 00000000004c9d80 R15: 000000000000001b 22:34:08 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x0, 0x40000002}) 22:34:08 executing program 0 (fault-call:5 fault-nth:28): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x0, 0x0) 22:34:09 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x4, 0x0, r1, 0x0}]) [ 417.832186] FAULT_INJECTION: forcing a failure. [ 417.832186] name failslab, interval 1, probability 0, space 0, times 0 [ 417.849465] CPU: 0 PID: 18674 Comm: syz-executor.0 Not tainted 4.19.108-syzkaller #0 [ 417.857519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 417.867315] Call Trace: [ 417.869928] dump_stack+0x188/0x20d [ 417.873765] should_fail.cold+0xa/0x1b [ 417.877811] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 417.882943] ? __lock_is_held+0xad/0x140 [ 417.887053] __should_failslab+0x115/0x180 [ 417.891341] should_failslab+0x5/0xf [ 417.895163] kmem_cache_alloc_trace+0x2c6/0x7a0 [ 417.899955] ? kasan_unpoison_shadow+0x30/0x40 [ 417.904564] ? kasan_kmalloc+0xbf/0xe0 [ 417.908658] __memcg_init_list_lru_node+0x7f/0x1e0 [ 417.914084] __list_lru_init+0x3ff/0x700 [ 417.918364] sget_userns+0x79f/0xcd0 [ 417.922247] ? set_bdev_super+0x110/0x110 [ 417.926713] ? ns_test_super+0x50/0x50 [ 417.930829] ? set_bdev_super+0x110/0x110 [ 417.935747] ? ns_test_super+0x50/0x50 [ 417.939756] sget+0x10d/0x150 [ 417.943085] mount_bdev+0xf8/0x3c0 [ 417.946748] ? hfsplus_iget+0x790/0x790 [ 417.951218] mount_fs+0xa3/0x30c [ 417.955149] vfs_kern_mount.part.0+0x68/0x400 [ 417.960244] do_mount+0x4f4/0x2a40 [ 417.964394] ? copy_mount_string+0x40/0x40 [ 417.968775] ? __might_fault+0x192/0x1d0 [ 417.974489] ? _copy_from_user+0xd2/0x140 22:34:09 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x2, 0x0, 0x40000002}) [ 417.979024] ? copy_mount_options+0x27a/0x390 [ 417.983913] ksys_mount+0xd7/0x150 [ 417.987672] __x64_sys_mount+0xba/0x150 [ 417.992311] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 417.997139] do_syscall_64+0xf9/0x620 [ 418.001174] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 418.007445] RIP: 0033:0x45c4a9 [ 418.010901] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 418.032909] RSP: 002b:00007f081ba2dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 418.042273] RAX: ffffffffffffffda RBX: 00007f081ba2e6d4 RCX: 000000000045c4a9 [ 418.050126] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000020000140 [ 418.057826] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 418.065715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 418.073305] R13: 000000000000074a R14: 00000000004c9d80 R15: 000000000000001c [ 418.760020] NOHZ: local_softirq_pending 08 [ 418.764488] NOHZ: local_softirq_pending 08 22:34:11 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) pipe(&(0x7f0000000540)) ppoll(&(0x7f00000000c0)=[{}, {}, {}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:34:11 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x4, 0x0, 0x40000002}) 22:34:11 executing program 0 (fault-call:5 fault-nth:29): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x0, 0x0) 22:34:11 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 22:34:11 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d71a0220341ea32af193c9fa6511756f0a56cf70ef9158dcc809125b2e55b38415828bd2", 0x98}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, 0x0}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) [ 420.459136] FAULT_INJECTION: forcing a failure. [ 420.459136] name failslab, interval 1, probability 0, space 0, times 0 [ 420.476607] CPU: 1 PID: 18794 Comm: syz-executor.0 Not tainted 4.19.108-syzkaller #0 [ 420.484810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 420.494547] Call Trace: [ 420.497236] dump_stack+0x188/0x20d [ 420.500889] should_fail.cold+0xa/0x1b [ 420.504804] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 420.510205] ? __lock_is_held+0xad/0x140 [ 420.514557] __should_failslab+0x115/0x180 [ 420.518931] should_failslab+0x5/0xf [ 420.522666] kmem_cache_alloc_trace+0x2c6/0x7a0 [ 420.527599] ? kasan_unpoison_shadow+0x30/0x40 [ 420.532184] ? kasan_kmalloc+0xbf/0xe0 [ 420.536095] __memcg_init_list_lru_node+0x7f/0x1e0 [ 420.541097] __list_lru_init+0x3ff/0x700 [ 420.545208] sget_userns+0x79f/0xcd0 [ 420.548935] ? set_bdev_super+0x110/0x110 [ 420.553223] ? ns_test_super+0x50/0x50 [ 420.557145] ? set_bdev_super+0x110/0x110 [ 420.561304] ? ns_test_super+0x50/0x50 [ 420.565219] sget+0x10d/0x150 [ 420.568607] mount_bdev+0xf8/0x3c0 [ 420.572318] ? hfsplus_iget+0x790/0x790 [ 420.576442] mount_fs+0xa3/0x30c [ 420.579835] vfs_kern_mount.part.0+0x68/0x400 [ 420.584359] do_mount+0x4f4/0x2a40 [ 420.588370] ? copy_mount_string+0x40/0x40 [ 420.592813] ? __might_fault+0x192/0x1d0 [ 420.597082] ? _copy_from_user+0xd2/0x140 [ 420.601982] ? copy_mount_options+0x27a/0x390 [ 420.606495] ksys_mount+0xd7/0x150 [ 420.610533] __x64_sys_mount+0xba/0x150 [ 420.614659] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 420.619435] do_syscall_64+0xf9/0x620 [ 420.623495] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 420.629120] RIP: 0033:0x45c4a9 [ 420.632760] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 420.651753] RSP: 002b:00007f081ba2dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 22:34:11 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x5, 0x0, 0x40000002}) 22:34:12 executing program 0 (fault-call:5 fault-nth:30): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x0, 0x0) [ 420.659741] RAX: ffffffffffffffda RBX: 00007f081ba2e6d4 RCX: 000000000045c4a9 [ 420.667482] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000020000140 [ 420.675743] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 420.683161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 420.690798] R13: 000000000000074a R14: 00000000004c9d80 R15: 000000000000001d 22:34:12 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:34:12 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x8, 0x0, 0x40000002}) 22:34:12 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x7, 0x0, r1, 0x0}]) [ 420.864696] FAULT_INJECTION: forcing a failure. [ 420.864696] name failslab, interval 1, probability 0, space 0, times 0 [ 420.944410] CPU: 1 PID: 18905 Comm: syz-executor.0 Not tainted 4.19.108-syzkaller #0 [ 420.952607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 420.963217] Call Trace: [ 420.966016] dump_stack+0x188/0x20d [ 420.971295] should_fail.cold+0xa/0x1b [ 420.977143] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 420.982493] ? __lock_is_held+0xad/0x140 [ 420.989526] __should_failslab+0x115/0x180 22:34:12 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0xc, 0x0, 0x40000002}) [ 420.994151] should_failslab+0x5/0xf [ 420.997975] kmem_cache_alloc_trace+0x2c6/0x7a0 [ 421.002952] ? kasan_unpoison_shadow+0x30/0x40 [ 421.008598] ? kasan_kmalloc+0xbf/0xe0 [ 421.013579] __memcg_init_list_lru_node+0x7f/0x1e0 [ 421.018553] __list_lru_init+0x3ff/0x700 [ 421.022994] sget_userns+0x79f/0xcd0 [ 421.026851] ? set_bdev_super+0x110/0x110 [ 421.032249] ? ns_test_super+0x50/0x50 [ 421.036473] ? set_bdev_super+0x110/0x110 [ 421.040897] ? ns_test_super+0x50/0x50 22:34:12 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0xd, 0x0, 0x40000002}) [ 421.044967] sget+0x10d/0x150 [ 421.048166] mount_bdev+0xf8/0x3c0 [ 421.052427] ? hfsplus_iget+0x790/0x790 [ 421.056450] mount_fs+0xa3/0x30c [ 421.060246] vfs_kern_mount.part.0+0x68/0x400 [ 421.065072] do_mount+0x4f4/0x2a40 [ 421.069087] ? copy_mount_string+0x40/0x40 [ 421.073435] ? __might_fault+0x192/0x1d0 [ 421.077838] ? _copy_from_user+0xd2/0x140 [ 421.082456] ? copy_mount_options+0x27a/0x390 [ 421.087981] ksys_mount+0xd7/0x150 [ 421.091642] __x64_sys_mount+0xba/0x150 [ 421.095796] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 421.101109] do_syscall_64+0xf9/0x620 [ 421.105465] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 421.110770] RIP: 0033:0x45c4a9 [ 421.114255] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 421.136453] RSP: 002b:00007f081ba2dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 421.146058] RAX: ffffffffffffffda RBX: 00007f081ba2e6d4 RCX: 000000000045c4a9 [ 421.154428] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000020000140 [ 421.161718] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 421.170053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 421.178130] R13: 000000000000074a R14: 00000000004c9d80 R15: 000000000000001e 22:34:14 executing program 0 (fault-call:5 fault-nth:31): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x0, 0x0) 22:34:14 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x10, 0x0, 0x40000002}) 22:34:14 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x8, 0x0, r1, 0x0}]) 22:34:14 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:34:14 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d71a0220341ea32af193c9fa6511756f0a56cf70ef9158dcc809125b2e55b38415828bd2", 0x98}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, 0x0}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) [ 423.522902] FAULT_INJECTION: forcing a failure. [ 423.522902] name failslab, interval 1, probability 0, space 0, times 0 [ 423.534896] CPU: 1 PID: 19033 Comm: syz-executor.0 Not tainted 4.19.108-syzkaller #0 [ 423.542803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 423.552312] Call Trace: [ 423.554923] dump_stack+0x188/0x20d [ 423.558578] should_fail.cold+0xa/0x1b [ 423.562499] ? fault_create_debugfs_attr+0x1e0/0x1e0 22:34:14 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x12, 0x0, 0x40000002}) [ 423.569711] ? __lock_is_held+0xad/0x140 [ 423.573893] __should_failslab+0x115/0x180 [ 423.578154] should_failslab+0x5/0xf [ 423.581891] kmem_cache_alloc_trace+0x2c6/0x7a0 [ 423.586687] ? kasan_unpoison_shadow+0x30/0x40 [ 423.591288] ? kasan_kmalloc+0xbf/0xe0 [ 423.595201] __memcg_init_list_lru_node+0x7f/0x1e0 [ 423.600338] __list_lru_init+0x3ff/0x700 [ 423.604434] sget_userns+0x79f/0xcd0 [ 423.608169] ? set_bdev_super+0x110/0x110 [ 423.612342] ? ns_test_super+0x50/0x50 [ 423.616603] ? set_bdev_super+0x110/0x110 22:34:14 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x78, 0x0, 0x40000002}) [ 423.620779] ? ns_test_super+0x50/0x50 [ 423.624694] sget+0x10d/0x150 [ 423.628013] mount_bdev+0xf8/0x3c0 [ 423.631578] ? hfsplus_iget+0x790/0x790 [ 423.635606] mount_fs+0xa3/0x30c [ 423.639255] vfs_kern_mount.part.0+0x68/0x400 [ 423.643869] do_mount+0x4f4/0x2a40 [ 423.647444] ? copy_mount_string+0x40/0x40 [ 423.651706] ? __might_fault+0x192/0x1d0 [ 423.655882] ? _copy_from_user+0xd2/0x140 [ 423.660062] ? copy_mount_options+0x27a/0x390 [ 423.664591] ksys_mount+0xd7/0x150 [ 423.668289] __x64_sys_mount+0xba/0x150 [ 423.672291] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 423.676900] do_syscall_64+0xf9/0x620 [ 423.680727] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 423.685937] RIP: 0033:0x45c4a9 [ 423.689154] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 423.708072] RSP: 002b:00007f081ba2dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 423.715830] RAX: ffffffffffffffda RBX: 00007f081ba2e6d4 RCX: 000000000045c4a9 [ 423.723122] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000020000140 [ 423.730417] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 423.737707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 423.745114] R13: 000000000000074a R14: 00000000004c9d80 R15: 000000000000001f 22:34:15 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0xf8, 0x0, 0x40000002}) 22:34:15 executing program 0 (fault-call:5 fault-nth:32): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x0, 0x0) 22:34:15 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:34:15 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 22:34:15 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x500, 0x0, 0x40000002}) [ 423.916917] FAULT_INJECTION: forcing a failure. [ 423.916917] name failslab, interval 1, probability 0, space 0, times 0 [ 423.928974] CPU: 1 PID: 19151 Comm: syz-executor.0 Not tainted 4.19.108-syzkaller #0 [ 423.936887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 423.946253] Call Trace: [ 423.948855] dump_stack+0x188/0x20d [ 423.952516] should_fail.cold+0xa/0x1b [ 423.956431] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 423.961558] ? __lock_is_held+0xad/0x140 22:34:15 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0xc00, 0x0, 0x40000002}) [ 423.965650] __should_failslab+0x115/0x180 [ 423.969908] should_failslab+0x5/0xf [ 423.973642] kmem_cache_alloc_trace+0x2c6/0x7a0 [ 423.978334] ? kasan_unpoison_shadow+0x30/0x40 [ 423.982942] ? kasan_kmalloc+0xbf/0xe0 [ 423.986856] __memcg_init_list_lru_node+0x7f/0x1e0 [ 423.991814] __list_lru_init+0x3ff/0x700 [ 423.995902] sget_userns+0x79f/0xcd0 [ 423.999644] ? set_bdev_super+0x110/0x110 [ 424.003813] ? ns_test_super+0x50/0x50 [ 424.007721] ? set_bdev_super+0x110/0x110 [ 424.011886] ? ns_test_super+0x50/0x50 [ 424.015794] sget+0x10d/0x150 [ 424.018925] mount_bdev+0xf8/0x3c0 [ 424.022486] ? hfsplus_iget+0x790/0x790 [ 424.026490] mount_fs+0xa3/0x30c [ 424.029885] vfs_kern_mount.part.0+0x68/0x400 [ 424.034409] do_mount+0x4f4/0x2a40 [ 424.037975] ? copy_mount_string+0x40/0x40 [ 424.042231] ? __might_fault+0x192/0x1d0 [ 424.046309] ? _copy_from_user+0xd2/0x140 [ 424.050495] ? copy_mount_options+0x27a/0x390 [ 424.055012] ksys_mount+0xd7/0x150 [ 424.058579] __x64_sys_mount+0xba/0x150 [ 424.062585] ? lockdep_hardirqs_on+0x40b/0x5d0 22:34:15 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0xd00, 0x0, 0x40000002}) [ 424.067202] do_syscall_64+0xf9/0x620 [ 424.071027] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 424.076254] RIP: 0033:0x45c4a9 [ 424.079565] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 424.098485] RSP: 002b:00007f081ba2dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 424.106215] RAX: ffffffffffffffda RBX: 00007f081ba2e6d4 RCX: 000000000045c4a9 22:34:15 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x1200, 0x0, 0x40000002}) [ 424.113507] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000020000140 [ 424.120793] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 424.128078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 424.135371] R13: 000000000000074a R14: 00000000004c9d80 R15: 0000000000000020 22:34:17 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:34:17 executing program 0 (fault-call:5 fault-nth:33): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x0, 0x0) 22:34:17 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x3f00, 0x0, 0x40000002}) 22:34:17 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x4, r1, 0x0}]) 22:34:17 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d71a0220341ea32af193c9fa6511756f0a56cf70ef9158dcc809125b2e55b38415828bd2", 0x98}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, 0x0}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) 22:34:17 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d71a0220341ea32af193c9fa6511756f0a56cf70ef9158dcc809125b2e55b38415828bd295be", 0x9a}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, 0x0}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) [ 426.600187] FAULT_INJECTION: forcing a failure. [ 426.600187] name failslab, interval 1, probability 0, space 0, times 0 [ 426.665408] CPU: 0 PID: 19279 Comm: syz-executor.0 Not tainted 4.19.108-syzkaller #0 [ 426.673349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 426.682728] Call Trace: [ 426.685339] dump_stack+0x188/0x20d [ 426.688994] should_fail.cold+0xa/0x1b [ 426.692908] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 426.698025] ? __lock_is_held+0xad/0x140 [ 426.702111] __should_failslab+0x115/0x180 [ 426.706367] should_failslab+0x5/0xf [ 426.710104] kmem_cache_alloc_trace+0x2c6/0x7a0 [ 426.714811] ? kasan_kmalloc+0xbf/0xe0 [ 426.718697] __memcg_init_list_lru_node+0x7f/0x1e0 [ 426.723626] __list_lru_init+0x3ff/0x700 [ 426.727690] sget_userns+0x79f/0xcd0 [ 426.731413] ? set_bdev_super+0x110/0x110 [ 426.735716] ? ns_test_super+0x50/0x50 [ 426.739634] ? set_bdev_super+0x110/0x110 [ 426.743792] ? ns_test_super+0x50/0x50 [ 426.747693] sget+0x10d/0x150 [ 426.750828] mount_bdev+0xf8/0x3c0 [ 426.754390] ? hfsplus_iget+0x790/0x790 [ 426.758384] mount_fs+0xa3/0x30c [ 426.761793] vfs_kern_mount.part.0+0x68/0x400 [ 426.766316] do_mount+0x4f4/0x2a40 [ 426.769883] ? copy_mount_string+0x40/0x40 [ 426.774116] ? __might_fault+0x192/0x1d0 [ 426.778188] ? _copy_from_user+0xd2/0x140 [ 426.782373] ? copy_mount_options+0x27a/0x390 [ 426.786899] ksys_mount+0xd7/0x150 [ 426.790472] __x64_sys_mount+0xba/0x150 [ 426.794445] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 426.799059] do_syscall_64+0xf9/0x620 [ 426.802896] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 426.808122] RIP: 0033:0x45c4a9 [ 426.811317] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 426.830214] RSP: 002b:00007f081ba2dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 426.837920] RAX: ffffffffffffffda RBX: 00007f081ba2e6d4 RCX: 000000000045c4a9 [ 426.845181] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000020000140 [ 426.852451] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 22:34:18 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:34:18 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x77ff, 0x0, 0x40000002}) 22:34:18 executing program 0 (fault-call:5 fault-nth:34): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x0, 0x0) [ 426.859721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 426.866997] R13: 000000000000074a R14: 00000000004c9d80 R15: 0000000000000021 22:34:18 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x4000, r1, 0x0}]) [ 426.989911] FAULT_INJECTION: forcing a failure. [ 426.989911] name failslab, interval 1, probability 0, space 0, times 0 [ 427.029949] CPU: 1 PID: 19396 Comm: syz-executor.0 Not tainted 4.19.108-syzkaller #0 22:34:18 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x7800, 0x0, 0x40000002}) [ 427.037896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 427.047268] Call Trace: [ 427.049881] dump_stack+0x188/0x20d [ 427.053642] should_fail.cold+0xa/0x1b [ 427.057561] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 427.062691] ? __lock_is_held+0xad/0x140 [ 427.066786] __should_failslab+0x115/0x180 [ 427.071050] should_failslab+0x5/0xf [ 427.074793] __kmalloc+0x2d3/0x770 [ 427.078351] ? __list_lru_init+0xd3/0x700 [ 427.082534] __list_lru_init+0xd3/0x700 [ 427.086524] sget_userns+0x7cb/0xcd0 [ 427.090338] ? set_bdev_super+0x110/0x110 [ 427.094491] ? ns_test_super+0x50/0x50 [ 427.098393] ? set_bdev_super+0x110/0x110 [ 427.103686] ? ns_test_super+0x50/0x50 [ 427.107698] sget+0x10d/0x150 [ 427.110824] mount_bdev+0xf8/0x3c0 [ 427.114367] ? hfsplus_iget+0x790/0x790 [ 427.118348] mount_fs+0xa3/0x30c [ 427.121767] vfs_kern_mount.part.0+0x68/0x400 [ 427.126403] do_mount+0x4f4/0x2a40 [ 427.129948] ? copy_mount_string+0x40/0x40 [ 427.134182] ? __might_fault+0x192/0x1d0 [ 427.138240] ? _copy_from_user+0xd2/0x140 [ 427.142388] ? copy_mount_options+0x27a/0x390 [ 427.146875] ksys_mount+0xd7/0x150 [ 427.150422] __x64_sys_mount+0xba/0x150 [ 427.154390] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 427.158966] do_syscall_64+0xf9/0x620 [ 427.162759] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 427.167939] RIP: 0033:0x45c4a9 [ 427.171122] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 427.190015] RSP: 002b:00007f081ba2dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 427.197711] RAX: ffffffffffffffda RBX: 00007f081ba2e6d4 RCX: 000000000045c4a9 [ 427.204971] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000020000140 [ 427.212227] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 427.219486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 427.226758] R13: 000000000000074a R14: 00000000004c9d80 R15: 0000000000000022 22:34:18 executing program 0 (fault-call:5 fault-nth:35): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x0, 0x0) [ 427.346985] FAULT_INJECTION: forcing a failure. [ 427.346985] name failslab, interval 1, probability 0, space 0, times 0 [ 427.365049] CPU: 0 PID: 19509 Comm: syz-executor.0 Not tainted 4.19.108-syzkaller #0 [ 427.372988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 427.382362] Call Trace: [ 427.384983] dump_stack+0x188/0x20d [ 427.388648] should_fail.cold+0xa/0x1b [ 427.392557] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 427.397675] ? __lock_is_held+0xad/0x140 [ 427.401741] __should_failslab+0x115/0x180 [ 427.406132] should_failslab+0x5/0xf [ 427.409864] kmem_cache_alloc_node_trace+0x272/0x750 [ 427.415067] ? rcu_read_lock_sched_held+0x10a/0x130 [ 427.420113] ? __kmalloc+0x5f8/0x770 [ 427.423833] __kmalloc_node+0x38/0x70 [ 427.427793] kvmalloc_node+0x61/0xf0 [ 427.431538] __list_lru_init+0x4c3/0x700 [ 427.435875] sget_userns+0x7cb/0xcd0 [ 427.439958] ? set_bdev_super+0x110/0x110 [ 427.444142] ? ns_test_super+0x50/0x50 [ 427.448023] ? set_bdev_super+0x110/0x110 [ 427.452332] ? ns_test_super+0x50/0x50 [ 427.456243] sget+0x10d/0x150 [ 427.459369] mount_bdev+0xf8/0x3c0 [ 427.462932] ? hfsplus_iget+0x790/0x790 [ 427.467037] mount_fs+0xa3/0x30c [ 427.470425] vfs_kern_mount.part.0+0x68/0x400 [ 427.474936] do_mount+0x4f4/0x2a40 [ 427.478506] ? copy_mount_string+0x40/0x40 [ 427.482750] ? __might_fault+0x192/0x1d0 [ 427.486825] ? _copy_from_user+0xd2/0x140 [ 427.490982] ? copy_mount_options+0x27a/0x390 [ 427.495481] ksys_mount+0xd7/0x150 [ 427.499028] __x64_sys_mount+0xba/0x150 [ 427.503157] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 427.507751] do_syscall_64+0xf9/0x620 [ 427.511575] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 427.516773] RIP: 0033:0x45c4a9 [ 427.519969] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 427.539308] RSP: 002b:00007f081ba2dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 427.547066] RAX: ffffffffffffffda RBX: 00007f081ba2e6d4 RCX: 000000000045c4a9 [ 427.554336] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000020000140 [ 427.561733] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 427.569021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 427.576311] R13: 000000000000074a R14: 00000000004c9d80 R15: 0000000000000023 22:34:20 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0xf800, 0x0, 0x40000002}) 22:34:20 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x4}]) 22:34:20 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:34:20 executing program 0 (fault-call:5 fault-nth:36): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x0, 0x0) 22:34:20 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d71a0220341ea32af193c9fa6511756f0a56cf70ef9158dcc809125b2e55b38415828bd295be", 0x9a}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, 0x0}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) [ 429.665720] FAULT_INJECTION: forcing a failure. [ 429.665720] name failslab, interval 1, probability 0, space 0, times 0 [ 429.707267] CPU: 0 PID: 19521 Comm: syz-executor.0 Not tainted 4.19.108-syzkaller #0 [ 429.715484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 429.724941] Call Trace: [ 429.727573] dump_stack+0x188/0x20d [ 429.732277] should_fail.cold+0xa/0x1b [ 429.736219] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 429.741348] ? __lock_is_held+0xad/0x140 [ 429.745482] __should_failslab+0x115/0x180 [ 429.749839] should_failslab+0x5/0xf [ 429.753585] kmem_cache_alloc_trace+0x2c6/0x7a0 [ 429.758384] ? kasan_unpoison_shadow+0x30/0x40 [ 429.763021] ? kasan_kmalloc+0xbf/0xe0 [ 429.766947] __memcg_init_list_lru_node+0x7f/0x1e0 [ 429.771916] __list_lru_init+0x3ff/0x700 [ 429.776286] sget_userns+0x7cb/0xcd0 [ 429.780199] ? set_bdev_super+0x110/0x110 [ 429.784377] ? ns_test_super+0x50/0x50 [ 429.788283] ? set_bdev_super+0x110/0x110 [ 429.792708] ? ns_test_super+0x50/0x50 [ 429.796624] sget+0x10d/0x150 [ 429.800401] mount_bdev+0xf8/0x3c0 [ 429.803978] ? hfsplus_iget+0x790/0x790 22:34:21 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0xff01, 0x0, 0x40000002}) [ 429.807990] mount_fs+0xa3/0x30c [ 429.811391] vfs_kern_mount.part.0+0x68/0x400 [ 429.816034] do_mount+0x4f4/0x2a40 [ 429.819610] ? copy_mount_string+0x40/0x40 [ 429.823965] ? __might_fault+0x192/0x1d0 [ 429.828056] ? _copy_from_user+0xd2/0x140 [ 429.832458] ? copy_mount_options+0x27a/0x390 [ 429.836961] ksys_mount+0xd7/0x150 [ 429.840686] __x64_sys_mount+0xba/0x150 [ 429.844686] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 429.849284] do_syscall_64+0xf9/0x620 [ 429.853206] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 429.858490] RIP: 0033:0x45c4a9 [ 429.861695] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 429.881241] RSP: 002b:00007f081ba2dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 429.888945] RAX: ffffffffffffffda RBX: 00007f081ba2e6d4 RCX: 000000000045c4a9 [ 429.896211] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000020000140 [ 429.903854] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 429.911319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 429.921210] R13: 000000000000074a R14: 00000000004c9d80 R15: 0000000000000024 22:34:21 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:34:21 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0xff0f, 0x0, 0x40000002}) 22:34:21 executing program 0 (fault-call:5 fault-nth:37): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x0, 0x0) 22:34:21 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x4000}]) 22:34:21 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0xff77, 0x0, 0x40000002}) [ 430.065922] FAULT_INJECTION: forcing a failure. [ 430.065922] name failslab, interval 1, probability 0, space 0, times 0 [ 430.147444] CPU: 1 PID: 19638 Comm: syz-executor.0 Not tainted 4.19.108-syzkaller #0 [ 430.155395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 430.165580] Call Trace: [ 430.168201] dump_stack+0x188/0x20d [ 430.171860] should_fail.cold+0xa/0x1b [ 430.175793] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 430.181112] ? __lock_is_held+0xad/0x140 [ 430.185418] __should_failslab+0x115/0x180 [ 430.189805] should_failslab+0x5/0xf [ 430.193535] kmem_cache_alloc_trace+0x2c6/0x7a0 [ 430.198227] ? kasan_unpoison_shadow+0x30/0x40 [ 430.202838] ? kasan_kmalloc+0xbf/0xe0 [ 430.206800] __memcg_init_list_lru_node+0x7f/0x1e0 [ 430.211963] __list_lru_init+0x3ff/0x700 [ 430.216090] sget_userns+0x7cb/0xcd0 [ 430.219990] ? set_bdev_super+0x110/0x110 [ 430.224910] ? ns_test_super+0x50/0x50 [ 430.230569] ? set_bdev_super+0x110/0x110 [ 430.234913] ? ns_test_super+0x50/0x50 [ 430.238836] sget+0x10d/0x150 [ 430.241974] mount_bdev+0xf8/0x3c0 22:34:21 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0xff7f, 0x0, 0x40000002}) 22:34:21 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x2, 0x40000002}) [ 430.245550] ? hfsplus_iget+0x790/0x790 [ 430.249569] mount_fs+0xa3/0x30c [ 430.253045] vfs_kern_mount.part.0+0x68/0x400 [ 430.257891] do_mount+0x4f4/0x2a40 [ 430.261670] ? copy_mount_string+0x40/0x40 [ 430.267000] ? __might_fault+0x192/0x1d0 [ 430.271204] ? _copy_from_user+0xd2/0x140 [ 430.275593] ? copy_mount_options+0x27a/0x390 [ 430.280453] ksys_mount+0xd7/0x150 [ 430.284215] __x64_sys_mount+0xba/0x150 [ 430.289011] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 430.293709] do_syscall_64+0xf9/0x620 [ 430.297768] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 430.303245] RIP: 0033:0x45c4a9 [ 430.306661] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 430.326878] RSP: 002b:00007f081ba2dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 430.334965] RAX: ffffffffffffffda RBX: 00007f081ba2e6d4 RCX: 000000000045c4a9 [ 430.342352] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000020000140 [ 430.350491] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 430.358043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 430.365833] R13: 000000000000074a R14: 00000000004c9d80 R15: 0000000000000025 22:34:23 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:34:23 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x4, 0x40000002}) 22:34:23 executing program 0 (fault-call:5 fault-nth:38): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x0, 0x0) [ 432.693671] FAULT_INJECTION: forcing a failure. [ 432.693671] name failslab, interval 1, probability 0, space 0, times 0 [ 432.714908] CPU: 1 PID: 19759 Comm: syz-executor.0 Not tainted 4.19.108-syzkaller #0 [ 432.723363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 432.732993] Call Trace: [ 432.735640] dump_stack+0x188/0x20d 22:34:24 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d71a0220341ea32af193c9fa6511756f0a56cf70ef9158dcc809125b2e55b38415828bd295be", 0x9a}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, 0x0}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) 22:34:24 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x1000000}]) [ 432.739919] should_fail.cold+0xa/0x1b [ 432.744448] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 432.750133] ? __lock_is_held+0xad/0x140 [ 432.754708] __should_failslab+0x115/0x180 [ 432.759230] should_failslab+0x5/0xf [ 432.762988] kmem_cache_alloc_trace+0x2c6/0x7a0 [ 432.767962] ? kasan_unpoison_shadow+0x30/0x40 [ 432.772823] ? kasan_kmalloc+0xbf/0xe0 [ 432.776823] __memcg_init_list_lru_node+0x7f/0x1e0 [ 432.782067] __list_lru_init+0x3ff/0x700 [ 432.786332] sget_userns+0x7cb/0xcd0 [ 432.790089] ? set_bdev_super+0x110/0x110 [ 432.794636] ? ns_test_super+0x50/0x50 [ 432.799373] ? set_bdev_super+0x110/0x110 [ 432.804328] ? ns_test_super+0x50/0x50 [ 432.808435] sget+0x10d/0x150 [ 432.811783] mount_bdev+0xf8/0x3c0 [ 432.815929] ? hfsplus_iget+0x790/0x790 [ 432.820028] mount_fs+0xa3/0x30c [ 432.823683] vfs_kern_mount.part.0+0x68/0x400 [ 432.828590] do_mount+0x4f4/0x2a40 [ 432.832588] ? copy_mount_string+0x40/0x40 [ 432.837651] ? __might_fault+0x192/0x1d0 [ 432.842037] ? _copy_from_user+0xd2/0x140 [ 432.846665] ? copy_mount_options+0x27a/0x390 [ 432.851246] ksys_mount+0xd7/0x150 [ 432.855076] __x64_sys_mount+0xba/0x150 [ 432.859078] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 432.863692] do_syscall_64+0xf9/0x620 [ 432.867634] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 432.872841] RIP: 0033:0x45c4a9 [ 432.877645] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 432.898033] RSP: 002b:00007f081ba2dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 432.905801] RAX: ffffffffffffffda RBX: 00007f081ba2e6d4 RCX: 000000000045c4a9 [ 432.913461] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000020000140 [ 432.921477] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 432.929356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 432.937580] R13: 000000000000074a R14: 00000000004c9d80 R15: 0000000000000026 22:34:24 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r2}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:34:24 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:34:24 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x5, 0x40000002}) 22:34:24 executing program 0 (fault-call:5 fault-nth:39): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x0, 0x0) 22:34:24 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x4000000}]) [ 433.141821] FAULT_INJECTION: forcing a failure. [ 433.141821] name failslab, interval 1, probability 0, space 0, times 0 [ 433.170539] CPU: 1 PID: 19881 Comm: syz-executor.0 Not tainted 4.19.108-syzkaller #0 [ 433.179197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 433.188654] Call Trace: 22:34:24 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x8, 0x40000002}) [ 433.191269] dump_stack+0x188/0x20d [ 433.195187] should_fail.cold+0xa/0x1b [ 433.199206] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 433.204515] ? __lock_is_held+0xad/0x140 [ 433.208890] __should_failslab+0x115/0x180 [ 433.213431] should_failslab+0x5/0xf [ 433.217351] kmem_cache_alloc_trace+0x2c6/0x7a0 [ 433.222314] ? kasan_unpoison_shadow+0x30/0x40 [ 433.227173] ? kasan_kmalloc+0xbf/0xe0 [ 433.231158] __memcg_init_list_lru_node+0x7f/0x1e0 [ 433.236580] __list_lru_init+0x3ff/0x700 [ 433.240855] sget_userns+0x7cb/0xcd0 [ 433.244594] ? set_bdev_super+0x110/0x110 [ 433.249002] ? ns_test_super+0x50/0x50 [ 433.252975] ? set_bdev_super+0x110/0x110 [ 433.257473] ? ns_test_super+0x50/0x50 [ 433.261842] sget+0x10d/0x150 [ 433.265299] mount_bdev+0xf8/0x3c0 [ 433.268838] ? hfsplus_iget+0x790/0x790 [ 433.273221] mount_fs+0xa3/0x30c [ 433.276595] vfs_kern_mount.part.0+0x68/0x400 [ 433.281643] do_mount+0x4f4/0x2a40 [ 433.285192] ? copy_mount_string+0x40/0x40 [ 433.289447] ? __might_fault+0x192/0x1d0 [ 433.294197] ? _copy_from_user+0xd2/0x140 [ 433.298809] ? copy_mount_options+0x27a/0x390 [ 433.303302] ksys_mount+0xd7/0x150 [ 433.306846] __x64_sys_mount+0xba/0x150 [ 433.310898] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 433.315946] do_syscall_64+0xf9/0x620 [ 433.320303] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 433.325753] RIP: 0033:0x45c4a9 [ 433.329534] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 433.350649] RSP: 002b:00007f081ba2dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 433.358615] RAX: ffffffffffffffda RBX: 00007f081ba2e6d4 RCX: 000000000045c4a9 [ 433.366062] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000020000140 [ 433.373511] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 433.381421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 433.389398] R13: 000000000000074a R14: 00000000004c9d80 R15: 0000000000000027 22:34:24 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0xc, 0x40000002}) 22:34:24 executing program 0 (fault-call:5 fault-nth:40): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x0, 0x0) 22:34:24 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x40000000}]) [ 433.576062] FAULT_INJECTION: forcing a failure. [ 433.576062] name failslab, interval 1, probability 0, space 0, times 0 [ 433.588280] CPU: 0 PID: 19997 Comm: syz-executor.0 Not tainted 