r1) 21:27:16 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffbc000) 21:27:16 executing program 2: syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, 0x0, 0x0) 21:27:16 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0xc020660b) 21:27:16 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}], 0x1, 0xfffbc000) 21:27:16 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffbc000) 21:27:16 executing program 5: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ppoll(&(0x7f0000000000)=[{r0, 0x2080}, {0xffffffffffffffff, 0x100}], 0x2, 0x0, 0x0, 0x0) 21:27:16 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0xc0505405) 21:27:16 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0xc0f85403) 21:27:16 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffbc000) 21:27:16 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x30005, 0x0) write$P9_RWRITE(r1, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x9}, 0xb) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r3, 0x0, r4, 0x0, 0x30005, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0x4240a2a0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000280)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000080), r6}}, 0x18) 21:27:16 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}], 0x1, 0xfffbc000) 21:27:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, 0x0) ptrace(0x11, r1) 21:27:17 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x2, 0x0, 0x7fffffff, 0x1, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, &(0x7f0000000100)=""/182) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 21:27:17 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffbc000) 21:27:17 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}], 0x1, 0xfffbc000) 21:27:17 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffffff8, 0x10800) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x2, 0x1, 0x400002, 0x2, 0xfffffffffffffffd}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 21:27:17 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {0x0}], 0x2, 0xfffbc000) 21:27:17 executing program 5: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ppoll(&(0x7f0000000000)=[{r0, 0x2080}, {0xffffffffffffffff, 0x100}], 0x2, 0x0, 0x0, 0x0) 21:27:17 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, 0x0, 0x0, 0xfffbc000) 21:27:17 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x100) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 21:27:17 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {0x0}], 0x2, 0xfffbc000) 21:27:17 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x30005, 0x0) getsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000000)=0xfffffffffffffff8, &(0x7f0000000040)=0x4) 21:27:17 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {0x0}], 0x2, 0xfffbc000) 21:27:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace(0xffffffffffffffff, r1) 21:27:18 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, 0x0, 0x0, 0xfffbc000) 21:27:18 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x30005, 0x0) syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x8, 0x110000) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r6, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r7, r5}}, 0x18) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000440)={0x14, 0x88, 0xfa00, {r7, 0x30, 0x0, @in={0x2, 0x4e23, @rand_addr=0xbf0a}}}, 0x90) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r8 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r8) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r9, 0x407, 0x0) write$binfmt_misc(r9, &(0x7f0000000140)=ANY=[], 0x4240a2a0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000400)={0x1, [0x0]}, &(0x7f0000000380)=0xfffffffffffffeef) r11 = creat(&(0x7f0000000500)='./file0\x00', 0x120) getsockopt$inet_sctp6_SCTP_RTOINFO(r11, 0x84, 0x0, &(0x7f00000003c0)={0x0, 0x4, 0x200000000000, 0x4}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000100)={r10, 0x84, "d7151774ef4627ce1c7f7432756249d81de7a01cc6ea64e5da93698212868158ecc9f72a8e1f2b81f3d76c6d610b2210622af6e1f4e63b989a9faef3b186fad462dd4e0084733908ee055bc49e55e30aada1f1d040ca8223e01c0a13d336fe7268d197cc387edf5e05e8cc54e090c9aea2d680c43adc5e72e6a37ec7cf07107d9472e679c60ff987df41bb719ecf1e02cab39135136723a7365221333307f1902be72b83faf1207834dc8f75e8878e5302aeeff14ab550b25774af09b51194da3f9fee250a5a43608e7c6b4620ad60fae5a5301d5d1f5c3fc1bf"}, &(0x7f0000000080)=0xe2) r13 = open(&(0x7f0000000540)='./file0\x00', 0x541100, 0xbd0a7caa0c773738) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r13, 0x84, 0x1f, &(0x7f0000000200)={r12, @in={{0x2, 0x4e20, @empty}}, 0x1, 0x3540000000000000}, &(0x7f0000000340)=0x90) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 21:27:18 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000180)=""/58, 0x3a}], 0x1, 0xfffbc000) 21:27:18 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, 0x0, 0x0, 0xfffbc000) 21:27:18 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000180)=""/58, 0x3a}], 0x1, 0xfffbc000) 21:27:18 executing program 5: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ppoll(&(0x7f0000000000)=[{r0, 0x2080}, {0xffffffffffffffff, 0x100}], 0x2, 0x0, 0x0, 0x0) 21:27:18 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}], 0x1, 0xfffbc000) 21:27:18 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000180)=""/58, 0x3a}], 0x1, 0xfffbc000) 21:27:18 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}], 0x1, 0xfffbc000) 21:27:18 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) write$P9_RSTAT(0xffffffffffffffff, &(0x7f00000001c0)={0x69, 0x7d, 0x2, {0x0, 0x62, 0x5, 0x5, {0x1, 0x3, 0x1}, 0x0, 0xec75, 0x8, 0x1f, 0x1, '-', 0xb, '#@eth1wlan0', 0xf, '/dev/sequencer\x00', 0x14, 'wlan1*eth0ppp0^/eth1'}}, 0x69) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x100, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000180)={&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000080)=""/213, 0xd5}) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, 0x0, 0x0) 21:27:18 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/58, 0x3a}], 0x2, 0xfffbc000) 21:27:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace(0xffffffffffffffff, r1) 21:27:18 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}], 0x1, 0xfffbc000) 21:27:18 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r2) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x400000, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000040)='}^proc}{\x00', 0x0, r5) 21:27:18 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/58, 0x3a}], 0x2, 0xfffbc000) 21:27:18 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000180)=0xc) r4 = getgid() fchown(r1, r3, r4) getresgid(&(0x7f0000000080), &(0x7f00000001c0), &(0x7f0000000200)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380), &(0x7f00000003c0)=0xc) getresgid(&(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)=0x0) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000180)=0xc) r10 = getgid() fchown(r7, r9, r10) setresgid(r5, r6, 0xffffffffffffffff) r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x8000, 0x8000) setsockopt$inet6_dccp_buf(r11, 0x21, 0xce, &(0x7f0000000100)="8d441e108b363600825bc6e407f106c1386c59d264e41ff030e07b130180d8a3d8e7da152ee4b59e3ca938b805f2638b0ad6c0ae2c6d3375ebfe91ea255c341cf13291a0e88ef55f3e2aba2c5752d726178ff6f785b880e204a5b235087dc25d211eea188f1a8a521ca04be9252bd335f17b2033e1728b38aaa93e7880bd2038c69b1756604925136b6cfcb0", 0x8c) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) r12 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r13 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r13, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000180)=0xc) r15 = getgid() fchown(r12, r14, r15) write$P9_RGETATTR(r2, &(0x7f00000002c0)={0xa0, 0x19, 0x2, {0x825, {0xc5, 0x4, 0x3}, 0x24, 0xee01, r15, 0x2, 0xce3, 0x3, 0x100000000, 0xffffffffffffffa4, 0x1, 0x1f, 0x6, 0x2, 0xfa, 0x6ae1, 0x7, 0x2, 0x80000001, 0x7fff}}, 0xa0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 21:27:19 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {0x0}], 0x2, 0xfffbc000) 21:27:19 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/58, 0x3a}], 0x2, 0xfffbc000) 21:27:19 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {0x0}], 0x2, 0xfffbc000) 21:27:19 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000001c0)) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}], 0x1}) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000280)) write$binfmt_misc(r2, &(0x7f0000000100)={'syz0', "2c1129de80aee3e235f6f095be845b5ea91bdac66f8238c3f7e4f049ce562a26aa0cdefd3644ec9531dded82eab80cbbfa9351979d5259bfc39c56622c470c390e18f06a6bf7cff0935d69ef7fc67788ddeb65039d354c7ff15ed14381d9e739ae7c3c6105c9afd65da9837b65520b3316b5d8e1078c0d0b80a6cb98ca70b94a5b70d8ec6d6bfc02cfd45ce91b22de2b28f0046f0c3e75dcb9657f1662"}, 0xa1) 21:27:19 executing program 5: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ppoll(&(0x7f0000000000)=[{r0, 0x2080}, {r1}], 0x2, 0x0, 0x0, 0x0) 21:27:19 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket(0x1a0a80c46691496a, 0x80000, 0x9) bind$bt_sco(r1, &(0x7f0000000000)={0x1f, {0x0, 0x8001, 0x7, 0x8000, 0x3, 0x3}}, 0x8) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000040)) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, 0x0, 0x0) 21:27:19 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {0x0}], 0x2, 0xfffbc000) 21:27:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace(0xffffffffffffffff, r1) 21:27:19 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x0) 21:27:19 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) splice(r1, 0x0, r2, 0x0, 0x30005, 0x0) ioctl$TIOCSISO7816(r1, 0xc0285443, &(0x7f0000000000)={0xc8, 0x10000, 0x3, 0x7f, 0x4}) 21:27:19 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000180)=""/58, 0x3a}], 0x1, 0xfffbc000) 21:27:19 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x100, 0x10) semget(0x2, 0x4, 0x400) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r3, 0x0, r4, 0x0, 0x30005, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = dup3(r5, r2, 0x0) bind$inet(r6, &(0x7f00000002c0)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x30005, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000080)={0x1, 0x5, 0x1ff, 0x41c2, 0x1, 0x21, 0x4399ee85}) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 21:27:19 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000180)=""/58, 0x3a}], 0x1, 0xfffbc000) 21:27:20 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x0) 21:27:20 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000180)=""/58, 0x3a}], 0x1, 0xfffbc000) 21:27:20 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/58, 0x3a}], 0x2, 0xfffbc000) 21:27:20 executing program 5: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ppoll(&(0x7f0000000000)=[{r0, 0x2080}, {r1}], 0x2, 0x0, 0x0, 0x0) 21:27:20 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x0) 21:27:20 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/58, 0x3a}], 0x2, 0xfffbc000) 21:27:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace(0x11, 0x0) 21:27:20 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x80, 0x0) getsockname$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000100)=0x1c) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r3, 0x0, 0x30005, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000140)) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 21:27:20 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/58, 0x3a}], 0x2, 0xfffbc000) 21:27:20 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000000)='^wlan1\x00', 0x0, r0) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, 0x0, 0x0) 21:27:20 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r2) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x400000, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000040)='}^proc}{\x00', 0x0, r5) 21:27:20 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x0) 21:27:20 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x2, 0x0, 0x7fffffff, 0x1, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, &(0x7f0000000100)=""/182) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 21:27:20 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x0) 21:27:21 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f0000000240)) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffbc000) 21:27:21 executing program 5: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ppoll(&(0x7f0000000000)=[{r0, 0x2080}, {r1}], 0x2, 0x0, 0x0, 0x0) 21:27:21 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffbc000) 21:27:21 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffbc000) 21:27:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace(0x11, 0x0) 21:27:21 executing program 4: ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) fadvise64(0xffffffffffffffff, 0x0, 0xff, 0x6) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000001c0)) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000200)={[], 0x1}) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000280)) r3 = dup3(0xffffffffffffffff, r2, 0x80000) write$cgroup_int(r3, &(0x7f0000000180)=0x1, 0x12) pipe(&(0x7f0000000140)) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000040)={0xb, @sdr={0x31364d4e, 0x6}}) 21:27:21 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, &(0x7f0000000240)) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffbc000) 21:27:21 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x40000, 0x0) connect$netlink(r1, &(0x7f0000001040)=@kern={0x10, 0x0, 0x0, 0x18002000}, 0xc) ioctl$sock_netdev_private(r1, 0x89f5, &(0x7f0000000040)="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") 21:27:21 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, &(0x7f0000000240)) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffbc000) 21:27:21 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x2, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000200)={0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e20, @multicast2}, 0x200, 0x0, 0x0, 0x0, 0x1f, &(0x7f00000001c0)='sit0\x00', 0xebe, 0x80000000, 0x3}) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, 0x0, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x4) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x4000, 0x0) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f0000000100), &(0x7f0000000140)=0xc) 21:27:21 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, &(0x7f0000000240)) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffbc000) [ 239.145811][T10958] QAT: Invalid ioctl [ 239.154518][T10958] QAT: Invalid ioctl 21:27:21 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x144) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000040)=""/132) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000f169d7732a2e35387c00"], 0x39b}}, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2018}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x1c8, r3, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x58, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1903}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb9c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x40, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}, @TIPC_NLA_NET={0x48, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xe3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xea2c}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80}]}, @TIPC_NLA_LINK={0x90, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffffffff0001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffffffffffe0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x10000000}, 0x800) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r4, 0x0, r5, 0x0, 0x30005, 0x0) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000440)={0x0, @local, @broadcast}, &(0x7f0000000480)=0xc) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, 0x0, 0x0) 21:27:21 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f0000000240)) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffbc000) 21:27:22 executing program 5: io_uring_setup(0xa4, &(0x7f0000000080)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ppoll(&(0x7f0000000000)=[{r0, 0x100}], 0x1, 0x0, 0x0, 0x0) 21:27:22 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, &(0x7f0000000240)) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffbc000) 21:27:22 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, &(0x7f0000000240)) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffbc000) 21:27:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace(0x11, 0x0) 21:27:22 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3, 0x5, 0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 21:27:22 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, &(0x7f0000000240)) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffbc000) 21:27:22 executing program 5: io_uring_setup(0xa4, &(0x7f0000000080)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ppoll(&(0x7f0000000000)=[{r0, 0x100}], 0x1, 0x0, 0x0, 0x0) 21:27:22 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, &(0x7f0000000240)) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffbc000) 21:27:22 executing program 5: io_uring_setup(0xa4, &(0x7f0000000080)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ppoll(&(0x7f0000000000)=[{r0, 0x100}], 0x1, 0x0, 0x0, 0x0) 21:27:22 executing program 4: ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) splice(r0, 0x0, r1, 0x0, 0x30005, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000080)={{0x2, 0x0, 0x81, 0x2, 0xf7}}) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r3, 0x0, 0x30005, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) 21:27:22 executing program 2: ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000180)='lapb0\x00') r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x17}]}, 0x20}}, 0x0) r2 = socket$bt_hidp(0x1f, 0x3, 0x6) r3 = accept(r2, &(0x7f0000000240)=@x25={0x9, @remote}, &(0x7f0000000080)=0x80) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) syz_open_procfs(r4, &(0x7f0000000200)='net/igmp\x00') accept4$netrom(r3, &(0x7f00000000c0)={{0x3, @rose}, [@default, @bcast, @bcast, @bcast, @bcast, @rose, @netrom]}, &(0x7f0000000140)=0x48, 0x0) 21:27:22 executing program 3 (fault-call:6 fault-nth:0): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x0) 21:27:22 executing program 0 (fault-call:10 fault-nth:0): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffbc000) [ 240.169090][T11011] FAULT_INJECTION: forcing a failure. [ 240.169090][T11011] name failslab, interval 1, probability 0, space 0, times 0 [ 240.185683][T11010] FAULT_INJECTION: forcing a failure. [ 240.185683][T11010] name failslab, interval 1, probability 0, space 0, times 0 [ 240.214548][T11011] CPU: 1 PID: 11011 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 240.223669][T11011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 240.233720][T11011] Call Trace: [ 240.237018][T11011] dump_stack+0x172/0x1f0 [ 240.241358][T11011] should_fail.cold+0xa/0x15 [ 240.245951][T11011] ? fault_create_debugfs_attr+0x180/0x180 [ 240.251760][T11011] ? ___might_sleep+0x163/0x280 [ 240.256617][T11011] __should_failslab+0x121/0x190 [ 240.261553][T11011] should_failslab+0x9/0x14 [ 240.266055][T11011] kmem_cache_alloc_trace+0x2d3/0x790 [ 240.271432][T11011] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 240.277667][T11011] ? __phys_addr+0xa4/0x120 [ 240.282180][T11011] read_mem+0x9d/0x2c0 [ 240.286246][T11011] ? rw_verify_area+0x126/0x360 [ 240.291104][T11011] do_iter_read+0x4a4/0x660 [ 240.295602][T11011] ? dup_iter+0x260/0x260 [ 240.299938][T11011] vfs_readv+0xf0/0x160 [ 240.304097][T11011] ? compat_rw_copy_check_uvector+0x4c0/0x4c0 [ 240.310162][T11011] ? __kasan_check_read+0x11/0x20 [ 240.315194][T11011] ? ksys_dup3+0x3e0/0x3e0 [ 240.319621][T11011] ? debug_smp_processor_id+0x3c/0x214 [ 240.325081][T11011] ? __fget_light+0x1a9/0x230 [ 240.329757][T11011] do_preadv+0x1c4/0x280 [ 240.333998][T11011] ? do_readv+0x330/0x330 [ 240.338331][T11011] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 240.343785][T11011] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 240.349237][T11011] ? do_syscall_64+0x26/0x760 [ 240.353916][T11011] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 240.360065][T11011] ? do_syscall_64+0x26/0x760 [ 240.364748][T11011] __x64_sys_preadv+0x9a/0xf0 [ 240.369425][T11011] do_syscall_64+0xfa/0x760 [ 240.373931][T11011] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 240.379820][T11011] RIP: 0033:0x459879 [ 240.383713][T11011] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 240.403314][T11011] RSP: 002b:00007f1e7f50fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 240.411718][T11011] RAX: ffffffffffffffda RBX: 00007f1e7f50fc90 RCX: 0000000000459879 [ 240.419681][T11011] RDX: 0000000000000002 RSI: 0000000020000200 RDI: 0000000000000004 [ 240.427648][T11011] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 240.435621][T11011] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1e7f5106d4 [ 240.443592][T11011] R13: 00000000004c6b98 R14: 00000000004dbd88 R15: 0000000000000005 [ 240.451595][T11010] CPU: 0 PID: 11010 Comm: syz-executor.0 Not tainted 5.3.0-rc6-next-20190830 #75 [ 240.460693][T11010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 240.460699][T11010] Call Trace: [ 240.460718][T11010] dump_stack+0x172/0x1f0 [ 240.460738][T11010] should_fail.cold+0xa/0x15 [ 240.460756][T11010] ? fault_create_debugfs_attr+0x180/0x180 [ 240.482960][T11010] ? ___might_sleep+0x163/0x280 [ 240.482981][T11010] __should_failslab+0x121/0x190 [ 240.498512][T11010] should_failslab+0x9/0x14 [ 240.503013][T11010] kmem_cache_alloc_trace+0x2d3/0x790 [ 240.508390][T11010] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 240.514639][T11010] ? __phys_addr+0xa4/0x120 21:27:23 executing program 5: io_uring_setup(0xa4, &(0x7f0000000080)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x2080}, {r0, 0x100}], 0x2, 0x0, 0x0, 0x0) 21:27:23 executing program 3 (fault-call:6 fault-nth:1): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x0) [ 240.519159][T11010] read_mem+0x9d/0x2c0 [ 240.523248][T11010] ? rw_verify_area+0x126/0x360 [ 240.528103][T11010] do_iter_read+0x4a4/0x660 [ 240.532603][T11010] ? dup_iter+0x260/0x260 [ 240.536954][T11010] vfs_readv+0xf0/0x160 [ 240.541116][T11010] ? compat_rw_copy_check_uvector+0x4c0/0x4c0 [ 240.547182][T11010] ? __kasan_check_read+0x11/0x20 [ 240.552218][T11010] ? ksys_dup3+0x3e0/0x3e0 [ 240.556648][T11010] ? wait_for_completion+0x440/0x440 [ 240.561941][T11010] ? __fget_light+0x1a9/0x230 [ 240.566622][T11010] do_preadv+0x1c4/0x280 [ 240.571040][T11010] ? do_readv+0x330/0x330 [ 240.575368][T11010] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 240.580817][T11010] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 240.586255][T11010] ? do_syscall_64+0x26/0x760 [ 240.590928][T11010] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 240.597021][T11010] ? do_syscall_64+0x26/0x760 [ 240.601704][T11010] __x64_sys_preadv+0x9a/0xf0 [ 240.606366][T11010] do_syscall_64+0xfa/0x760 [ 240.610862][T11010] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 240.616841][T11010] RIP: 0033:0x459879 [ 240.620762][T11010] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 240.640343][T11010] RSP: 002b:00007f2866f4ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 240.648741][T11010] RAX: ffffffffffffffda RBX: 00007f2866f4ec90 RCX: 0000000000459879 [ 240.656698][T11010] RDX: 0000000000000002 RSI: 0000000020000200 RDI: 0000000000000004 21:27:23 executing program 1 (fault-call:6 fault-nth:0): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace(0x11, r1) 21:27:23 executing program 0 (fault-call:10 fault-nth:1): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffbc000) [ 240.664659][T11010] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 240.672606][T11010] R10: 00000000fffbc000 R11: 0000000000000246 R12: 00007f2866f4f6d4 [ 240.680555][T11010] R13: 00000000004c6b98 R14: 00000000004dbd88 R15: 0000000000000005 21:27:23 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$TIOCNOTTY(r1, 0x5422) 21:27:23 executing program 5: io_uring_setup(0xa4, &(0x7f0000000080)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x2080}, {r0, 0x100}], 0x2, 0x0, 0x0, 0x0) [ 240.862000][T11029] FAULT_INJECTION: forcing a failure. [ 240.862000][T11029] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 240.875219][T11029] CPU: 0 PID: 11029 Comm: syz-executor.0 Not tainted 5.3.0-rc6-next-20190830 #75 [ 240.884320][T11029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 240.894367][T11029] Call Trace: [ 240.897672][T11029] dump_stack+0x172/0x1f0 [ 240.902011][T11029] should_fail.cold+0xa/0x15 [ 240.906607][T11029] ? fault_create_debugfs_attr+0x180/0x180 21:27:23 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open$cgroup(&(0x7f0000000040)={0x4, 0x70, 0xb, 0x8, 0x46f0cca4, 0xffffffffffffff48, 0x0, 0x1, 0x80, 0x320ff8ded744e8c0, 0x800, 0x19, 0x3f, 0x72, 0x4, 0x398, 0x8, 0x8, 0x7ffc, 0xd7bb, 0x1, 0x4, 0x1c000000000000, 0x2, 0x8, 0x6, 0x6, 0xfffffffffffffffe, 0x4, 0x191, 0x4, 0x1f, 0x80000000, 0x100, 0x100000000, 0x0, 0x9, 0x6, 0x0, 0x100, 0x4, @perf_bp, 0x9125, 0x1, 0x1f, 0x8, 0x1000, 0x80000000, 0xfffffffffffffbf7}, r1, 0x3, 0xffffffffffffffff, 0xb) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x4000, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x76) [ 240.912419][T11029] ? lockdep_hardirqs_on+0x418/0x5d0 [ 240.917791][T11029] ? retint_kernel+0x2b/0x2b [ 240.922397][T11029] ? trace_hardirqs_on_caller+0x6a/0x240 [ 240.928045][T11029] should_fail_alloc_page+0x50/0x60 [ 240.933240][T11029] __alloc_pages_nodemask+0x1a1/0x900 [ 240.938609][T11029] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 240.944244][T11029] ? __alloc_pages_slowpath+0x2540/0x2540 [ 240.949976][T11029] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 240.955613][T11029] ? fault_create_debugfs_attr+0x180/0x180 [ 240.960680][T11024] FAULT_INJECTION: forcing a failure. [ 240.960680][T11024] name failslab, interval 1, probability 0, space 0, times 0 [ 240.961421][T11029] cache_grow_begin+0x90/0xd20 [ 