4.19.108-syzkaller #0 [ 433.596779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 433.607197] Call Trace: [ 433.610096] dump_stack+0x188/0x20d [ 433.614096] should_fail.cold+0xa/0x1b [ 433.618333] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 433.623909] ? __lock_is_held+0xad/0x140 [ 433.628351] __should_failslab+0x115/0x180 [ 433.632597] should_failslab+0x5/0xf [ 433.636310] kmem_cache_alloc_trace+0x2c6/0x7a0 [ 433.641013] ? kasan_unpoison_shadow+0x30/0x40 [ 433.645745] ? kasan_kmalloc+0xbf/0xe0 [ 433.649892] __memcg_init_list_lru_node+0x7f/0x1e0 [ 433.654923] __list_lru_init+0x3ff/0x700 [ 433.659240] sget_userns+0x7cb/0xcd0 [ 433.663159] ? set_bdev_super+0x110/0x110 [ 433.667517] ? ns_test_super+0x50/0x50 [ 433.671514] ? set_bdev_super+0x110/0x110 [ 433.676230] ? ns_test_super+0x50/0x50 [ 433.680648] sget+0x10d/0x150 [ 433.684135] mount_bdev+0xf8/0x3c0 [ 433.687777] ? hfsplus_iget+0x790/0x790 [ 433.691881] mount_fs+0xa3/0x30c [ 433.695267] vfs_kern_mount.part.0+0x68/0x400 [ 433.699799] do_mount+0x4f4/0x2a40 [ 433.703448] ? copy_mount_string+0x40/0x40 [ 433.707920] ? __might_fault+0x192/0x1d0 [ 433.712330] ? _copy_from_user+0xd2/0x140 [ 433.716696] ? copy_mount_options+0x27a/0x390 [ 433.721482] ksys_mount+0xd7/0x150 [ 433.725048] __x64_sys_mount+0xba/0x150 [ 433.729206] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 433.734127] do_syscall_64+0xf9/0x620 [ 433.738534] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 433.744011] RIP: 0033:0x45c4a9 [ 433.747356] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 433.767371] RSP: 002b:00007f081ba2dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 22:34:25 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0xd, 0x40000002}) [ 433.776738] RAX: ffffffffffffffda RBX: 00007f081ba2e6d4 RCX: 000000000045c4a9 [ 433.785209] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000020000140 [ 433.793465] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 433.801092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 433.808855] R13: 000000000000074a R14: 00000000004c9d80 R15: 0000000000000028 22:34:27 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x10, 0x40000002}) 22:34:27 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x7ffffffff000}]) 22:34:27 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r2}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:34:27 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d71a0220341ea32af193c9fa6511756f0a56cf70ef9158dcc809125b2e55b38415828bd295be86", 0x9b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, 0x0}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) 22:34:27 executing program 0 (fault-call:5 fault-nth:41): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x0, 0x0) 22:34:27 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x12, 0x40000002}) 22:34:27 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0xf0ffffff7f0000}]) 22:34:27 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 436.235362] FAULT_INJECTION: forcing a failure. [ 436.235362] name failslab, interval 1, probability 0, space 0, times 0 [ 436.259037] CPU: 1 PID: 20223 Comm: syz-executor.0 Not tainted 4.19.108-syzkaller #0 [ 436.267505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 436.277314] Call Trace: [ 436.280148] dump_stack+0x188/0x20d [ 436.284247] should_fail.cold+0xa/0x1b 22:34:27 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d71a0220341ea32af193c9fa6511756f0a56cf70ef9158dcc809125b2e55b38415828bd295be86", 0x9b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, 0x0}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) 22:34:27 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r2}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 436.288676] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 436.294367] ? __lock_is_held+0xad/0x140 [ 436.299520] __should_failslab+0x115/0x180 [ 436.304150] should_failslab+0x5/0xf [ 436.307888] kmem_cache_alloc_trace+0x2c6/0x7a0 [ 436.312589] ? kasan_unpoison_shadow+0x30/0x40 [ 436.317716] ? kasan_kmalloc+0xbf/0xe0 [ 436.322856] __memcg_init_list_lru_node+0x7f/0x1e0 [ 436.327837] __list_lru_init+0x3ff/0x700 [ 436.332484] sget_userns+0x7cb/0xcd0 [ 436.336378] ? set_bdev_super+0x110/0x110 [ 436.341564] ? ns_test_super+0x50/0x50 [ 436.345842] ? set_bdev_super+0x110/0x110 [ 436.350030] ? ns_test_super+0x50/0x50 [ 436.355539] sget+0x10d/0x150 [ 436.358800] mount_bdev+0xf8/0x3c0 [ 436.362815] ? hfsplus_iget+0x790/0x790 [ 436.367673] mount_fs+0xa3/0x30c [ 436.371382] vfs_kern_mount.part.0+0x68/0x400 [ 436.376839] do_mount+0x4f4/0x2a40 [ 436.381006] ? copy_mount_string+0x40/0x40 [ 436.385397] ? __might_fault+0x192/0x1d0 [ 436.389721] ? _copy_from_user+0xd2/0x140 [ 436.394687] ? copy_mount_options+0x27a/0x390 [ 436.399309] ksys_mount+0xd7/0x150 [ 436.402990] __x64_sys_mount+0xba/0x150 [ 436.406973] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 436.411667] do_syscall_64+0xf9/0x620 [ 436.415580] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 436.420788] RIP: 0033:0x45c4a9 22:34:27 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x17, 0x40000002}) [ 436.424535] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 436.443460] RSP: 002b:00007f081ba2dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 436.451166] RAX: ffffffffffffffda RBX: 00007f081ba2e6d4 RCX: 000000000045c4a9 [ 436.459238] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000020000140 [ 436.466505] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 436.474215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 436.481690] R13: 000000000000074a R14: 00000000004c9d80 R15: 0000000000000029 22:34:27 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x100000000000000}]) 22:34:27 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d71a0220341ea32af193c9fa6511756f0a56cf70ef9158dcc809125b2e55b38415828bd295be86", 0x9b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, 0x0}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) 22:34:27 executing program 0 (fault-call:5 fault-nth:42): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x0, 0x0) 22:34:27 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x21, 0x40000002}) [ 436.727930] FAULT_INJECTION: forcing a failure. [ 436.727930] name failslab, interval 1, probability 0, space 0, times 0 [ 436.750813] CPU: 0 PID: 20452 Comm: syz-executor.0 Not tainted 4.19.108-syzkaller #0 [ 436.759186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 436.768906] Call Trace: [ 436.771709] dump_stack+0x188/0x20d [ 436.775743] should_fail.cold+0xa/0x1b [ 436.779668] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 436.785754] ? __lock_is_held+0xad/0x140 [ 436.790019] __should_failslab+0x115/0x180 [ 436.794684] should_failslab+0x5/0xf [ 436.798430] kmem_cache_alloc_trace+0x2c6/0x7a0 [ 436.803605] ? kasan_unpoison_shadow+0x30/0x40 [ 436.808484] ? kasan_kmalloc+0xbf/0xe0 [ 436.812627] __memcg_init_list_lru_node+0x7f/0x1e0 [ 436.818282] __list_lru_init+0x3ff/0x700 [ 436.823633] sget_userns+0x7cb/0xcd0 [ 436.828229] ? set_bdev_super+0x110/0x110 [ 436.832497] ? ns_test_super+0x50/0x50 [ 436.836418] ? set_bdev_super+0x110/0x110 [ 436.840920] ? ns_test_super+0x50/0x50 [ 436.844838] sget+0x10d/0x150 [ 436.848492] mount_bdev+0xf8/0x3c0 [ 436.852055] ? hfsplus_iget+0x790/0x790 [ 436.857053] mount_fs+0xa3/0x30c [ 436.860627] vfs_kern_mount.part.0+0x68/0x400 [ 436.866037] do_mount+0x4f4/0x2a40 [ 436.869642] ? copy_mount_string+0x40/0x40 [ 436.874431] ? __might_fault+0x192/0x1d0 [ 436.878688] ? _copy_from_user+0xd2/0x140 [ 436.883151] ? copy_mount_options+0x27a/0x390 [ 436.888315] ksys_mount+0xd7/0x150 [ 436.892245] __x64_sys_mount+0xba/0x150 [ 436.896627] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 436.901943] do_syscall_64+0xf9/0x620 [ 436.905776] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 436.911037] RIP: 0033:0x45c4a9 22:34:28 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x22, 0x40000002}) 22:34:28 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x23, 0x40000002}) 22:34:28 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x24, 0x40000002}) [ 436.914610] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 436.936416] RSP: 002b:00007f081ba2dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 436.944409] RAX: ffffffffffffffda RBX: 00007f081ba2e6d4 RCX: 000000000045c4a9 [ 436.952318] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000020000140 [ 436.961057] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 436.969492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 22:34:28 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x400000000000000}]) [ 436.978127] R13: 000000000000074a R14: 00000000004c9d80 R15: 000000000000002a [ 437.960793] NOHZ: local_softirq_pending 08 22:34:30 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000380)) pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:34:30 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x25, 0x40000002}) 22:34:30 executing program 0 (fault-call:5 fault-nth:43): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x0, 0x0) 22:34:30 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) dup(0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r2}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:34:30 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x4000000000000000}]) [ 439.408113] FAULT_INJECTION: forcing a failure. [ 439.408113] name failslab, interval 1, probability 0, space 0, times 0 [ 439.426358] CPU: 1 PID: 20580 Comm: syz-executor.0 Not tainted 4.19.108-syzkaller #0 [ 439.434754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 439.445041] Call Trace: [ 439.448110] dump_stack+0x188/0x20d [ 439.453116] should_fail.cold+0xa/0x1b [ 439.457571] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 439.463258] ? __lock_is_held+0xad/0x140 [ 439.467689] __should_failslab+0x115/0x180 [ 439.471949] should_failslab+0x5/0xf [ 439.475904] kmem_cache_alloc_trace+0x2c6/0x7a0 [ 439.481389] ? kasan_unpoison_shadow+0x30/0x40 [ 439.486296] ? kasan_kmalloc+0xbf/0xe0 [ 439.490643] __memcg_init_list_lru_node+0x7f/0x1e0 [ 439.496094] __list_lru_init+0x3ff/0x700 [ 439.500637] sget_userns+0x7cb/0xcd0 [ 439.505153] ? set_bdev_super+0x110/0x110 [ 439.510091] ? ns_test_super+0x50/0x50 [ 439.514897] ? set_bdev_super+0x110/0x110 [ 439.519434] ? ns_test_super+0x50/0x50 [ 439.523341] sget+0x10d/0x150 [ 439.527117] mount_bdev+0xf8/0x3c0 [ 439.531644] ? hfsplus_iget+0x790/0x790 [ 439.536029] mount_fs+0xa3/0x30c [ 439.539612] vfs_kern_mount.part.0+0x68/0x400 [ 439.544506] do_mount+0x4f4/0x2a40 [ 439.548180] ? copy_mount_string+0x40/0x40 [ 439.552536] ? __might_fault+0x192/0x1d0 [ 439.557262] ? _copy_from_user+0xd2/0x140 [ 439.561671] ? copy_mount_options+0x27a/0x390 [ 439.566765] ksys_mount+0xd7/0x150 [ 439.570747] __x64_sys_mount+0xba/0x150 [ 439.575667] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 439.581231] do_syscall_64+0xf9/0x620 [ 439.585305] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 439.590510] RIP: 0033:0x45c4a9 [ 439.593828] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 439.613931] RSP: 002b:00007f081ba2dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 439.622074] RAX: ffffffffffffffda RBX: 00007f081ba2e6d4 RCX: 000000000045c4a9 [ 439.629355] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000020000140 [ 439.637513] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 439.645451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 22:34:30 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d71a0220341ea32af193c9fa6511756f0a56cf70ef9158dcc809125b2e55b38415828bd295be8641", 0x9c}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, 0x0}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) 22:34:30 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x26, 0x40000002}) [ 439.653679] R13: 000000000000074a R14: 00000000004c9d80 R15: 000000000000002b 22:34:31 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x27, 0x40000002}) 22:34:31 executing program 0 (fault-call:5 fault-nth:44): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x0, 0x0) 22:34:31 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x8000000000000000}]) 22:34:31 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x28, 0x40000002}) [ 439.824985] FAULT_INJECTION: forcing a failure. [ 439.824985] name failslab, interval 1, probability 0, space 0, times 0 [ 439.843251] CPU: 0 PID: 20697 Comm: syz-executor.0 Not tainted 4.19.108-syzkaller #0 [ 439.851557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 439.861979] Call Trace: [ 439.864613] dump_stack+0x188/0x20d [ 439.868285] should_fail.cold+0xa/0x1b 22:34:31 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x29, 0x40000002}) [ 439.872232] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 439.877456] ? __lock_is_held+0xad/0x140 [ 439.881559] __should_failslab+0x115/0x180 [ 439.886541] should_failslab+0x5/0xf [ 439.890285] kmem_cache_alloc_trace+0x2c6/0x7a0 [ 439.895540] ? kasan_unpoison_shadow+0x30/0x40 [ 439.900873] ? kasan_kmalloc+0xbf/0xe0 [ 439.905001] __memcg_init_list_lru_node+0x7f/0x1e0 [ 439.910240] __list_lru_init+0x3ff/0x700 [ 439.914531] sget_userns+0x7cb/0xcd0 [ 439.918548] ? set_bdev_super+0x110/0x110 [ 439.923271] ? ns_test_super+0x50/0x50 [ 439.927453] ? set_bdev_super+0x110/0x110 [ 439.931643] ? ns_test_super+0x50/0x50 [ 439.935650] sget+0x10d/0x150 [ 439.938790] mount_bdev+0xf8/0x3c0 [ 439.943063] ? hfsplus_iget+0x790/0x790 [ 439.947248] mount_fs+0xa3/0x30c [ 439.950782] vfs_kern_mount.part.0+0x68/0x400 [ 439.955599] do_mount+0x4f4/0x2a40 [ 439.959264] ? copy_mount_string+0x40/0x40 [ 439.963911] ? __might_fault+0x192/0x1d0 [ 439.968492] ? _copy_from_user+0xd2/0x140 [ 439.973443] ? copy_mount_options+0x27a/0x390 [ 439.979054] ksys_mount+0xd7/0x150 [ 439.983036] __x64_sys_mount+0xba/0x150 [ 439.987043] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 439.992371] do_syscall_64+0xf9/0x620 [ 439.996943] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 440.002456] RIP: 0033:0x45c4a9 [ 440.006021] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 440.025566] RSP: 002b:00007f081ba2dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 440.033573] RAX: ffffffffffffffda RBX: 00007f081ba2e6d4 RCX: 000000000045c4a9 [ 440.041169] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000020000140 [ 440.049221] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 440.058112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 440.066090] R13: 000000000000074a R14: 00000000004c9d80 R15: 000000000000002c [ 440.081025] NOHZ: local_softirq_pending 08 22:34:33 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000380)) pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:34:33 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x2a, 0x40000002}) 22:34:33 executing program 0 (fault-call:5 fault-nth:45): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x0, 0x0) [ 442.272750] FAULT_INJECTION: forcing a failure. [ 442.272750] name failslab, interval 1, probability 0, space 0, times 0 [ 442.289604] CPU: 0 PID: 20816 Comm: syz-executor.0 Not tainted 4.19.108-syzkaller #0 [ 442.299289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 442.311282] Call Trace: [ 442.314861] dump_stack+0x188/0x20d [ 442.319017] should_fail.cold+0xa/0x1b [ 442.323585] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 442.329239] ? __lock_is_held+0xad/0x140 [ 442.333340] __should_failslab+0x115/0x180 [ 442.337622] should_failslab+0x5/0xf [ 442.341545] kmem_cache_alloc_trace+0x2c6/0x7a0 [ 442.346609] ? kasan_unpoison_shadow+0x30/0x40 [ 442.351843] ? kasan_kmalloc+0xbf/0xe0 [ 442.356780] __memcg_init_list_lru_node+0x7f/0x1e0 [ 442.361865] __list_lru_init+0x3ff/0x700 [ 442.367216] sget_userns+0x7cb/0xcd0 22:34:33 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) dup(0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r2}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:34:33 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x4}]) [ 442.371652] ? set_bdev_super+0x110/0x110 [ 442.376161] ? ns_test_super+0x50/0x50 [ 442.380754] ? set_bdev_super+0x110/0x110 [ 442.385309] ? ns_test_super+0x50/0x50 [ 442.390000] sget+0x10d/0x150 [ 442.393500] mount_bdev+0xf8/0x3c0 [ 442.397071] ? hfsplus_iget+0x790/0x790 [ 442.401162] mount_fs+0xa3/0x30c [ 442.404564] vfs_kern_mount.part.0+0x68/0x400 [ 442.409105] do_mount+0x4f4/0x2a40 [ 442.412690] ? copy_mount_string+0x40/0x40 [ 442.416957] ? __might_fault+0x192/0x1d0 [ 442.421053] ? _copy_from_user+0xd2/0x140 [ 442.425224] ? copy_mount_options+0x27a/0x390 [ 442.429748] ksys_mount+0xd7/0x150 [ 442.433327] __x64_sys_mount+0xba/0x150 [ 442.437447] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 442.442344] do_syscall_64+0xf9/0x620 [ 442.446280] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 442.451709] RIP: 0033:0x45c4a9 [ 442.454924] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 442.474324] RSP: 002b:00007f081ba2dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 442.482053] RAX: ffffffffffffffda RBX: 00007f081ba2e6d4 RCX: 000000000045c4a9 [ 442.489776] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000020000140 [ 442.497194] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 442.504641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 442.512855] R13: 000000000000074a R14: 00000000004c9d80 R15: 000000000000002d 22:34:33 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d71a0220341ea32af193c9fa6511756f0a56cf70ef9158dcc809125b2e55b38415828bd295be8641", 0x9c}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, 0x0}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) 22:34:33 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x78, 0x40000002}) 22:34:33 executing program 0 (fault-call:5 fault-nth:46): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x0, 0x0) 22:34:33 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x4000}]) [ 442.772277] FAULT_INJECTION: forcing a failure. [ 442.772277] name failslab, interval 1, probability 0, space 0, times 0 [ 442.794737] CPU: 0 PID: 20933 Comm: syz-executor.0 Not tainted 4.19.108-syzkaller #0 [ 442.802679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 442.812193] Call Trace: [ 442.814812] dump_stack+0x188/0x20d [ 442.818468] should_fail.cold+0xa/0x1b 22:34:34 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0xf8, 0x40000002}) [ 442.822653] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 442.827967] ? __lock_is_held+0xad/0x140 [ 442.832183] __should_failslab+0x115/0x180 [ 442.836543] should_failslab+0x5/0xf [ 442.840291] kmem_cache_alloc_node_trace+0x272/0x750 [ 442.845634] ? kasan_kmalloc+0xbf/0xe0 [ 442.849559] __kmalloc_node+0x38/0x70 [ 442.853439] kvmalloc_node+0x61/0xf0 [ 442.857183] __list_lru_init+0x4c3/0x700 [ 442.861407] sget_userns+0x7cb/0xcd0 [ 442.865151] ? set_bdev_super+0x110/0x110 22:34:34 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x300, 0x40000002}) [ 442.869330] ? ns_test_super+0x50/0x50 [ 442.873249] ? set_bdev_super+0x110/0x110 [ 442.877427] ? ns_test_super+0x50/0x50 [ 442.881344] sget+0x10d/0x150 [ 442.884488] mount_bdev+0xf8/0x3c0 [ 442.888109] ? hfsplus_iget+0x790/0x790 [ 442.892164] mount_fs+0xa3/0x30c [ 442.895567] vfs_kern_mount.part.0+0x68/0x400 [ 442.900796] do_mount+0x4f4/0x2a40 [ 442.904370] ? copy_mount_string+0x40/0x40 [ 442.908631] ? __might_fault+0x192/0x1d0 [ 442.912736] ? _copy_from_user+0xd2/0x140 [ 442.916917] ? copy_mount_options+0x27a/0x390 [ 442.921534] ksys_mount+0xd7/0x150 [ 442.925096] __x64_sys_mount+0xba/0x150 [ 442.929097] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 442.933700] do_syscall_64+0xf9/0x620 [ 442.937529] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 442.942834] RIP: 0033:0x45c4a9 [ 442.946281] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 442.965288] RSP: 002b:00007f081ba2dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 22:34:34 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x500, 0x40000002}) [ 442.973144] RAX: ffffffffffffffda RBX: 00007f081ba2e6d4 RCX: 000000000045c4a9 [ 442.980527] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000020000140 [ 442.987999] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 442.995443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 443.002773] R13: 000000000000074a R14: 00000000004c9d80 R15: 000000000000002e 22:34:36 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000380)) pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:34:36 executing program 0 (fault-call:5 fault-nth:47): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x0, 0x0) 22:34:36 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000000}]) [ 445.302324] FAULT_INJECTION: forcing a failure. [ 445.302324] name failslab, interval 1, probability 0, space 0, times 0 [ 445.314011] CPU: 1 PID: 21054 Comm: syz-executor.0 Not tainted 4.19.108-syzkaller #0 [ 445.321926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 445.331298] Call Trace: [ 445.334013] dump_stack+0x188/0x20d [ 445.337800] should_fail.cold+0xa/0x1b [ 445.341723] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 445.346885] ? __lock_is_held+0xad/0x140 [ 445.351096] __should_failslab+0x115/0x180 [ 445.355336] should_failslab+0x5/0xf [ 445.359059] kmem_cache_alloc_trace+0x2c6/0x7a0 [ 445.363729] ? kasan_unpoison_shadow+0x30/0x40 [ 445.368311] ? kasan_kmalloc+0xbf/0xe0 [ 445.372213] __memcg_init_list_lru_node+0x7f/0x1e0 [ 445.377142] __list_lru_init+0x3ff/0x700 [ 445.381200] sget_userns+0x7cb/0xcd0 [ 445.384918] ? set_bdev_super+0x110/0x110 [ 445.389064] ? ns_test_super+0x50/0x50 [ 445.392952] ? set_bdev_super+0x110/0x110 [ 445.397101] ? ns_test_super+0x50/0x50 [ 445.400993] sget+0x10d/0x150 [ 445.404104] mount_bdev+0xf8/0x3c0 [ 445.407646] ? hfsplus_iget+0x790/0x790 [ 445.411627] mount_fs+0xa3/0x30c [ 445.415005] vfs_kern_mount.part.0+0x68/0x400 [ 445.419495] do_mount+0x4f4/0x2a40 [ 445.423639] ? copy_mount_string+0x40/0x40 [ 445.427883] ? __might_fault+0x192/0x1d0 [ 445.431940] ? _copy_from_user+0xd2/0x140 [ 445.436098] ? copy_mount_options+0x27a/0x390 [ 445.440593] ksys_mount+0xd7/0x150 [ 445.444130] __x64_sys_mount+0xba/0x150 [ 445.448115] ? lockdep_hardirqs_on+0x40b/0x5d0 22:34:36 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) dup(0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r2}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:34:36 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0xc00, 0x40000002}) [ 445.452720] do_syscall_64+0xf9/0x620 [ 445.456546] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 445.461748] RIP: 0033:0x45c4a9 [ 445.464954] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 445.483869] RSP: 002b:00007f081ba2dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 445.491605] RAX: ffffffffffffffda RBX: 00007f081ba2e6d4 RCX: 000000000045c4a9 [ 445.498892] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000020000140 [ 445.506180] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 445.513468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 445.520755] R13: 000000000000074a R14: 00000000004c9d80 R15: 000000000000002f 22:34:37 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d71a0220341ea32af193c9fa6511756f0a56cf70ef9158dcc809125b2e55b38415828bd295be8641", 0x9c}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, 0x0}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) 22:34:37 executing program 0 (fault-call:5 fault-nth:48): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x0, 0x0) 22:34:37 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0xd00, 0x40000002}) 22:34:37 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x4000000}]) 22:34:37 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x1200, 0x40000002}) [ 445.833929] FAULT_INJECTION: forcing a failure. [ 445.833929] name failslab, interval 1, probability 0, space 0, times 0 [ 445.848661] CPU: 1 PID: 21195 Comm: syz-executor.0 Not tainted 4.19.108-syzkaller #0 [ 445.856695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 445.866069] Call Trace: [ 445.868702] dump_stack+0x188/0x20d [ 445.872360] should_fail.cold+0xa/0x1b [ 445.876272] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 445.881404] ? __lock_is_held+0xad/0x140 [ 445.885520] __should_failslab+0x115/0x180 [ 445.889785] should_failslab+0x5/0xf [ 445.893537] kmem_cache_alloc_trace+0x2c6/0x7a0 [ 445.898229] ? kasan_unpoison_shadow+0x30/0x40 [ 445.902836] ? kasan_kmalloc+0xbf/0xe0 [ 445.906755] __memcg_init_list_lru_node+0x7f/0x1e0 [ 445.911718] __list_lru_init+0x3ff/0x700 [ 445.915894] sget_userns+0x7cb/0xcd0 [ 445.919662] ? set_bdev_super+0x110/0x110 [ 445.923842] ? ns_test_super+0x50/0x50 [ 445.927757] ? set_bdev_super+0x110/0x110 22:34:37 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x3f00, 0x40000002}) [ 445.931926] ? ns_test_super+0x50/0x50 [ 445.935843] sget+0x10d/0x150 [ 445.938980] mount_bdev+0xf8/0x3c0 [ 445.942539] ? hfsplus_iget+0x790/0x790 [ 445.946559] mount_fs+0xa3/0x30c [ 445.949954] vfs_kern_mount.part.0+0x68/0x400 [ 445.954478] do_mount+0x4f4/0x2a40 [ 445.958054] ? copy_mount_string+0x40/0x40 [ 445.962418] ? __might_fault+0x192/0x1d0 [ 445.966528] ? _copy_from_user+0xd2/0x140 [ 445.970711] ? copy_mount_options+0x27a/0x390 [ 445.975239] ksys_mount+0xd7/0x150 [ 445.978813] __x64_sys_mount+0xba/0x150 22:34:37 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x77ff, 0x40000002}) [ 445.982817] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 445.987422] do_syscall_64+0xf9/0x620 [ 445.991251] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 445.996456] RIP: 0033:0x45c4a9 [ 445.999675] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 446.018598] RSP: 002b:00007f081ba2dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 446.026321] RAX: ffffffffffffffda RBX: 00007f081ba2e6d4 RCX: 000000000045c4a9 [ 446.033599] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000020000140 [ 446.040884] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 446.048155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 446.055440] R13: 000000000000074a R14: 00000000004c9d80 R15: 0000000000000030 22:34:39 executing program 0 (fault-call:5 fault-nth:49): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x0, 0x0) 22:34:39 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x7800, 0x40000002}) 22:34:39 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x40000000}]) [ 448.354066] FAULT_INJECTION: forcing a failure. [ 448.354066] name failslab, interval 1, probability 0, space 0, times 0 [ 448.366723] CPU: 1 PID: 21296 Comm: syz-executor.0 Not tainted 4.19.108-syzkaller #0 [ 448.374665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 448.384040] Call Trace: [ 448.386657] dump_stack+0x188/0x20d [ 448.390319] should_fail.cold+0xa/0x1b [ 448.394267] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 448.399399] ? __lock_is_held+0xad/0x140 [ 448.403492] __should_failslab+0x115/0x180 [ 448.407888] should_failslab+0x5/0xf [ 448.411745] kmem_cache_alloc_trace+0x2c6/0x7a0 [ 448.416444] ? kasan_unpoison_shadow+0x30/0x40 [ 448.421051] ? kasan_kmalloc+0xbf/0xe0 [ 448.425099] __memcg_init_list_lru_node+0x7f/0x1e0 [ 448.430187] __list_lru_init+0x3ff/0x700 [ 448.434257] sget_userns+0x7cb/0xcd0 [ 448.437969] ? set_bdev_super+0x110/0x110 [ 448.442118] ? ns_test_super+0x50/0x50 [ 448.445998] ? set_bdev_super+0x110/0x110 [ 448.450150] ? ns_test_super+0x50/0x50 [ 448.454102] sget+0x10d/0x150 [ 448.457262] mount_bdev+0xf8/0x3c0 [ 448.460816] ? hfsplus_iget+0x790/0x790 [ 448.464788] mount_fs+0xa3/0x30c [ 448.468316] vfs_kern_mount.part.0+0x68/0x400 [ 448.472828] do_mount+0x4f4/0x2a40 [ 448.476401] ? copy_mount_string+0x40/0x40 [ 448.480768] ? __might_fault+0x192/0x1d0 [ 448.484948] ? _copy_from_user+0xd2/0x140 [ 448.489127] ? copy_mount_options+0x27a/0x390 [ 448.493640] ksys_mount+0xd7/0x150 [ 448.497192] __x64_sys_mount+0xba/0x150 [ 448.501181] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 448.505757] do_syscall_64+0xf9/0x620 [ 448.509563] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 448.514864] RIP: 0033:0x45c4a9 [ 448.518136] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 448.537141] RSP: 002b:00007f081ba2dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 448.544870] RAX: ffffffffffffffda RBX: 00007f081ba2e6d4 RCX: 000000000045c4a9 22:34:39 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:34:39 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 448.552152] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000020000140 [ 448.559435] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 448.566713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 448.573985] R13: 000000000000074a R14: 00000000004c9d80 R15: 0000000000000031 22:34:40 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d71a0220341ea32af193c9fa6511756f0a56cf70ef9158dcc809125b2e55b38415828bd295be8641", 0x9c}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, 0x0}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) 22:34:40 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x8007, 0x40000002}) 22:34:40 executing program 0 (fault-call:5 fault-nth:50): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x0, 0x0) 22:34:40 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:34:40 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x7ffffffff000}]) 22:34:40 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 448.891638] FAULT_INJECTION: forcing a failure. [ 448.891638] name failslab, interval 1, probability 0, space 0, times 0 [ 448.931221] CPU: 1 PID: 21412 Comm: syz-executor.0 Not tainted 4.19.108-syzkaller #0 [ 448.939162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 448.949438] Call Trace: [ 448.952048] dump_stack+0x188/0x20d [ 448.955708] should_fail.cold+0xa/0x1b [ 448.959623] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 448.964744] ? __lock_is_held+0xad/0x140 [ 448.968838] __should_failslab+0x115/0x180 [ 448.973091] should_failslab+0x5/0xf [ 448.976829] kmem_cache_alloc_trace+0x2c6/0x7a0 [ 448.981521] ? kasan_unpoison_shadow+0x30/0x40 [ 448.986172] ? kasan_kmalloc+0xbf/0xe0 22:34:40 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x800f, 0x40000002}) [ 448.990091] __memcg_init_list_lru_node+0x7f/0x1e0 [ 448.995051] __list_lru_init+0x3ff/0x700 [ 448.999142] sget_userns+0x7cb/0xcd0 [ 449.002869] ? set_bdev_super+0x110/0x110 [ 449.007044] ? ns_test_super+0x50/0x50 [ 449.010957] ? set_bdev_super+0x110/0x110 [ 449.015123] ? ns_test_super+0x50/0x50 [ 449.019032] sget+0x10d/0x150 [ 449.022154] mount_bdev+0xf8/0x3c0 [ 449.025711] ? hfsplus_iget+0x790/0x790 [ 449.029708] mount_fs+0xa3/0x30c [ 449.033113] vfs_kern_mount.part.0+0x68/0x400 [ 449.037636] do_mount+0x4f4/0x2a40 22:34:40 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x8017, 0x40000002}) [ 449.041224] ? copy_mount_string+0x40/0x40 [ 449.045481] ? __might_fault+0x192/0x1d0 [ 449.049577] ? _copy_from_user+0xd2/0x140 [ 449.053748] ? copy_mount_options+0x27a/0x390 [ 449.058270] ksys_mount+0xd7/0x150 [ 449.061832] __x64_sys_mount+0xba/0x150 [ 449.065948] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 449.070552] do_syscall_64+0xf9/0x620 [ 449.074375] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 449.079583] RIP: 0033:0x45c4a9 [ 449.082789] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 449.101710] RSP: 002b:00007f081ba2dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 449.109440] RAX: ffffffffffffffda RBX: 00007f081ba2e6d4 RCX: 000000000045c4a9 [ 449.116731] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000020000140 [ 449.124022] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 449.131309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 22:34:40 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 449.138716] R13: 000000000000074a R14: 00000000004c9d80 R15: 0000000000000032 22:34:40 executing program 0 (fault-call:5 fault-nth:51): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x0, 0x0) 22:34:40 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x8020, 0x40000002}) 22:34:40 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0xf0ffffff7f0000}]) [ 449.305759] FAULT_INJECTION: forcing a failure. [ 449.305759] name failslab, interval 1, probability 0, space 0, times 0 [ 449.335115] CPU: 0 PID: 21540 Comm: syz-executor.0 Not tainted 4.19.108-syzkaller #0 [ 449.343061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 449.352438] Call Trace: [ 449.355049] dump_stack+0x188/0x20d [ 449.358934] should_fail.cold+0xa/0x1b [ 449.362966] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 449.368702] ? __lock_is_held+0xad/0x140 [ 449.372808] __should_failslab+0x115/0x180 [ 449.377073] should_failslab+0x5/0xf [ 449.380811] kmem_cache_alloc_trace+0x2c6/0x7a0 [ 449.385508] ? kasan_unpoison_shadow+0x30/0x40 [ 449.390112] ? kasan_kmalloc+0xbf/0xe0 [ 449.394028] __memcg_init_list_lru_node+0x7f/0x1e0 [ 449.398986] __list_lru_init+0x3ff/0x700 [ 449.403085] sget_userns+0x7cb/0xcd0 [ 449.406817] ? set_bdev_super+0x110/0x110 [ 449.410977] ? ns_test_super+0x50/0x50 [ 449.415001] ? set_bdev_super+0x110/0x110 [ 449.419266] ? ns_test_super+0x50/0x50 [ 449.423264] sget+0x10d/0x150 [ 449.426373] mount_bdev+0xf8/0x3c0 [ 449.429917] ? hfsplus_iget+0x790/0x790 [ 449.433891] mount_fs+0xa3/0x30c [ 449.437360] vfs_kern_mount.part.0+0x68/0x400 [ 449.441975] do_mount+0x4f4/0x2a40 [ 449.445898] ? copy_mount_string+0x40/0x40 [ 449.450402] ? __might_fault+0x192/0x1d0 [ 449.454481] ? _copy_from_user+0xd2/0x140 [ 449.458839] ? copy_mount_options+0x27a/0x390 [ 449.463548] ksys_mount+0xd7/0x150 [ 449.467095] __x64_sys_mount+0xba/0x150 [ 449.471122] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 449.477349] do_syscall_64+0xf9/0x620 [ 449.481161] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 449.486453] RIP: 0033:0x45c4a9 [ 449.489652] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 449.509440] RSP: 