240.961438][T11029] ? read_mem+0x9d/0x2c0 [ 240.961460][T11029] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 240.989226][T11029] kmem_cache_alloc_trace+0x6b3/0x790 [ 240.994609][T11029] read_mem+0x9d/0x2c0 [ 240.998678][T11029] ? rw_verify_area+0x126/0x360 [ 241.003531][T11029] do_iter_read+0x4a4/0x660 [ 241.008033][T11029] ? dup_iter+0x260/0x260 [ 241.012377][T11029] vfs_readv+0xf0/0x160 [ 241.016538][T11029] ? compat_rw_copy_check_uvector+0x4c0/0x4c0 [ 241.022604][T11029] ? __kasan_check_read+0x11/0x20 [ 241.027645][T11029] ? ksys_dup3+0x3e0/0x3e0 [ 241.032061][T11029] ? __this_cpu_preempt_check+0x3a/0x210 [ 241.037697][T11029] ? retint_kernel+0x2b/0x2b [ 241.042300][T11029] ? __fget_light+0x1a9/0x230 [ 241.046982][T11029] do_preadv+0x1c4/0x280 [ 241.051223][T11029] ? do_readv+0x330/0x330 [ 241.055549][T11029] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 241.061016][T11029] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 241.066599][T11029] ? do_syscall_64+0x26/0x760 [ 241.071279][T11029] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 241.077342][T11029] ? do_syscall_64+0x26/0x760 [ 241.082024][T11029] __x64_sys_preadv+0x9a/0xf0 [ 241.086713][T11029] do_syscall_64+0xfa/0x760 [ 241.091230][T11029] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 241.097121][T11029] RIP: 0033:0x459879 [ 241.101016][T11029] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 241.120635][T11029] RSP: 002b:00007f2866f4ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 241.129047][T11029] RAX: ffffffffffffffda RBX: 00007f2866f4ec90 RCX: 0000000000459879 [ 241.137025][T11029] RDX: 0000000000000002 RSI: 0000000020000200 RDI: 0000000000000004 [ 241.144987][T11029] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 241.152946][T11029] R10: 00000000fffbc000 R11: 0000000000000246 R12: 00007f2866f4f6d4 [ 241.160913][T11029] R13: 00000000004c6b98 R14: 00000000004dbd88 R15: 0000000000000005 [ 241.170682][T11024] CPU: 1 PID: 11024 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 241.179791][T11024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 241.189845][T11024] Call Trace: [ 241.193127][T11024] dump_stack+0x172/0x1f0 [ 241.197455][T11024] should_fail.cold+0xa/0x15 [ 241.202036][T11024] ? fault_create_debugfs_attr+0x180/0x180 [ 241.207822][T11024] ? ___might_sleep+0x163/0x280 [ 241.212691][T11024] __should_failslab+0x121/0x190 [ 241.217619][T11024] should_failslab+0x9/0x14 [ 241.222120][T11024] kmem_cache_alloc_trace+0x2d3/0x790 [ 241.227489][T11024] ? __init_cache_modes+0x260/0x260 [ 241.232687][T11024] ? __bad_area_nosemaphore.cold+0x127/0x127 [ 241.238665][T11024] reserve_memtype+0x1e1/0x880 [ 241.243418][T11024] ? __kasan_check_read+0x11/0x20 [ 241.248429][T11024] ? pat_init+0x4d0/0x4d0 [ 241.248457][T11024] ? __bad_area_nosemaphore.cold+0x127/0x127 21:27:23 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/\xf3nd/t\xd4(er\x00', 0x0, 0x21) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x17}]}, 0x20}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x17}]}, 0x20}}, 0x0) sendmmsg$sock(r2, &(0x7f0000000600), 0x0, 0x20000) r3 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x9, 0x21000) ioctl$SCSI_IOCTL_DOORUNLOCK(r3, 0x5381) [ 241.248479][T11024] __ioremap_caller.constprop.0+0x1c6/0x710 [ 241.264617][T11024] ? lock_downgrade+0x920/0x920 [ 241.269474][T11024] ? memremap+0x3c3/0x520 [ 241.273805][T11024] ? iounmap+0x1b0/0x1b0 [ 241.278048][T11024] ? __kasan_check_write+0x14/0x20 [ 241.283161][T11024] ? _raw_read_unlock+0x2d/0x50 [ 241.288011][T11024] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 241.294252][T11024] ? region_intersects+0x263/0x2f0 [ 241.299368][T11024] ioremap_cache+0x24/0x30 [ 241.303779][T11024] memremap+0x3c3/0x520 [ 241.307916][T11024] ? devm_memremap_match+0x40/0x40 [ 241.313005][T11024] ? _raw_read_unlock+0x2d/0x50 [ 241.317830][T11024] ? iomem_is_exclusive+0x33/0x1af [ 241.322918][T11024] xlate_dev_mem_ptr+0x28/0x50 [ 241.327663][T11024] read_mem+0xdc/0x2c0 [ 241.331726][T11024] ? rw_verify_area+0x126/0x360 [ 241.336556][T11024] do_iter_read+0x4a4/0x660 [ 241.341049][T11024] ? dup_iter+0x260/0x260 [ 241.345370][T11024] vfs_readv+0xf0/0x160 [ 241.349503][T11024] ? compat_rw_copy_check_uvector+0x4c0/0x4c0 [ 241.355546][T11024] ? __kasan_check_read+0x11/0x20 [ 241.360595][T11024] ? ksys_dup3+0x3e0/0x3e0 [ 241.364988][T11024] ? wait_for_completion+0x440/0x440 [ 241.370254][T11024] ? __fget_light+0x1a9/0x230 [ 241.374905][T11024] do_preadv+0x1c4/0x280 [ 241.379121][T11024] ? do_readv+0x330/0x330 [ 241.383428][T11024] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 241.388931][T11024] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 241.394395][T11024] ? do_syscall_64+0x26/0x760 [ 241.399079][T11024] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 241.405119][T11024] ? do_syscall_64+0x26/0x760 [ 241.409789][T11024] __x64_sys_preadv+0x9a/0xf0 [ 241.414443][T11024] do_syscall_64+0xfa/0x760 [ 241.418926][T11024] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 241.424802][T11024] RIP: 0033:0x459879 [ 241.428694][T11024] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 241.448403][T11024] RSP: 002b:00007f1e7f50fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 241.456784][T11024] RAX: ffffffffffffffda RBX: 00007f1e7f50fc90 RCX: 0000000000459879 21:27:24 executing program 3 (fault-call:6 fault-nth:2): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x0) 21:27:24 executing program 0 (fault-call:10 fault-nth:2): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffbc000) [ 241.464728][T11024] RDX: 0000000000000002 RSI: 0000000020000200 RDI: 0000000000000004 [ 241.472673][T11024] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 241.480619][T11024] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1e7f5106d4 [ 241.488568][T11024] R13: 00000000004c6b98 R14: 00000000004dbd88 R15: 0000000000000005 [ 241.500135][T11024] ioremap reserve_memtype failed -12 21:27:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace(0x11, r1) [ 241.581730][T11048] FAULT_INJECTION: forcing a failure. [ 241.581730][T11048] name failslab, interval 1, probability 0, space 0, times 0 [ 241.621469][T11048] CPU: 1 PID: 11048 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 241.630708][T11048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 241.640918][T11048] Call Trace: [ 241.644212][T11048] dump_stack+0x172/0x1f0 [ 241.648546][T11048] should_fail.cold+0xa/0x15 [ 241.653143][T11048] ? fault_create_debugfs_attr+0x180/0x180 [ 241.658957][T11048] ? ___might_sleep+0x163/0x280 [ 241.663818][T11048] __should_failslab+0x121/0x190 [ 241.668758][T11048] should_failslab+0x9/0x14 [ 241.673275][T11048] kmem_cache_alloc_node_trace+0x274/0x750 [ 241.679082][T11048] ? _raw_spin_unlock+0x2d/0x50 [ 241.683932][T11048] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 241.690180][T11048] __get_vm_area_node+0x12b/0x370 [ 241.695193][T11048] ? pat_init+0x4d0/0x4d0 [ 241.699514][T11048] ? memremap+0x3c3/0x520 [ 241.703842][T11048] get_vm_area_caller+0x47/0x60 [ 241.708684][T11048] ? memremap+0x3c3/0x520 [ 241.713007][T11048] __ioremap_caller.constprop.0+0x362/0x710 [ 241.718891][T11048] ? memremap+0x3c3/0x520 [ 241.723219][T11048] ? iounmap+0x1b0/0x1b0 [ 241.727457][T11048] ? __kasan_check_write+0x14/0x20 [ 241.732560][T11048] ? _raw_read_unlock+0x2d/0x50 [ 241.737416][T11048] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 241.743657][T11048] ? region_intersects+0x263/0x2f0 [ 241.748760][T11048] ioremap_cache+0x24/0x30 [ 241.753167][T11048] memremap+0x3c3/0x520 [ 241.757318][T11048] ? devm_memremap_match+0x40/0x40 [ 241.762419][T11048] ? _raw_read_unlock+0x2d/0x50 [ 241.767264][T11048] ? iomem_is_exclusive+0x33/0x1af [ 241.772370][T11048] xlate_dev_mem_ptr+0x28/0x50 [ 241.777132][T11048] read_mem+0xdc/0x2c0 [ 241.781199][T11048] ? rw_verify_area+0x126/0x360 [ 241.786045][T11048] do_iter_read+0x4a4/0x660 [ 241.790537][T11048] ? dup_iter+0x260/0x260 [ 241.794865][T11048] vfs_readv+0xf0/0x160 [ 241.799012][T11048] ? compat_rw_copy_check_uvector+0x4c0/0x4c0 [ 241.805155][T11048] ? __kasan_check_read+0x11/0x20 [ 241.810179][T11048] ? ksys_dup3+0x3e0/0x3e0 [ 241.814590][T11048] ? wait_for_completion+0x440/0x440 [ 241.819873][T11048] ? __fget_light+0x1a9/0x230 [ 241.824555][T11048] do_preadv+0x1c4/0x280 [ 241.828790][T11048] ? do_readv+0x330/0x330 [ 241.833113][T11048] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 241.838562][T11048] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 241.844016][T11048] ? do_syscall_64+0x26/0x760 [ 241.848682][T11048] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 241.854736][T11048] ? do_syscall_64+0x26/0x760 [ 241.859405][T11048] __x64_sys_preadv+0x9a/0xf0 [ 241.864075][T11048] do_syscall_64+0xfa/0x760 [ 241.868587][T11048] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 241.874469][T11048] RIP: 0033:0x459879 [ 241.878355][T11048] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 241.897943][T11048] RSP: 002b:00007f1e7f50fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 241.906341][T11048] RAX: ffffffffffffffda RBX: 00007f1e7f50fc90 RCX: 0000000000459879 [ 241.914300][T11048] RDX: 0000000000000002 RSI: 0000000020000200 RDI: 0000000000000004 [ 241.922258][T11048] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 21:27:24 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffbc000) 21:27:24 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000000)=0x44a, &(0x7f0000000040)=0x4) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, 0x0, 0x0) [ 241.930219][T11048] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1e7f5106d4 [ 241.938181][T11048] R13: 00000000004c6b98 R14: 00000000004dbd88 R15: 0000000000000005 21:27:24 executing program 5: io_uring_setup(0xa4, &(0x7f0000000080)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x2080}, {r0, 0x100}], 0x2, 0x0, 0x0, 0x0) 21:27:24 executing program 3 (fault-call:6 fault-nth:3): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x0) 21:27:24 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)={{0x0, 0x2, 0x10000, 0x0, 0x400000000000000}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) [ 242.175941][T11069] FAULT_INJECTION: forcing a failure. [ 242.175941][T11069] name failslab, interval 1, probability 0, space 0, times 0 [ 242.196198][T11069] CPU: 1 PID: 11069 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 242.205317][T11069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 242.215367][T11069] Call Trace: [ 242.218672][T11069] dump_stack+0x172/0x1f0 [ 242.223011][T11069] should_fail.cold+0xa/0x15 [ 242.227605][T11069] ? fault_create_debugfs_attr+0x180/0x180 [ 242.233420][T11069] ? ___might_sleep+0x163/0x280 [ 242.238280][T11069] __should_failslab+0x121/0x190 [ 242.243225][T11069] should_failslab+0x9/0x14 [ 242.247727][T11069] kmem_cache_alloc_node_trace+0x274/0x750 [ 242.253530][T11069] ? _raw_spin_unlock+0x2d/0x50 [ 242.258376][T11069] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 242.264618][T11069] __get_vm_area_node+0x12b/0x370 [ 242.269636][T11069] ? pat_init+0x4d0/0x4d0 [ 242.273964][T11069] ? memremap+0x3c3/0x520 [ 242.278289][T11069] get_vm_area_caller+0x47/0x60 [ 242.283120][T11069] ? memremap+0x3c3/0x520 [ 242.287442][T11069] __ioremap_caller.constprop.0+0x362/0x710 [ 242.293362][T11069] ? memremap+0x3c3/0x520 [ 242.297704][T11069] ? iounmap+0x1b0/0x1b0 [ 242.301925][T11069] ? __kasan_check_write+0x14/0x20 [ 242.307017][T11069] ? _raw_read_unlock+0x2d/0x50 [ 242.311843][T11069] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 242.318062][T11069] ? region_intersects+0x263/0x2f0 [ 242.323152][T11069] ioremap_cache+0x24/0x30 [ 242.327545][T11069] memremap+0x3c3/0x520 [ 242.331674][T11069] ? devm_memremap_match+0x40/0x40 [ 242.336761][T11069] ? _raw_read_unlock+0x2d/0x50 [ 242.341607][T11069] ? iomem_is_exclusive+0x33/0x1af [ 242.346711][T11069] xlate_dev_mem_ptr+0x28/0x50 [ 242.351466][T11069] read_mem+0xdc/0x2c0 [ 242.355526][T11069] ? rw_verify_area+0x126/0x360 [ 242.360354][T11069] do_iter_read+0x4a4/0x660 [ 242.364845][T11069] ? dup_iter+0x260/0x260 [ 242.369190][T11069] vfs_readv+0xf0/0x160 [ 242.373323][T11069] ? compat_rw_copy_check_uvector+0x4c0/0x4c0 [ 242.379365][T11069] ? __kasan_check_read+0x11/0x20 [ 242.384374][T11069] ? ksys_dup3+0x3e0/0x3e0 [ 242.388771][T11069] ? wait_for_completion+0x440/0x440 [ 242.394037][T11069] ? __fget_light+0x1a9/0x230 [ 242.398691][T11069] do_preadv+0x1c4/0x280 [ 242.402912][T11069] ? do_readv+0x330/0x330 [ 242.407332][T11069] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 242.412800][T11069] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 242.418238][T11069] ? do_syscall_64+0x26/0x760 [ 242.422891][T11069] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 242.428936][T11069] ? do_syscall_64+0x26/0x760 [ 242.433602][T11069] __x64_sys_preadv+0x9a/0xf0 [ 242.438265][T11069] do_syscall_64+0xfa/0x760 [ 242.442747][T11069] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 242.448649][T11069] RIP: 0033:0x459879 [ 242.452522][T11069] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 21:27:25 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x800) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 21:27:25 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0x2000014c}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffbc000) [ 242.472097][T11069] RSP: 002b:00007f1e7f50fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 242.480579][T11069] RAX: ffffffffffffffda RBX: 00007f1e7f50fc90 RCX: 0000000000459879 [ 242.488528][T11069] RDX: 0000000000000002 RSI: 0000000020000200 RDI: 0000000000000004 [ 242.496479][T11069] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 242.504432][T11069] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1e7f5106d4 [ 242.512381][T11069] R13: 00000000004c6b98 R14: 00000000004dbd88 R15: 0000000000000005 21:27:25 executing program 5: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ppoll(&(0x7f0000000000)=[{r0}, {r1, 0x100}], 0x2, 0x0, 0x0, 0x0) 21:27:25 executing program 3 (fault-call:6 fault-nth:4): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x0) [ 242.748288][T11085] FAULT_INJECTION: forcing a failure. [ 242.748288][T11085] name failslab, interval 1, probability 0, space 0, times 0 [ 242.772485][T11085] CPU: 0 PID: 11085 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 242.781607][T11085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 242.791659][T11085] Call Trace: 21:27:25 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0x7ffff000}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffbc000) [ 242.795023][T11085] dump_stack+0x172/0x1f0 [ 242.799358][T11085] should_fail.cold+0xa/0x15 [ 242.803955][T11085] ? fault_create_debugfs_attr+0x180/0x180 [ 242.809769][T11085] ? __should_failslab+0x79/0x190 [ 242.814791][T11085] __should_failslab+0x121/0x190 [ 242.819723][T11085] should_failslab+0x9/0x14 [ 242.824213][T11085] kmem_cache_alloc_node+0x268/0x740 [ 242.829478][T11085] ? ___might_sleep+0x163/0x280 [ 242.834311][T11085] alloc_vmap_area+0x140/0x2080 [ 242.839150][T11085] ? __get_vm_area_node+0x12b/0x370 [ 242.844337][T11085] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 242.849889][T11085] ? purge_vmap_area_lazy+0x40/0x40 [ 242.855092][T11085] ? _raw_spin_unlock+0x2d/0x50 [ 242.859946][T11085] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 242.866278][T11085] __get_vm_area_node+0x179/0x370 [ 242.871279][T11085] ? memremap+0x3c3/0x520 [ 242.875585][T11085] get_vm_area_caller+0x47/0x60 [ 242.880419][T11085] ? memremap+0x3c3/0x520 [ 242.884738][T11085] __ioremap_caller.constprop.0+0x362/0x710 [ 242.890609][T11085] ? memremap+0x3c3/0x520 [ 242.894917][T11085] ? iounmap+0x1b0/0x1b0 [ 242.899146][T11085] ? __kasan_check_write+0x14/0x20 [ 242.904247][T11085] ? _raw_read_unlock+0x2d/0x50 [ 242.909074][T11085] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 242.915295][T11085] ? region_intersects+0x263/0x2f0 [ 242.920396][T11085] ioremap_cache+0x24/0x30 [ 242.924799][T11085] memremap+0x3c3/0x520 [ 242.928932][T11085] ? devm_memremap_match+0x40/0x40 [ 242.934017][T11085] ? _raw_read_unlock+0x2d/0x50 [ 242.938853][T11085] ? iomem_is_exclusive+0x33/0x1af [ 242.943951][T11085] xlate_dev_mem_ptr+0x28/0x50 [ 242.948693][T11085] read_mem+0xdc/0x2c0 [ 242.952738][T11085] ? rw_verify_area+0x126/0x360 [ 242.957696][T11085] do_iter_read+0x4a4/0x660 [ 242.962218][T11085] ? dup_iter+0x260/0x260 [ 242.966537][T11085] vfs_readv+0xf0/0x160 [ 242.970683][T11085] ? compat_rw_copy_check_uvector+0x4c0/0x4c0 [ 242.976721][T11085] ? __rcu_read_unlock+0x220/0x6b0 [ 242.981818][T11085] ? __kasan_check_read+0x11/0x20 [ 242.986836][T11085] ? ksys_dup3+0x3e0/0x3e0 [ 242.991277][T11085] ? wait_for_completion+0x440/0x440 [ 242.996539][T11085] ? __fget_light+0x1a9/0x230 [ 243.001205][T11085] do_preadv+0x1c4/0x280 [ 243.005481][T11085] ? do_readv+0x330/0x330 [ 243.009786][T11085] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 243.015221][T11085] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 243.020663][T11085] ? do_syscall_64+0x26/0x760 [ 243.025326][T11085] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 243.031361][T11085] ? do_syscall_64+0x26/0x760 [ 243.036012][T11085] __x64_sys_preadv+0x9a/0xf0 [ 243.040678][T11085] do_syscall_64+0xfa/0x760 [ 243.045170][T11085] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 243.051036][T11085] RIP: 0033:0x459879 [ 243.054907][T11085] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 243.074486][T11085] RSP: 002b:00007f1e7f50fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 243.082875][T11085] RAX: ffffffffffffffda RBX: 00007f1e7f50fc90 RCX: 0000000000459879 [ 243.090823][T11085] RDX: 0000000000000002 RSI: 0000000020000200 RDI: 0000000000000004 21:27:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace(0x2, r1) 21:27:25 executing program 5 (fault-call:3 fault-nth:0): r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ppoll(&(0x7f0000000000)=[{r0}, {r1, 0x100}], 0x2, 0x0, 0x0, 0x0) [ 243.098781][T11085] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 243.106743][T11085] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1e7f5106d4 [ 243.114690][T11085] R13: 00000000004c6b98 R14: 00000000004dbd88 R15: 0000000000000005 21:27:25 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 21:27:25 executing program 3 (fault-call:6 fault-nth:5): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x0) 21:27:25 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = semget$private(0x0, 0x20000000102, 0x0) semop(r1, &(0x7f0000000140)=[{0x0, 0xffffffffffffff89}], 0x1) semop(r1, &(0x7f0000000080)=[{}, {0x0, 0xffffffff}], 0x2) semctl$GETNCNT(r1, 0x0, 0xe, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, 0x0, 0x0) 21:27:26 executing program 5: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ppoll(&(0x7f0000000000)=[{r0}, {r1, 0x100}], 0x2, 0x0, 0x0, 0x0) [ 243.405949][T11109] FAULT_INJECTION: forcing a failure. [ 243.405949][T11109] name failslab, interval 1, probability 0, space 0, times 0 [ 243.431246][T11113] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 243.431246][T11113] The task syz-executor.2 (11113) triggered the difference, watch for misbehavior. 21:27:26 executing program 4: r0 = msgget$private(0x0, 0x80) msgrcv(r0, &(0x7f00000002c0)={0x0, ""/101}, 0x6d, 0x2, 0x800) r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) r2 = msgget(0x2, 0x0) msgctl$IPC_STAT(r2, 0x2, &(0x7f0000000100)=""/152) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$IMSETDEVNAME(r3, 0x80184947, &(0x7f0000000340)={0xc107, 'syz0\x00'}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) setxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.ima\x00', &(0x7f00000001c0)=@sha1={0x1, "b53e1e05fe2a7af3613dfc3be2d5ab24aae77d04"}, 0x15, 0x1) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000200)=""/134) [ 243.445697][T11109] CPU: 1 PID: 11109 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 243.458508][T11109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 243.468556][T11109] Call Trace: [ 243.471853][T11109] dump_stack+0x172/0x1f0 [ 243.476194][T11109] should_fail.cold+0xa/0x15 [ 243.480805][T11109] ? fault_create_debugfs_attr+0x180/0x180 [ 243.486617][T11109] ? ___might_sleep+0x163/0x280 [ 243.491492][T11109] __should_failslab+0x121/0x190 [ 243.496440][T11109] should_failslab+0x9/0x14 [ 243.500942][T11109] kmem_cache_alloc_trace+0x2d3/0x790 21:27:26 executing program 2: syz_init_net_socket$netrom(0x6, 0x5, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) write$char_usb(r2, &(0x7f0000000080)="219ddd7ec271f5ef3272a8cfa2a2ef7e4d631478ffb8a4d97440b9b3a4022aef402e94bcf4527a4eda32f64185863bfbfdfb5144951998fac955983bb10f76a105f2c57fb5d23f2830fdb93cc3428a6afebef54ef4e5c716e68128bf89415e2eb8dce036b503b17c7c090975d10f0d3cad326298102713ba4397c50cb4374b7a23101ed48d9324", 0x87) splice(r1, 0x0, r3, 0x0, 0x30005, 0x0) getsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, 0x0, 0x0) [ 243.506311][T11109] ? trace_hardirqs_on+0x67/0x240 [ 243.511347][T11109] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 243.517590][T11109] ? __phys_addr+0xa4/0x120 [ 243.522090][T11109] read_mem+0x9d/0x2c0 [ 243.522110][T11109] do_iter_read+0x4a4/0x660 [ 243.522128][T11109] ? dup_iter+0x260/0x260 [ 243.534980][T11109] vfs_readv+0xf0/0x160 [ 243.534998][T11109] ? compat_rw_copy_check_uvector+0x4c0/0x4c0 [ 243.535012][T11109] ? __kasan_check_read+0x11/0x20 [ 243.535040][T11109] ? ksys_dup3+0x3e0/0x3e0 [ 243.535058][T11109] ? wait_for_completion+0x440/0x440 [ 243.535076][T11109] ? __fget_light+0x1a9/0x230 [ 243.564575][T11109] do_preadv+0x1c4/0x280 [ 243.568808][T11109] ? do_readv+0x330/0x330 [ 243.568823][T11109] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 243.568839][T11109] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 243.568854][T11109] ? do_syscall_64+0x26/0x760 [ 243.568871][T11109] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 243.568884][T11109] ? do_syscall_64+0x26/0x760 [ 243.568903][T11109] __x64_sys_preadv+0x9a/0xf0 [ 243.568921][T11109] do_syscall_64+0xfa/0x760 [ 243.608618][T11109] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 243.614511][T11109] RIP: 0033:0x459879 [ 243.618415][T11109] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 243.638028][T11109] RSP: 002b:00007f1e7f50fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 243.646435][T11109] RAX: ffffffffffffffda RBX: 00007f1e7f50fc90 RCX: 0000000000459879 21:27:26 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x9ffff174}], 0x2, 0xfffbc000) [ 243.654386][T11109] RDX: 0000000000000002 RSI: 0000000020000200 RDI: 0000000000000004 [ 243.662332][T11109] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 243.670291][T11109] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1e7f5106d4 [ 243.678249][T11109] R13: 00000000004c6b98 R14: 00000000004dbd88 R15: 0000000000000005 21:27:26 executing program 5: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ppoll(&(0x7f0000000000)=[{r0, 0x3}, {r1, 0x100}], 0x2, 0x0, 0x0, 0x0) 21:27:26 executing program 3 (fault-call:6 fault-nth:6): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x0) 21:27:26 executing program 5: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ppoll(&(0x7f0000000000)=[{r0, 0x8}, {r1, 0x100}], 0x2, 0x0, 0x0, 0x0) [ 243.904951][T11134] FAULT_INJECTION: forcing a failure. [ 243.904951][T11134] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 243.918181][T11134] CPU: 0 PID: 11134 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 243.927275][T11134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 243.937326][T11134] Call Trace: [ 243.940625][T11134] dump_stack+0x172/0x1f0 [ 243.944970][T11134] should_fail.cold+0xa/0x15 [ 243.949574][T11134] ? fault_create_debugfs_attr+0x180/0x180 [ 243.955382][T11134] ? __kasan_check_read+0x11/0x20 [ 243.960406][T11134] ? __lock_acquire+0x16f2/0x4a00 [ 243.965428][T11134] ? __x64_sys_preadv+0x9a/0xf0 [ 243.970276][T11134] should_fail_alloc_page+0x50/0x60 [ 243.975458][T11134] __alloc_pages_nodemask+0x1a1/0x900 [ 243.980807][T11134] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 243.986417][T11134] ? __alloc_pages_slowpath+0x2540/0x2540 [ 243.992109][T11134] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 243.997740][T11134] ? fault_create_debugfs_attr+0x180/0x180 [ 244.003545][T11134] cache_grow_begin+0x90/0xd20 [ 244.008312][T11134] ? read_mem+0x9d/0x2c0 [ 244.012558][T11134] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 244.018803][T11134] kmem_cache_alloc_trace+0x6b3/0x790 [ 244.024187][T11134] read_mem+0x9d/0x2c0 [ 244.028262][T11134] do_iter_read+0x4a4/0x660 [ 244.032765][T11134] ? dup_iter+0x260/0x260 [ 244.037107][T11134] vfs_readv+0xf0/0x160 [ 244.041261][T11134] ? compat_rw_copy_check_uvector+0x4c0/0x4c0 [ 244.047328][T11134] ? __kasan_check_read+0x11/0x20 [ 244.052364][T11134] ? ksys_dup3+0x3e0/0x3e0 [ 244.056781][T11134] ? wait_for_completion+0x440/0x440 [ 244.062077][T11134] ? __fget_light+0x1a9/0x230 [ 244.066773][T11134] do_preadv+0x1c4/0x280 [ 244.071018][T11134] ? do_readv+0x330/0x330 [ 244.075347][T11134] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 244.080804][T11134] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 244.086248][T11134] ? do_syscall_64+0x26/0x760 [ 244.090901][T11134] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 244.096965][T11134] ? do_syscall_64+0x26/0x760 [ 244.101642][T11134] __x64_sys_preadv+0x9a/0xf0 [ 244.106305][T11134] do_syscall_64+0xfa/0x760 [ 244.110788][T11134] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 244.116653][T11134] RIP: 0033:0x459879 [ 244.120530][T11134] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 244.140123][T11134] RSP: 002b:00007f1e7f50fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 244.148517][T11134] RAX: ffffffffffffffda RBX: 00007f1e7f50fc90 RCX: 0000000000459879 21:27:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace(0x4, r1) 21:27:26 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x4, 0xfffbc000) [ 244.156470][T11134] RDX: 0000000000000002 RSI: 0000000020000200 RDI: 0000000000000004 [ 244.164418][T11134] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 