002b:00007f081ba2dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 449.517258] RAX: ffffffffffffffda RBX: 00007f081ba2e6d4 RCX: 000000000045c4a9 [ 449.524520] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000020000140 [ 449.531791] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 449.539076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 449.546372] R13: 000000000000074a R14: 00000000004c9d80 R15: 0000000000000033 22:34:43 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d71a0220341ea32af193c9fa6511756f0a56cf70ef9158dcc809125b2e55b38415828bd295be8641", 0x9c}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, 0x0}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) 22:34:43 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x8021, 0x40000002}) 22:34:43 executing program 0 (fault-call:5 fault-nth:52): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x0, 0x0) 22:34:43 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x100000000000000}]) 22:34:43 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 451.978922] FAULT_INJECTION: forcing a failure. [ 451.978922] name failslab, interval 1, probability 0, space 0, times 0 [ 452.004122] CPU: 0 PID: 21652 Comm: syz-executor.0 Not tainted 4.19.108-syzkaller #0 [ 452.012160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 452.022311] Call Trace: [ 452.024932] dump_stack+0x188/0x20d [ 452.028586] should_fail.cold+0xa/0x1b [ 452.032512] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 452.037641] ? __lock_is_held+0xad/0x140 [ 452.041732] __should_failslab+0x115/0x180 [ 452.045995] should_failslab+0x5/0xf [ 452.050074] kmem_cache_alloc_trace+0x2c6/0x7a0 [ 452.055402] ? kasan_unpoison_shadow+0x30/0x40 [ 452.060042] ? kasan_kmalloc+0xbf/0xe0 [ 452.064395] __memcg_init_list_lru_node+0x7f/0x1e0 [ 452.069352] __list_lru_init+0x3ff/0x700 [ 452.073462] sget_userns+0x7cb/0xcd0 [ 452.077189] ? set_bdev_super+0x110/0x110 [ 452.081401] ? ns_test_super+0x50/0x50 [ 452.085315] ? set_bdev_super+0x110/0x110 [ 452.089565] ? ns_test_super+0x50/0x50 [ 452.096606] sget+0x10d/0x150 [ 452.099743] mount_bdev+0xf8/0x3c0 [ 452.103308] ? hfsplus_iget+0x790/0x790 [ 452.107400] mount_fs+0xa3/0x30c [ 452.110904] vfs_kern_mount.part.0+0x68/0x400 [ 452.115518] do_mount+0x4f4/0x2a40 [ 452.119263] ? copy_mount_string+0x40/0x40 [ 452.123526] ? __might_fault+0x192/0x1d0 [ 452.127783] ? _copy_from_user+0xd2/0x140 [ 452.132574] ? copy_mount_options+0x27a/0x390 22:34:43 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x8022, 0x40000002}) 22:34:43 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x8023, 0x40000002}) 22:34:43 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x8024, 0x40000002}) [ 452.137178] ksys_mount+0xd7/0x150 [ 452.140763] __x64_sys_mount+0xba/0x150 [ 452.144958] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 452.149565] do_syscall_64+0xf9/0x620 [ 452.153473] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 452.158675] RIP: 0033:0x45c4a9 [ 452.161930] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 22:34:43 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:34:43 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x8025, 0x40000002}) [ 452.182933] RSP: 002b:00007f081ba2dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 452.192927] RAX: ffffffffffffffda RBX: 00007f081ba2e6d4 RCX: 000000000045c4a9 [ 452.200210] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000020000140 [ 452.207501] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 452.214815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 452.224532] R13: 000000000000074a R14: 00000000004c9d80 R15: 0000000000000034 22:34:43 executing program 0 (fault-call:5 fault-nth:53): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x0, 0x0) 22:34:43 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x400000000000000}]) [ 452.384174] FAULT_INJECTION: forcing a failure. [ 452.384174] name failslab, interval 1, probability 0, space 0, times 0 [ 452.397011] CPU: 1 PID: 21781 Comm: syz-executor.0 Not tainted 4.19.108-syzkaller #0 [ 452.405993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 452.416068] Call Trace: [ 452.418685] dump_stack+0x188/0x20d [ 452.422355] should_fail.cold+0xa/0x1b [ 452.432563] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 452.437894] ? __lock_is_held+0xad/0x140 [ 452.442007] __should_failslab+0x115/0x180 [ 452.448439] should_failslab+0x5/0xf [ 452.452615] kmem_cache_alloc_trace+0x2c6/0x7a0 [ 452.457422] ? kasan_unpoison_shadow+0x30/0x40 [ 452.462026] ? kasan_kmalloc+0xbf/0xe0 [ 452.466168] __memcg_init_list_lru_node+0x7f/0x1e0 [ 452.471125] __list_lru_init+0x3ff/0x700 [ 452.475701] sget_userns+0x7cb/0xcd0 [ 452.479641] ? set_bdev_super+0x110/0x110 [ 452.484688] ? ns_test_super+0x50/0x50 [ 452.489577] ? set_bdev_super+0x110/0x110 [ 452.495286] ? ns_test_super+0x50/0x50 [ 452.499180] sget+0x10d/0x150 [ 452.502418] mount_bdev+0xf8/0x3c0 [ 452.506853] ? hfsplus_iget+0x790/0x790 [ 452.511373] mount_fs+0xa3/0x30c [ 452.515598] vfs_kern_mount.part.0+0x68/0x400 [ 452.520110] do_mount+0x4f4/0x2a40 [ 452.526453] ? copy_mount_string+0x40/0x40 [ 452.531578] ? __might_fault+0x192/0x1d0 [ 452.535738] ? _copy_from_user+0xd2/0x140 [ 452.541125] ? copy_mount_options+0x27a/0x390 [ 452.546102] ksys_mount+0xd7/0x150 [ 452.550201] __x64_sys_mount+0xba/0x150 [ 452.556178] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 452.560892] do_syscall_64+0xf9/0x620 [ 452.564812] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 452.570030] RIP: 0033:0x45c4a9 [ 452.573338] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 452.593730] RSP: 002b:00007f081ba2dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 452.601563] RAX: ffffffffffffffda RBX: 00007f081ba2e6d4 RCX: 000000000045c4a9 [ 452.609110] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000020000140 [ 452.616522] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 452.623794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 452.631080] R13: 000000000000074a R14: 00000000004c9d80 R15: 0000000000000035 22:34:46 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d71a0220341ea32af193c9fa6511756f0a56cf70ef9158dcc809125b2e55b38415828bd295be8641", 0x9c}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, 0x0}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) 22:34:46 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x8026, 0x40000002}) 22:34:46 executing program 0 (fault-call:5 fault-nth:54): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x0, 0x0) 22:34:46 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x4000000000000000}]) 22:34:46 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 455.037020] FAULT_INJECTION: forcing a failure. [ 455.037020] name failslab, interval 1, probability 0, space 0, times 0 [ 455.054665] CPU: 1 PID: 21893 Comm: syz-executor.0 Not tainted 4.19.108-syzkaller #0 [ 455.062699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 455.072072] Call Trace: [ 455.074697] dump_stack+0x188/0x20d [ 455.078349] should_fail.cold+0xa/0x1b [ 455.082262] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 455.087387] ? __lock_is_held+0xad/0x140 [ 455.093914] __should_failslab+0x115/0x180 [ 455.098454] should_failslab+0x5/0xf [ 455.102184] kmem_cache_alloc_trace+0x2c6/0x7a0 [ 455.106863] ? kasan_unpoison_shadow+0x30/0x40 [ 455.111459] ? kasan_kmalloc+0xbf/0xe0 [ 455.115481] __memcg_init_list_lru_node+0x7f/0x1e0 [ 455.120492] __list_lru_init+0x3ff/0x700 [ 455.124552] sget_userns+0x7cb/0xcd0 [ 455.128252] ? set_bdev_super+0x110/0x110 [ 455.132489] ? ns_test_super+0x50/0x50 [ 455.136391] ? set_bdev_super+0x110/0x110 [ 455.140549] ? ns_test_super+0x50/0x50 [ 455.144432] sget+0x10d/0x150 [ 455.147576] mount_bdev+0xf8/0x3c0 [ 455.151136] ? hfsplus_iget+0x790/0x790 [ 455.155118] mount_fs+0xa3/0x30c [ 455.158501] vfs_kern_mount.part.0+0x68/0x400 [ 455.163049] do_mount+0x4f4/0x2a40 [ 455.166773] ? copy_mount_string+0x40/0x40 [ 455.171280] ? __might_fault+0x192/0x1d0 [ 455.176132] ? _copy_from_user+0xd2/0x140 [ 455.180288] ? copy_mount_options+0x27a/0x390 [ 455.185029] ksys_mount+0xd7/0x150 [ 455.188586] __x64_sys_mount+0xba/0x150 [ 455.192577] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 455.197175] do_syscall_64+0xf9/0x620 [ 455.201007] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 455.206198] RIP: 0033:0x45c4a9 [ 455.209477] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 455.228920] RSP: 002b:00007f081ba2dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 22:34:46 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x8027, 0x40000002}) 22:34:46 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 455.236635] RAX: ffffffffffffffda RBX: 00007f081ba2e6d4 RCX: 000000000045c4a9 [ 455.243896] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000020000140 [ 455.251162] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 455.259143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 455.266547] R13: 000000000000074a R14: 00000000004c9d80 R15: 0000000000000036 22:34:46 executing program 0 (fault-call:5 fault-nth:55): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x0, 0x0) 22:34:46 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x8000000000000000}]) [ 455.415327] FAULT_INJECTION: forcing a failure. [ 455.415327] name failslab, interval 1, probability 0, space 0, times 0 [ 455.441222] CPU: 1 PID: 22013 Comm: syz-executor.0 Not tainted 4.19.108-syzkaller #0 [ 455.449187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 455.458641] Call Trace: [ 455.461264] dump_stack+0x188/0x20d [ 455.464913] should_fail.cold+0xa/0x1b [ 455.468826] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 455.473958] ? __lock_is_held+0xad/0x140 [ 455.478060] __should_failslab+0x115/0x180 [ 455.482324] should_failslab+0x5/0xf [ 455.486063] kmem_cache_alloc_trace+0x2c6/0x7a0 [ 455.491457] ? kasan_unpoison_shadow+0x30/0x40 [ 455.496062] ? kasan_kmalloc+0xbf/0xe0 [ 455.499980] __memcg_init_list_lru_node+0x7f/0x1e0 [ 455.504961] __list_lru_init+0x3ff/0x700 [ 455.509060] sget_userns+0x7cb/0xcd0 [ 455.512790] ? set_bdev_super+0x110/0x110 [ 455.516967] ? ns_test_super+0x50/0x50 [ 455.520889] ? set_bdev_super+0x110/0x110 [ 455.525067] ? ns_test_super+0x50/0x50 [ 455.528974] sget+0x10d/0x150 [ 455.532097] mount_bdev+0xf8/0x3c0 [ 455.535656] ? hfsplus_iget+0x790/0x790 [ 455.539664] mount_fs+0xa3/0x30c [ 455.543064] vfs_kern_mount.part.0+0x68/0x400 [ 455.547591] do_mount+0x4f4/0x2a40 [ 455.551160] ? copy_mount_string+0x40/0x40 [ 455.555414] ? __might_fault+0x192/0x1d0 [ 455.559498] ? _copy_from_user+0xd2/0x140 22:34:46 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x8028, 0x40000002}) [ 455.563681] ? copy_mount_options+0x27a/0x390 [ 455.568199] ksys_mount+0xd7/0x150 [ 455.571758] __x64_sys_mount+0xba/0x150 [ 455.575759] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 455.580369] do_syscall_64+0xf9/0x620 [ 455.584194] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 455.589407] RIP: 0033:0x45c4a9 [ 455.592617] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 22:34:46 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x8029, 0x40000002}) 22:34:46 executing program 0 (fault-call:5 fault-nth:56): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x0, 0x0) [ 455.611536] RSP: 002b:00007f081ba2dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 455.619262] RAX: ffffffffffffffda RBX: 00007f081ba2e6d4 RCX: 000000000045c4a9 [ 455.626558] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000020000140 [ 455.633856] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 455.641138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 455.648422] R13: 000000000000074a R14: 00000000004c9d80 R15: 0000000000000037 [ 455.726042] FAULT_INJECTION: forcing a failure. [ 455.726042] name failslab, interval 1, probability 0, space 0, times 0 [ 455.747853] CPU: 1 PID: 22125 Comm: syz-executor.0 Not tainted 4.19.108-syzkaller #0 [ 455.755799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 455.765176] Call Trace: [ 455.767794] dump_stack+0x188/0x20d [ 455.771457] should_fail.cold+0xa/0x1b [ 455.775374] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 455.780499] ? __lock_is_held+0xad/0x140 [ 455.784593] __should_failslab+0x115/0x180 [ 455.788856] should_failslab+0x5/0xf [ 455.792588] kmem_cache_alloc_trace+0x2c6/0x7a0 [ 455.797298] ? kasan_unpoison_shadow+0x30/0x40 [ 455.801929] ? kasan_kmalloc+0xbf/0xe0 [ 455.806017] __memcg_init_list_lru_node+0x7f/0x1e0 [ 455.810976] __list_lru_init+0x3ff/0x700 [ 455.815061] sget_userns+0x7cb/0xcd0 [ 455.818795] ? set_bdev_super+0x110/0x110 [ 455.822964] ? ns_test_super+0x50/0x50 [ 455.826875] ? set_bdev_super+0x110/0x110 [ 455.831057] ? ns_test_super+0x50/0x50 [ 455.834971] sget+0x10d/0x150 [ 455.838140] mount_bdev+0xf8/0x3c0 [ 455.841709] ? hfsplus_iget+0x790/0x790 [ 455.845730] mount_fs+0xa3/0x30c [ 455.849126] vfs_kern_mount.part.0+0x68/0x400 [ 455.853749] do_mount+0x4f4/0x2a40 [ 455.857326] ? copy_mount_string+0x40/0x40 [ 455.861657] ? __might_fault+0x192/0x1d0 [ 455.865730] ? _copy_from_user+0xd2/0x140 [ 455.871908] ? copy_mount_options+0x27a/0x390 [ 455.876411] ksys_mount+0xd7/0x150 [ 455.879952] __x64_sys_mount+0xba/0x150 [ 455.883937] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 455.888530] do_syscall_64+0xf9/0x620 [ 455.892343] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 455.897525] RIP: 0033:0x45c4a9 [ 455.900709] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 455.919606] RSP: 002b:00007f081ba2dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 455.927305] RAX: ffffffffffffffda RBX: 00007f081ba2e6d4 RCX: 000000000045c4a9 [ 455.934567] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000020000140 [ 455.941831] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 455.949106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 455.956365] R13: 000000000000074a R14: 00000000004c9d80 R15: 0000000000000038 22:34:49 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d71a0220341ea32af193c9fa6511756f0a56cf70ef9158dcc809125b2e55b38415828bd295be8641", 0x9c}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, 0x0}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) 22:34:49 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x4}]) 22:34:49 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0xf800, 0x40000002}) 22:34:49 executing program 0 (fault-call:5 fault-nth:57): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x0, 0x0) 22:34:49 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 458.130261] FAULT_INJECTION: forcing a failure. [ 458.130261] name failslab, interval 1, probability 0, space 0, times 0 [ 458.147252] CPU: 1 PID: 22141 Comm: syz-executor.0 Not tainted 4.19.108-syzkaller #0 [ 458.155186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 458.164554] Call Trace: [ 458.167173] dump_stack+0x188/0x20d [ 458.170827] should_fail.cold+0xa/0x1b [ 458.174738] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 458.179872] ? __lock_is_held+0xad/0x140 [ 458.183967] __should_failslab+0x115/0x180 [ 458.188230] should_failslab+0x5/0xf [ 458.191962] kmem_cache_alloc_trace+0x2c6/0x7a0 [ 458.196651] ? kasan_unpoison_shadow+0x30/0x40 [ 458.201258] ? kasan_kmalloc+0xbf/0xe0 [ 458.205174] __memcg_init_list_lru_node+0x7f/0x1e0 [ 458.210123] __list_lru_init+0x3ff/0x700 [ 458.214215] sget_userns+0x7cb/0xcd0 [ 458.217947] ? set_bdev_super+0x110/0x110 [ 458.222227] ? ns_test_super+0x50/0x50 [ 458.226143] ? set_bdev_super+0x110/0x110 22:34:49 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 458.230315] ? ns_test_super+0x50/0x50 [ 458.234222] sget+0x10d/0x150 [ 458.237347] mount_bdev+0xf8/0x3c0 [ 458.240899] ? hfsplus_iget+0x790/0x790 [ 458.244885] mount_fs+0xa3/0x30c [ 458.248264] vfs_kern_mount.part.0+0x68/0x400 [ 458.252782] do_mount+0x4f4/0x2a40 [ 458.256346] ? copy_mount_string+0x40/0x40 [ 458.260601] ? __might_fault+0x192/0x1d0 [ 458.264682] ? _copy_from_user+0xd2/0x140 [ 458.268859] ? copy_mount_options+0x27a/0x390 [ 458.273376] ksys_mount+0xd7/0x150 [ 458.276943] __x64_sys_mount+0xba/0x150 [ 458.280938] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 458.285601] do_syscall_64+0xf9/0x620 [ 458.289444] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 458.294650] RIP: 0033:0x45c4a9 [ 458.297862] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 458.316779] RSP: 002b:00007f081ba2dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 22:34:49 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:34:49 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0xff01, 0x40000002}) 22:34:49 executing program 0 (fault-call:5 fault-nth:58): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x0, 0x0) [ 458.324499] RAX: ffffffffffffffda RBX: 00007f081ba2e6d4 RCX: 000000000045c4a9 [ 458.332725] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000020000140 [ 458.340368] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 458.347661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 458.354952] R13: 000000000000074a R14: 00000000004c9d80 R15: 0000000000000039 22:34:49 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x4000}]) 22:34:49 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0xff0f, 0x40000002}) [ 458.476534] FAULT_INJECTION: forcing a failure. [ 458.476534] name failslab, interval 1, probability 0, space 0, times 0 [ 458.496841] CPU: 1 PID: 22258 Comm: syz-executor.0 Not tainted 4.19.108-syzkaller #0 [ 458.504893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 458.514267] Call Trace: [ 458.516881] dump_stack+0x188/0x20d [ 458.520716] should_fail.cold+0xa/0x1b [ 458.524634] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 458.529759] ? __lock_is_held+0xad/0x140 [ 458.533850] __should_failslab+0x115/0x180 [ 458.538108] should_failslab+0x5/0xf [ 458.541841] kmem_cache_alloc_trace+0x2c6/0x7a0 [ 458.546621] ? mark_held_locks+0xf0/0xf0 [ 458.550845] ? widen_string+0xdd/0x2a0 [ 458.554865] hfsplus_fill_super+0xd7/0x19e0 [ 458.559215] ? __lock_acquire+0x6ee/0x49c0 [ 458.563479] ? ksys_mount+0xd7/0x150 [ 458.567254] ? __x64_sys_mount+0xba/0x150 [ 458.571430] ? hfsplus_iget+0x790/0x790 22:34:49 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0xff77, 0x40000002}) [ 458.575422] ? widen_string+0x2a0/0x2a0 [ 458.579427] ? mark_held_locks+0xf0/0xf0 [ 458.583516] ? bdev_name.isra.0+0x19f/0x1f0 [ 458.587855] ? pointer+0x18a/0x890 [ 458.591409] ? netdev_bits+0xb0/0xb0 [ 458.595143] ? enable_ptr_key_workfn+0x30/0x30 [ 458.599749] ? reacquire_held_locks+0xb5/0x430 [ 458.604351] ? vsnprintf+0x2c6/0x14f0 [ 458.608173] ? pointer+0x890/0x890 [ 458.611731] ? lock_downgrade+0x740/0x740 [ 458.615898] ? lock_downgrade+0x740/0x740 [ 458.620070] ? snprintf+0xbb/0xf0 [ 458.623541] ? vsprintf+0x30/0x30 [ 458.627012] ? wait_for_completion+0x3c0/0x3c0 [ 458.631610] ? set_blocksize+0x299/0x320 [ 458.635729] mount_bdev+0x305/0x3c0 [ 458.639377] ? hfsplus_iget+0x790/0x790 [ 458.643383] mount_fs+0xa3/0x30c [ 458.646774] vfs_kern_mount.part.0+0x68/0x400 [ 458.651298] do_mount+0x4f4/0x2a40 [ 458.654867] ? copy_mount_string+0x40/0x40 [ 458.659129] ? __might_fault+0x192/0x1d0 [ 458.663335] ? _copy_from_user+0xd2/0x140 [ 458.667526] ? copy_mount_options+0x27a/0x390 [ 458.672340] ksys_mount+0xd7/0x150 [ 458.676019] __x64_sys_mount+0xba/0x150 [ 458.680015] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 458.684630] do_syscall_64+0xf9/0x620 [ 458.688494] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 458.693707] RIP: 0033:0x45c4a9 [ 458.696920] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 458.715852] RSP: 002b:00007f081ba2dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 458.723806] RAX: ffffffffffffffda RBX: 00007f081ba2e6d4 RCX: 000000000045c4a9 [ 458.731209] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000020000140 [ 458.738515] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 458.745807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 458.753107] R13: 000000000000074a R14: 00000000004c9d80 R15: 000000000000003a 22:34:52 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d71a0220341ea32af193c9fa6511756f0a56cf70ef9158dcc809125b2e55b38415828bd295be8641", 0x9c}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, 0x0}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) 22:34:52 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0xff7f, 0x40000002}) 22:34:52 executing program 0 (fault-call:5 fault-nth:59): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x0, 0x0) 22:34:52 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x1000000}]) [ 461.143936] FAULT_INJECTION: forcing a failure. [ 461.143936] name failslab, interval 1, probability 0, space 0, times 0 [ 461.181144] CPU: 1 PID: 22377 Comm: syz-executor.0 Not tainted 4.19.108-syzkaller #0 22:34:52 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x17800, 0x40000002}) [ 461.189085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 461.198458] Call Trace: [ 461.201243] dump_stack+0x188/0x20d [ 461.204897] should_fail.cold+0xa/0x1b [ 461.208812] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 461.214071] ? __lock_is_held+0xad/0x140 [ 461.218177] __should_failslab+0x115/0x180 [ 461.222439] should_failslab+0x5/0xf [ 461.226174] __kmalloc+0x2d3/0x770 [ 461.229735] ? hfsplus_read_wrapper+0x3fc/0xfb9 [ 461.234435] ? ioctl_by_bdev+0xa0/0x110 [ 461.238435] hfsplus_read_wrapper+0x3fc/0xfb9 [ 461.242961] ? hfsplus_submit_bio+0x4e0/0x4e0 [ 461.247477] ? lock_downgrade+0x740/0x740 [ 461.251652] ? do_raw_spin_unlock+0x171/0x260 [ 461.256166] ? _raw_spin_unlock+0x29/0x40 [ 461.260432] ? find_nls+0x121/0x160 [ 461.264099] hfsplus_fill_super+0x30a/0x19e0 [ 461.268535] ? __lock_acquire+0x6ee/0x49c0 [ 461.272788] ? ksys_mount+0xd7/0x150 [ 461.276526] ? __x64_sys_mount+0xba/0x150 [ 461.280703] ? hfsplus_iget+0x790/0x790 [ 461.284704] ? widen_string+0x2a0/0x2a0 [ 461.288706] ? mark_held_locks+0xf0/0xf0 [ 461.292789] ? bdev_name.isra.0+0x19f/0x1f0 [ 461.297135] ? pointer+0x18a/0x890 [ 461.300699] ? netdev_bits+0xb0/0xb0 [ 461.304432] ? enable_ptr_key_workfn+0x30/0x30 [ 461.309034] ? reacquire_held_locks+0xb5/0x430 [ 461.313640] ? vsnprintf+0x2c6/0x14f0 [ 461.317468] ? pointer+0x890/0x890 [ 461.321028] ? lock_downgrade+0x740/0x740 [ 461.325204] ? lock_downgrade+0x740/0x740 [ 461.329394] ? snprintf+0xbb/0xf0 [ 461.332873] ? vsprintf+0x30/0x30 [ 461.336472] ? wait_for_completion+0x3c0/0x3c0 [ 461.341102] ? set_blocksize+0x299/0x320 [ 461.345289] mount_bdev+0x305/0x3c0 [ 461.348934] ? hfsplus_iget+0x790/0x790 [ 461.353082] mount_fs+0xa3/0x30c [ 461.356459] vfs_kern_mount.part.0+0x68/0x400 [ 461.360953] do_mount+0x4f4/0x2a40 [ 461.364561] ? copy_mount_string+0x40/0x40 [ 461.368816] ? __might_fault+0x192/0x1d0 [ 461.372880] ? _copy_from_user+0xd2/0x140 [ 461.377021] ? copy_mount_options+0x27a/0x390 [ 461.381645] ksys_mount+0xd7/0x150 [ 461.385181] __x64_sys_mount+0xba/0x150 [ 461.389168] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 461.393753] do_syscall_64+0xf9/0x620 [ 461.397552] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 461.402731] RIP: 0033:0x45c4a9 [ 461.405918] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 461.425233] RSP: 002b:00007f081ba2dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 461.432934] RAX: ffffffffffffffda RBX: 00007f081ba2e6d4 RCX: 000000000045c4a9 22:34:52 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:34:52 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x28040, 0x40000002}) 22:34:52 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 461.440197] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000020000140 [ 461.447652] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 461.454925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 461.462190] R13: 000000000000074a R14: 00000000004c9d80 R15: 000000000000003b [ 461.472157] hfsplus: unable to find HFS+ superblock 22:34:52 executing program 0 (fault-call:5 fault-nth:60): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x0, 0x0) 22:34:52 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x4000000}]) 22:34:52 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x287ff, 0x40000002}) [ 461.682738] FAULT_INJECTION: forcing a failure. [ 461.682738] name failslab, interval 1, probability 0, space 0, times 0 [ 461.698071] CPU: 0 PID: 22499 Comm: syz-executor.0 Not tainted 4.19.108-syzkaller #0 [ 461.706000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 461.715373] Call Trace: [ 461.717989] dump_stack+0x188/0x20d [ 461.721655] should_fail.cold+0xa/0x1b [ 461.725575] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 461.730721] __should_failslab+0x115/0x180 [ 461.734989] should_failslab+0x5/0xf [ 461.738731] kmem_cache_alloc+0x44/0x710 [ 461.742822] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 461.748218] ? mempool_alloc+0x340/0x340 [ 461.752298] mempool_alloc+0x148/0x340 [ 461.756323] ? mempool_destroy+0x30/0x30 [ 461.760601] ? find_held_lock+0x2d/0x110 [ 461.764794] ? fs_reclaim_acquire+0x10/0x10 [ 461.769162] ? should_fail+0x142/0x7bc [ 461.773253] bio_alloc_bioset+0x398/0x610 [ 461.777431] ? __lock_is_held+0xad/0x140 22:34:53 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x28fff, 0x40000002}) [ 461.781515] ? bvec_alloc+0x2f0/0x2f0 [ 461.785444] ? rcu_read_lock_sched_held+0x10a/0x130 [ 461.790490] hfsplus_submit_bio+0x11f/0x4e0 [ 461.794849] hfsplus_read_wrapper+0x495/0xfb9 [ 461.799374] ? hfsplus_submit_bio+0x4e0/0x4e0 [ 461.803900] ? lock_downgrade+0x740/0x740 [ 461.808093] ? do_raw_spin_unlock+0x171/0x260 [ 461.812619] ? _raw_spin_unlock+0x29/0x40 [ 461.816794] ? find_nls+0x121/0x160 [ 461.820594] hfsplus_fill_super+0x30a/0x19e0 [ 461.825029] ? __lock_acquire+0x6ee/0x49c0 [ 461.829284] ? ksys_mount+0xd7/0x150 [ 461.834933] ? __x64_sys_mount+0xba/0x150 [ 461.839113] ? hfsplus_iget+0x790/0x790 [ 461.843114] ? widen_string+0x2a0/0x2a0 [ 461.847288] ? mark_held_locks+0xf0/0xf0 [ 461.851382] ? bdev_name.isra.0+0x19f/0x1f0 [ 461.855743] ? pointer+0x18a/0x890 [ 461.859314] ? netdev_bits+0xb0/0xb0 [ 461.864022] ? enable_ptr_key_workfn+0x30/0x30 [ 461.868635] ? reacquire_held_locks+0xb5/0x430 [ 461.873245] ? vsnprintf+0x2c6/0x14f0 [ 461.877081] ? pointer+0x890/0x890 [ 461.880637] ? lock_downgrade+0x740/0x740 [ 461.884792] ? lock_downgrade+0x740/0x740 [ 461.888947] ? snprintf+0xbb/0xf0 [ 461.892398] ? vsprintf+0x30/0x30 [ 461.895960] ? wait_for_completion+0x3c0/0x3c0 [ 461.900560] ? set_blocksize+0x299/0x320 [ 461.904688] mount_bdev+0x305/0x3c0 [ 461.908332] ? hfsplus_iget+0x790/0x790 [ 461.912314] mount_fs+0xa3/0x30c [ 461.915689] vfs_kern_mount.part.0+0x68/0x400 [ 461.920206] do_mount+0x4f4/0x2a40 [ 461.923825] ? copy_mount_string+0x40/0x40 [ 461.928076] ? __might_fault+0x192/0x1d0 [ 461.932153] ? _copy_from_user+0xd2/0x140 [ 461.936295] ? copy_mount_options+0x27a/0x390 [ 461.940800] ksys_mount+0xd7/0x150 [ 461.944346] __x64_sys_mount+0xba/0x150 [ 461.948397] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 461.952989] do_syscall_64+0xf9/0x620 [ 461.956873] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 461.962074] RIP: 0033:0x45c4a9 [ 461.965266] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 461.984647] RSP: 002b:00007f081ba2dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 461.992375] RAX: ffffffffffffffda RBX: 00007f081ba2e6d4 RCX: 000000000045c4a9 [ 461.999859] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000020000140 [ 462.007151] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 462.014434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 462.021852] R13: 000000000000074a R14: 00000000004c9d80 R15: 000000000000003c [ 462.031055] hfsplus: unable to find HFS+ superblock 22:34:55 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d71a0220341ea32af193c9fa6511756f0a56cf70ef9158dcc809125b2e55b38415828bd295be8641", 0x9c}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, 0x0}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) 22:34:55 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x297ff, 0x40000002}) 22:34:55 executing program 0 (fault-call:5 fault-nth:61): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x0, 0x0) 22:34:55 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x40000000}]) [ 464.204756] FAULT_INJECTION: forcing a failure. [ 464.204756] name failslab, interval 1, probability 0, space 0, times 0 [ 464.217977] CPU: 0 PID: 22617 Comm: syz-executor.0 Not tainted 4.19.108-syzkaller #0 [ 464.225906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 464.235274] Call Trace: [ 464.237892] dump_stack+0x188/0x20d [ 464.241546] should_fail.cold+0xa/0x1b [ 464.245462] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 464.250583] ? find_held_lock+0x2d/0x110 22:34:55 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x29fff, 0x40000002}) [ 464.254735] ? blk_queue_enter+0xa53/0xce0 [ 464.258996] __should_failslab+0x115/0x180 [ 464.263247] should_failslab+0x5/0xf [ 464.267059] kmem_cache_alloc_node+0x55/0x730 [ 464.271699] ? __lock_is_held+0xad/0x140 [ 464.275861] create_task_io_context+0x2c/0x430 [ 464.280482] generic_make_request_checks+0x1bc5/0x2310 [ 464.285867] ? kernel_text_address+0x6e/0xe0 [ 464.290307] ? trace_event_raw_event_block_rq_requeue+0x5e0/0x5e0 [ 464.296665] ? unwind_get_return_address+0x5a/0xa0 [ 464.301690] ? __save_stack_trace+0x8a/0xf0 [ 464.306033] ? should_fail+0x142/0x7bc [ 464.309958] generic_make_request+0x24c/0x12d0 [ 464.314650] ? blk_get_request+0x700/0x700 [ 464.318911] ? rcu_read_lock_sched_held+0x10a/0x130 [ 464.323946] ? kmem_cache_alloc+0x31b/0x710 [ 464.328286] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 464.333681] ? submit_bio+0xb1/0x430 [ 464.337425] submit_bio+0xb1/0x430 [ 464.340991] ? generic_make_request+0x12d0/0x12d0 [ 464.345854] ? __lockdep_init_map+0x100/0x5a0 [ 464.350369] ? __lockdep_init_map+0x100/0x5a0 [ 464.354897] submit_bio_wait+0x104/0x1b0 [ 464.358982] ? submit_bio_wait_endio+0x40/0x40 [ 464.363591] ? bio_alloc_bioset+0x2c1/0x610 [ 464.367943] ? bio_add_page+0xd2/0x120 [ 464.371860] hfsplus_submit_bio+0x3cb/0x4e0 [ 464.376214] hfsplus_read_wrapper+0x495/0xfb9 [ 464.380870] ? hfsplus_submit_bio+0x4e0/0x4e0 [ 464.385390] ? lock_downgrade+0x740/0x740 [ 464.389559] ? do_raw_spin_unlock+0x171/0x260 [ 464.394071] ? _raw_spin_unlock+0x29/0x40 [ 464.398237] ? find_nls+0x121/0x160 [ 464.401880] hfsplus_fill_super+0x30a/0x19e0 [ 464.406306] ? __lock_acquire+0x6ee/0x49c0 [ 464.410562] ? ksys_mount+0xd7/0x150 [ 464.414293] ? __x64_sys_mount+0xba/0x150 [ 464.418465] ? hfsplus_iget+0x790/0x790 [ 464.422456] ? widen_string+0x2a0/0x2a0 [ 464.426456] ? mark_held_locks+0xf0/0xf0 [ 464.430547] ? bdev_name.isra.0+0x19f/0x1f0 [ 464.435034] ? pointer+0x18a/0x890 [ 464.438627] ? netdev_bits+0xb0/0xb0 [ 464.443138] ? enable_ptr_key_workfn+0x30/0x30 [ 464.447715] ? reacquire_held_locks+0xb5/0x430 [ 464.452490] ? vsnprintf+0x2c6/0x14f0 [ 464.456287] ? pointer+0x890/0x890 [ 464.459831] ? lock_downgrade+0x740/0x740 [ 464.464140] ? lock_downgrade+0x740/0x740 [ 464.468301] ? snprintf+0xbb/0xf0 [ 464.471749] ? vsprintf+0x30/0x30 [ 464.475198] ? wait_for_completion+0x3c0/0x3c0 [ 464.479780] ? set_blocksize+0x299/0x320 [ 464.483846] mount_bdev+0x305/0x3c0 [ 464.487465] ? hfsplus_iget+0x790/0x790 [ 464.491434] mount_fs+0xa3/0x30c [ 464.494794] vfs_kern_mount.part.0+0x68/0x400 [ 464.499306] do_mount+0x4f4/0x2a40 [ 464.502861] ? copy_mount_string+0x40/0x40 [ 464.507098] ? __might_fault+0x192/0x1d0 [ 464.511234] ? _copy_from_user+0xd2/0x140 [ 464.515602] ? copy_mount_options+0x27a/0x390 [ 464.520107] ksys_mount+0xd7/0x150 [ 464.523649] __x64_sys_mount+0xba/0x150 [ 464.527664] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 464.532245] do_syscall_64+0xf9/0x620 [ 464.536166] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 464.541358] RIP: 0033:0x45c4a9 [ 464.544809] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 464.563863] RSP: 002b:00007f081ba2dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 464.571568] RAX: ffffffffffffffda RBX: 00007f081ba2e6d4 RCX: 000000000045c4a9 [ 464.578966] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000020000140 [ 464.586245] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 464.593516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 22:34:55 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:34:55 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d71a0220341ea32af193c9fa6511756f0a56cf70ef9158dcc809125b2e55b38415828bd295be8641", 0x9c}], 0x4, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, 0x0}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) 22:34:55 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x2a7ff, 0x40000002}) 22:34:55 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:34:55 executing program 0 (fault-call:5 fault-nth:62): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x0, 0x0) [ 464.600933] R13: 000000000000074a R14: 00000000004c9d80 R15: 000000000000003d [ 464.609377] hfsplus: unable to find HFS+ superblock 22:34:56 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d71a0220341ea32af193c9fa6511756f0a56cf70ef9158dcc809125b2e55b38415828bd295be8641", 0x9c}], 0x4, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, 0x0}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) 22:34:56 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x7ffffffff000}]) 22:34:56 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x2afff, 0x40000002}) 22:34:56 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d71a0220341ea32af193c9fa6511756f0a56cf70ef9158dcc809125b2e55b38415828bd295be8641", 0x9c}], 0x4, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, 0x0}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) [ 464.837632] hfsplus: unable to find HFS+ superblock 22:34:56 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x2b7ff, 0x40000002}) 22:34:56 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x0, 0x0) 22:34:56 