244.172366][T11134] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1e7f5106d4 [ 244.180318][T11134] R13: 00000000004c6b98 R14: 00000000004dbd88 R15: 0000000000000005 21:27:26 executing program 3 (fault-call:6 fault-nth:7): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x0) 21:27:27 executing program 5: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ppoll(&(0x7f0000000000)=[{r0, 0x300}, {r1, 0x100}], 0x2, 0x0, 0x0, 0x0) 21:27:27 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) delete_module(&(0x7f0000000040)=']\x00', 0x800) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 21:27:27 executing program 2: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0xa6c4b774b13e802, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000140), &(0x7f0000000180)=0x4) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x10400, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x101000, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$VIDIOC_SUBDEV_S_CROP(r5, 0xc038563c, &(0x7f0000000080)={0x1, 0x0, {0x401, 0x6, 0x40, 0x3f}}) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r3, 0x0, r4, 0x0, 0x30005, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0x4240a2a0) setsockopt$netlink_NETLINK_CAP_ACK(r6, 0x10e, 0xa, &(0x7f00000000c0)=0x8000000000, 0x4) getsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, 0x0, 0x0) 21:27:27 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x8, 0xfffbc000) [ 244.489139][T11158] FAULT_INJECTION: forcing a failure. [ 244.489139][T11158] name failslab, interval 1, probability 0, space 0, times 0 [ 244.541729][T11158] CPU: 0 PID: 11158 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 244.550859][T11158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 244.560999][T11158] Call Trace: [ 244.564300][T11158] dump_stack+0x172/0x1f0 [ 244.568633][T11158] should_fail.cold+0xa/0x15 [ 244.573216][T11158] ? fault_create_debugfs_attr+0x180/0x180 [ 244.579026][T11158] ? ___might_sleep+0x163/0x280 [ 244.583883][T11158] __should_failslab+0x121/0x190 [ 244.588826][T11158] should_failslab+0x9/0x14 [ 244.593338][T11158] kmem_cache_alloc_node+0x268/0x740 [ 244.598622][T11158] ? ___might_sleep+0x163/0x280 [ 244.603484][T11158] alloc_vmap_area+0x140/0x2080 [ 244.608348][T11158] ? __get_vm_area_node+0x12b/0x370 [ 244.613554][T11158] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 244.619113][T11158] ? purge_vmap_area_lazy+0x40/0x40 [ 244.624319][T11158] __get_vm_area_node+0x179/0x370 [ 244.629362][T11158] ? memremap+0x3c3/0x520 [ 244.633701][T11158] get_vm_area_caller+0x47/0x60 [ 244.638560][T11158] ? memremap+0x3c3/0x520 [ 244.642898][T11158] __ioremap_caller.constprop.0+0x362/0x710 [ 244.648797][T11158] ? memremap+0x3c3/0x520 [ 244.653148][T11158] ? iounmap+0x1b0/0x1b0 [ 244.657396][T11158] ? __kasan_check_write+0x14/0x20 [ 244.662512][T11158] ? _raw_read_unlock+0x2d/0x50 [ 244.667362][T11158] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 244.673602][T11158] ? region_intersects+0x263/0x2f0 [ 244.678719][T11158] ioremap_cache+0x24/0x30 [ 244.683136][T11158] memremap+0x3c3/0x520 [ 244.687305][T11158] ? devm_memremap_match+0x40/0x40 21:27:27 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x9fbff) [ 244.692408][T11158] ? _raw_read_unlock+0x2d/0x50 [ 244.697265][T11158] ? iomem_is_exclusive+0x33/0x1af [ 244.702382][T11158] xlate_dev_mem_ptr+0x28/0x50 [ 244.707146][T11158] read_mem+0xdc/0x2c0 [ 244.711223][T11158] do_iter_read+0x4a4/0x660 [ 244.715719][T11158] ? dup_iter+0x260/0x260 [ 244.720056][T11158] vfs_readv+0xf0/0x160 [ 244.724206][T11158] ? compat_rw_copy_check_uvector+0x4c0/0x4c0 [ 244.730275][T11158] ? __kasan_check_read+0x11/0x20 [ 244.735312][T11158] ? ksys_dup3+0x3e0/0x3e0 [ 244.739731][T11158] ? wait_for_completion+0x440/0x440 [ 244.745008][T11158] ? __fget_light+0x1a9/0x230 [ 244.749673][T11158] do_preadv+0x1c4/0x280 [ 244.753905][T11158] ? do_readv+0x330/0x330 [ 244.758220][T11158] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 244.763665][T11158] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 244.769118][T11158] ? do_syscall_64+0x26/0x760 [ 244.773787][T11158] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 244.779839][T11158] ? do_syscall_64+0x26/0x760 [ 244.784507][T11158] __x64_sys_preadv+0x9a/0xf0 [ 244.789173][T11158] do_syscall_64+0xfa/0x760 [ 244.793664][T11158] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 244.799545][T11158] RIP: 0033:0x459879 [ 244.803426][T11158] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 244.823003][T11158] RSP: 002b:00007f1e7f50fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 244.831387][T11158] RAX: ffffffffffffffda RBX: 00007f1e7f50fc90 RCX: 0000000000459879 21:27:27 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x100, 0x0) getpeername$unix(r1, &(0x7f0000000100), &(0x7f0000000080)=0x6e) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r3, 0x0, 0x30005, 0x0) ioctl$SIOCRSGCAUSE(r1, 0x89e0, &(0x7f00000003c0)) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="080100a4", @ANYRES16=r4, @ANYBLOB="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"], 0x108}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000) [ 244.839341][T11158] RDX: 0000000000000002 RSI: 0000000020000200 RDI: 0000000000000004 [ 244.847305][T11158] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 244.855259][T11158] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1e7f5106d4 [ 244.863224][T11158] R13: 00000000004c6b98 R14: 00000000004dbd88 R15: 0000000000000005 21:27:27 executing program 5: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ppoll(&(0x7f0000000000)=[{r0, 0x3000000}, {r1, 0x100}], 0x2, 0x0, 0x0, 0x0) 21:27:27 executing program 3 (fault-call:6 fault-nth:8): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x0) 21:27:27 executing program 5: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ppoll(&(0x7f0000000000)=[{r0, 0x8000000}, {r1, 0x100}], 0x2, 0x0, 0x0, 0x0) 21:27:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace(0x5, r1) [ 245.091746][T11187] FAULT_INJECTION: forcing a failure. [ 245.091746][T11187] name failslab, interval 1, probability 0, space 0, times 0 [ 245.127047][T11187] CPU: 0 PID: 11187 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 21:27:27 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x9ffff) [ 245.136172][T11187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 245.146224][T11187] Call Trace: [ 245.149522][T11187] dump_stack+0x172/0x1f0 [ 245.153863][T11187] should_fail.cold+0xa/0x15 [ 245.158468][T11187] ? fault_create_debugfs_attr+0x180/0x180 [ 245.164277][T11187] ? ___might_sleep+0x163/0x280 [ 245.169135][T11187] __should_failslab+0x121/0x190 [ 245.174077][T11187] should_failslab+0x9/0x14 [ 245.178580][T11187] kmem_cache_alloc_node_trace+0x274/0x750 [ 245.184395][T11187] ? _raw_spin_unlock+0x2d/0x50 [ 245.189246][T11187] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 245.195491][T11187] __get_vm_area_node+0x12b/0x370 [ 245.200516][T11187] ? pat_init+0x4d0/0x4d0 [ 245.204847][T11187] ? memremap+0x3c3/0x520 [ 245.209190][T11187] get_vm_area_caller+0x47/0x60 [ 245.214045][T11187] ? memremap+0x3c3/0x520 [ 245.218380][T11187] __ioremap_caller.constprop.0+0x362/0x710 [ 245.224279][T11187] ? memremap+0x3c3/0x520 [ 245.228607][T11187] ? iounmap+0x1b0/0x1b0 [ 245.232858][T11187] ? __kasan_check_write+0x14/0x20 [ 245.237977][T11187] ? _raw_read_unlock+0x2d/0x50 [ 245.242833][T11187] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 245.249075][T11187] ? region_intersects+0x263/0x2f0 [ 245.254178][T11187] ioremap_cache+0x24/0x30 [ 245.258592][T11187] memremap+0x3c3/0x520 [ 245.262789][T11187] ? devm_memremap_match+0x40/0x40 [ 245.267896][T11187] ? _raw_read_unlock+0x2d/0x50 [ 245.272736][T11187] ? iomem_is_exclusive+0x33/0x1af [ 245.277836][T11187] xlate_dev_mem_ptr+0x28/0x50 [ 245.282601][T11187] read_mem+0xdc/0x2c0 [ 245.286772][T11187] do_iter_read+0x4a4/0x660 [ 245.291263][T11187] ? dup_iter+0x260/0x260 [ 245.295596][T11187] vfs_readv+0xf0/0x160 [ 245.299760][T11187] ? compat_rw_copy_check_uvector+0x4c0/0x4c0 [ 245.305817][T11187] ? lockdep_hardirqs_on+0x418/0x5d0 [ 245.311095][T11187] ? retint_kernel+0x2b/0x2b [ 245.315677][T11187] ? trace_hardirqs_on_caller+0x6a/0x240 [ 245.321293][T11187] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 245.326749][T11187] ? __this_cpu_preempt_check+0x3a/0x210 [ 245.332372][T11187] ? retint_kernel+0x2b/0x2b [ 245.336976][T11187] do_preadv+0x1c4/0x280 21:27:28 executing program 2: syz_init_net_socket$netrom(0x6, 0x5, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x30005, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000000080)) r3 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd, 0x8a00}, 0xc) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r3, 0x0, 0x30005, 0x0) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, 0x0, 0x0) [ 245.341223][T11187] ? do_readv+0x330/0x330 [ 245.345548][T11187] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 245.351002][T11187] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 245.356461][T11187] ? do_syscall_64+0x26/0x760 [ 245.361145][T11187] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 245.367213][T11187] ? do_syscall_64+0x26/0x760 [ 245.371896][T11187] __x64_sys_preadv+0x9a/0xf0 [ 245.376673][T11187] do_syscall_64+0xfa/0x760 [ 245.381189][T11187] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 245.387071][T11187] RIP: 0033:0x459879 21:27:28 executing program 3 (fault-call:6 fault-nth:9): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x0) [ 245.387087][T11187] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 245.387095][T11187] RSP: 002b:00007f1e7f50fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 245.387109][T11187] RAX: ffffffffffffffda RBX: 00007f1e7f50fc90 RCX: 0000000000459879 [ 245.387117][T11187] RDX: 0000000000000002 RSI: 0000000020000200 RDI: 0000000000000004 [ 245.387125][T11187] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 245.387134][T11187] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1e7f5106d4 [ 245.387143][T11187] R13: 00000000004c6b98 R14: 00000000004dbd88 R15: 0000000000000005 21:27:28 executing program 5: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ppoll(&(0x7f0000000000)=[{r0, 0x1000000000000}, {r1, 0x100}], 0x2, 0x0, 0x0, 0x0) [ 245.559755][T11207] FAULT_INJECTION: forcing a failure. [ 245.559755][T11207] name failslab, interval 1, probability 0, space 0, times 0 [ 245.589469][T11207] CPU: 1 PID: 11207 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 245.598596][T11207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 245.608647][T11207] Call Trace: [ 245.611949][T11207] dump_stack+0x172/0x1f0 [ 245.616294][T11207] should_fail.cold+0xa/0x15 [ 245.620904][T11207] ? fault_create_debugfs_attr+0x180/0x180 [ 245.626724][T11207] ? ___might_sleep+0x163/0x280 [ 245.631590][T11207] __should_failslab+0x121/0x190 [ 245.636538][T11207] should_failslab+0x9/0x14 [ 245.641145][T11207] kmem_cache_alloc_node+0x268/0x740 [ 245.646436][T11207] ? ___might_sleep+0x163/0x280 [ 245.651304][T11207] alloc_vmap_area+0x140/0x2080 [ 245.656156][T11207] ? __get_vm_area_node+0x12b/0x370 [ 245.661343][T11207] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 245.661367][T11207] ? purge_vmap_area_lazy+0x40/0x40 [ 245.661384][T11207] ? _raw_spin_unlock+0x2d/0x50 [ 245.661404][T11207] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 245.683166][T11207] __get_vm_area_node+0x179/0x370 [ 245.688193][T11207] ? memremap+0x3c3/0x520 [ 245.692516][T11207] get_vm_area_caller+0x47/0x60 [ 245.697362][T11207] ? memremap+0x3c3/0x520 [ 245.701716][T11207] __ioremap_caller.constprop.0+0x362/0x710 [ 245.707639][T11207] ? memremap+0x3c3/0x520 [ 245.711950][T11207] ? iounmap+0x1b0/0x1b0 [ 245.716175][T11207] ? __kasan_check_write+0x14/0x20 [ 245.721280][T11207] ? _raw_read_unlock+0x2d/0x50 [ 245.726139][T11207] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 245.732370][T11207] ? region_intersects+0x263/0x2f0 [ 245.737472][T11207] ioremap_cache+0x24/0x30 [ 245.741889][T11207] memremap+0x3c3/0x520 [ 245.746034][T11207] ? devm_memremap_match+0x40/0x40 [ 245.751123][T11207] ? _raw_read_unlock+0x2d/0x50 21:27:28 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e20, 0x101, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1f}}, 0x0, 0x8, 0x0, "d7fa9b7e97152f24d9bc87cbfa069c7d32065e4ccd29472410ff0e3d6d3ae1bf339e359fef1962e60adc840143f8985dfe0d9fe286944095e326725ba14ef18bef47578c8a74c1b993e006e491d1deed"}, 0xd8) [ 245.755954][T11207] ? iomem_is_exclusive+0x33/0x1af [ 245.761040][T11207] xlate_dev_mem_ptr+0x28/0x50 [ 245.765777][T11207] read_mem+0xdc/0x2c0 [ 245.769839][T11207] do_iter_read+0x4a4/0x660 [ 245.774343][T11207] ? dup_iter+0x260/0x260 [ 245.778685][T11207] vfs_readv+0xf0/0x160 [ 245.782840][T11207] ? compat_rw_copy_check_uvector+0x4c0/0x4c0 [ 245.788905][T11207] ? __kasan_check_read+0x11/0x20 [ 245.793940][T11207] ? ksys_dup3+0x3e0/0x3e0 [ 245.798363][T11207] ? wait_for_completion+0x440/0x440 [ 245.803649][T11207] ? __fget_light+0x1a9/0x230 [ 245.808319][T11207] do_preadv+0x1c4/0x280 [ 