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d71a0220341ea32af193c9fa6511756f0a56cf70ef9158dcc809125b2e55b38415828bd295be8641", 0x9c}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, 0x0}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) [ 465.072860] hfsplus: unable to find HFS+ superblock 22:34:59 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:34:59 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x2bfff, 0x40000002}) 22:34:59 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d71a0220341ea32af193c9fa6511756f0a56cf70ef9158dcc809125b2e55b38415828bd295be8641", 0x9c}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, 0x0}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) 22:34:59 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0xf0ffffff7f0000}]) 22:34:59 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x2, 0x0) 22:34:59 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:34:59 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d71a0220341ea32af193c9fa6511756f0a56cf70ef9158dcc809125b2e55b38415828bd295be8641", 0x9c}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, 0x0}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) [ 467.863362] hfsplus: unable to find HFS+ superblock 22:34:59 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d71a0220341ea32af193c9fa6511756f0a56cf70ef9158dcc809125b2e55b38415828bd295be8641", 0x9c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, 0x0}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) 22:34:59 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x2c7ff, 0x40000002}) 22:34:59 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x3, 0x0) 22:34:59 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x100000000000000}]) 22:34:59 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x2cfff, 0x40000002}) [ 468.105708] hfsplus: unable to find HFS+ superblock 22:35:02 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:35:02 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x4, 0x0) 22:35:02 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x2d7ff, 0x40000002}) 22:35:02 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x400000000000000}]) 22:35:02 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 470.929223] hfsplus: unable to find HFS+ superblock 22:35:02 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d71a0220341ea32af193c9fa6511756f0a56cf70ef9158dcc809125b2e55b38415828bd295be8641", 0x9c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, 0x0}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) 22:35:02 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:35:02 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x2dfff, 0x40000002}) 22:35:02 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x4000000000000000}]) 22:35:02 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x5, 0x0) 22:35:02 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x2e7ff, 0x40000002}) [ 471.192775] hfsplus: unable to find HFS+ superblock 22:35:02 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x8000000000000000}]) 22:35:02 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x2efff, 0x40000002}) 22:35:02 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x6, 0x0) [ 471.395309] hfsplus: unable to find HFS+ superblock 22:35:02 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x2f7ff, 0x40000002}) 22:35:02 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 22:35:05 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:35:05 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d71a0220341ea32af193c9fa6511756f0a56cf70ef9158dcc809125b2e55b38415828bd295be8641", 0x9c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, 0x0}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) 22:35:05 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:35:05 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x7, 0x0) 22:35:05 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x2ffff, 0x40000002}) 22:35:05 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x4}]) 22:35:05 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d71a0220341ea32af193c9fa6511756f0a56cf70ef9158dcc809125b2e55b38415828bd295be8641", 0x9c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, 0x0}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) [ 474.160921] hfsplus: unable to find HFS+ superblock 22:35:05 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x30000, 0x40000002}) 22:35:05 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:35:05 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d71a0220341ea32af193c9fa6511756f0a56cf70ef9158dcc809125b2e55b38415828bd295be8641", 0x9c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, 0x0}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) 22:35:05 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x4000}]) 22:35:05 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x9, 0x0) [ 474.424054] hfsplus: unable to find HFS+ superblock 22:35:08 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:35:08 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x307ff, 0x40000002}) 22:35:08 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0xa, 0x0) 22:35:08 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1000000}]) [ 476.958073] hfsplus: unable to find HFS+ superblock 22:35:08 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x30fff, 0x40000002}) 22:35:08 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0xd, 0x0) 22:35:08 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x4000000}]) [ 477.104883] hfsplus: unable to find HFS+ superblock 22:35:08 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0xe, 0x0) [ 477.240944] hfsplus: unable to find HFS+ superblock 22:35:08 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:35:08 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d71a0220341ea32af193c9fa6511756f0a56cf70ef9158dcc809125b2e55b38415828bd295be8641", 0x9c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, 0x0}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) 22:35:08 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x317ff, 0x40000002}) 22:35:08 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x40000000}]) [ 478.919966] NOHZ: local_softirq_pending 08 22:35:11 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:35:11 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x23, 0x0) 22:35:11 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x31fff, 0x40000002}) 22:35:11 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) r3 = dup2(r2, r1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) ioctl$SIOCGETLINKNAME(r3, 0x89e0, &(0x7f0000000080)={0x4, 0x2}) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) close(r5) sendfile(r4, r5, &(0x7f0000000000)=0x5, 0x7fffffff) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r6, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 22:35:11 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x37800, 0x40000002}) [ 479.992573] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 22:35:11 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:35:11 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x60, 0x0) 22:35:11 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000000)={0x1, 0x9, 0x4, 0x1, 0x7, {}, {0x1, 0x2, 0x1, 0x8, 0x4, 0x40, "9c340269"}, 0x4, 0x4, @userptr, 0x4a8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, 0x4, 0x0, 0x70, &(0x7f0000ffc000/0x2000)=nil, 0xffffffff}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r3, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r4, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r6 = dup3(0xffffffffffffffff, r5, 0x0) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_ADDFB(r6, 0xc01c64ae, &(0x7f0000000100)={0x2, 0x2, 0x1000, 0x4, 0xffffffff, 0xf9}) 22:35:11 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:35:11 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d71a0220341ea32af193c9fa6511756f0a56cf70ef9158dcc809125b2e55b38415828bd295be8641", 0x9c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, 0x0}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) 22:35:11 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x38800, 0x40000002}) 22:35:11 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0xf0, 0x0) 22:35:11 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x6, 0x8, 0x4, 0x0, 0x7, {0x0, 0x2710}, {0x4, 0x8, 0x99, 0x2, 0x3, 0x73, "860164c4"}, 0x75, 0x3, @planes=&(0x7f0000000000)={0x9, 0x2, @fd, 0x8001}, 0x3, 0x0, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000380)={0x0, 0x4, 0x800, 0x0, 0x7}) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ca77590fdfa9aaee2f178bc163", @ANYRES16=r3, @ANYBLOB="000427bd7000ffdbdf25090000003000038014000600fe8000000000000000000000000000aa0800030004000000060007004e240000080003000400000024000180060004004e220000060004004e21000008000b007369700008000800090000000800040008000000"], 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) r4 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r4, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r5, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 22:35:12 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x40000, 0x40000002}) 22:35:12 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x300, 0x0) 22:35:12 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) open(&(0x7f0000000000)='./file0\x00', 0x606100, 0x0) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) [ 480.800567] hfsplus: unable to find HFS+ superblock 22:35:12 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x47800, 0x40000002}) 22:35:14 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:35:14 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x48800, 0x40000002}) 22:35:14 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x500, 0x0) [ 483.227912] hfsplus: unable to find HFS+ superblock 22:35:14 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:35:14 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d71a0220341ea32af193c9fa6511756f0a56cf70ef9158dcc809125b2e55b38415828bd295be8641", 0x9c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, 0x0}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) 22:35:14 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xfffffffffffffff8, 0x244405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) io_submit(r3, 0x2, &(0x7f0000000100)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0xc65a, r1, &(0x7f0000000040)="09e5e0ec1d8c60590c2190f9f2ad156f82f492c1b99791596b48adfb42ac621b517ee21aa534f0ad92db87dcc2a4caeb4a209838efd757d173ff14303f8b44513134398630d5438e917e0bc200e7597b934d2acff90d50f1e98989f366091a593bd4b808e283079eb75cfcafecd5ee15a0585812f13839ac6be0efd2e778", 0x7e, 0x4, 0x0, 0x4}]) 22:35:14 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x50000, 0x40000002}) 22:35:14 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x600, 0x0) 22:35:15 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x51041, 0x40000002}) [ 483.743910] hfsplus: unable to find HFS+ superblock 22:35:15 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x700, 0x0) 22:35:15 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0xd0002, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8, 0x80000) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000080)={0x0, 0x2, 0x81, 0x3, 0x6, 0x9, 0x2, 0xffffffffffffffff, 0x3, 0x8, 0x7ff, 0x3}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r3, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r4, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 22:35:15 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x51800, 0x40000002}) [ 483.944624] hfsplus: unable to find HFS+ superblock 22:35:17 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r2}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:35:17 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x52000, 0x40000002}) 22:35:17 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x900, 0x0) [ 486.268124] hfsplus: unable to find HFS+ superblock 22:35:17 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:35:18 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d71a0220341ea32af193c9fa6511756f0a56cf70ef9158dcc809125b2e55b38415828bd295be8641", 0x9c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, 0x0}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) 22:35:18 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x508302, 0x0) write$6lowpan_enable(r3, &(0x7f0000000040)='0', 0x1) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) r5 = perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x3c, 0x1f, 0x40, 0x8, 0x0, 0x9, 0x9120, 0x14, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xffffffff, 0x4, @perf_bp={&(0x7f00000000c0), 0x4}, 0x2c, 0x6, 0x200, 0x2, 0x401, 0x9, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0x2) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r7 = dup3(0xffffffffffffffff, r6, 0x0) ioctl$TIOCGDEV(r7, 0x80045432, &(0x7f0000000100)) io_submit(r4, 0x2, &(0x7f0000000180)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0xffff, r1, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x1f, r5, &(0x7f0000000380)="ad236ce7fe9ceb989d3920371a6e16b4385172e6378195c4c943c384f69a4379c497cc63ce0da6f986b42577f0e75aa8259ced3a085b21b0a2308d15fb953724e700ef604e016e864e6dc1d5b0e4420850a50dcac3c1564309dfd9903f44979c980cf999374893044c48a79b83205d5631eedb51ed2415799574099a684441ca21019cba79b8d42637a4e08e205f7c60861e1e", 0x93, 0x7, 0x0, 0x0, r7}]) 22:35:18 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x52800, 0x40000002}) 22:35:18 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0xa00, 0x0) 22:35:18 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 486.783989] hfsplus: unable to find HFS+ superblock 22:35:18 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x53000, 0x40000002}) 22:35:18 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0xd00, 0x0) 22:35:18 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x3, 0x1, 0x9}) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$TIOCGDEV(r3, 0x80045432, &(0x7f0000000100)) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, &(0x7f0000000080)={0x242, "b8d50c61f2a67519f733dac64c4dcaebb43ac8ac02344f1c5750f1bf2b86397d", 0x1}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_names\x00') ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000040)={0x45, @time={0x5, 0x3}, 0x3, {0x3, 0xc4}, 0x2, 0x0, 0x7}) r5 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r6, r5) io_setup(0x8, &(0x7f0000000140)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) close(r8) splice(r3, &(0x7f0000000200)=0x4, r8, &(0x7f0000000240)=0x363, 0x5, 0x6) syz_open_dev$sndctrl(&(0x7f0000000300)='/dev/snd/controlC#\x00', 0x6e, 0x101040) pipe2(&(0x7f00000000c0), 0x80000) io_submit(r7, 0x0, &(0x7f0000000240)) [ 486.964804] hfsplus: unable to find HFS+ superblock [ 487.019330] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 22:35:20 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r2}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:35:20 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x53800, 0x40000002}) 22:35:20 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0xe00, 0x0) 22:35:20 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x5, 0x0) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x1, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0xc050}, 0x4080) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r3, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r4, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) prctl$PR_SVE_GET_VL(0x33, 0x11fdd) [ 489.344608] hfsplus: unable to find HFS+ superblock 22:35:21 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d71a0220341ea32af193c9fa6511756f0a56cf70ef9158dcc809125b2e55b38415828bd295be8641", 0x9c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, 0x0}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) 22:35:21 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x54000, 0x40000002}) 22:35:21 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x2000, 0x0) 22:35:21 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x20000, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000014007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x8, 0xfff1}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000002d000102000000000000000700000000", @ANYRES32=r10, @ANYBLOB="0000001f000000000800f1ff"], 0x24}}, 0x4) bind$xdp(r4, &(0x7f0000000440)={0x2c, 0x0, r10, 0x2e}, 0x10) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) r11 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r12 = dup3(0xffffffffffffffff, r11, 0x0) ioctl$TIOCGDEV(r12, 0x80045432, &(0x7f0000000100)) r13 = syz_genetlink_get_family_id$gtp(&(0x7f0000000380)='gtp\x00') r14 = socket$nl_route(0x10, 0x3, 0x0) r15 = socket$nl_route(0x10, 0x3, 0x0) r16 = socket$nl_route(0x10, 0x3, 0x0) r17 = socket$netlink(0x10, 0x3, 0x0) r18 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r18, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r18, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r17, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r19, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r16, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000014007a2a30005000000", @ANYRES32=r19, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r15, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r19, {}, {}, {0x8, 0xfff1}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000002d000102000000000000000700000000", @ANYRES32=r19, @ANYBLOB="0000001f000000000800f1ff"], 0x24}}, 0x4) sendmsg$GTP_CMD_DELPDP(r12, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)={0x58, r13, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_LINK={0x8, 0x1, r19}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x40000) 22:35:21 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:35:21 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x54800, 0x40000002}) 22:35:21 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:35:21 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x2300, 0x0) 22:35:23 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r2}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:35:23 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x55000, 0x40000002}) 22:35:23 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x3f00, 0x0) 22:35:23 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) ioctl$TIOCGDEV(r4, 0x80045432, &(0x7f0000000100)) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000300)}}, 0x10) io_setup(0x8, &(0x7f0000000140)=0x0) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0xe01, 0x0) io_submit(r5, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, r6}]) 22:35:24 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d71a0220341ea32af193c9fa6511756f0a56cf70ef9158dcc809125b2e55b38415828bd295be8641", 0x9c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, 0x0}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) 22:35:24 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x55800, 0x40000002}) 22:35:24 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r2}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:35:24 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x4000, 0x0) 22:35:24 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) r3 = dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/commit_pending_bools\x00', 0x1, 0x0) read$FUSE(r5, &(0x7f00000004c0), 0x1000) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000040)={0x5e0c, 0x2, 0x4, 0x20, 0x100, {r6, r7/1000+30000}, {0x4, 0x1, 0x2, 0x80, 0x2, 0x9, "b92d6614"}, 0x7, 0x1, @userptr=0x8, 0x7, 0x0, 0xffffffffffffffff}) bind$bt_sco(r8, &(0x7f00000000c0)={0x1f, @fixed={[], 0x12}}, 0x8) io_submit(r4, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 22:35:24 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r2}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 492.948274] hfsplus: unable to find HFS+ superblock 22:35:24 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:35:24 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x56000, 0x40000002}) 22:35:24 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d71a0220341ea32af193c9fa6511756f0a56cf70ef9158dcc809125b2e55b38415828bd295be8641", 0x9c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, 0x0}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) 22:35:24 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x3ff, 0x103100) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) r3 = dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) ioctl$PIO_UNISCRNMAP(r3, 0x4b6a, &(0x7f0000000300)="7550754a7554240627b8230d3c45df1ca8ab9fadd3a8f6ab1282ba1bd51af854fa80428a4063a8c9434309a0bfe592099286ef2af3de561985b6305d6d3b57e7abbd49a4ed1dfd62622c470e0321e52465334557115a85d99d2f4d667e227918ef45f14d9a048eebb672c1316b2b52566144ca3524cd1e3a139adaf66e1d752174f0d9dff67e9db18fe392ca99bde571a9655a33f09d711bebe6fc12d6de858f9eea899bf4c31660637a2476fefbcc0c189e63e42ad7d0a3759efcb1fb1c2cc604e158a188f4e84860bebe1bcc0f299351858fc4a8296a3213881ec008ffe19e2b63e6a8a6b7369a") io_submit(r4, 0x1, &(0x7f0000000040)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x7, 0x0, r1, 0x0}]) 22:35:24 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x6000, 0x0) 22:35:24 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x56800, 0x40000002}) 22:35:24 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0xedc0, 0x0) 22:35:24 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x57000, 0x40000002}) 22:35:24 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) ioctl$TIOCGDEV(r4, 0x80045432, &(0x7f0000000100)) ioctl$UI_DEV_DESTROY(r4, 0x5502) r5 = dup2(r2, r1) ioctl$SOUND_MIXER_READ_RECSRC(r5, 0x80044dff, &(0x7f0000000280)) io_setup(0x8, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xc0, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xfffffffd}]}, @IPSET_ATTR_ADT={0x44, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x4}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x7fff}}]}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x10000}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={[], [], @multicast2}}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7f}]}]}, 0xc0}}, 0x4004) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000340)={0x8, 0xf, 0x4, 0x4, 0x6, {r7, r8/1000+30000}, {0x2, 0x2, 0x1, 0x40, 0x2, 0x3, "1e732dab"}, 0x3, 0x1, @offset=0x8, 0x20, 0x0, r0}) io_submit(r6, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 22:35:24 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x57800, 0x40000002}) 22:35:24 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0xf000, 0x0) 22:35:27 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r2}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:35:27 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:35:27 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x58000, 0x40000002}) 22:35:27 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d71a0220341ea32af193c9fa6511756f0a56cf70ef9158dcc809125b2e55b38415828bd295be8641", 0x9c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, 0x0}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) 22:35:27 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x4, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x80}]) 22:35:27 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0xff0f, 0x0) 22:35:27 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:35:27 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x58800, 0x40000002}) 22:35:27 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:35:27 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x20000, 0x0) 22:35:27 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x59000, 0x40000002}) 22:35:27 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:35:27 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) close(r1) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000080)) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x40001, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r5 = dup3(0xffffffffffffffff, r4, 0x0) ioctl$TIOCGDEV(r5, 0x80045432, &(0x7f0000000100)) write$P9_RSTATFS(r5, &(0x7f00000000c0)={0x43, 0x9, 0x2, {0xfffffff8, 0x7, 0x400, 0x80000001, 0x101, 0x80000000, 0x100, 0x81, 0x3}}, 0x43) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f00000005c0)={0xfffffffd, {{0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, [], 0x31}, 0x9}}, 0x1, 0x4, [{{0xa, 0x4e21, 0x7, @ipv4={[], [], @rand_addr=0x2}, 0x8001}}, {{0xa, 0x4e22, 0x4, @mcast1, 0x8}}, {{0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x7}}, {{0xa, 0x4e24, 0x1000, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xffff}}]}, 0x290) r6 = dup2(r3, r2) io_setup(0x8, &(0x7f0000000140)=0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x44, r9, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_macvtap\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(r6, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)={0xc4, r9, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0xb}}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x10000}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80000001}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x800) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8983, &(0x7f0000000000)) io_submit(r7, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r2, 0x0}]) 22:35:30 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:35:30 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x40000, 0x0) 22:35:30 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d71a0220341ea32af193c9fa6511756f0a56cf70ef9158dcc809125b2e55b38415828bd295be8641", 0x9c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, 0x0}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) 22:35:30 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x59800, 0x40000002}) 22:35:30 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r2}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(0x0, 0x3c) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) 22:35:30 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x2405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x7, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) 22:35:30 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0xe0000, 0x0) 22:35:30 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r2}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(0x0, 0x3c) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) 22:35:30 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x5a000, 0x40000002}) 22:35:30 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r2}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(0x0, 0x3c) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) 22:35:30 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x1fffff, 0x0) 22:35:30 executing program 5: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x1, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 22:35:33 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:35:33 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:35:33 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d71a0220341ea32af193c9fa6511756f0a56cf70ef9158dcc809125b2e55b38415828bd295be8641", 0x9c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, 0x0}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) 22:35:33 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x5a800, 0x40000002}) 22:35:33 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x6b6b6b, 0x0) 22:35:33 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r2 = dup3(0xffffffffffffffff, r1, 0x0) ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f0000000100)) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r2, 0x40405514, &(0x7f0000000000)={0xa, 0x1, 0x4, 0x100, '\x00', 0x2}) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r4, r3) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r5, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r3, 0x0}]) 22:35:33 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:35:33 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d71a0220341ea32af193c9fa6511756f0a56cf70ef9158dcc809125b2e55b38415828bd295be8641", 0x9c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, 0x0}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) 22:35:33 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x5b000, 0x40000002}) 22:35:33 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:35:33 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0xf0ffff, 0x0) 22:35:33 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) lsetxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.ima\x00', &(0x7f0000000080)=@md5={0x1, "5bed3a57ba84981dfdf7c34d4bff2742"}, 0x11, 0x2) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 22:35:36 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:35:36 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d71a0220341ea32af193c9fa6511756f0a56cf70ef9158dcc809125b2e55b38415828bd295be8641", 0x9c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, 0x0}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) 22:35:36 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x80000, 0x40000002}) 22:35:36 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:35:36 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0xfeffff, 0x0) 22:35:36 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000300)={'broute\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000040)=[{}, {}, {}, {}], 0x0, [{}, {}]}, 0x98) r4 = dup3(0xffffffffffffffff, r3, 0x0) ioctl$TIOCGDEV(r4, 0x80045432, &(0x7f0000000100)) ioctl$DRM_IOCTL_GEM_CLOSE(r4, 0x40086409, &(0x7f0000000000)) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r5, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 22:35:36 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x100420, 0x40000002}) 22:35:36 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x1000000, 0x0) 22:35:36 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) r3 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xe3, 0x2) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, &(0x7f0000000040)={0x0, 0x20, 0x8000, 0x8, 0xffffffff80000000, 0x80000000, 0x7fff, 0x100000001, 0x0, 0x4, 0x8, 0x3}) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r4, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 22:35:36 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x180500, 0x40000002}) [ 505.503898] hfsplus: unable to find HFS+ superblock 22:35:36 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x200500, 0x40000002}) 22:35:36 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x280500, 0x40000002}) 22:35:39 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:35:39 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x2000000, 0x0) 22:35:39 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x481482, 0x0) ioctl$BLKPBSZGET(r3, 0x127b, &(0x7f0000000040)) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r4, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 22:35:39 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x300500, 0x40000002}) 22:35:39 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d71a0220341ea32af193c9fa6511756f0a56cf70ef9158dcc809125b2e55b38415828bd295be8641", 0x9c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, 0x0}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) 22:35:39 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 508.381770] hfsplus: unable to find HFS+ superblock 22:35:39 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x380500, 0x40000002}) 22:35:39 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x7) setresuid(0xee00, r5, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x80, 0x81, {0x0}, {r5}, 0x4, 0x180}) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x7) setresuid(0xee00, r8, 0x0) r9 = getgid() fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000b40)={{}, {0x1, 0x1}, [{0x2, 0x6}], {}, [{}, {0x8, 0x0, r9}], {}, {0x20, 0x1}}, 0x3c, 0x2) setsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={r6, r8, r9}, 0xc) socket$xdp(0x2c, 0x3, 0x0) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r10, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 22:35:39 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x3000000, 0x0) 22:35:39 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x400500, 0x40000002}) [ 508.602782] audit: type=1400 audit(1583620539.874:59): avc: denied { setopt } for pid=30713 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_rdma_socket permissive=1 [ 508.642243] hfsplus: unable to find HFS+ superblock 22:35:39 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x480500, 0x40000002}) 22:35:40 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x4000000, 0x0) [ 508.799863] hfsplus: unable to find HFS+ superblock 22:35:42 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:35:42 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x500500, 0x40000002}) 22:35:42 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) r3 = dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) ioctl$NBD_SET_TIMEOUT(r3, 0xab09, 0x3) io_submit(r4, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 22:35:42 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x5000000, 0x0) 22:35:42 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d71a0220341ea32af193c9fa6511756f0a56cf70ef9158dcc809125b2e55b38415828bd295be8641", 0x9c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, 0x0}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) 22:35:42 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 511.446001] hfsplus: unable to find HFS+ superblock 22:35:42 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x580500, 0x40000002}) 22:35:42 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x6000000, 0x0) 22:35:42 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r2 = dup3(0xffffffffffffffff, r1, 0x0) ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f0000000100)) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000300)={0x6, 0x8001, [{0x20000000, 0x0, 0x5ba2}, {0xd1e, 0x0, 0xfffffffffffffff8}, {0x6, 0x0, 0x2}, {0x8, 0x0, 0x7}, {0x7, 0x0, 0x200}, {0x2, 0x0, 0xe4d}]}) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=0x0, &(0x7f0000000040)=0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000080)={r3, 0x6}, 0x8) r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r5, r4) io_setup(0x8, &(0x7f0000000140)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$vbi(&(0x7f0000000380)='/dev/vbi#\x00', 0x1, 0x2) sendto$inet6(r7, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) close(r7) getsockopt$IP_SET_OP_GET_BYNAME(r7, 0x1, 0x53, &(0x7f00000000c0)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000180)=0x28) io_submit(r6, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x3, 0x0, r4, 0x0, 0x0, 0xfffffffffffffffe}]) 22:35:42 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x600500, 0x40000002}) [ 511.672439] hfsplus: unable to find HFS+ superblock 22:35:43 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x680500, 0x40000002}) 22:35:43 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x7000000, 0x0) [ 511.885276] hfsplus: unable to find HFS+ superblock 22:35:45 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:35:45 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x700500, 0x40000002}) 22:35:45 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r2 = dup3(0xffffffffffffffff, r1, 0x0) ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f0000000100)) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r2, 0xc008551b, &(0x7f00000000c0)={0x9, 0x24, [0x9, 0x2, 0x49, 0x2800, 0x2ac, 0x8001, 0x5, 0x7ff, 0x4]}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r4, r3) io_setup(0x8, &(0x7f0000000140)=0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r8 = dup3(0xffffffffffffffff, r7, 0x0) ioctl$TIOCGDEV(r8, 0x80045432, &(0x7f0000000100)) sendmsg$tipc(r8, &(0x7f0000000980)={&(0x7f0000000500)=@nameseq={0x1e, 0x1, 0x1, {0x0, 0x3, 0x4}}, 0x10, &(0x7f0000000840)=[{&(0x7f0000000540)="10c4e310f2bec647dc1c8901c4ef30c205e5e872e83cf63d98c9948efbaf3b9e34c41f7f388ed447ebd74bfa9ef58979aba7c6d0cff1016b897303072541f8f8bc917d53ce3cda64a6a05fbe5bf6b73f803043d2789f15719bac0d44d3b8413d7d1ffa27d64af2d53714751213e85894aa68926aa5b27ace00379d71152c924c6fa847b6f8728dc5a85f38f26dd54dfe4e4c4fe965d9af381b9982ea83239231f41c78b71f30ef583402c79500102ac142cc", 0xb2}, {&(0x7f0000000600)="3f5d89af9918255784fc7a8396979163b85d715acbd297e7b47fa5ccbdfce3add409784320913ba75fe0cd2a70333a0c57a23248a7a659", 0x37}, {&(0x7f0000000640)="aa400cfc11a704d9ca92d642c92c3b756bca7efcae73a3173f30e764191224dcf8322a7669b7725325d56b4425d5e8d951cad5e7a4065267f8b9a6673ba28483f9c1655d89", 0x45}, {&(0x7f00000006c0)="b2b1b62e3589388eab8e536df055ec7bf5327be91db286faae1656310fb187427c0729e0f49c28532cd7e40d12", 0x2d}, {&(0x7f0000000700)}, {&(0x7f0000000740)="01ee274f4c013c66ec8d388cbf0e85b4d92a051c53eefc2bdabb6773993087445ca6bc14ba8e85fb415bec94480537892c20ffb6f00d5813c305dfc15d982b58714d5e3fbbbf03988e49e37501c3ffadb011291b547618fc1770ad9ce185e0b583b812a9f3fd52e7995a0d8966151e2dacaea7b3b9d8158ed1c0b6bdd2a28ad527b8a62297d9cfb6799a8916885d287924f321cdfa2d37e6e320778c2ffdfbbe278c342c51ae6f6aa6b07c2c8989cb36a0bcc6ed82bbcde459275847d076d77f04f484c17ad7ea9d94994f350de71d0a617c4a5bf34cb802a1520ee58de679ba2b8087891d", 0xe5}], 0x6, &(0x7f00000008c0)="f9c7c6f6e6b0ff5f442e94380a72fa6624cd77cf1f99902aa4e3cdeb5811bf57f64f5f3bb1903e74fd9d63ee81c55be6241c0cd3aae6d0af771f8f96ff95c3fcaaac69df23a48b4b81e8b40d761f034e0f98c6f8efa596488816b7f6703e9be63ba5f432f844389d4406a07d38dffdbf6593d64a38d875bfc4fa82b0ffdeaa66bd23276be1bd7e2699e5a5f563a59a9e92cd9a4f0e75571f1983f4b108246477369965f6ee3c0cbfaadc39538bf5476d98ca786fbc60f00e", 0xb8, 0x20040000}, 0x4c0c0) r9 = dup3(0xffffffffffffffff, r6, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r10, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x1c, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=ANY=[@ANYBLOB="2000000000000000840000000200000e47ffd3fffffffffffb000000", @ANYRES32=0x0], 0x20}], 0x4924924924924d0, 0x0) setsockopt$inet6_IPV6_PKTINFO(r10, 0x29, 0x32, &(0x7f0000000000)={@ipv4={[], [], @multicast1}}, 0x14) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r10, 0x84, 0x6e, &(0x7f0000000300)=[@in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e22, 0x9, @mcast2, 0x8}, @in6={0xa, 0x4e20, 0x800, @mcast1, 0x1ff}, @in6={0xa, 0x4e24, 0x3, @remote, 0x8}, @in={0x2, 0x4e20, @multicast2}, @in6={0xa, 0x4e20, 0x1, @ipv4={[], [], @local}, 0x15b}, @in6={0xa, 0x4e22, 0x9, @dev={0xfe, 0x80, [], 0x42}, 0x7}], 0xac) ioctl$TIOCGDEV(r9, 0x80045432, &(0x7f0000000100)) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x1d, 0x0, 0x7f, &(0x7f0000000400)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_INITMSG(r12, 0x84, 0x2, &(0x7f0000000440), &(0x7f00000004c0)=0x8) sendto$inet6(r11, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) close(r11) ioctl$VIDIOC_S_EXT_CTRLS(r9, 0xc0205648, &(0x7f0000000080)={0x9b0000, 0xcde7, 0x66f, r11, 0x0, &(0x7f0000000040)={0x9a091f, 0x2, [], @string=&(0x7f0000000000)=0x7f}}) ioctl$TIOCSIG(r13, 0x40045436, 0x5) io_submit(r5, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r3, 0x0}]) 22:35:45 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x9000000, 0x0) 22:35:45 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d71a0220341ea32af193c9fa6511756f0a56cf70ef9158dcc809125b2e55b38415828bd295be8641", 0x9c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, 0x0}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) 22:35:45 executing program 4: pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:35:45 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x780000, 0x40000002}) 22:35:45 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d71a0220341ea32af193c9fa6511756f0a56cf70ef9158dcc809125b2e55b38415828bd295be8641", 0x9c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, 0x0}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) [ 514.544256] hfsplus: unable to find HFS+ superblock [ 514.561357] ptrace attach of "/root/syz-executor.4"[31586] was attempted by "/root/syz-executor.4"[31590] 22:35:45 executing program 4: pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:35:45 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:35:45 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0xa000000, 0x0) 22:35:46 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x780100, 0x40000002}) [ 514.810218] hfsplus: unable to find HFS+ superblock 22:35:46 executing program 4: pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:35:46 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) r3 = dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) listen(0xffffffffffffffff, 0x3) connect$rose(r3, &(0x7f0000000000)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, 0x1, @null}, 0x1c) io_submit(r4, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000100)='SMC_PNETID\x00') r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0xffffffffffffffff, 0x3ff, 0x18}, 0xc) poll(&(0x7f00000000c0)=[{r5, 0x2}, {r6}, {r1, 0x4}, {r7, 0xc500}], 0x4, 0x100) 22:35:46 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:35:46 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0xd000000, 0x0) 22:35:46 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 515.098218] hfsplus: unable to find HFS+ superblock 22:35:46 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:35:46 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x780300, 0x40000002}) 22:35:48 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d71a0220341ea32af193c9fa6511756f0a56cf70ef9158dcc809125b2e55b38415828bd295be8641", 0x9c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, 0x0, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) 22:35:48 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x12000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) dup2(r1, r2) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x22200, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r5 = dup3(0xffffffffffffffff, r4, 0x0) ioctl$TIOCGDEV(r5, 0x80045432, &(0x7f0000000100)) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r5, 0xc0984124, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) io_submit(0x0, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x8, r0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}]) 22:35:48 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x20000000, 0x0) 22:35:48 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x780400, 0x40000002}) 22:35:49 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x780500, 0x40000002}) 22:35:49 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d71a0220341ea32af193c9fa6511756f0a56cf70ef9158dcc809125b2e55b38415828bd295be8641", 0x9c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, 0x0, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) [ 517.748233] hfsplus: unable to find HFS+ superblock 22:35:49 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = dup2(0xffffffffffffffff, r1) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f0000000040)=0x1e) io_setup(0x8, &(0x7f0000000140)=0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x400000, 0x0) ioctl$TIOCSLCKTRMIOS(r5, 0x5457, &(0x7f00000000c0)) io_submit(r4, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 22:35:49 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x23000000, 0x0) 22:35:49 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x800000, 0x40000002}) [ 518.026319] hfsplus: unable to find HFS+ superblock 22:35:49 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:35:49 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:35:49 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x800500, 0x40000002}) 22:35:49 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x3f000000, 0x0) 22:35:49 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) ioctl$TIOCGDEV(r4, 0x80045432, &(0x7f0000000100)) ioctl$SOUND_MIXER_READ_VOLUME(r4, 0x80044d04, &(0x7f0000000000)) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r5, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) [ 518.314105] hfsplus: unable to find HFS+ superblock 22:35:49 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:35:49 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x880300, 0x40000002}) 22:35:49 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x40000000, 0x0) [ 518.535642] hfsplus: unable to find HFS+ superblock 22:35:52 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d71a0220341ea32af193c9fa6511756f0a56cf70ef9158dcc809125b2e55b38415828bd295be8641", 0x9c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, 0x0, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) 22:35:52 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x8001, 0x38bb03) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) r3 = dup2(r2, r1) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000000)=0xa9, 0x4) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r4, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 22:35:52 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x880400, 0x40000002}) 22:35:52 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x60000000, 0x0) [ 520.905036] hfsplus: unable to find HFS+ superblock 22:35:52 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:35:52 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x880500, 0x40000002}) 22:35:52 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x6b6b6b00, 0x0) 22:35:52 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) r3 = dup2(r2, r1) openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x282080, 0x0) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r4, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) r5 = creat(&(0x7f0000000000)='./file0\x00', 0xa6) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r5, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000ac0)={0x828, r6, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_PROBE_RESP={0x54c, 0x91, "fdaf557f58c890d026135145ab74f2ebb450a16e286d3cb7c9188daf947682c28dfc06ae926207aa97e11a8472377d67b3c74497f4888e119372cd9669437b65c7faddbd7e0084b9637d1386ebf91ebe0fac156aba08859690fea4892bac68987568d0c147bef301f6c5fac22b6132c276b77a3d14d9fda2726cffefd4ace356432b5f63401a377f917efe155706b3c1e4e95b011a17f643cce08f960c503d30cf3cfb0119ab88a6677b35f228a5701c9d863cc8dda6a0687c0d787a627c586990801cef6674e4332d724900c2672064c7dbf5e621b96240cbb36b39c91884738433b19ce4570d90e197d0f97334000ea659edb8c2c4e4437ff42a908b3be25d600d588e8b8959ceac4ab20804099efb9ebb2e0845bd29bc6638e84d85aa68159bc2e3c4acf188f665b5b55d06c2a8d77e006c2d0dfa930acc38f9aaa25c44c7cc7f6e0f53750cc5ae5467865ce77821297d04bd86ade7ea7b176e8c7d5a16fdfe8be70e900402ef2e7098ef5998efb46d5c686c5c2d05f87c0969dc9df56df8ad2bef63de92e498464ceb0f0c4f33a23c87923813e3647b375c8496cb2d937337319b614d4104053090343ad4f3d37dc65116af390d9813a9ad6a114eceeb83833586c6591aa53dc880889e84041b762217188567545cab52b8d0ec23d472fbe8e1820424dcc14adf73d4bc98ba9703a61d6765849a1ec13e925f9f7ea9a25f234b78041b626ac5f39bcb31cdccaa8640ff168573aad7c296e48b6119a5d2f69c01ec5cc5e80696fe4aaa7e9c6d896646c9b67c1a5f684b63408a24902987358436f6974299a7023f4cbce3afe9ddbb082d1df596bfafdc6a6b14c5fe272d75d17ffd5c86177d0efdcc5d19007046ca4d9ffa0f7ccdbbcc08bc202d65db5a7cb0740afacf64d79cd9978edc141a5c21c0f1c3e4ec6da3780a14e3555387b4fb9d19451038979dc7f84ae26f8fe9eba31f4d9c566ad3d89404d41a5fe73d8b49e696135d6e2d0e8fd8a47095738090613afe739aa056bd17aac76f5c4a675b5ea1817b589f9ed3ee2951ce27f3d69657e444e29c1b1a1f8d2b6e0ae00dd6eb6740a21e80110d40853d73858845efc63fe55f1356aabccae6d36b152dad26353a075dee7cf958dd0435e0e54dc8390a9ad192e70d162828d2496a83749720e10e99f7659ad327f049e3343afd5991372d8e71efb85c26dc26f669dd481e91463ec961bca87eef8e5c271d7418cf9c22cc31ff874219afd3e346e61ae2c36985e28c3063a60105c32181bd1a27ef0db2d97d1da218f4626fa4d4d341313859e128a12e00165af83252cd729a3f3dcba9de78a1d7ccbd1f8118df66d660caa5e6ea2e075b2d5a6dc306059dc373f7d7f1f9a54e036f8a73258b9842810d8ae0783d8d2a62522c85ee046496d77bac7e0a97e633b98e3c03190b4aade79954864ace8880a530de20204f1d5fa9ded4e053b1b95652578daa20ea33a784d357317249756b266c7150fa93675b0a9a32c89c57521fe255d056032fbd05cc08223b35f37b54960ce9d87307451d261c2e2f24872b015dea35f1e92edc43d4b8a6fbf05b7807750a1bc7ecd0c2c19bab14c918873ddfe72f5256b22541b27f8dbea192bfcd1d5c4d2a1f45d22ef164b64f4dcfcbab43ac7e06695027610ce2aa507643371073b5e4b19b64aef091b6f01a1615ea56be2496d60ad49cbde13898666a417a5d76fe5ee33b2d7fe53c80d7d1107034892916d7fa1639cbc225ca294e5253a26daf49d3d4620ffe22271e9628e602382e500e4ebfd0fdf81848eb2a036179a8b12b44f125dacb12552d1d7783402a691b25d70f03b6b5252438bf901c5f293a48ccb4c0849c39f98ea43df753e793ac47e906c6c32f68a45ad6b854028d273ed9cd7882f3a4442d"}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x1}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x3}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, {0xa, 0x0, @broadcast}, {0xa}]}, @NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_SSID={0xa, 0x34, "5c69c311de80"}, @NL80211_ATTR_FTM_RESPONDER={0x264, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xb1, 0x3, "3ff24989f70211a6f2aa792c8de81d6a2a59717752317dc6bdbac3e8abb7680d59ce884b3c3f33aa27d23b10b1c8d8cb2520d6a93b334bb233cc3a315265d30c250d72925bb4860daf8fdb6925824629871b9add8ecfd3485883fe1e2ed21345cb4fbb7ca20f191760abcf2735234b1bb6b142e1f9cf71c179151b467221116da1563fc7802c378b6018edd22f2383fcbcb7b8e8c1154be95937ad63ce942bfcb9886a20fb13718f268f772f54"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x88, 0x2, "1cb379ee9e9ae891bd3343b9f9398aa8ae39bfb9a8c7480490d731e23853894d65cab66e9110229e40116bd6812de498c76c879c307a383b4475f479d99af2f6758754726d04f465618bc63e731a8ee0aca34bee9337279c6848e7db3d3f25d8e6f9045ef88d9eb482874e4c47b69280e08d12f90abbb0c67ed11e10a142a84af95aa6da"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xe9, 0x3, "f7fa0348ab4b15265c56c74cb4d738b684818f512005bcf8e0a8c27093a24171ed9286886d7dbbbdaf4a323d7f131c703c27ab5210ef4f0d1f880adec8fe9a49a7bdfed966d3ebd49b74af38ac7b23b74974d07bb8e1a41b910edc1616f415aa9be91eb087cf87ac97c0aec161e3d2ec8ff389e8b7c8f14249fc1d73039ea9383fd12d86b79b5c0bfc4b37a2baccbc1814cbe955218fceaf818681e42c9ab9bc4aa7342ae3c6ffcac68d9fed79e6b01e9112ce34613f34d1a8c324d44ce13b7186ff089cf50bc54e5cd6d3c2e34178c82e4da3da164812a7aa7f78c9aaa2812061f5935cb3"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x2f, 0x3, "097f721b5d2c4748fb358c70d5460f5455a72679ae51b295e4be7e6b84d84e3deb261316fd9d4e5303073e"}]}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac09}, @NL80211_ATTR_P2P_OPPPS={0x5}]}, 0x828}, 0x1, 0x0, 0x0, 0x22040804}, 0x40000) ioctl$sock_ax25_SIOCDELRT(r3, 0x890c, &(0x7f0000000340)={@bcast, @bcast, 0x8, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null]}) fsetxattr$security_selinux(r5, &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:boot_t:s0\x00', 0x1c, 0x4) 22:35:52 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:35:52 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:35:52 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x900500, 0x40000002}) 22:35:52 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x8cffffff, 0x0) 22:35:55 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d71a0220341ea32af193c9fa6511756f0a56cf70ef9158dcc809125b2e55b38415828bd295be8641", 0x9c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, 0x0}, 0x78) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) 22:35:55 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000000)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) r5 = dup3(r4, r3, 0x80000) ioctl$TIOCGDEV(r5, 0x80045432, &(0x7f0000000100)) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f00000004c0)={0x5, {{0x2, 0x4e21, @multicast1}}, 0x1, 0x2, [{{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}}, {{0x2, 0x4e23, @multicast1}}]}, 0x190) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r6, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 22:35:55 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:35:55 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x980500, 0x40000002}) 22:35:55 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0xc0ed0000, 0x0) [ 523.963507] hfsplus: unable to find HFS+ superblock 22:35:55 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0xa00500, 0x40000002}) 22:35:55 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0xf5ffffff, 0x0) 22:35:55 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:35:55 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x8, 0x48f80) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xffffffffffffffff, 0x0) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x81, r1, 0x0}]) 22:35:55 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:35:55 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0xa80500, 0x40000002}) 22:35:55 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0xf6ffffff, 0x0) 22:35:58 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d71a0220341ea32af193c9fa6511756f0a56cf70ef9158dcc809125b2e55b38415828bd295be8641", 0x9c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, 0x0}, 0x78) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) 22:35:58 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:35:58 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0xb00500, 0x40000002}) 22:35:58 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0xff0f0000, 0x0) 22:35:58 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) iopl(0x7f) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 22:35:58 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:35:58 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d71a0220341ea32af193c9fa6511756f0a56cf70ef9158dcc809125b2e55b38415828bd295be8641", 0x9c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, 0x0}, 0x78) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) 22:35:58 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0xf80000, 0x40000002}) 22:35:58 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r5 = dup3(0xffffffffffffffff, r4, 0x0) ioctl$TIOCGDEV(r5, 0x80045432, &(0x7f0000000100)) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000040)={0x20, 0x100, 0x9}) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x4}) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 22:35:58 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:35:58 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:35:58 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0xffff1f00, 0x0) 22:35:58 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d71a0220341ea32af193c9fa6511756f0a56cf70ef9158dcc809125b2e55b38415828bd295be8641", 0x9c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, 0x0}, 0x78) ptrace$cont(0x18, 0x0, 0x0, 0x0) 22:35:58 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x1000000, 0x40000002}) 22:35:58 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) r3 = dup2(r2, r1) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000014007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r11, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x14, r12, 0xc46dfc707e1df77d}, 0x14}}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)={0x144, r12, 0x0, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x104, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e23, @broadcast}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4d34}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6f}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10001}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5a3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcf00}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa9}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @empty}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x2, @remote, 0xff}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3ff}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x4000004}, 0x8000) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x8, 0xfff1}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000002d000102000000000000000700000000", @ANYRES32=r10, @ANYBLOB="0000001f000000000800f1ff"], 0x24}}, 0x4) sendmsg$BATADV_CMD_SET_VLAN(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r4, 0x39a43eae913c282f, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xf57d}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r10}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c001}, 0x41) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r13, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 22:35:59 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0xfffff000, 0x0) 22:35:59 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:35:59 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x2000000, 0x40000002}) 22:35:59 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) pipe(&(0x7f0000000540)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r2}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:35:59 executing program 5: statx(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x400, 0x40, &(0x7f00000037c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000038c0)={{{@in6=@empty, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f00000039c0)=0xe8) lstat(&(0x7f0000003a00)='./file0\x00', &(0x7f0000003a40)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000003e00)='/dev/bsg\x00', 0x140, 0x0) ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, &(0x7f0000000100)) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f0000003ac0)={0xf5bffff, 0x4, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x20331, 0x81, [], @p_u16=&(0x7f0000000380)=0x4ef}}) name_to_handle_at(r5, &(0x7f0000003b00)='./file0\x00', &(0x7f0000003b40)={0x91, 0xb9f, "3038bea4c8e095f9140d1e6a1a2e2a9097188857c28d5754f0f55c7322595239b8216bccfd2f48f59f2b98deae6c32ee8b27ae20f3b45dc253325155d2dc4560253dfbe2b6fd0729227014783688f8d04100b1ca241882c1eee84419a4b12dd5285e71710758b93e7ae83c3067372feaf3cade57baa7ebd564101aeeed88f3d0713ccd7be18ad6a5f3"}, &(0x7f0000003c00), 0x2000) syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000040)='./file0\x00', 0x8001, 0xa, &(0x7f00000036c0)=[{&(0x7f0000000080)="5489dd981a5bc640547b2a5e828324427b5f42b30df30563d31db333edeceb84a6a34883f4707dfc8fe73288ccd2abf249db93ac9509bc5a3191f7c0158bd5c14695e5e8d710bf54c0bc3a7a4a04f12a55041fa1cea1298bcc3f4ad3d05d6e3559f5a01ac523c1f22818361f2cb4fe383af136ed05c8232220f0d0fbdb22e443a2424973abc93e52e9c329c165b7640ee77dd6f8247b53a6ead99727f493cced0c9aa5fcf06a54594768c2", 0xab, 0xff}, {&(0x7f00000004c0)="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", 0x1000, 0xffffffff}, {&(0x7f00000014c0)="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", 0x1000, 0xffffffff}, {&(0x7f0000000300)="aff2a897ba8819f3177b883e70143d62dd71453478db2d8ebe84c653513018712061e0282cd87a4fda3fd845cf7e402d1473025ce40f834a2d77f9b83a9ce91a2186c5b3fee1bb1d885fba6244ee569d4f78f1ce07b6bfbbe5f0706c597442421cfa24e03b284ea53c8dcef5a9c37e7165bb78b8dc7585fa6272", 0x7a, 0x1}, {&(0x7f0000004280)="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", 0x12b, 0x20}, {&(0x7f00000024c0)="6dd249c0457ded136304bd32d9335f0b9dfcd3cc3a46f88cac86fb493e1a15b2215a64edd803974cd09ad65394fb0aa7cca913d358fe0f6d0a140c36f48d44cc3958547c2fefa08879f3c0a3e6c4454c59386d81cbbf4bda64683ef444e32e6ad9cacd2999fc6790a57cb02ec57631efd6c6eb6e2ef0f4abbe4bd4c06ea8dca718633e6b60b6b8d1b4d9d3a271a94493b50ec1e1559576d893b85724c7b7cc05a8345430a0fc994428c7a3b7eb8d84df9c3d61c182ac2b2a6014a3893c73075f3277a623ad065539f3f1b888c7e7265036458f", 0xd3, 0x100000001}, {&(0x7f0000000400)="b123d6923e2d8e894350c003044e9806b09291d1eeb508be3fec4890a6435471c37b56f8693ff0a0389460b1e615f619b76416c6e6a3b5fcefca1129e827a0b39108f57eb386ab3c0cd3c50f51dbe0c604cdab9d3185dcf8b974380b693b368c7669ef3bfb891ea99d5f26acf8", 0x6d, 0x6}, {&(0x7f00000025c0)="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", 0x1000, 0x5436fe47}, {&(0x7f0000000180)="d8f3e4218282bf82427309126642baa060753dd3429b9aa89623394ece6e51b3117dc69400a2cf", 0x27, 0x2}, {&(0x7f00000035c0)="2bd3a237dc9128d80017b61b6a877d2196afba055606169e636c403f5b4d4a423b7ecc6989c19e349c5efd89d2b6dfc6bb9dca845d6e01aa344a2393e28d87e45dffafabefa1ce9655fea7ae3a2a2e5f1346931364977fc31327491c9f589e4c9ea5e0820c078edee3fbbc9dc84be799ec7c2a4e42601d0b95abd6ed54b4da8b866b90c9d3fc68c68fc50a75f7626a9dc4e085b29c20db901f7e27cfed8bfe6e095f105b29d90ce6cfd8f2653b66ad7721d7ab47a52c62b1a0d6dab77b34c1f4d9803545afb08e68ea56c5520c66452d23776b70", 0xd4, 0xf5}], 0x2000008, &(0x7f00000043c0)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@statfs_quantum={'statfs_quantum', 0x3d, 0xdd81}}, {@statfs_percent={'statfs_percent', 0x3d, 0x1}}, {@nosuiddir='nosuiddir'}], [{@obj_role={'obj_role', 0x3d, '/dev/snd/controlC#\x00'}}, {@smackfshat={'smackfshat', 0x3d, '/de\xf2I\xa3\xc5\x00\x00\x00\x00i\xa3J\xc32\x8f\x02\xa4\xfa\xad\xf8TfE\x17\x18]w\x96d\xbd\xb1a\xc7\xa7O\xdd\xfe\xc0`\xc2\xb5\xd1\xf7\x8c\xf1g\xbbYT\xf1\xad\xd0\xe7\xeb\xc9\xe4\x87\xbda\xf4Mqo\xd1\x86P\xca\xb3\xe4\x85\xfd\xb0\r\xc9\x1fS\xc0\xee\x86\xdc`f$\x00wBr\xb5(\xde\xa0\x9e\x96\xff\x91>mW\xeb\xce\xb8\xaeJ\xb4\x06 \'S\xfaI\xfb\x8b\xcd\xd2\xcaBKz\xae3m\'*\xb6\xf7\r3\xd3\vj\x86\xa2\v$<\xb1\x14\xe7|JI\xd1\xf9\x97\x99\t\xe4\x17\x12#\xc22\x9c\xab\x02\xccf\xbc\x9c\x8b\x85\xee\xb1o\x02\xcc-:\x99\xf4\xf6\v\x03PT\xf6\xac\x8c\x82DY\x00c\xc1\rA\xbe\xe7\xec\x9f\xc8\xe1\xe9S'}}, {@obj_type={'obj_type', 0x3d, ')eth1,cgroup:mime_typeposix_acl_accesssystem'}}, {@uid_lt={'uid<', r0}}, {@fsmagic={'fsmagic'}}, {@subj_role={'subj_role'}}, {@fowner_gt={'fowner>', r1}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@fowner_gt={'fowner>', r2}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]}) r6 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f00000001c0)) r7 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r8 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r8, r7) io_setup(0x8, &(0x7f0000000140)=0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000003c40)='/dev/mixer\x00', 0x40, 0x0) io_submit(r9, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r7, 0x0}]) r10 = openat$vcs(0xffffffffffffff9c, &(0x7f0000003c80)='/dev/vcs\x00', 0x80, 0x0) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000003d00)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r10, &(0x7f0000003dc0)={&(0x7f0000003cc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000003d80)={&(0x7f0000003d40)={0x24, r11, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x81}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40088d4}, 0x4008090) 22:35:59 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:35:59 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x4000000, 0x40000002}) [ 528.005434] gfs2: invalid mount option: obj_role=/dev/snd/controlC# [ 528.039426] gfs2: can't parse mount arguments 22:35:59 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0xfffffe00, 0x0) 22:35:59 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x5000000, 0x40000002}) 22:36:01 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d71a0220341ea32af193c9fa6511756f0a56cf70ef9158dcc809125b2e55b38415828bd295be8641", 0x9c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, 0x0}, 0x78) ptrace$cont(0x18, 0x0, 0x0, 0x0) 22:36:01 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x7800000, 0x40000002}) 22:36:01 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) r3 = dup2(r2, r1) write$P9_RWSTAT(r3, &(0x7f0000000000)={0x7, 0x7f, 0x1}, 0x7) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r4, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 22:36:01 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0xffffff7f, 0x0) 22:36:02 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d71a0220341ea32af193c9fa6511756f0a56cf70ef9158dcc809125b2e55b38415828bd295be8641", 0x9c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, 0x0}, 0x78) ptrace$cont(0x18, 0x0, 0x0, 0x0) 22:36:02 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x8000000, 0x40000002}) 22:36:02 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) pipe(&(0x7f0000000540)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r2}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:36:02 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) r2 = eventfd2(0x9, 0x80001) io_cancel(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0xff, 0xffffffffffffffff, &(0x7f00000000c0)="4516ee28e2effb8c04a72218ac2f1f87ad6160c61ce34343f89418578a94eb1bdf22ca3085adcd6df8c6d2e60da6c3efc589841e345a", 0x36, 0x5, 0x0, 0x1, r2}, &(0x7f0000000180)) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @none, 0x5}, 0xa) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r5, 0x0) dup2(r4, r5) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r6, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r3, 0x0}]) 22:36:02 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:36:02 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0xffffff8c, 0x0) 22:36:02 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d71a0220341ea32af193c9fa6511756f0a56cf70ef9158dcc809125b2e55b38415828bd295be8641", 0x9c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, 0x0, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) 22:36:02 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0xc000000, 0x40000002}) 22:36:02 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) r3 = dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_setup(0x0, &(0x7f0000000080)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) close(r6) r7 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r8, 0x0) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r10 = dup3(0xffffffffffffffff, r9, 0x0) ioctl$TIOCGDEV(r10, 0x80045432, &(0x7f0000000100)) io_submit(r5, 0x4, &(0x7f00000006c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0xa66aaa96ef5997fa, 0xf890, r6, &(0x7f00000004c0)="5ee6f92afd1031da4295ae1ca836f80b3e22cfb803fa3c6e69f9f81d8b00e3648d75133e9a8961424cb3089b306b57600b410bfae10f4af515c99d7018202c6f45017ef73aa2ca51ea992000605a45d664f28733b9df5931985efbbe7b48eb418692fb9ba91d4435dab7a626db0136fa43c14d9ac0cac383dc1c79a9db4fc05d3ae63be01a90b269d756cc3920cee48f71ae5160fd49a3b6c4e640eb0d80dfa31c8ec8cc2127829dfd7152c8ed0fcdb614d9c91a5bab99f56de28e69232f751a50b2af91ad16490aced94dd2cb2121af83de", 0xd2, 0x40, 0x0, 0x1, r7}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xc, 0x1, r2, &(0x7f0000000300)="002518b7543bded16d8ed02fe3302e9e24543cb7a91314980c0d27c1b4356271a0e40796f52f4071ecc41dd9f0dfbf8a5c54c1dc8fe3bddffe122bd4340a6c4410bb25178d0f80c604a42874915cb4649ee4e623af6cf67a32dc2fc2a163c7a4b240ac073ad5d11c74b4", 0x6a, 0x800, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x3f, 0xffffffffffffffff, &(0x7f00000005c0)="6ec1d6c191e0e3136b586a8df8df072ac73096f01d71be09ea0482a76a2a747115aab90553d37ddba8601544669248c4ef78795c650cafcf51b06bafd7d71f196149a144bfc44470c1a1ecdf877ec589773f72dc397f2ef6b1da22423b694327ecf6fb9265705d39196c3176c6ebb6bb86f879fa530f66850e5f5d312a4dc1d9e97baa1b22eee057efa63b4f62277c16bc5178a3d36a13a4d1649fa0bcd806a2a9857569fca5535cf08045e6205d3da4382d125b3831c1b51bc6f83d29e466", 0xbf, 0x1, 0x0, 0x3}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1f, r8, &(0x7f0000000440)="a564", 0x2, 0x6, 0x0, 0x2, r10}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) r12 = getpgid(0xffffffffffffffff) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r13, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) close(r13) r14 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r15 = dup3(0xffffffffffffffff, r14, 0x0) ioctl$TIOCGDEV(r15, 0x80045432, &(0x7f0000000100)) kcmp$KCMP_EPOLL_TFD(r11, r12, 0x7, r13, &(0x7f0000000040)={r15, r3}) io_submit(r4, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 22:36:02 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0xfffffff5, 0x0) 22:36:02 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0xd000000, 0x40000002}) 22:36:02 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 531.212117] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 22:36:02 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0xfffffff6, 0x0) 22:36:02 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0xf800000, 0x40000002}) 22:36:05 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0xedc000000000, 0x0) 22:36:05 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) r3 = dup2(r2, r1) semctl$SEM_STAT(0x0, 0x1, 0x12, &(0x7f0000000000)=""/159) io_setup(0x8, &(0x7f0000000140)=0x0) sendto$llc(r3, &(0x7f0000000300)="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", 0xfc, 0x4, 0x0, 0x0) io_submit(r4, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 22:36:05 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) pipe(&(0x7f0000000540)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r2}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:36:05 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x10000000, 0x40000002}) 22:36:05 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d71a0220341ea32af193c9fa6511756f0a56cf70ef9158dcc809125b2e55b38415828bd295be8641", 0x9c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, 0x0, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) 22:36:05 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x12000000, 0x40000002}) 22:36:05 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x181a00, 0x40) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f0000000300)) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r3, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r4, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x204200, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r5, 0xc0045520, &(0x7f0000000080)=0x10001) 22:36:05 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) dup(0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) pipe(&(0x7f0000000540)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r2}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:36:05 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x1000000000000, 0x0) 22:36:05 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:36:05 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x17000000, 0x40000002}) 22:36:05 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x2000000000000, 0x0) 22:36:05 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x17800000, 0x40000002}) 22:36:05 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r2 = dup3(0xffffffffffffffff, r1, 0x0) ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f0000000100)) ioctl$SCSI_IOCTL_DOORLOCK(r2, 0x5380) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) ioctl$TIOCGDEV(r4, 0x80045432, &(0x7f0000000100)) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000280)) r5 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r6, r5) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000880)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000900000003000000100383000001000000000000010000000100000001000040020000400200004002000040020000400200000300000044a5a212e915bc0f9d1161398e3eb89010a8b9ce141c0b01d336bf2b04d6fa44041b71f4e7041d33780e4c75d230922df12b4243e700547c52d6f01fa36158ecdadb1bf8bd57c953", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/48], @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d80000010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000000004d4000004d401000000200000002800434c415353494659000000000000000000000000000000000000000000003f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80040010000000000000000000000000000000000000000000000002800727066696c746572000000000000000000000000000000000000000000000800000000000000280069707636686561646572000000000000000000000000000000000000000008920100000000004800544545000000000000000000000000000000000000000000000000000001ac14140d0000000000000000000000007663616e300000000000000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x370) io_setup(0x8, &(0x7f0000000140)=0x0) r8 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xfffffffffffffff7, 0x40000) r9 = socket(0x22, 0x2, 0x2) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)={0x1c, r11, 0x1, 0x0, 0x0, {0x1a}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f0000003180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003140)={&(0x7f00000030c0)={0x4c, r11, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_to_hsr\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x30000804}, 0x4804) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r12, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr="d838ed6e052b6211218092bbe1933bfd"}]}, &(0x7f0000000180)=0x10) r13 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r13, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r12, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r14}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={r14}, 0x8) r15 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r16 = dup3(0xffffffffffffffff, r15, 0x0) ioctl$TIOCGDEV(r16, 0x80045432, &(0x7f0000000100)) ioctl$PPPIOCSMAXCID(r16, 0x40047451, &(0x7f0000000300)=0x1) sendmsg$NL80211_CMD_SET_STATION(r8, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r11, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0xa2}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x20000000) io_submit(r7, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r5, 0x0}]) 22:36:05 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x4000000000000, 0x0) 22:36:05 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x1f000000, 0x40000002}) 22:36:08 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d71a0220341ea32af193c9fa6511756f0a56cf70ef9158dcc809125b2e55b38415828bd295be8641", 0x9c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, 0x0, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) 22:36:08 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0xe000000000000, 0x0) 22:36:08 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x20041000, 0x40000002}) 22:36:08 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) dup(0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) pipe(&(0x7f0000000540)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r2}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:36:08 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r5 = dup3(0xffffffffffffffff, r4, 0x0) ioctl$TIOCGDEV(r5, 0x80045432, &(0x7f0000000100)) ioctl$FBIO_WAITFORVSYNC(r5, 0x40044620, 0x0) 22:36:08 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:36:08 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d71a0220341ea32af193c9fa6511756f0a56cf70ef9158dcc809125b2e55b38415828bd295be8641", 0x9c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 22:36:08 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x6b6b6b00000000, 0x0) 22:36:08 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x20800000, 0x40000002}) 22:36:08 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) r3 = dup2(r2, r1) ioctl$BLKPBSZGET(r3, 0x127b, &(0x7f0000000000)) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r4, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 22:36:08 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0xf0ffffffffffff, 0x0) 22:36:08 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x21000000, 0x40000002}) 22:36:08 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0xfeffff00000000, 0x0) 22:36:08 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x81) ioctl$PIO_FONTX(r4, 0x4b6c, &(0x7f0000000040)={0x67, 0xb, &(0x7f00000004c0)="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"}) 22:36:09 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x21800000, 0x40000002}) 22:36:11 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) dup(0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) pipe(&(0x7f0000000540)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r2}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:36:11 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x100000000000000, 0x0) 22:36:11 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:36:11 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x22000000, 0x40000002}) 22:36:11 executing program 5: syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x10080, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000040)) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 22:36:11 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x200000000000000, 0x0) 22:36:11 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d71a0220341ea32af193c9fa6511756f0a56cf70ef9158dcc809125b2e55b38415828bd295be8641", 0x9c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) 22:36:11 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x22800000, 0x40000002}) 22:36:11 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$TIOCGDEV(r3, 0x80045432, &(0x7f0000000100)) ioctl$SNDRV_PCM_IOCTL_LINK(r3, 0x40044160, &(0x7f0000000000)=0x101) r4 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r4, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r5, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 22:36:11 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x300000000000000, 0x0) 22:36:12 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x23000000, 0x40000002}) 22:36:12 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x400000000000000, 0x0) 22:36:14 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:36:14 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x23800000, 0x40000002}) 22:36:14 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:36:14 executing program 5: syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x200, 0x0) ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000040)={0x181, 0xb, &(0x7f00000004c0)}) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r4, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 22:36:14 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x500000000000000, 0x0) 22:36:14 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x24000000, 0x40000002}) 22:36:14 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d71a0220341ea32af193c9fa6511756f0a56cf70ef9158dcc809125b2e55b38415828bd295be8641", 0x9c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) 22:36:14 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x24800000, 0x40000002}) 22:36:14 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x600000000000000, 0x0) 22:36:15 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) r3 = dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000000)={0x7fff, 0x0, 0x4, 0x80000, 0xa732, {}, {0x5, 0xc, 0x1f, 0x2, 0x2b, 0x8, "e3265178"}, 0x0, 0x1, @offset=0x80000000, 0x4}) io_setup(0x9, &(0x7f0000000080)) r4 = creat(0x0, 0x0) io_setup(0x3, &(0x7f0000000000)=0x0) io_submit(r5, 0x2, &(0x7f0000000380)=[0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0xff, 0xffffffffffffffff, &(0x7f0000000540)="8786ba6da38c9aaa40899a2c1dc65f02ff47d46c337b68c2a032f177e48abce906715ee5131b1e48f346ebfd0bba5842068b21bf330c679eb393bcb64566d32f2c62925fb1106713fac8561dd0094505e0d80d788053bbfddd3e6c932234ccae8680a3a9924cb3ebc6a7649baaa39019adc529e27ef86e2a20cde79331f0a2c25ade4515b2638a72676888820f149275e090a7d61c52fbdfbe4ae5cfc77f9dca", 0xa0, 0x8000, 0x0, 0x3, r4}]) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhost-vsock\x00', 0x2, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r8 = dup3(0xffffffffffffffff, r7, 0x0) ioctl$TIOCGDEV(r8, 0x80045432, &(0x7f0000000100)) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r9, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/btrfs-control\x00', 0x240040, 0x0) r10 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r11 = dup3(0xffffffffffffffff, r10, 0x0) ioctl$TIOCGDEV(r11, 0x80045432, &(0x7f0000000100)) io_submit(r5, 0x4, &(0x7f0000000740)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0xc, 0xa7b, r1, &(0x7f0000000180)="3799b5cbcdb9328c", 0x8, 0x300000000, 0x0, 0x2, r3}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x5, r6, &(0x7f0000000440)="f7a0e088daf9e400af004400"/25, 0x19, 0xf1, 0x0, 0x1, r8}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0xf3, r2, &(0x7f0000000600)="b02545144bd8e6b05dad740d2cf0f9699ea729ab5888c0b3c2690555016419468724db4720794132ca0faecc50ad20a4e5de67fa61b37f838190ba985fd862dd9e35cdd65c14cd3f858203c9f37fbc0b770a9f37a32bfe554eefc163ffd2b0e12ed0c6553bc97eaacd349a981ecbb21e0e6df6afaaf04cec7e2f07b9682fd7118c6c014ae48f8ec451246c844780e31a241c5d2ccb3cc619c0eb15e5a0b5d3ab085ef5832bf41371836dca2ad43ed61ea2ee88633d9a16c1754eb8547269a7116145987b5107fa174f84f7236db251e498acddf6b8b6208cb99e746e0a0bc62c179405ea06003a60ce1a40915957", 0xee, 0x0, 0x0, 0x1}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x82, r9, &(0x7f00000004c0)="0368c5790d03c832d3f7e6acfea7283b8d7e389b95c3aad90b87296269c9c4c7d455979119e71022800fea3f42fe073e0a8c7c86fba1742c3e630f8919b5ff6642b3f0a588425aaa4b8962720cda89d8e9fe3ba1daa4bda73fe38db5969eebd0bcc7d6f4f1440daf220a8a40a909dc20fe32cc11afa9de200ef666e8a1fab334", 0x80, 0x7, 0x0, 0x0, r11}]) 22:36:15 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x700000000000000, 0x0) 22:36:15 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x25000000, 0x40000002}) 22:36:17 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:36:17 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x25800000, 0x40000002}) 22:36:17 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:36:17 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x900000000000000, 0x0) 22:36:17 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x882c0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r5 = dup3(0xffffffffffffffff, r4, 0x0) ioctl$TIOCGDEV(r5, 0x80045432, &(0x7f0000000100)) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r7 = dup3(0xffffffffffffffff, r6, 0x0) ioctl$TIOCGDEV(r7, 0x80045432, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x6}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f0000000400)={r8, 0xb, "c3118a60558bed53e8141f"}, &(0x7f0000000440)=0x13) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, &(0x7f0000000040)={0x0, 0x6, 0x6, 0x1}) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r9, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r10, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r10, 0x0) getsockname(r10, &(0x7f0000000300)=@phonet, &(0x7f0000000280)=0x80) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r11, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x13, 0xa, 0x801, 0x0, 0x0, {0xc, 0x0, 0x9}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8800}, 0x41) 22:36:17 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x26000000, 0x40000002}) 22:36:17 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d71a0220341ea32af193c9fa6511756f0a56cf70ef9158dcc809125b2e55b38415828bd295be8641", 0x9c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) 22:36:17 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d71a0220341ea32af193c9fa6511756f0a56cf70ef9158dcc809125b2e55b38415828bd295be8641", 0x9c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 22:36:18 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x26800000, 0x40000002}) 22:36:18 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0xa00000000000000, 0x0) 22:36:18 executing program 5: syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x280002, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r2 = dup3(0xffffffffffffffff, r1, 0x0) ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f0000000100)) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f00000001c0)=0x8) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000280)=""/57) r4 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x100, 0x0) ioctl$IMHOLD_L1(r5, 0x80044948, &(0x7f00000000c0)=0x4) r6 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0xfffffffffffffffe, 0x8680) ioctl$NBD_SET_SIZE_BLOCKS(r6, 0xab07, 0x2053) dup2(r4, r3) io_setup(0x8, &(0x7f0000000140)=0x0) r8 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x2001, 0x0) mkdirat(r8, &(0x7f0000000040)='./file0\x00', 0x5) io_submit(r7, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r3, 0x0}]) 22:36:18 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0xd00000000000000, 0x0) 22:36:20 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x27000000, 0x40000002}) 22:36:20 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:36:20 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:36:20 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) prctl$PR_SVE_SET_VL(0x32, 0x5dab) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r5 = dup3(0xffffffffffffffff, r4, 0x0) ioctl$TIOCGDEV(r5, 0x80045432, &(0x7f0000000100)) getsockopt$inet_sctp_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0xe) 22:36:20 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x27800000, 0x40000002}) 22:36:21 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d71a0220341ea32af193c9fa6511756f0a56cf70ef9158dcc809125b2e55b38415828bd295be8641", 0x9c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 549.685675] IPVS: ftp: loaded support on port[0] = 21 [ 549.721291] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 549.728332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 549.763948] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 549.770837] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 549.804313] device bridge_slave_1 left promiscuous mode 22:36:21 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d71a0220341ea32af193c9fa6511756f0a56cf70ef9158dcc809125b2e55b38415828bd295be8641", 0x9c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 549.846549] bridge0: port 2(bridge_slave_1) entered disabled state 22:36:21 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d71a0220341ea32af193c9fa6511756f0a56cf70ef9158dcc809125b2e55b38415828bd295be8641", 0x9c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 549.888114] device bridge_slave_0 left promiscuous mode [ 549.897298] bridge0: port 1(bridge_slave_0) entered disabled state 22:36:21 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x20000000000000aa, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) [ 549.973668] device veth1_macvtap left promiscuous mode [ 549.980933] device veth0_macvtap left promiscuous mode [ 549.987547] device veth1_vlan left promiscuous mode [ 549.994847] device veth0_vlan left promiscuous mode 22:36:21 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x1, 0x0) setsockopt$X25_QBITINCL(r3, 0x106, 0x1, &(0x7f0000000040), 0x4) dup2(r2, r1) io_setup(0xffff566b, &(0x7f0000000080)=0x0) io_submit(r4, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x84800) ioctl$UI_SET_MSCBIT(r5, 0x40045568, 0x1) 22:36:21 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r1, 0xffffffffffffffff) io_setup(0x4, &(0x7f0000000140)=0x0) io_submit(r2, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) [ 555.252790] device hsr_slave_1 left promiscuous mode [ 555.291686] device hsr_slave_0 left promiscuous mode [ 555.339710] team0 (unregistering): Port device team_slave_1 removed [ 555.350883] team0 (unregistering): Port device team_slave_0 removed [ 555.362163] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 555.402767] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 555.486123] bond0 (unregistering): Released all slaves [ 555.629217] chnl_net:caif_netlink_parms(): no params data found [ 555.693947] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.701079] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.708435] device bridge_slave_0 entered promiscuous mode [ 555.716146] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.722863] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.732090] device bridge_slave_1 entered promiscuous mode [ 555.801189] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 555.817158] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 555.840564] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 555.848434] team0: Port device team_slave_0 added [ 555.854872] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 555.862860] team0: Port device team_slave_1 added [ 555.884626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 555.891035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 555.916569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 555.934506] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 555.940872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 555.968686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 555.980508] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 555.988982] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 556.062330] device hsr_slave_0 entered promiscuous mode [ 556.099060] device hsr_slave_1 entered promiscuous mode [ 556.139646] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 556.147076] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 556.283969] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.290533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 556.297470] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.303914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 556.361232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 556.372971] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 556.384619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 556.393758] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.411960] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.427995] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 556.437169] 8021q: adding VLAN 0 to HW filter on device team0 [ 556.456592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 556.467938] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.474426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 556.505205] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 556.513240] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.519659] bridge0: port 2(bridge_slave_1) entered forwarding state [ 556.556095] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 556.564382] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 556.572883] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 556.582751] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 556.590842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 556.599912] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 556.615040] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 556.622281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 556.632451] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 556.643308] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 556.649822] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 556.667842] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 556.675748] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 556.683180] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 556.690879] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 556.720942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 556.746087] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 556.763653] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 556.771523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 556.782235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 556.852351] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 556.860321] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 556.867304] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 556.876620] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 556.883346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 556.891284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 556.899271] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 556.906387] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 556.916342] device veth0_vlan entered promiscuous mode [ 556.931510] device veth1_vlan entered promiscuous mode [ 556.937880] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 556.949468] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 556.966379] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 556.977896] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 556.985981] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 556.994585] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 557.008326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 557.016393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 557.027319] device veth0_macvtap entered promiscuous mode [ 557.034289] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 557.045462] device veth1_macvtap entered promiscuous mode [ 557.051698] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 557.062061] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 557.073140] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 557.085004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 557.095326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.104613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 557.114911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.124199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 557.134055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.143488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 557.153467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.162692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 557.172907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.183666] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 557.191050] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 557.198234] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 557.206148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 557.214320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 557.222855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 557.234867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 557.245755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.254991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 557.265319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.274510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 557.284247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.293745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 557.303529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.312701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 557.323030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.333653] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 557.340647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 557.347313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 557.355622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 22:36:28 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x2000000000000000, 0x0) 22:36:28 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x80001, 0x0) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000400)=ANY=[@ANYBLOB="00000900000095ddbb7c3494d6e36fb1ffc04700000000aaaaaaaaaaaaaaaaaaaaaa13000000000000aaaaaaaaaa41aaaaaaaaaa13aaaaaaaaaa1bbfbe53097233ffffffffffff"]) io_setup(0x8, &(0x7f0000000140)=0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="38ea0f648eb9c4", @ANYRES16=r5, @ANYBLOB="000328bd7000ffdbdf250200000008001700", @ANYRES32=r3, @ANYBLOB="06000300370c00000800180000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40001) io_submit(r4, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r7 = dup3(0xffffffffffffffff, r6, 0x0) ioctl$TIOCGDEV(r7, 0x80045432, &(0x7f0000000100)) accept4$netrom(r7, &(0x7f0000000380)={{}, [@default, @null, @rose, @netrom, @default, @null, @netrom]}, &(0x7f0000000180)=0x48, 0x80000) signalfd4(r2, &(0x7f0000000000)={[0x80000001]}, 0x8, 0x80000) 22:36:28 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:36:28 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:36:28 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d71a0220341ea32af193c9fa6511756f0a56cf70ef9158dcc809125b2e55b38415828bd295be8641", 0x9c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 22:36:28 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x28000000, 0x40000002}) 22:36:28 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:36:29 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x2300000000000000, 0x0) 22:36:29 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x28800000, 0x40000002}) 22:36:29 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) r3 = dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r6 = dup3(0xffffffffffffffff, r5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000040)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @empty}], 0x20) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000100)) ioctl$EVIOCSABS2F(r6, 0x401845ef, &(0x7f0000000000)={0x1000, 0x9, 0x5, 0x5, 0x100, 0x1}) io_submit(r4, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 22:36:29 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:36:29 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) close(r2) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000000)) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x311405) dup2(r3, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r4, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 22:36:29 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x29000000, 0x40000002}) 22:36:29 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r2 = dup3(0xffffffffffffffff, r1, 0x0) ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f0000000100)) ioctl$USBDEVFS_BULK(r2, 0xc0185502, &(0x7f0000000040)={{{0xf, 0x1}}, 0x1a, 0x100, &(0x7f0000000000)="18d0c8d793287dc399e76f773d622abb08df9f05804a63583b82"}) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r4, r3) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r5, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r3, 0x0}]) 22:36:29 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x29800000, 0x40000002}) [ 560.407173] IPVS: ftp: loaded support on port[0] = 21 [ 560.440165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 560.446970] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 560.456174] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 560.463322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 560.472606] device bridge_slave_1 left promiscuous mode [ 560.478097] bridge0: port 2(bridge_slave_1) entered disabled state 22:36:31 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:36:31 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d71a0220341ea32af193c9fa6511756f0a56cf70ef9158dcc809125b2e55b38415828bd295be8641", 0x9c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 22:36:31 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) close(r4) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000440)=0xe8) r6 = getegid() r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r8 = dup3(0xffffffffffffffff, r7, 0x0) ioctl$TIOCGDEV(r8, 0x80045432, &(0x7f0000000100)) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r10 = dup3(0xffffffffffffffff, r9, 0x0) ioctl$TIOCGDEV(r10, 0x80045432, &(0x7f0000000100)) setsockopt$packet_fanout_data(r10, 0x107, 0x16, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{0xa8, 0x2, 0x6, 0x7}, {0x8001, 0x40, 0x8, 0x5d}, {0x2, 0x7f, 0x20, 0x39}, {0x81, 0xf8, 0x1, 0x1000}, {0x6601, 0x20, 0x2, 0x7fffffff}, {0x8000, 0x7f, 0x8, 0xffffffff}]}, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r8, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r11, 0x2, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", ""]}, 0x28}}, 0x1) fchown(r4, r5, r6) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r12, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) close(r12) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r12) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 22:36:31 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x2a000000, 0x40000002}) [ 560.529851] device bridge_slave_0 left promiscuous mode [ 560.535459] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.597418] device veth1_macvtap left promiscuous mode [ 560.615071] device veth0_macvtap left promiscuous mode [ 560.631904] device veth1_vlan left promiscuous mode [ 560.654621] device veth0_vlan left promiscuous mode [ 565.702395] device hsr_slave_1 left promiscuous mode [ 565.743479] device hsr_slave_0 left promiscuous mode [ 565.809025] team0 (unregistering): Port device team_slave_1 removed [ 565.820827] team0 (unregistering): Port device team_slave_0 removed [ 565.831019] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 565.873324] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 565.933382] bond0 (unregistering): Released all slaves [ 566.066891] chnl_net:caif_netlink_parms(): no params data found [ 566.123369] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.130089] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.137149] device bridge_slave_0 entered promiscuous mode [ 566.145804] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.152301] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.160283] device bridge_slave_1 entered promiscuous mode [ 566.178136] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 566.187548] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 566.208001] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 566.215683] team0: Port device team_slave_0 added [ 566.222105] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 566.229875] team0: Port device team_slave_1 added [ 566.300267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 566.306551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 566.334815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 566.359935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 566.366202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 566.392442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 