245.808352][T11207] ? do_readv+0x330/0x330 [ 245.808367][T11207] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 245.808385][T11207] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 245.827804][T11207] ? do_syscall_64+0x26/0x760 [ 245.832482][T11207] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 245.838550][T11207] ? do_syscall_64+0x26/0x760 [ 245.843252][T11207] __x64_sys_preadv+0x9a/0xf0 [ 245.843271][T11207] do_syscall_64+0xfa/0x760 [ 245.852461][T11207] entry_SYSCALL_64_after_hwframe+0x49/0xbe 21:27:28 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x70, 0x1) write$vhci(r1, &(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, "4513e0dce934d2626fd1db06bfe27ca9871c3dfbfc6757bd46a05b163088623cc2872d090496d6cddf0645552a6bcd79cf3ba61ce2da0134f7e8780da87c3a7b2e318c78aa2c3ceb7ecf30b921d6c2a5328cb4f9bb4d5463872ec63b6d5f40106c5777b7871568eeaf04aca49681eb4b3a117971344f21b702b3c38e8a666f2d57c63a93252b74a0df4800200ededd607a41d3ddc90ac98a1c6233e906993a07b34d4c8383ab35752a7e038e9e0272f4e8aa12f1eb2f0b4ea56a77e29b123cb0e80309d8daa51bb71953e780709a631389236671bdaf43cd94d3432a154b9873060487"}, 0xe4) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4) [ 245.852473][T11207] RIP: 0033:0x459879 [ 245.852487][T11207] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 245.852499][T11207] RSP: 002b:00007f1e7f50fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 245.890218][T11207] RAX: ffffffffffffffda RBX: 00007f1e7f50fc90 RCX: 0000000000459879 [ 245.890227][T11207] RDX: 0000000000000002 RSI: 0000000020000200 RDI: 0000000000000004 21:27:28 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xbffff) [ 245.890235][T11207] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 245.890249][T11207] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1e7f5106d4 [ 245.914098][T11207] R13: 00000000004c6b98 R14: 00000000004dbd88 R15: 0000000000000005 21:27:28 executing program 5: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ppoll(&(0x7f0000000000)=[{r0, 0x300000000000000}, {r1, 0x100}], 0x2, 0x0, 0x0, 0x0) 21:27:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace(0x7, r1) 21:27:28 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x20a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0xc75e43cfae22dd4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 21:27:28 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffff) 21:27:28 executing program 2: syz_init_net_socket$netrom(0x6, 0x5, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x30005, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0) getsockopt$netrom_NETROM_N2(r3, 0x103, 0x3, 0x0, 0x0) 21:27:28 executing program 5: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ppoll(&(0x7f0000000000)=[{r0, 0x800000000000000}, {r1, 0x100}], 0x2, 0x0, 0x0, 0x0) [ 246.272162][T11249] IPVS: ftp: loaded support on port[0] = 21 21:27:29 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x78049d4) 21:27:29 executing program 3 (fault-call:6 fault-nth:10): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x0) 21:27:29 executing program 5: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ppoll(&(0x7f0000000000)=[{r0, 0x0, 0x3}, {r1, 0x100}], 0x2, 0x0, 0x0, 0x0) [ 246.458631][T11251] IPVS: ftp: loaded support on port[0] = 21 21:27:29 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x9c77cff) [ 246.566693][T11269] FAULT_INJECTION: forcing a failure. [ 246.566693][T11269] name failslab, interval 1, probability 0, space 0, times 0 [ 246.589132][T11269] CPU: 0 PID: 11269 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 246.598241][T11269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 246.598247][T11269] Call Trace: [ 246.598270][T11269] dump_stack+0x172/0x1f0 [ 246.598294][T11269] should_fail.cold+0xa/0x15 [ 246.598314][T11269] ? fault_create_debugfs_attr+0x180/0x180 [ 246.598336][T11269] ? ___might_sleep+0x163/0x280 [ 246.598356][T11269] __should_failslab+0x121/0x190 [ 246.598374][T11269] should_failslab+0x9/0x14 [ 246.598387][T11269] kmem_cache_alloc_node_trace+0x274/0x750 [ 246.598417][T11269] ? find_next_iomem_res+0x3b0/0x3b0 [ 246.598433][T11269] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 246.598454][T11269] __get_vm_area_node+0x12b/0x370 [ 246.598466][T11269] ? pat_init+0x4d0/0x4d0 [ 246.616150][T11269] ? memremap+0x3c3/0x520 [ 246.626498][T11269] get_vm_area_caller+0x47/0x60 [ 246.626513][T11269] ? memremap+0x3c3/0x520 [ 246.626536][T11269] __ioremap_caller.constprop.0+0x362/0x710 [ 246.658125][T11269] ? memremap+0x3c3/0x520 [ 246.658142][T11269] ? iounmap+0x1b0/0x1b0 [ 246.658177][T11269] ? __kasan_check_write+0x14/0x20 [ 246.658194][T11269] ? _raw_read_unlock+0x2d/0x50 [ 246.658213][T11269] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 246.676655][T11269] ? region_intersects+0x263/0x2f0 [ 246.676675][T11269] ioremap_cache+0x24/0x30 [ 246.676690][T11269] memremap+0x3c3/0x520 [ 246.676707][T11269] ? devm_memremap_match+0x40/0x40 [ 246.700503][T11269] ? _raw_read_unlock+0x2d/0x50 [ 246.700519][T11269] ? iomem_is_exclusive+0x33/0x1af [ 246.700538][T11269] xlate_dev_mem_ptr+0x28/0x50 [ 246.700555][T11269] read_mem+0xdc/0x2c0 [ 246.700575][T11269] do_iter_read+0x4a4/0x660 [ 246.721102][T11269] ? dup_iter+0x260/0x260 [ 246.721126][T11269] vfs_readv+0xf0/0x160 21:27:29 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xb7fffff) [ 246.721144][T11269] ? compat_rw_copy_check_uvector+0x4c0/0x4c0 [ 246.740299][T11269] ? __kasan_check_read+0x11/0x20 [ 246.740327][T11269] ? ksys_dup3+0x3e0/0x3e0 [ 246.740346][T11269] ? wait_for_completion+0x440/0x440 [ 246.740362][T11269] ? __fget_light+0x1a9/0x230 [ 246.740379][T11269] do_preadv+0x1c4/0x280 [ 246.753659][T11269] ? do_readv+0x330/0x330 [ 246.753675][T11269] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 246.753690][T11269] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 246.753703][T11269] ? do_syscall_64+0x26/0x760 [ 246.753723][T11269] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe 21:27:29 executing program 3 (fault-call:6 fault-nth:11): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x0) [ 246.768218][T11269] ? do_syscall_64+0x26/0x760 [ 246.768239][T11269] __x64_sys_preadv+0x9a/0xf0 [ 246.768257][T11269] do_syscall_64+0xfa/0x760 [ 246.768277][T11269] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 246.768288][T11269] RIP: 0033:0x459879 [ 246.768302][T11269] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 246.768314][T11269] RSP: 002b:00007f1e7f50fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 246.777714][T11269] RAX: ffffffffffffffda RBX: 00007f1e7f50fc90 RCX: 0000000000459879 [ 246.777723][T11269] RDX: 0000000000000002 RSI: 0000000020000200 RDI: 0000000000000004 [ 246.777731][T11269] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 246.777740][T11269] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1e7f5106d4 [ 246.777748][T11269] R13: 00000000004c6b98 R14: 00000000004dbd88 R15: 0000000000000005 21:27:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace(0x8, r1) 21:27:29 executing program 5: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ppoll(&(0x7f0000000000)=[{r0, 0x0, 0x8}, {r1, 0x100}], 0x2, 0x0, 0x0, 0x0) [ 247.085720][T11286] FAULT_INJECTION: forcing a failure. [ 247.085720][T11286] name failslab, interval 1, probability 0, space 0, times 0 [ 247.129061][T11286] CPU: 1 PID: 11286 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 247.138188][T11286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 247.148244][T11286] Call Trace: [ 247.151552][T11286] dump_stack+0x172/0x1f0 [ 247.155902][T11286] should_fail.cold+0xa/0x15 [ 247.160512][T11286] ? fault_create_debugfs_attr+0x180/0x180 [ 247.166329][T11286] ? ___might_sleep+0x163/0x280 [ 247.171182][T11286] __should_failslab+0x121/0x190 [ 247.176134][T11286] should_failslab+0x9/0x14 [ 247.180642][T11286] kmem_cache_alloc_node+0x268/0x740 [ 247.185932][T11286] ? ___might_sleep+0x163/0x280 [ 247.190795][T11286] alloc_vmap_area+0x140/0x2080 [ 247.195654][T11286] ? __get_vm_area_node+0x12b/0x370 [ 247.200852][T11286] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 247.200883][T11286] ? purge_vmap_area_lazy+0x40/0x40 [ 247.211594][T11286] ? find_next_iomem_res+0x3b0/0x3b0 [ 247.216882][T11286] ? __this_cpu_preempt_check+0x3a/0x210 [ 247.216902][T11286] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 247.216924][T11286] __get_vm_area_node+0x179/0x370 [ 247.216941][T11286] ? memremap+0x3c3/0x520 [ 247.216959][T11286] get_vm_area_caller+0x47/0x60 [ 247.216972][T11286] ? memremap+0x3c3/0x520 [ 247.216990][T11286] __ioremap_caller.constprop.0+0x362/0x710 [ 247.217006][T11286] ? memremap+0x3c3/0x520 [ 247.257550][T11286] ? iounmap+0x1b0/0x1b0 [ 247.261811][T11286] ? __kasan_check_write+0x14/0x20 [ 247.266940][T11286] ? _raw_read_unlock+0x2d/0x50 [ 247.271800][T11286] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 247.278049][T11286] ? region_intersects+0x263/0x2f0 [ 247.283170][T11286] ioremap_cache+0x24/0x30 [ 247.287595][T11286] memremap+0x3c3/0x520 [ 247.291761][T11286] ? devm_memremap_match+0x40/0x40 [ 247.296890][T11286] ? _raw_read_unlock+0x2d/0x50 [ 247.301740][T11286] ? iomem_is_exclusive+0x33/0x1af [ 247.306843][T11286] xlate_dev_mem_ptr+0x28/0x50 [ 247.311615][T11286] read_mem+0xdc/0x2c0 [ 247.315688][T11286] do_iter_read+0x4a4/0x660 [ 247.320253][T11286] ? dup_iter+0x260/0x260 [ 247.324577][T11286] vfs_readv+0xf0/0x160 [ 247.328733][T11286] ? compat_rw_copy_check_uvector+0x4c0/0x4c0 [ 247.334870][T11286] ? __kasan_check_read+0x11/0x20 [ 247.339888][T11286] ? ksys_dup3+0x3e0/0x3e0 [ 247.344317][T11286] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 247.349761][T11286] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 247.355203][T11286] ? __fget_light+0x1a9/0x230 [ 247.359866][T11286] do_preadv+0x1c4/0x280 [ 247.364098][T11286] ? do_readv+0x330/0x330 [ 247.368415][T11286] ? retint_kernel+0x2b/0x2b [ 247.373006][T11286] __x64_sys_preadv+0x9a/0xf0 [ 247.377669][T11286] ? do_syscall_64+0x5b/0x760 [ 247.382333][T11286] do_syscall_64+0xfa/0x760 [ 247.386825][T11286] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 247.392704][T11286] RIP: 0033:0x459879 [ 247.396589][T11286] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 247.416174][T11286] RSP: 002b:00007f1e7f50fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 247.424569][T11286] RAX: ffffffffffffffda RBX: 00007f1e7f50fc90 RCX: 0000000000459879 [ 247.432530][T11286] RDX: 0000000000000002 RSI: 0000000020000200 RDI: 0000000000000004 [ 247.440483][T11286] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 247.448440][T11286] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1e7f5106d4 [ 247.456472][T11286] R13: 00000000004c6b98 R14: 00000000004dbd88 R15: 0000000000000005 21:27:32 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = geteuid() pipe(&(0x7f0000000300)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r4, 0x0, r5, 0x0, 0x30005, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@local}}, &(0x7f00000001c0)=0xe8) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) getresuid(&(0x7f0000000200), &(0x7f0000000240)=0x0, &(0x7f0000000280)) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r10, 0x407, 0x0) write$binfmt_misc(r10, &(0x7f0000000140)=ANY=[], 0x4240a2a0) getsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000700)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@dev}}, &(0x7f0000000440)=0xe8) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r13 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r13, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r13, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r12, 0x0, r13, 0x0, 0x30005, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r12, 0x0, 0x10, &(0x7f0000000480)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@dev}}, &(0x7f0000000580)=0xe8) r15 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r15, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r16) r17 = getuid() fstat(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r20 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r20, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000180)=0xc) r22 = getgid() fchown(r19, r21, r22) r23 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r24 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r24, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) getsockopt$sock_cred(r24, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000180)=0xc) r26 = getgid() fchown(r23, r25, r26) r27 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r28 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r28, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000180)=0xc) r30 = getgid() fchown(r27, r29, r30) r31 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r32 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r32, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) getsockopt$sock_cred(r32, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000180)=0xc) r34 = getgid() fchown(r31, r33, r34) r35 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r36 