566.404156] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 566.412491] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 566.472144] device hsr_slave_0 entered promiscuous mode [ 566.518939] device hsr_slave_1 entered promiscuous mode [ 566.559714] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 566.567251] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 566.723848] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.731906] bridge0: port 2(bridge_slave_1) entered forwarding state [ 566.738673] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.745147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 566.836133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 566.847605] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 566.865588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 566.877651] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.887071] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.906812] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 566.916844] 8021q: adding VLAN 0 to HW filter on device team0 [ 566.935256] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 566.945446] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.951881] bridge0: port 1(bridge_slave_0) entered forwarding state [ 566.985010] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 566.993911] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.000356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 567.023077] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 567.031980] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 567.046896] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 567.059607] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 567.068120] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 567.075636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 567.095772] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 567.105817] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 567.112980] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 567.132470] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 567.141467] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 567.147787] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 567.155997] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 567.170511] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 567.185041] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 567.197051] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 567.204353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 567.213504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 567.285783] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 567.293904] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 567.303439] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 567.313405] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 567.320206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 567.327816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 567.336539] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 567.343697] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 567.355598] device veth0_vlan entered promiscuous mode [ 567.374525] device veth1_vlan entered promiscuous mode [ 567.382825] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 567.397422] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 567.423680] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 567.436059] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 567.443184] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 567.451211] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 567.458848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 567.466731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 567.477223] device veth0_macvtap entered promiscuous mode [ 567.484382] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 567.494764] device veth1_macvtap entered promiscuous mode [ 567.501279] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 567.511538] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 567.521930] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 567.532298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 567.543200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.552383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 567.562420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.571667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 567.581453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.590747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 567.600794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.609968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 567.619745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.630503] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 567.637476] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 567.645520] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 567.653113] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 567.661021] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 567.669610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 567.680756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 567.690562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.699857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 567.709727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.718902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 567.728789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.737921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 567.747696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.756972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 567.766803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.777048] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 567.784046] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 567.791382] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 567.799857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 22:36:39 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x3f00000000000000, 0x0) 22:36:39 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:36:39 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xfffffffffefffffc, 0xc00) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0xa40, 0x0) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 22:36:39 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:36:39 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d71a0220341ea32af193c9fa6511756f0a56cf70ef9158dcc809125b2e55b38415828bd295be8641", 0x9c}], 0x4, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 22:36:39 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x3f000000, 0x40000002}) 22:36:39 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d71a0220341ea32af193c9fa6511756f0a56cf70ef9158dcc809125b2e55b38415828bd295be8641", 0x9c}], 0x4, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 22:36:39 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d71a0220341ea32af193c9fa6511756f0a56cf70ef9158dcc809125b2e55b38415828bd295be8641", 0x9c}], 0x4, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 22:36:39 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x4000000000000000, 0x0) 22:36:39 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x40800200, 0x40000002}) 22:36:39 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffb000/0x2000)=nil) 22:36:39 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x6000000000000000, 0x0) 22:36:39 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x41100500, 0x40000002}) [ 569.311564] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 569.318335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 569.333546] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 569.344732] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 569.355885] device bridge_slave_1 left promiscuous mode [ 569.361910] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.399851] device bridge_slave_0 left promiscuous mode [ 569.405662] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.451215] device veth1_macvtap left promiscuous mode [ 569.456550] device veth0_macvtap left promiscuous mode [ 569.463593] device veth1_vlan left promiscuous mode [ 569.468926] device veth0_vlan left promiscuous mode [ 569.634504] device hsr_slave_1 left promiscuous mode [ 569.682073] device hsr_slave_0 left promiscuous mode [ 569.727702] team0 (unregistering): Port device team_slave_1 removed [ 569.742383] team0 (unregistering): Port device team_slave_0 removed [ 569.752210] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 569.784521] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 569.846795] bond0 (unregistering): Released all slaves [ 570.483546] IPVS: ftp: loaded support on port[0] = 21 [ 570.631306] chnl_net:caif_netlink_parms(): no params data found [ 570.688714] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.695238] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.702698] device bridge_slave_0 entered promiscuous mode [ 570.710606] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.717128] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.724470] device bridge_slave_1 entered promiscuous mode [ 570.742219] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 570.752376] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 570.775836] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 570.783756] team0: Port device team_slave_0 added [ 570.790737] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 570.798471] team0: Port device team_slave_1 added [ 570.813742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 570.820209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 570.846022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 570.857574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 570.864012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 570.891912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 570.904662] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 570.912387] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready 22:36:42 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:36:42 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x8000000000000000, 0x0) 22:36:42 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r5 = dup3(0xffffffffffffffff, r4, 0x0) ioctl$TIOCGDEV(r5, 0x80045432, &(0x7f0000000100)) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000000)={{0x2, 0x4e24, @multicast1}, {0x306, @random="8dff5b00db7b"}, 0x2e, {0x2, 0x4e20, @rand_addr=0x3}, 'batadv_slave_1\x00'}) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 22:36:42 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0xf4ffffff, 0x40000002}) 22:36:42 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 570.972214] device hsr_slave_0 entered promiscuous mode [ 571.010410] device hsr_slave_1 entered promiscuous mode [ 571.059663] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 571.067119] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready 22:36:42 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x8cffffff00000000, 0x0) [ 571.385510] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 571.431510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 571.442185] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 571.452405] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 571.459043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 571.466255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 571.476372] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 571.482712] 8021q: adding VLAN 0 to HW filter on device team0 [ 571.491732] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 571.498854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 571.506961] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 571.514805] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.521455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 571.532905] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 571.540287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 571.547527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 571.556956] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 571.564807] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.571215] bridge0: port 2(bridge_slave_1) entered forwarding state [ 571.582677] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 571.589783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 571.601341] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 571.608282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 571.621631] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 571.628770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 571.636691] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 571.645325] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 571.654944] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 571.662250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 571.671874] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 571.682876] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 571.690907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 571.698844] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 571.709407] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 571.716362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 571.725000] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 571.735111] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 571.741711] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 571.756391] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 571.764385] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 571.771484] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 571.778230] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 571.792064] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 571.806849] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 571.820014] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 571.827212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 571.835761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 571.878405] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 571.886102] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 571.894402] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 571.904959] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 571.912515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 571.920275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 571.931733] device veth0_vlan entered promiscuous mode [ 571.937919] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 571.945164] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 571.960455] device veth1_vlan entered promiscuous mode [ 571.966537] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 571.976545] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 571.992198] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 572.004331] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 572.011936] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 572.020148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 572.031361] device veth0_macvtap entered promiscuous mode [ 572.037896] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 572.047966] device veth1_macvtap entered promiscuous mode [ 572.057580] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 572.067898] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 572.079391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 572.089340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.098585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 572.108366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.117647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 572.127757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.136978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 572.146965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.156173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 572.165972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.176361] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 572.183861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 572.191524] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 572.201215] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 572.209954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 572.220576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 572.230589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.239867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 572.249753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.258978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 572.268874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.278075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 572.287995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.297354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 572.307145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.317907] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 572.325262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 572.332847] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 572.341347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 22:36:43 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 22:36:43 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0xfeffffff, 0x40000002}) 22:36:43 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self\x00', 0xa0480, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r5 = dup3(0xffffffffffffffff, r4, 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000000c0)=0x0) ptrace$setopts(0x4206, r6, 0x0, 0x20) ioctl$TIOCGDEV(r3, 0x80045432, &(0x7f0000000100)) ioctl$SNDRV_PCM_IOCTL_XRUN(r5, 0x4148, 0x0) ioctl$TIOCGDEV(r3, 0x80045432, &(0x7f0000000100)) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r8 = dup3(0xffffffffffffffff, r7, 0x0) ioctl$TIOCGDEV(r8, 0x80045432, &(0x7f0000000100)) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r8, 0x81785501, &(0x7f0000000080)=""/34) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfc, 0x100}, 0xc) r9 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r9, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r10, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 22:36:43 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0xf5ffffff00000000, 0x0) 22:36:43 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0xf6ffffff00000000, 0x0) 22:36:43 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0xff010000, 0x40000002}) 22:36:45 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:36:45 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0xff0f000000000000, 0x0) 22:36:45 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0xff070300, 0x40000002}) 22:36:45 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x408002, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000040)=0x1, 0x4) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r3, r2) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r4, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r2, 0x0}]) 22:36:45 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:36:45 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0xffff1f0000000000, 0x0) 22:36:46 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 22:36:46 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0xffffff7f00000000, 0x0) 22:36:46 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0xff0f0000, 0x40000002}) 22:36:46 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) r2 = dup2(r1, 0xffffffffffffffff) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x0, &(0x7f0000000240)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r6, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1600) fremovexattr(r4, &(0x7f0000000000)=@known='user.syz\x00') 22:36:47 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 22:36:47 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d71a0220341ea32af193c9fa6511756f0a56cf70ef9158dcc809125b2e55b38415828bd295be8641", 0x9c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 576.993835] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 577.001494] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 577.009682] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 577.016540] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 577.024488] device bridge_slave_1 left promiscuous mode [ 577.030288] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.069414] device bridge_slave_0 left promiscuous mode [ 577.075047] bridge0: port 1(bridge_slave_0) entered disabled state 22:36:48 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:36:48 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d71a0220341ea32af193c9fa6511756f0a56cf70ef9158dcc809125b2e55b38415828bd295be8641", 0x9c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 22:36:48 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0xff0f0300, 0x40000002}) 22:36:48 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockname$netrom(r3, &(0x7f0000000040)={{}, [@netrom, @remote, @rose, @bcast, @rose, @rose, @bcast, @default]}, &(0x7f00000000c0)=0x48) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000300)) prctl$PR_GET_SECUREBITS(0x1b) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r5 = dup3(0xffffffffffffffff, r4, 0x0) ioctl$TIOCGDEV(r5, 0x80045432, &(0x7f0000000100)) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r7 = dup3(0xffffffffffffffff, r6, 0x0) ioctl$TIOCGDEV(r7, 0x80045432, &(0x7f0000000100)) ioctl$KVM_HYPERV_EVENTFD(r5, 0x4018aebd, &(0x7f0000000100)={0x2, r7}) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r8, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) [ 577.128910] device veth1_macvtap left promiscuous mode [ 577.134392] device veth0_macvtap left promiscuous mode [ 577.146749] device veth1_vlan left promiscuous mode [ 577.151979] device veth0_vlan left promiscuous mode 22:36:48 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:36:48 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:36:48 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 587.302664] device hsr_slave_1 left promiscuous mode [ 587.343119] device hsr_slave_0 left promiscuous mode [ 587.401816] team0 (unregistering): Port device team_slave_1 removed [ 587.424282] team0 (unregistering): Port device team_slave_0 removed [ 587.449181] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 587.493691] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 587.632536] bond0 (unregistering): Released all slaves [ 588.283907] IPVS: ftp: loaded support on port[0] = 21 [ 588.397468] chnl_net:caif_netlink_parms(): no params data found [ 588.480227] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.486691] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.494666] device bridge_slave_0 entered promiscuous mode [ 588.505001] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.511783] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.519134] device bridge_slave_1 entered promiscuous mode [ 588.541635] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 588.552167] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 588.575181] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 588.582995] team0: Port device team_slave_0 added [ 588.589670] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 588.597379] team0: Port device team_slave_1 added [ 588.615518] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 588.622099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 588.647688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 588.660308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 588.666584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 588.691944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 588.704925] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 588.712930] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 588.770771] device hsr_slave_0 entered promiscuous mode [ 588.808965] device hsr_slave_1 entered promiscuous mode [ 588.849422] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 588.856719] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 588.937501] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 589.029228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 589.040279] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 589.056894] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 589.063797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 589.076828] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 589.087452] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 589.094658] 8021q: adding VLAN 0 to HW filter on device team0 [ 589.105249] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 589.108288] IPVS: ftp: loaded support on port[0] = 21 [ 589.112455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 589.113056] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 589.133546] bridge0: port 1(bridge_slave_0) entered blocking state [ 589.140130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 589.152059] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 589.174217] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 589.185301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 589.193900] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 589.202278] bridge0: port 2(bridge_slave_1) entered blocking state [ 589.208721] bridge0: port 2(bridge_slave_1) entered forwarding state [ 589.422933] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 589.430557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 589.447834] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 589.454792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 589.569309] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 589.577287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 589.586360] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 589.594852] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 589.605178] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 589.712238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 589.720695] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 589.735306] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 589.742984] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 589.751272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 589.891852] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 589.903644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 589.912075] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 589.924725] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 589.931292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 589.941992] chnl_net:caif_netlink_parms(): no params data found [ 590.086983] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 590.210222] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 590.216680] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 590.223935] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 590.239741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 590.371205] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.377681] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.385709] device bridge_slave_0 entered promiscuous mode [ 590.394009] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.400918] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.409401] device bridge_slave_1 entered promiscuous mode [ 590.543268] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 590.556645] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 590.565834] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 590.691607] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 590.699194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 590.707221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 590.716351] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 590.725150] team0: Port device team_slave_0 added [ 590.736604] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 590.743706] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 590.752797] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 590.759974] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 590.767708] device bridge_slave_1 left promiscuous mode [ 590.773970] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.809759] device bridge_slave_0 left promiscuous mode [ 590.815296] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.874429] device veth1_macvtap left promiscuous mode [ 590.880111] device veth0_macvtap left promiscuous mode [ 590.885424] device veth1_vlan left promiscuous mode [ 590.890645] device veth0_vlan left promiscuous mode [ 595.733045] device hsr_slave_1 left promiscuous mode [ 595.772057] device hsr_slave_0 left promiscuous mode [ 595.817537] team0 (unregistering): Port device team_slave_1 removed [ 595.827571] team0 (unregistering): Port device team_slave_0 removed [ 595.840415] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 595.872255] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 595.953992] bond0 (unregistering): Released all slaves [ 596.012595] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 596.021023] team0: Port device team_slave_1 added [ 596.050021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 596.056308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 596.083993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 596.096502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 596.104183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 596.132758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 596.146742] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 596.155946] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 596.168327] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 596.176169] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 596.184193] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 596.206729] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 596.242435] device hsr_slave_0 entered promiscuous mode [ 596.279768] device hsr_slave_1 entered promiscuous mode [ 596.319252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 596.327024] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 596.335660] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 596.343187] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 596.353350] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 596.362296] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 596.421688] device veth0_vlan entered promiscuous mode [ 596.446639] device veth1_vlan entered promiscuous mode [ 596.455325] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 596.466731] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 596.539879] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 596.562379] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 596.585069] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 596.592892] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 596.601205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 596.610029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 596.631107] device veth0_macvtap entered promiscuous mode [ 596.644078] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 596.654205] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 596.670230] device veth1_macvtap entered promiscuous mode [ 596.677301] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 596.720490] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 596.746840] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 596.778245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 596.788849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.798052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 596.808237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.817936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 596.828119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.837684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 596.848368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.859689] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 596.866702] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 596.878610] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 596.886484] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 596.896168] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 596.904895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 596.921273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 596.932528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.943566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 596.958393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.972889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 596.983123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.998106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 597.019918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 597.035228] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 597.044837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 597.058389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 597.065718] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 597.074989] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 597.091736] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 597.110504] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 597.116865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 597.125742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 597.140474] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 597.155835] 8021q: adding VLAN 0 to HW filter on device team0 [ 597.179367] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 597.186514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 597.206530] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 597.222057] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.229806] bridge0: port 1(bridge_slave_0) entered forwarding state [ 597.250928] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 597.267390] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 597.277929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 597.301442] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 597.315455] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.321943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 597.340029] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 597.354421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 597.374804] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 597.384267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 597.408419] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 597.419318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 597.427438] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 597.439654] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 597.449278] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 597.456745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 597.468823] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 597.478396] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 597.487580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 597.498064] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 597.512438] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 597.519872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 597.527827] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 597.539861] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 597.546128] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 597.575865] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 597.588080] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 597.605122] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 597.612476] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 597.627381] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 597.680523] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 597.697394] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 597.705773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 597.722284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 597.767031] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 597.775213] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 597.782736] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 597.794932] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 597.807985] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 597.816468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 597.828145] device veth0_vlan entered promiscuous mode [ 597.836083] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 597.844398] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 597.858269] device veth1_vlan entered promiscuous mode [ 597.866186] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 597.878380] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 597.894754] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 597.906343] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 597.914370] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 597.922662] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 597.930285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 597.938079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 597.948438] device veth0_macvtap entered promiscuous mode [ 597.956886] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 597.967835] device veth1_macvtap entered promiscuous mode [ 597.974379] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 597.984350] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 597.995060] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 598.006683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 598.017212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.027498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 598.037802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.048598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 598.058937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.068310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 598.078539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.088742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 598.099491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.110490] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 598.117622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 598.125314] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 598.137648] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 598.145019] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 598.153627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 598.167822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 598.178360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.187683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 598.197423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.206964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 598.216731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.226237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 598.236086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.245568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 598.255453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.265852] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 598.272907] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 598.280567] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 598.289731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 22:37:09 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0xfffffffffffff000, 0x0) 22:37:09 executing program 5: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) accept4$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14, 0x80000) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x20400, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r3, r2) io_setup(0x8, &(0x7f0000000140)) r4 = creat(0x0, 0x0) io_setup(0x3, &(0x7f0000000000)=0x0) io_submit(r5, 0x2, &(0x7f0000000100)=[0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0xff, 0xffffffffffffffff, &(0x7f0000000540)="8786ba6da38c9aaa40899a2c1dc65f02ff47d46c337b68c2a032f177e48abce906715ee5131b1e48f346ebfd0bba5842068b21bf330c679eb393bcb64566d32f2c62925fb1106713fac8561dd0094505e0d80d788053bbfddd3e6c932234ccae8680a3a9924cb3ebc6a7649baaa39019adc529e27ef86e2a20cde79331f0a2c25ade4515b2638a72676888820f149275e090a7d61c52fbdfbe4ae5cfc77f9dca", 0xa0, 0x8000, 0x0, 0x3, r4}]) io_setup(0x8, &(0x7f0000000000)=0x0) prctl$PR_SET_TSC(0x1a, 0x0) io_submit(r6, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r2, 0x0, 0x0, 0x1000000000}]) 22:37:09 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:37:09 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:37:09 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0xff170300, 0x40000002}) 22:37:09 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d71a0220341ea32af193c9fa6511756f0a56cf70ef9158dcc809125b2e55b38415828bd295be8641", 0x9c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 22:37:09 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d71a0220341ea32af193c9fa6511756f0a56cf70ef9158dcc809125b2e55b38415828bd295be8641", 0x9c}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, 0x0, 0x0, 0x0) 22:37:09 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="38aa791afcc6982a123813d249a1fb4650652a437234043008e9d85b0f7e6c2885e67800101000800000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9e5a08dc1fbf083eb54534f7a22a61faf3f17ad41d5994e630198d5e33e485119d0859c4a642bc55936a24beec0b77ff9df88d71a0220341ea32af193c9fa6511756f0a56cf70ef9158dcc809125b2e55b38415828bd295be8641", 0x9c}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, 0x0, 0x0, 0x0) 22:37:09 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0xff1f0300, 0x40000002}) 22:37:09 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0xffffffffffffffff, 0x0) 22:37:09 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r5 = dup3(0xffffffffffffffff, r4, 0x0) ioctl$TIOCGDEV(r5, 0x80045432, &(0x7f0000000100)) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r7 = dup3(0xffffffffffffffff, r6, 0x0) ioctl$TIOCGDEV(r7, 0x80045432, &(0x7f0000000100)) io_submit(r3, 0x2, &(0x7f0000000280)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1, 0x0, 0x0, r7}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xffff, 0xffffffffffffffff, &(0x7f0000000000)="14a5dc5461f8ec0d669ee35c1391aaea3d3aa135ce7b133af75228862bfebd7606e172821bcbaad42c7bac03e46f5e7be77c0c1accd50b42cfae8397452e59edfcf836c63a218a27152e5925b379fa5c763e97dd7948be716d38c27423c9017dab82e92eaa193115d052bdbe4e576e7027a5c32321104ac1343a140e28b1255f39a0d08641daafcc7f24a492f1903a49e0aa5ee6602d77ee8c1f78f3b2d53bf2", 0xa0, 0x3, 0x0, 0x2, r5}]) 22:37:10 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x0, 0x0) 22:37:10 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0xff770000, 0x40000002}) [ 598.903844] hfsplus: unable to find HFS+ superblock 22:37:10 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) fallocate(r1, 0x2, 0x100000001, 0x81) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) [ 601.227906] IPVS: ftp: loaded support on port[0] = 21 [ 601.410732] chnl_net:caif_netlink_parms(): no params data found [ 601.425795] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 601.432835] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 601.441490] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 601.448232] batman_adv: batadv0: Removing interface: batadv_slave_1 22:37:12 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:37:12 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0xff7f0000, 0x40000002}) 22:37:12 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) accept$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, &(0x7f0000000040)=0x1c) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r3, r2) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r5 = dup3(0xffffffffffffffff, r4, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x7f, 0x230280) r6 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x8, 0x482800) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000100)) ioctl$EVIOCSCLOCKID(r5, 0x400445a0, &(0x7f0000000080)=0x80000001) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r7, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r2, 0x0}]) 22:37:12 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000040), 0x4) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) close(r3) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyprintk\x00', 0x200, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x7) setresuid(0xee00, r7, 0x0) r8 = getpid() sched_setscheduler(r8, 0x5, &(0x7f0000000380)) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r9, 0x0) r10 = dup3(r9, r1, 0x0) r11 = getpid() sched_setscheduler(r11, 0x5, &(0x7f0000000380)) r12 = getpgrp(r11) r13 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x7) setresuid(0xee00, r14, 0x0) r15 = getgid() fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000b40)={{}, {0x1, 0x1}, [{0x2, 0x6}], {}, [{}, {0x8, 0x0, r15}], {}, {0x20, 0x1}}, 0x3c, 0x2) r16 = getgid() fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000b40)={{}, {0x1, 0x1}, [{0x2, 0x6}], {}, [{}, {0x8, 0x0, r16}], {}, {0x20, 0x1}}, 0x3c, 0x2) r17 = getgid() fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000b40)={{}, {0x1, 0x1}, [{0x2, 0x6}], {}, [{}, {0x8, 0x0, r17}], {}, {0x20, 0x1}}, 0x3c, 0x2) getgroups(0x8, &(0x7f0000001e40)=[r15, 0xffffffffffffffff, r16, 0x0, 0x0, 0xee00, r17, 0xee01]) r19 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r19, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) close(r19) r20 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r20, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) close(r20) r21 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r21, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) close(r21) r22 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r23 = dup3(0xffffffffffffffff, r22, 0x0) ioctl$TIOCGDEV(r23, 0x80045432, &(0x7f0000000100)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001ec0)={0x0, r23, 0x0, 0xc, &(0x7f0000001e80)='/dev/nullb0\x00', 0xffffffffffffffff}, 0x30) r25 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x7) setresuid(0xee00, r26, 0x0) stat(&(0x7f0000001f00)='./file0\x00', &(0x7f0000001f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r28 = getpid() sched_setscheduler(r28, 0x5, &(0x7f0000000380)) newfstatat(0xffffffffffffff9c, &(0x7f0000001fc0)='./file0\x00', &(0x7f0000002000)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r30 = getgid() fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000b40)={{}, {0x1, 0x1}, [{0x2, 0x6}], {}, [{}, {0x8, 0x0, r30}], {}, {0x20, 0x1}}, 0x3c, 0x2) sendmsg$netlink(r1, &(0x7f0000002100)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001e00)=[{&(0x7f0000000280)={0x1610, 0x3d, 0x200, 0x70bd2d, 0x25dfdbfc, "", [@generic="350190218364198a068ad4e7e0b3f2d7f017794fd38c124d9b1d9d1b70cf933bc9f44c60e3af7b2555517344", @nested={0x20, 0x39, 0x0, 0x1, [@typed={0x14, 0xf, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}}, @typed={0x8, 0x17, 0x0, 0x0, @ipv4=@broadcast}]}, @generic="b8f1a99937f0c5784bd3b5ff48e9dc6eb45b09077dcdd89b6d4023af656f4b22eae49e0c94e3b423f1b45cc3ffc0e78b15969817b388c3010f03953f83eb362fc728db8c0fe6d3", @nested={0x131b, 0x32, 0x0, 0x1, [@typed={0x8, 0x4d, 0x0, 0x0, @uid=r2}, @generic="80064556d84c287e930bd27000b32d04357c9b6848e3bfaf101bd0d748a39afb937eb45d28a14298fa10a27ebf00be19cfd13ebf0210bef72e3208769f6c9f9241b8b2335e47f8cf641dc77728b66e85957297df539ee53e78bca5d5d08259d62d46748f", @generic="fef1ac277f8011a32f32295329bd832d0bed31386229544586326538ec5e3e955581de46b3946a3d7048cc6302b8c95bfca6266bf2f1706d0b6308de429adf9892eb43f971bb863f91f5bd123f796200dbb659298c12deb705f09dfdc987bb8c6080814aa6a6f8c13e04dee487c21397686770bf476d9f5504ca6452226b61895e434c830b71383aed6b98594ec32b1914e9ec6544384a935605add61307d1cf61cf847d8321317f6d151d05d58be4ec138efb4a928d768bb6d11a65bd", @generic="dfc91cca15567f7d154d3fe290e84af9368375b514d7dcd07bdafdf565e4a346807ccd7efd60d0b5fc379c7940a7cb988b2cd5638c9d4a5499c5f9ed9a92f63d7cc8fcef25cf8b261753f41e8efcc0142d719aa7a6b75372f9d62b44ad01fdd8e018fbad0f0e6e8d5999f9eda675", @typed={0x88, 0x8e, 0x0, 0x0, @binary="c876d2a04be26bbb33ecbea0bbc57e82bba680a5f9b36a73d35ce09059556b0265e64730566e42406ac7a32c53690f91f1becdf55fd5bce6cee2550efaba95a5d7a51425d0be6d8e7e0b58753581e5e8faef72d2866cb3197b08dd8474d0e9840ea36be0432a31df751df06a321cd4b7d37ab513455f29bcb4ffdc196038452233c9d91d"}, @generic="a5aed2558e858e4b119d51f3d22c96bb562bb0e92d424b1ca02707bfd10b12b3abb6575b078e58d79926ba31a584e7c87b3fa662413536027df3528cd0492b97ff456340cb4e8a166162367d52a54d9899d337c96986ba960751462f3e590f3d131866a6766c41ca15ea46bdc0f5071320724c7bad00cf114c2d4bed6eeda3df52fa971ea57d193a0eb2f3eac7aa33ef9293713e1e55af011a1092d070686480845f106af89a348e3a71ee", @generic="2d9bff0555a8af95c456f7b9539d6b1267ac2809a365f806eda40916dd9a1a6a35a5774a66a6eef04c02cdb46d66044605bf014e3ffa107b79cbb5aa5aa52b0d96ce467d7c10d3daa771787f9b", @generic="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"]}, @nested={0x83, 0x95, 0x0, 0x1, [@typed={0x8, 0x87, 0x0, 0x0, @fd=r1}, @typed={0x4, 0x36}, @typed={0x8, 0x83, 0x0, 0x0, @fd=r3}, @typed={0x8, 0x2e, 0x0, 0x0, @fd=r4}, @generic="ad648d7609f66475ebe598db0490f77a56eb46af882b497e285a281e3338fa4aabf6402d49753b2495ce6adfaa890ade1a6f35fe11b2b56df4db09e064de3a3c48c896dcacc0d6d588e57fc52be44e5ee165", @generic="e355603b8b5398c472af7789ae547368c9"]}, @typed={0x8, 0x96, 0x0, 0x0, @fd=r5}, @nested={0xfc, 0x61, 0x0, 0x1, [@generic="6ac8247d8bf930b9325399fc4a57b2be8ebb5492fd786b4aa7424c73dd72264850d1c5366cf9d2f6cd8047c008ef54c68a8c3d11bb4b14831dec4272eca1eb8186c5dc5396426fa63b838ec797b5b90e19f1344aa834f9f24a05daf0894793c069222b66fc277aff46277d4091797c2624d92bfaf03d116213d757f3d2b4c6d95815fe1028b48c102d5432e922d47a222be464c123c24d27577c3f6a7b53e5f6b086c4b7401efb9261d733318e8a25cf025bc5982a4804bc7d42ce1501e1bd22faf18f52c73a3dad62585b7d0c33471573652091", @typed={0xc, 0x53, 0x0, 0x0, @str='hfsplus\x00'}, @generic, @typed={0x10, 0x79, 0x0, 0x0, @str='/dev/nullb0\x00'}, @typed={0x5, 0x34, 0x0, 0x0, @str='\x00'}]}, @nested={0x86, 0x42, 0x0, 0x1, [@typed={0x8, 0x71, 0x0, 0x0, @uid=r7}, @generic="63fa383accf2b2dca87caaad1048672a2463cddabdcd", @generic="b24b199a1ea9fab7fcbd3bc080469fd92144af1a00525b81f07d7ed9640f236a2383081d8f39d8d47fd6124db248a0707acdbf6109545e1693f0cbfed52b70d5ee0a68c3e4d6cae3de631349eb08f1ee51d3e24724fe5e1a3c9fd483", @typed={0x8, 0x79, 0x0, 0x0, @u32=0x4}]}, @generic="50d9c48c82a04fdd6980ec68337880420f7f5f61370ae0626750cf38db6ee3667d600cea3a679dfa921a92b86b338099e11d071b78f81eb3", @typed={0x8, 0x5f, 0x0, 0x0, @pid=r8}]}, 0x1610}, {&(0x7f00000018c0)={0x504, 0x39, 0x4, 0x70bd26, 0x25dfdbff, "", [@nested={0x189, 0x61, 0x0, 0x1, [@typed={0x4a, 0x41, 0x0, 0x0, @binary="c3daab18e1f757edf6c976d9ac197587cee30bd09e2387d6b87c288315e98098806710016ebb65eef1791d243af70fe3d88a1bc43675a1e26aa8ef080b003e12435408d2b4df"}, @typed={0xa3, 0x6c, 0x0, 0x0, @binary="ace46633bdcded13e2200d5c485441e29d0d2c915dd451243b3ed2cecd3453aa2e0ac81f11f7f2089fbf8b30fb170f74d94e645520607197c1d7ee9cc354c6b80914df3b128b783b3c62ee72b7fc98b3b99177195426c7671004750e9de3758d2a08cd2d528a8ba0e84cebf9e9bf43393d240f3e0e0522e2b9d867b716ea6fbc0e19ac8561b3f85fb4d99d2949a582847392c7027b5b2fa70c62df25801cd1"}, @generic="8cb5049896e0c3b1f7216fed95d83d71b8bbe7dda68a0de34a7d1a16db23015331269b44189475d80537ebefe73235026cf51600c5bb22b76af5aecdc114f43b9e4ef3fdff147a928a0637111e4ec81b20d011b14c8a3f44f3fc2e0a1f11fedb80faeb7093dc6a363794d4aafdd81e1bba0c1d23d7a04a6ab904d08ff05806a00014627d7ab28ad85d084b8ec4cae34b7c1462e81f"]}, @generic="1287ccabf9696ae7e38ce873a5d925ad85", @generic="10dd44a3387b3dd5cd78e33de381fd9ac129dcd222ed434b586002695e8d23327381fa2d9ee7cd2f1cb95ead841110f68b51cd0f6d0bed2ae4941ec31ee59fc40c816fcdb400b58e6ee83503a4f6e3482281d35ea2ef232b5f4e403a93cf1164fb55ad196988adff14aa71624ae591897d71f8e920160aa0cacee8eb668cff801db2e1256088199720c171e097ece17ce6d8daf63845a37e2a56373628bdb7d6984f68493c0542d63559105945965fca82d7a917d58cf7a2203c4be925d496ebaaf4f681ba549eac0859bf6b8c27265b34043aa59d8be8a2b8261ff3c1090e7d", @nested={0x274, 0x7, 0x0, 0x1, [@typed={0x4, 0x96}, @generic="4ad3f5b2c79c0df37b376f481678d291eb33e4adfdf026c345d786290e5b804a0f135a6e134d1711f5bb1180ab0a317427ad342a668a9aec2917c9462c2e37fbe9663157fce88fe65ba8b17faa4d28d8fe21b15084bcab30a2726d8b069cef941c10386fe9e9e36217fdc00ed5db6b4361fc64ee86f59665558296be57e3ae865a23a08ea053b2c287cd218a398af70412116133161196fefeb2623da346e5725eee5cd81680e759176a249bfc8ef9f9e98a4c624d5400e01dc8f4ce57c8fdef1dd3d1823ebe87bd5f99dbed9e5762c548d5e91cd1903a994ec976b1", @generic="52be5c29c8291a3b6b58ad9f0daed4ecb4d5fd4a1c8f8b0ef64f822800c786100904ffcff3be5d6b73317c6cb840522aefee48ae76adb20ca0cfe56da7dcea23cf6a0a4e9fba1b14fd649042402ddeea71a316b35b8275cb91c37f946e88f799f53e0af8b03ec873b9dfb95c1e403d40bfc8945f9ac1e3cb1bcfce4d8aa457d228ffde318e9427f5266e7740e56f44807191b6d2614bbc0bd1a6635521113e3af8669370e5e8b3947e32849e501c04", @typed={0x8, 0x44, 0x0, 0x0, @fd=r10}, @generic="184ddf24ce9c1b268ddbf75f00f9c5a268d568d1c6b8d040e26dcdff72b32a7432575108ba289420ff6860ce6063c9c486fd77441fac613e7d0e5ac442cb322ee59ac364333e4db9ce872cfd2137f96bb99d444d8230d96273081c07df7c04b40bb8f35d82bc51fe70b01be8ea123e46bd2a4ee5413577313a3f9229eec442ffde3ccd97e7fc0b0b2aaa233f8f6d4a30fbe6fc2a4a009b6cc1cb43b3ab855767ecd8fd486895620ef304100c74dc126974d41a39c1d794e0a3ef571d3b1b6dd03e058bc21a333d98d4f7e41c529b149d3d2de24f94daf93b68"]}]}, 0x504}], 0x2, &(0x7f0000002080)=[@cred={{0x1c, 0x1, 0x2, {r12, r14, r18}}}, @rights={{0x1c, 0x1, 0x1, [r19, r20, r21]}}, @cred={{0x1c, 0x1, 0x2, {r24, r26, r27}}}, @cred={{0x1c, 0x1, 0x2, {r28, r29, r30}}}], 0x80, 0x4000}, 0x0) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x0, 0x0) 22:37:12 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000380)) pipe(&(0x7f0000000540)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r3}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 601.456229] device bridge_slave_1 left promiscuous mode [ 601.461846] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.520244] device bridge_slave_0 left promiscuous mode [ 601.526069] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.638106] device veth1_macvtap left promiscuous mode [ 601.652135] device veth0_macvtap left promiscuous mode [ 601.685002] device veth1_vlan left promiscuous mode [ 601.723231] device veth0_vlan left promiscuous mode [ 608.451523] device hsr_slave_1 left promiscuous mode [ 608.503491] device hsr_slave_0 left promiscuous mode [ 608.556539] team0 (unregistering): Port device team_slave_1 removed [ 608.567406] team0 (unregistering): Port device team_slave_0 removed [ 608.577088] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 608.654666] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 608.717219] bond0 (unregistering): Released all slaves [ 608.822382] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.829232] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.836636] device bridge_slave_0 entered promiscuous mode [ 608.844900] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.852148] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.862207] device bridge_slave_1 entered promiscuous mode [ 608.880311] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 608.888528] ------------[ cut here ]------------ [ 608.890007] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 608.902432] ODEBUG: free active (active state 0) object type: timer_list hint: delayed_work_timer_fn+0x0/0x90 [ 608.906191] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 608.912847] WARNING: CPU: 1 PID: 7177 at lib/debugobjects.c:325 debug_print_object+0x160/0x250 [ 608.920008] team0: Port device team_slave_0 added [ 608.927943] Kernel panic - not syncing: panic_on_warn set ... [ 608.927943] [ 608.933759] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 608.940132] CPU: 1 PID: 7177 Comm: kworker/u4:6 Not tainted 4.19.108-syzkaller #0 [ 608.940138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 608.940154] Workqueue: netns cleanup_net [ 608.948044] team0: Port device team_slave_1 added [ 608.954955] Call Trace: [ 608.954972] dump_stack+0x188/0x20d [ 608.954987] panic+0x26a/0x50e [ 608.955003] ? __warn_printk+0xf3/0xf3 [ 608.976439] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 608.979471] ? debug_print_object+0x160/0x250 [ 608.979484] ? __probe_kernel_read+0x16c/0x1b0 [ 608.979501] ? __warn.cold+0x5/0x46 [ 608.982694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 608.986561] ? __warn+0xe4/0x1c0 [ 608.993219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 608.998028] ? debug_print_object+0x160/0x250 [ 609.004097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 609.006455] __warn.cold+0x20/0x46 [ 609.031643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 609.034984] ? debug_print_object+0x160/0x250 [ 609.044759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 609.049220] report_bug+0x262/0x2a0 [ 609.049302] do_error_trap+0x1d7/0x310 [ 609.056406] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 609.058979] ? math_error+0x310/0x310 [ 609.058992] ? wake_up_klogd+0x8c/0xc0 [ 609.059010] ? trace_hardirqs_off_caller+0x55/0x210 [ 609.085215] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 609.088799] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 609.088814] invalid_op+0x14/0x20 [ 609.088834] RIP: 0010:debug_print_object+0x160/0x250 [ 609.145928] Code: dd 60 0f ab 87 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 bf 00 00 00 48 8b 14 dd 60 0f ab 87 48 c7 c7 a0 04 ab 87 e8 1b f7 e6 fd <0f> 0b 83 05 63 a1 37 06 01 48 83 c4 20 5b 5d 41 5c 41 5d c3 48 89 [ 609.165090] RSP: 0018:ffff888041d778e8 EFLAGS: 00010082 [ 609.170436] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 609.177686] RDX: 0000000000000000 RSI: ffffffff8152d2f1 RDI: ffffed10083aef0f [ 609.184936] RBP: 0000000000000001 R08: ffff88804bae4680 R09: fffffbfff117108d [ 609.192214] R10: fffffbfff117108c R11: ffffffff88b88463 R12: ffffffff88b9faa0 [ 609.199578] R13: ffffffff81581e30 R14: ffffffff8b8959c8 R15: ffff888046352220 [ 609.206894] ? __internal_add_timer+0x1d0/0x1d0 [ 609.211559] ? vprintk_func+0x81/0x17e [ 609.215480] ? debug_print_object+0x160/0x250 [ 609.219974] ? __free_object+0xdd/0x1e0 [ 609.223981] debug_check_no_obj_freed+0x2a3/0x42e [ 609.228819] kfree+0xbb/0x220 [ 609.231908] ? xps_cpus_store+0x2a0/0x2a0 [ 609.236036] kvfree+0x59/0x60 [ 609.239136] device_release+0x76/0x210 [ 609.243025] ? device_remove_bin_file+0x30/0x30 [ 609.247679] kobject_put+0x17c/0x270 [ 609.251389] netdev_run_todo+0x4f1/0x740 [ 609.255494] ? register_netdev+0x50/0x50 [ 609.259818] ? sysfs_remove_group+0xee/0x1b0 [ 609.264270] ? net_set_todo+0xb9/0x140 [ 609.268159] default_device_exit_batch+0x309/0x3c0 [ 609.273116] ? unregister_netdevice_many+0x50/0x50 [ 609.278039] ? do_wait_intr_irq+0x270/0x270 [ 609.282390] ? unregister_netdevice_many+0x50/0x50 [ 609.287321] ? dev_change_net_namespace+0xb90/0xb90 [ 609.292469] ops_exit_list.isra.0+0xef/0x140 [ 609.296879] cleanup_net+0x3bf/0x850 [ 609.300793] ? net_drop_ns+0x90/0x90 [ 609.304496] ? __lock_is_held+0x40/0x140 [ 609.308546] process_one_work+0x91f/0x1640 [ 609.312820] ? pwq_dec_nr_in_flight+0x310/0x310 [ 609.317479] worker_thread+0x96/0xe20 [ 609.321279] ? process_one_work+0x1640/0x1640 [ 609.325759] kthread+0x34a/0x420 [ 609.329108] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 609.334642] ret_from_fork+0x24/0x30 [ 609.338339] [ 609.338342] ====================================================== [ 609.338345] WARNING: possible circular locking dependency detected [ 609.338347] 4.19.108-syzkaller #0 Not tainted [ 609.338350] ------------------------------------------------------ [ 609.338353] kworker/u4:6/7177 is trying to acquire lock: [ 609.338355] 00000000181aef20 ((console_sem).lock){-.-.}, at: down_trylock+0xe/0x60 [ 609.338363] [ 609.338365] but task is already holding lock: [ 609.338367] 00000000e8363407 (&obj_hash[i].lock){-.-.}, at: debug_check_no_obj_freed+0xc4/0x42e [ 609.338374] [ 609.338377] which lock already depends on the new lock. [ 609.338378] [ 609.338379] [ 609.338382] the existing dependency chain (in reverse order) is: [ 609.338383] [ 609.338384] -> #5 (&obj_hash[i].lock){-.-.}: [ 609.338392] debug_object_activate+0x131/0x4e0 [ 609.338394] enqueue_hrtimer+0x27/0x3f0 [ 609.338397] hrtimer_start_range_ns+0x580/0xbe0 [ 609.338399] schedule_hrtimeout_range_clock+0x17a/0x360 [ 609.338402] wait_task_inactive+0x443/0x550 [ 609.338404] __kthread_bind_mask+0x1f/0xb0 [ 609.338406] init_rescuer.part.0+0xf2/0x190 [ 609.338408] workqueue_init+0x504/0x7e9 [ 609.338411] kernel_init_freeable+0x2bd/0x5bb [ 609.338412] kernel_init+0xd/0x1c0 [ 609.338415] ret_from_fork+0x24/0x30 [ 609.338416] [ 609.338417] -> #4 (hrtimer_bases.lock){-.-.}: [ 609.338424] lock_hrtimer_base.isra.0+0x6d/0x120 [ 609.338427] hrtimer_start_range_ns+0xf5/0xbe0 [ 609.338429] enqueue_task_rt+0x97f/0xdf0 [ 609.338432] __sched_setscheduler.constprop.0+0xc79/0x1df0 [ 609.338434] _sched_setscheduler+0xee/0x180 [ 609.338436] watchdog_dev_init+0xdd/0x1ae [ 609.338438] watchdog_init+0x14/0x17e [ 609.338440] do_one_initcall+0xf1/0x734 [ 609.338443] kernel_init_freeable+0x4c9/0x5bb [ 609.338445] kernel_init+0xd/0x1c0 [ 609.338447] ret_from_fork+0x24/0x30 [ 609.338448] [ 609.338449] -> #3 (&rt_b->rt_runtime_lock){-...}: [ 609.338456] rq_online_rt+0xaf/0x390 [ 609.338459] set_rq_online.part.0+0xe3/0x140 [ 609.338461] sched_cpu_activate+0x17f/0x270 [ 609.338465] cpuhp_invoke_callback+0x213/0x1bb0 [ 609.338469] cpuhp_thread_fun+0x440/0x840 [ 609.338472] smpboot_thread_fn+0x653/0x9d0 [ 609.338475] kthread+0x34a/0x420 [ 609.338479] ret_from_fork+0x24/0x30 [ 609.338480] [ 609.338482] -> #2 (&rq->lock){-.-.}: [ 609.338495] task_fork_fair+0x6a/0x520 [ 609.338498] sched_fork+0x3a7/0x8b0 [ 609.338502] copy_process.part.0+0x187d/0x7a60 [ 609.338504] _do_fork+0x22f/0xf40 [ 609.338506] kernel_thread+0x2f/0x40 [ 609.338508] rest_init+0x1f/0x212 [ 609.338510] start_kernel+0x7e4/0x81c [ 609.338512] secondary_startup_64+0xa4/0xb0 [ 609.338514] [ 609.338515] -> #1 (&p->pi_lock){-.-.}: [ 609.338522] try_to_wake_up+0x80/0xe90 [ 609.338524] up+0x92/0xe0 [ 609.338526] __up_console_sem+0xb3/0x1c0 [ 609.338528] console_unlock+0x64d/0xfe0 [ 609.338530] vprintk_emit+0x282/0x6e0 [ 609.338532] vprintk_func+0x79/0x17e [ 609.338534] printk+0xba/0xed [ 609.338536] kauditd_hold_skb.cold+0x41/0x50 [ 609.338538] kauditd_send_queue+0x12d/0x170 [ 609.338541] kauditd_thread+0x6f4/0xa20 [ 609.338543] kthread+0x34a/0x420 [ 609.338545] ret_from_fork+0x24/0x30 [ 609.338546] [ 609.338547] -> #0 ((console_sem).lock){-.-.}: [ 609.338554] _raw_spin_lock_irqsave+0x8c/0xbf [ 609.338556] down_trylock+0xe/0x60 [ 609.338559] __down_trylock_console_sem+0xa3/0x210 [ 609.338561] console_trylock+0x12/0x90 [ 609.338563] vprintk_emit+0x269/0x6e0 [ 609.338565] vprintk_func+0x79/0x17e [ 609.338567] printk+0xba/0xed [ 609.338569] __warn_printk+0x9b/0xf3 [ 609.338572] debug_print_object+0x160/0x250 [ 609.338574] debug_check_no_obj_freed+0x2a3/0x42e [ 609.338576] kfree+0xbb/0x220 [ 609.338578] kvfree+0x59/0x60 [ 609.338580] device_release+0x76/0x210 [ 609.338582] kobject_put+0x17c/0x270 [ 609.338584] netdev_run_todo+0x4f1/0x740 [ 609.338586] default_device_exit_batch+0x309/0x3c0 [ 609.338589] ops_exit_list.isra.0+0xef/0x140 [ 609.338591] cleanup_net+0x3bf/0x850 [ 609.338593] process_one_work+0x91f/0x1640 [ 609.338595] worker_thread+0x96/0xe20 [ 609.338597] kthread+0x34a/0x420 [ 609.338599] ret_from_fork+0x24/0x30 [ 609.338600] [ 609.338603] other info that might help us debug this: [ 609.338604] [ 609.338605] Chain exists of: [ 609.338606] (console_sem).lock --> hrtimer_bases.lock --> &obj_hash[i].lock [ 609.338616] [ 609.338618] Possible unsafe locking scenario: [ 609.338619] [ 609.338621] CPU0 CPU1 [ 609.338624] ---- ---- [ 609.338625] lock(&obj_hash[i].lock); [ 609.338630] lock(hrtimer_bases.lock); [ 609.338635] lock(&obj_hash[i].lock); [ 609.338639] lock((console_sem).lock); [ 609.338643] [ 609.338645] *** DEADLOCK *** [ 609.338646] [ 609.338648] 4 locks held by kworker/u4:6/7177: [ 609.338649] #0: 00000000cb4f4cb6 ((wq_completion)"%s""netns"){+.+.}, at: process_one_work+0x81a/0x1640 [ 609.338658] #1: 000000002e91c703 (net_cleanup_work){+.+.}, at: process_one_work+0x84e/0x1640 [ 609.338667] #2: 000000006ff4e8be (pernet_ops_rwsem){++++}, at: cleanup_net+0xa8/0x850 [ 609.338675] #3: 00000000e8363407 (&obj_hash[i].lock){-.-.}, at: debug_check_no_obj_freed+0xc4/0x42e [ 609.338684] [ 609.338686] stack backtrace: [ 609.338689] CPU: 1 PID: 7177 Comm: kworker/u4:6 Not tainted 4.19.108-syzkaller #0 [ 609.338693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 609.338695] Workqueue: netns cleanup_net [ 609.338698] Call Trace: [ 609.338700] dump_stack+0x188/0x20d [ 609.338703] print_circular_bug.isra.0.cold+0x1c4/0x282 [ 609.338705] __lock_acquire+0x2e19/0x49c0 [ 609.338707] ? add_lock_to_list.isra.0+0x179/0x330 [ 609.338709] ? save_trace+0xd6/0x290 [ 609.338711] ? mark_held_locks+0xf0/0xf0 [ 609.338713] ? format_decode+0x230/0xad0 [ 609.338715] ? kvm_clock_read+0x14/0x30 [ 609.338717] lock_acquire+0x170/0x400 [ 609.338719] ? down_trylock+0xe/0x60 [ 609.338722] _raw_spin_lock_irqsave+0x8c/0xbf [ 609.338724] ? down_trylock+0xe/0x60 [ 609.338726] down_trylock+0xe/0x60 [ 609.338728] ? vprintk_emit+0x269/0x6e0 [ 609.338730] __down_trylock_console_sem+0xa3/0x210 [ 609.338732] console_trylock+0x12/0x90 [ 609.338734] vprintk_emit+0x269/0x6e0 [ 609.338736] ? __internal_add_timer+0x1d0/0x1d0 [ 609.338738] vprintk_func+0x79/0x17e [ 609.338740] printk+0xba/0xed [ 609.338742] ? kmsg_dump_rewind_nolock+0xd9/0xd9 [ 609.338745] ? mark_held_locks+0xf0/0xf0 [ 609.338747] ? __warn_printk+0x8f/0xf3 [ 609.338749] ? work_on_cpu_safe+0x90/0x90 [ 609.338751] __warn_printk+0x9b/0xf3 [ 609.338753] ? add_taint.cold+0x16/0x16 [ 609.338755] ? lock_downgrade+0x740/0x740 [ 609.338757] ? work_on_cpu_safe+0x90/0x90 [ 609.338759] debug_print_object+0x160/0x250 [ 609.338761] ? __free_object+0xdd/0x1e0 [ 609.338764] debug_check_no_obj_freed+0x2a3/0x42e [ 609.338766] kfree+0xbb/0x220 [ 609.338768] ? xps_cpus_store+0x2a0/0x2a0 [ 609.338770] kvfree+0x59/0x60 [ 609.338771] device_release+0x76/0x210 [ 609.338774] ? device_remove_bin_file+0x30/0x30 [ 609.338776] kobject_put+0x17c/0x270 [ 609.338778] netdev_run_todo+0x4f1/0x740 [ 609.338780] ? register_netdev+0x50/0x50 [ 609.338782] ? sysfs_remove_group+0xee/0x1b0 [ 609.338784] ? net_set_todo+0xb9/0x140 [ 609.338787] default_device_exit_batch+0x309/0x3c0 [ 609.338789] ? unregister_netdevice_many+0x50/0x50 [ 609.338792] ? do_wait_intr_irq+0x270/0x270 [ 609.338794] ? unregister_netdevice_many+0x50/0x50 [ 609.338796] ? dev_change_net_namespace+0xb90/0xb90 [ 609.338799] ops_exit_list.isra.0+0xef/0x140 [ 609.338801] cleanup_net+0x3bf/0x850 [ 609.338803] ? net_drop_ns+0x90/0x90 [ 609.338805] ? __lock_is_held+0x40/0x140 [ 609.338807] process_one_work+0x91f/0x1640 [ 609.338809] ? pwq_dec_nr_in_flight+0x310/0x310 [ 609.338811] worker_thread+0x96/0xe20 [ 609.338814] ? process_one_work+0x1640/0x1640 [ 609.338816] kthread+0x34a/0x420 [ 609.338818] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 609.338820] ret_from_fork+0x24/0x30 [ 609.340443] Kernel Offset: disabled [ 610.159085] Rebooting in 86400 seconds..