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r36, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) getsockopt$sock_cred(r36, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000180)=0xc) r38 = getgid() fchown(r35, r37, r38) r39 = getgid() fsetxattr$system_posix_acl(r2, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x1, 0x4}, [{0x2, 0x2, r3}, {0x2, 0x7, r6}, {0x2, 0x6, r8}, {0x2, 0x1, r9}, {0x2, 0x1, r11}, {0x2, 0x4, r14}, {0x2, 0x6, r16}, {0x2, 0x1, r17}], {0x4, 0x1}, [{0x8, 0x0, 0xee01}, {0x8, 0x6, r18}, {0x8, 0x1, r22}, {0x8, 0x6, r26}, {0x8, 0x2, r30}, {0x8, 0x6, r34}, {0x8, 0x4, 0xee01}, {0x8, 0xd, r38}, {0x8, 0x0, r39}], {}, {0x20, 0x2}}, 0xac, 0x1) r40 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r40, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r40, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r40, 0x0, 0x30005, 0x0) getsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) 21:27:32 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xbfffcfff) 21:27:32 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x20e141) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 21:27:32 executing program 3 (fault-call:6 fault-nth:12): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x0) 21:27:32 executing program 5: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ppoll(&(0x7f0000000000)=[{r0, 0x0, 0x300}, {r1, 0x100}], 0x2, 0x0, 0x0, 0x0) 21:27:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace(0x9, r1) [ 249.628460][T11311] FAULT_INJECTION: forcing a failure. [ 249.628460][T11311] name failslab, interval 1, probability 0, space 0, times 0 [ 249.657001][T11311] CPU: 0 PID: 11311 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 249.666224][T11311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 249.676286][T11311] Call Trace: [ 249.679624][T11311] dump_stack+0x172/0x1f0 [ 249.683975][T11311] should_fail.cold+0xa/0x15 [ 249.688720][T11311] ? fault_create_debugfs_attr+0x180/0x180 [ 249.694800][T11311] ? ___might_sleep+0x163/0x280 [ 249.699677][T11311] __should_failslab+0x121/0x190 [ 249.704630][T11311] should_failslab+0x9/0x14 [ 249.709138][T11311] kmem_cache_alloc_node_trace+0x274/0x750 [ 249.714937][T11311] ? find_next_iomem_res+0x3b0/0x3b0 [ 249.720253][T11311] ? __kasan_slab_free+0x102/0x150 [ 249.725367][T11311] ? kasan_slab_free+0xe/0x10 [ 249.730034][T11311] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 249.736270][T11311] __get_vm_area_node+0x12b/0x370 [ 249.741322][T11311] ? pat_init+0x4d0/0x4d0 [ 249.745643][T11311] ? memremap+0x3c3/0x520 [ 249.749966][T11311] get_vm_area_caller+0x47/0x60 [ 249.754810][T11311] ? memremap+0x3c3/0x520 [ 249.759134][T11311] __ioremap_caller.constprop.0+0x362/0x710 [ 249.765062][T11311] ? memremap+0x3c3/0x520 [ 249.769429][T11311] ? iounmap+0x1b0/0x1b0 [ 249.773666][T11311] ? __kasan_check_write+0x14/0x20 [ 249.778783][T11311] ? _raw_read_unlock+0x2d/0x50 [ 249.783624][T11311] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 249.789854][T11311] ? region_intersects+0x263/0x2f0 [ 249.795004][T11311] ioremap_cache+0x24/0x30 [ 249.799407][T11311] memremap+0x3c3/0x520 [ 249.803562][T11311] ? devm_memremap_match+0x40/0x40 [ 249.808666][T11311] ? _raw_read_unlock+0x2d/0x50 [ 249.813510][T11311] ? iomem_is_exclusive+0x33/0x1af [ 249.818617][T11311] xlate_dev_mem_ptr+0x28/0x50 [ 249.823410][T11311] read_mem+0xdc/0x2c0 [ 249.827478][T11311] do_iter_read+0x4a4/0x660 [ 249.831971][T11311] ? dup_iter+0x260/0x260 [ 249.836298][T11311] vfs_readv+0xf0/0x160 [ 249.840447][T11311] ? compat_rw_copy_check_uvector+0x4c0/0x4c0 [ 249.846506][T11311] ? __kasan_check_read+0x11/0x20 [ 249.851534][T11311] ? ksys_dup3+0x3e0/0x3e0 [ 249.855952][T11311] ? wait_for_completion+0x440/0x440 [ 249.861235][T11311] ? __fget_light+0x1a9/0x230 [ 249.865911][T11311] do_preadv+0x1c4/0x280 [ 249.870158][T11311] ? do_readv+0x330/0x330 [ 249.874478][T11311] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 249.879927][T11311] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 249.885374][T11311] ? do_syscall_64+0x26/0x760 [ 249.890252][T11311] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 249.896310][T11311] ? do_syscall_64+0x26/0x760 [ 249.901016][T11311] __x64_sys_preadv+0x9a/0xf0 [ 249.905687][T11311] do_syscall_64+0xfa/0x760 [ 249.910187][T11311] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 249.916070][T11311] RIP: 0033:0x459879 [ 249.919958][T11311] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 249.939565][T11311] RSP: 002b:00007f1e7f50fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 249.947971][T11311] RAX: ffffffffffffffda RBX: 00007f1e7f50fc90 RCX: 0000000000459879 [ 249.955932][T11311] RDX: 0000000000000002 RSI: 0000000020000200 RDI: 0000000000000004 [ 249.963894][T11311] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 249.971859][T11311] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1e7f5106d4 21:27:32 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xbffff000) [ 249.979824][T11311] R13: 00000000004c6b98 R14: 00000000004dbd88 R15: 0000000000000005 21:27:32 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3100000000000000000009000000080004000100000008000600080000003c0003000800030000000000140002006c6f000000000000000000000000000014000600fe8000000000000000000000000000010800010001000000fe6d46f98fd70d8d4a0b4a5b3e07a67e8c8c5b310cef24ebf321b8a900b027cc204381c9a18633c1b13400282b2fb2e8f6452a66b241177d4f7e1661980cbc19d60272e208cfc5014457240ac214b966e5d8731e"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4008050) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0xdc, r2, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x60, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7fffffff}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @empty}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x400}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @empty}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @loopback}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x63d}]}, @IPVS_CMD_ATTR_SERVICE={0x4}]}, 0xdc}, 0x1, 0x0, 0x0, 0x48450}, 0x20000000) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 21:27:32 executing program 5: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ppoll(&(0x7f0000000000)=[{r0, 0x0, 0x3000000}, {r1, 0x100}], 0x2, 0x0, 0x0, 0x0) 21:27:32 executing program 3 (fault-call:6 fault-nth:13): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x0) [ 250.167511][T11332] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 21:27:32 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x321100, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x30005, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000080)={{0x0, 0x2, 0x3cb, 0x0, 0x400005}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) [ 250.262847][T11338] FAULT_INJECTION: forcing a failure. [ 250.262847][T11338] name failslab, interval 1, probability 0, space 0, times 0 [ 250.282313][T11338] CPU: 1 PID: 11338 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 250.291453][T11338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 250.301510][T11338] Call Trace: [ 250.304819][T11338] dump_stack+0x172/0x1f0 [ 250.309169][T11338] should_fail.cold+0xa/0x15 [ 250.313774][T11338] ? fault_create_debugfs_attr+0x180/0x180 [ 250.319601][T11338] ? ___might_sleep+0x163/0x280 [ 250.324468][T11338] __should_failslab+0x121/0x190 [ 250.329412][T11338] should_failslab+0x9/0x14 [ 250.333921][T11338] kmem_cache_alloc_node+0x268/0x740 [ 250.339210][T11338] ? ___might_sleep+0x163/0x280 [ 250.344072][T11338] alloc_vmap_area+0x140/0x2080 [ 250.348943][T11338] ? __get_vm_area_node+0x12b/0x370 [ 250.354147][T11338] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 250.359714][T11338] ? purge_vmap_area_lazy+0x40/0x40 [ 250.364914][T11338] ? find_next_iomem_res+0x3b0/0x3b0 [ 250.370201][T11338] ? __kasan_slab_free+0x102/0x150 [ 250.375310][T11338] ? kasan_slab_free+0xe/0x10 [ 250.379991][T11338] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 250.386268][T11338] __get_vm_area_node+0x179/0x370 [ 250.391305][T11338] ? memremap+0x3c3/0x520 [ 250.395643][T11338] get_vm_area_caller+0x47/0x60 [ 250.400567][T11338] ? memremap+0x3c3/0x520 [ 250.404911][T11338] __ioremap_caller.constprop.0+0x362/0x710 [ 250.410807][T11338] ? memremap+0x3c3/0x520 [ 250.415146][T11338] ? iounmap+0x1b0/0x1b0 [ 250.419403][T11338] ? __kasan_check_write+0x14/0x20 [ 250.424519][T11338] ? _raw_read_unlock+0x2d/0x50 [ 250.429365][T11338] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 250.429381][T11338] ? region_intersects+0x263/0x2f0 [ 250.429397][T11338] ioremap_cache+0x24/0x30 [ 250.429413][T11338] memremap+0x3c3/0x520 [ 250.449290][T11338] ? devm_memremap_match+0x40/0x40 [ 250.454500][T11338] ? _raw_read_unlock+0x2d/0x50 [ 250.459452][T11338] ? iomem_is_exclusive+0x33/0x1af [ 250.464580][T11338] xlate_dev_mem_ptr+0x28/0x50 [ 250.469409][T11338] read_mem+0xdc/0x2c0 [ 250.473499][T11338] do_iter_read+0x4a4/0x660 [ 250.478014][T11338] ? dup_iter+0x260/0x260 [ 250.482367][T11338] vfs_readv+0xf0/0x160 [ 250.486539][T11338] ? compat_rw_copy_check_uvector+0x4c0/0x4c0 [ 250.492614][T11338] ? __kasan_check_read+0x11/0x20 [ 250.497672][T11338] ? ksys_dup3+0x3e0/0x3e0 [ 250.502094][T11338] ? wait_for_completion+0x440/0x440 [ 250.507390][T11338] ? __fget_light+0x1a9/0x230 [ 250.512077][T11338] do_preadv+0x1c4/0x280 [ 250.516324][T11338] ? do_readv+0x330/0x330 [ 250.520658][T11338] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 250.526123][T11338] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 250.531581][T11338] ? do_syscall_64+0x26/0x760 [ 250.536351][T11338] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 250.542421][T11338] ? do_syscall_64+0x26/0x760 [ 250.547103][T11338] __x64_sys_preadv+0x9a/0xf0 [ 250.551877][T11338] do_syscall_64+0xfa/0x760 [ 250.556383][T11338] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 250.562271][T11338] RIP: 0033:0x459879 [ 250.566167][T11338] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 250.586049][T11338] RSP: 002b:00007f1e7f50fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 250.594463][T11338] RAX: ffffffffffffffda RBX: 00007f1e7f50fc90 RCX: 0000000000459879 [ 250.602438][T11338] RDX: 0000000000000002 RSI: 0000000020000200 RDI: 0000000000000004 21:27:33 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) getsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000000)=0x7, &(0x7f0000000040)=0x4) 21:27:33 executing program 5: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ppoll(&(0x7f0000000000)=[{r0, 0x0, 0x8000000}, {r1, 0x100}], 0x2, 0x0, 0x0, 0x0) 21:27:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace(0x10, r1) [ 250.610497][T11338] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 250.618485][T11338] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1e7f5106d4 [ 250.626575][T11338] R13: 00000000004c6b98 R14: 00000000004dbd88 R15: 0000000000000005 21:27:33 executing program 3 (fault-call:6 fault-nth:14): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x0) 21:27:33 executing program 5: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ppoll(&(0x7f0000000000)=[{r0, 0x0, 0x1000000000000}, {r1, 0x100}], 0x2, 0x0, 0x0, 0x0) [ 250.906704][T11366] FAULT_INJECTION: forcing a failure. [ 250.906704][T11366] name failslab, interval 1, probability 0, space 0, times 0 [ 250.919713][T11366] CPU: 1 PID: 11366 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 250.928822][T11366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 250.938876][T11366] Call Trace: [ 250.942182][T11366] dump_stack+0x172/0x1f0 [ 250.946523][T11366] should_fail.cold+0xa/0x15 [ 250.951208][T11366] ? fault_create_debugfs_attr+0x180/0x180 [ 250.957195][T11366] ? ___might_sleep+0x163/0x280 [ 250.962056][T11366] __should_failslab+0x121/0x190 [ 250.967001][T11366] should_failslab+0x9/0x14 [ 250.971506][T11366] kmem_cache_alloc_node_trace+0x274/0x750 [ 250.977321][T11366] ? find_next_iomem_res+0x3b0/0x3b0 [ 250.982610][T11366] ? __kasan_slab_free+0x102/0x150 [ 250.987727][T11366] ? kasan_slab_free+0xe/0x10 [ 250.992416][T11366] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 250.998671][T11366] __get_vm_area_node+0x12b/0x370 [ 251.003714][T11366] ? pat_init+0x4d0/0x4d0 [ 251.008045][T11366] ? memremap+0x3c3/0x520 [ 251.012379][T11366] get_vm_area_caller+0x47/0x60 [ 251.017231][T11366] ? memremap+0x3c3/0x520 [ 251.021566][T11366] __ioremap_caller.constprop.0+0x362/0x710 [ 251.027457][T11366] ? memremap+0x3c3/0x520 [ 251.031790][T11366] ? iounmap+0x1b0/0x1b0 [ 251.036039][T11366] ? __kasan_check_write+0x14/0x20 [ 251.041159][T11366] ? _raw_read_unlock+0x2d/0x50 [ 251.046035][T11366] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 251.052292][T11366] ? region_intersects+0x263/0x2f0 [ 251.057434][T11366] ioremap_cache+0x24/0x30 [ 251.061861][T11366] memremap+0x3c3/0x520 [ 251.066032][T11366] ? devm_memremap_match+0x40/0x40 [ 251.071145][T11366] ? _raw_read_unlock+0x2d/0x50 [ 251.076015][T11366] ? iomem_is_exclusive+0x33/0x1af [ 251.081131][T11366] xlate_dev_mem_ptr+0x28/0x50 [ 251.085897][T11366] read_mem+0xdc/0x2c0 [ 251.089970][T11366] do_iter_read+0x4a4/0x660 [ 251.094481][T11366] ? dup_iter+0x260/0x260 [ 251.098825][T11366] vfs_readv+0xf0/0x160 [ 251.102988][T11366] ? compat_rw_copy_check_uvector+0x4c0/0x4c0 [ 251.109056][T11366] ? __kasan_check_read+0x11/0x20 [ 251.114101][T11366] ? ksys_dup3+0x3e0/0x3e0 [ 251.118540][T11366] ? wait_for_completion+0x440/0x440 [ 251.123834][T11366] ? __fget_light+0x1a9/0x230 [ 251.128515][T11366] do_preadv+0x1c4/0x280 [ 251.132783][T11366] ? do_readv+0x330/0x330 [ 251.137119][T11366] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 251.142685][T11366] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 251.148250][T11366] ? do_syscall_64+0x26/0x760 [ 251.152932][T11366] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 251.159007][T11366] ? do_syscall_64+0x26/0x760 [ 251.163700][T11366] __x64_sys_preadv+0x9a/0xf0 [ 251.168379][T11366] do_syscall_64+0xfa/0x760 [ 251.172888][T11366] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 251.178778][T11366] RIP: 0033:0x459879 [ 251.182686][T11366] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 251.202398][T11366] RSP: 002b:00007f1e7f50fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 251.210810][T11366] RAX: ffffffffffffffda RBX: 00007f1e7f50fc90 RCX: 0000000000459879 [ 251.218781][T11366] RDX: 0000000000000002 RSI: 0000000020000200 RDI: 0000000000000004 [ 251.226748][T11366] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 251.234715][T11366] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1e7f5106d4 [ 251.242689][T11366] R13: 00000000004c6b98 R14: 00000000004dbd88 R15: 0000000000000005 21:27:33 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x40000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x30005, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000040)={0x0, '\x00', 0x3}, 0x18) pkey_alloc(0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 21:27:33 executing program 5: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ppoll(&(0x7f0000000000)=[{r0, 0x0, 0x300000000000000}, {r1, 0x100}], 0x2, 0x0, 0x0, 0x0) [ 251.555253][T11380] ptrace attach of "/root/syz-executor.1"[11352] was attempted by "/root/syz-executor.1"[11380] 21:28:58 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xbfffffff) 21:28:58 executing program 5: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ppoll(&(0x7f0000000000)=[{r0, 0x0, 0x800000000000000}, {r1, 0x100}], 0x2, 0x0, 0x0, 0x0) 21:28:58 executing program 3 (fault-call:6 fault-nth:15): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x0) 21:28:58 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000340)={0x3}) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000200)={[{0x0, 0x101}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}], 0x1}) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000280)) accept4$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14, 0x81000) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r4, 0x0, r5, 0x0, 0x30005, 0x0) r6 = accept4$inet6(r4, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000380)=0x1c, 0x800) setsockopt$inet6_MRT6_DEL_MFC(r6, 0x29, 0xcd, &(0x7f00000003c0)={{0xa, 0x4e20, 0x2, @rand_addr="cb3586f3e0578dfac49a68e8519b2654", 0x1}, {0xa, 0x4e22, 0x5, @ipv4={[], [], @local}, 0x100}, 0x7f, [0xffffffffffffffff, 0x7, 0xfcd, 0x1, 0x5, 0x0, 0x100000000, 0x6]}, 0x5c) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x0) write$binfmt_misc(r7, &(0x7f0000000140)=ANY=[], 0x4240a2a0) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x12, r7, 0x0) sendto$packet(r2, &(0x7f0000000040)="ec9f64626221cb2f69f0eb97aada3d0867425638e4193c711ce771e72853d0ce79962a339bd10bbb87c57f48ac66efdc69dcb745a6c1bd59bd6566b4176e84f8507fe731e285788e733728adb46300ab26c9816d03738b5f0d509ca1a0e2785e994c485a7ec481ce947131b9234ce1db76fd619e74dc49b27a2b8ae7e3a2d3d4ee74b28b3f3e1c8b1fc3bc345ee75661997dac06289cd22dd817df00ee1b5ffc85d1", 0xa2, 0x0, &(0x7f0000000180)={0x11, 0x6, r3, 0x1, 0x10001, 0x6, @local}, 0x14) ioctl$KVM_ASSIGN_PCI_DEVICE(r2, 0x8040ae69, &(0x7f0000000000)={0x10000, 0x0, 0x1ff, 0x4, 0x80000000}) 21:28:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace(0x15, r1) 21:28:58 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') splice(r1, 0x0, r2, 0x0, 0x30005, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000100)={0x0, {{0xa, 0x4e24, 0x1, @mcast1, 0x6}}, {{0xa, 0x4e24, 0x4, @mcast2, 0xc4ef}}}, 0x108) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) [ 335.651497][T11393] FAULT_INJECTION: forcing a failure. [ 335.651497][T11393] name failslab, interval 1, probability 0, space 0, times 0 [ 335.678851][T11393] CPU: 1 PID: 11393 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 335.687982][T11393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 335.698036][T11393] Call Trace: [ 335.701336][T11393] dump_stack+0x172/0x1f0 [ 335.705681][T11393] should_fail.cold+0xa/0x15 [ 335.710277][T11393] ? fault_create_debugfs_attr+0x180/0x180 [ 335.716084][T11393] ? ___might_sleep+0x163/0x280 [ 335.720936][T11393] __should_failslab+0x121/0x190 [ 335.725879][T11393] should_failslab+0x9/0x14 [ 335.730389][T11393] kmem_cache_alloc_node+0x268/0x740 [ 335.735669][T11393] ? ___might_sleep+0x163/0x280 [ 335.740522][T11393] alloc_vmap_area+0x140/0x2080 [ 335.745373][T11393] ? __get_vm_area_node+0x12b/0x370 [ 335.750567][T11393] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 335.756112][T11393] ? purge_vmap_area_lazy+0x40/0x40 [ 335.761319][T11393] ? find_next_iomem_res+0x3b0/0x3b0 [ 335.766606][T11393] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 335.772858][T11393] __get_vm_area_node+0x179/0x370 [ 335.777878][T11393] ? memremap+0x3c3/0x520 [ 335.782208][T11393] get_vm_area_caller+0x47/0x60 [ 335.787054][T11393] ? memremap+0x3c3/0x520 [ 335.791379][T11393] __ioremap_caller.constprop.0+0x362/0x710 [ 335.797268][T11393] ? memremap+0x3c3/0x520 [ 335.801592][T11393] ? iounmap+0x1b0/0x1b0 [ 335.805835][T11393] ? write_comp_data+0x1e/0x70 [ 335.810600][T11393] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 335.816831][T11393] ? region_intersects+0x263/0x2f0 [ 335.821953][T11393] ioremap_cache+0x24/0x30 [ 335.826362][T11393] memremap+0x3c3/0x520 [ 335.830521][T11393] ? devm_memremap_match+0x40/0x40 [ 335.835632][T11393] ? _raw_read_unlock+0x2d/0x50 [ 335.840482][T11393] ? iomem_is_exclusive+0x33/0x1af [ 335.845591][T11393] xlate_dev_mem_ptr+0x28/0x50 [ 335.850349][T11393] read_mem+0xdc/0x2c0 [ 335.854419][T11393] do_iter_read+0x4a4/0x660 [ 335.858911][T11393] ? dup_iter+0x260/0x260 [ 335.863258][T11393] vfs_readv+0xf0/0x160 [ 335.867414][T11393] ? compat_rw_copy_check_uvector+0x4c0/0x4c0 [ 335.873470][T11393] ? __kasan_check_read+0x11/0x20 [ 335.878501][T11393] ? ksys_dup3+0x3e0/0x3e0 [ 335.882913][T11393] ? wait_for_completion+0x440/0x440 [ 335.888199][T11393] ? __fget_light+0x1a9/0x230 [ 335.892868][T11393] do_preadv+0x1c4/0x280 [ 335.897119][T11393] ? do_readv+0x330/0x330 [ 335.901442][T11393] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 335.906896][T11393] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 335.912361][T11393] ? do_syscall_64+0x26/0x760 [ 335.917037][T11393] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 335.923095][T11393] ? do_syscall_64+0x26/0x760 [ 335.927766][T11393] __x64_sys_preadv+0x9a/0xf0 [ 335.932436][T11393] do_syscall_64+0xfa/0x760 [ 335.936947][T11393] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 335.942830][T11393] RIP: 0033:0x459879 [ 335.946712][T11393] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 335.966301][T11393] RSP: 002b:00007f1e7f50fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 335.974709][T11393] RAX: ffffffffffffffda RBX: 00007f1e7f50fc90 RCX: 0000000000459879 [ 335.982672][T11393] RDX: 0000000000000002 RSI: 0000000020000200 RDI: 0000000000000004 [ 335.990633][T11393] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 335.998595][T11393] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1e7f5106d4 [ 336.006557][T11393] R13: 00000000004c6b98 R14: 00000000004dbd88 R15: 0000000000000005 21:28:58 executing program 3 (fault-call:6 fault-nth:16): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x0) 21:28:58 executing program 5: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ppoll(&(0x7f0000000000)=[{r0}, {r1, 0x2}], 0x2, 0x0, 0x0, 0x0) [ 336.222876][T11404] FAULT_INJECTION: forcing a failure. [ 336.222876][T11404] name failslab, interval 1, probability 0, space 0, times 0 [ 336.243061][T11404] CPU: 0 PID: 11404 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 336.252178][T11404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 336.262224][T11404] Call Trace: [ 336.265512][T11404] dump_stack+0x172/0x1f0 [ 336.269846][T11404] should_fail.cold+0xa/0x15 [ 336.274439][T11404] ? fault_create_debugfs_attr+0x180/0x180 [ 336.280244][T11404] ? ___might_sleep+0x163/0x280 [ 336.285099][T11404] __should_failslab+0x121/0x190 [ 336.290032][T11404] should_failslab+0x9/0x14 [ 336.294532][T11404] kmem_cache_alloc_node_trace+0x274/0x750 [ 336.300336][T11404] ? find_next_iomem_res+0x3b0/0x3b0 [ 336.305611][T11404] ? mark_held_locks+0xa4/0xf0 [ 336.310364][T11404] ? kasan_slab_free+0xe/0x10 [ 336.315032][T11404] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 336.321270][T11404] __get_vm_area_node+0x12b/0x370 [ 336.326287][T11404] ? pat_init+0x4d0/0x4d0 [ 336.330609][T11404] ? memremap+0x3c3/0x520 [ 336.334944][T11404] get_vm_area_caller+0x47/0x60 [ 336.339785][T11404] ? memremap+0x3c3/0x520 [ 336.344113][T11404] __ioremap_caller.constprop.0+0x362/0x710 [ 336.350001][T11404] ? memremap+0x3c3/0x520 [ 336.354325][T11404] ? iounmap+0x1b0/0x1b0 [ 336.358565][T11404] ? __kasan_check_write+0x14/0x20 [ 336.363671][T11404] ? _raw_read_unlock+0x2d/0x50 [ 336.368517][T11404] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 336.374762][T11404] ? region_intersects+0x263/0x2f0 [ 336.379867][T11404] ioremap_cache+0x24/0x30 [ 336.384277][T11404] memremap+0x3c3/0x520 [ 336.388431][T11404] ? devm_memremap_match+0x40/0x40 [ 336.393532][T11404] ? _raw_read_unlock+0x2d/0x50 [ 336.398361][T11404] ? iomem_is_exclusive+0x33/0x1af [ 336.403452][T11404] xlate_dev_mem_ptr+0x28/0x50 [ 336.408195][T11404] read_mem+0xdc/0x2c0 [ 336.412242][T11404] do_iter_read+0x4a4/0x660 [ 336.416725][T11404] ? dup_iter+0x260/0x260 [ 336.421054][T11404] vfs_readv+0xf0/0x160 [ 336.425191][T11404] ? compat_rw_copy_check_uvector+0x4c0/0x4c0 [ 336.431234][T11404] ? __kasan_check_read+0x11/0x20 [ 336.436260][T11404] ? ksys_dup3+0x3e0/0x3e0 [ 336.440677][T11404] ? wait_for_completion+0x440/0x440 [ 336.445960][T11404] ? __fget_light+0x1a9/0x230 [ 336.450626][T11404] do_preadv+0x1c4/0x280 [ 336.454850][T11404] ? do_readv+0x330/0x330 [ 336.459156][T11404] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 336.464622][T11404] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 336.470067][T11404] ? do_syscall_64+0x26/0x760 [ 336.474734][T11404] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 336.480775][T11404] ? do_syscall_64+0x26/0x760 [ 336.485433][T11404] __x64_sys_preadv+0x9a/0xf0 [ 336.490089][T11404] do_syscall_64+0xfa/0x760 [ 336.494569][T11404] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 336.500435][T11404] RIP: 0033:0x459879 [ 336.504308][T11404] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 336.540672][T11404] RSP: 002b:00007f1e7f50fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 336.549061][T11404] RAX: ffffffffffffffda RBX: 00007f1e7f50fc90 RCX: 0000000000459879 [ 336.557028][T11404] RDX: 0000000000000002 RSI: 0000000020000200 RDI: 0000000000000004 [ 336.564972][T11404] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 336.572919][T11404] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1e7f5106d4 21:28:59 executing program 4: ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000040)={0x4, 0x5, 0x2}) r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) [ 336.580874][T11404] R13: 00000000004c6b98 R14: 00000000004dbd88 R15: 0000000000000005 21:28:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace(0x18, r1) 21:28:59 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, 0x0, 0x0) clock_settime(0x2, &(0x7f0000000000)) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x800, 0x0) rt_sigprocmask(0x0, &(0x7f0000000180)={0x5}, 0x0, 0x8) recvfrom$rxrpc(r1, &(0x7f0000000080)=""/151, 0x97, 0x13, &(0x7f0000000140)=@in4={0x21, 0x4, 0x2, 0x320, {0x2, 0x4e20, @multicast2}}, 0xfffffffffffffe7d) 21:28:59 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4000, &(0x7f0000000040)=0x6, 0x6, 0xe) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x7}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) [ 337.322364][T11438] IPVS: ftp: loaded support on port[0] = 21 [ 337.522813][T11438] chnl_net:caif_netlink_parms(): no params data found [ 337.642640][T11438] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.649889][T11438] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.657427][T11438] device bridge_slave_0 entered promiscuous mode [ 337.664736][T11438] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.672308][T11438] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.680095][T11438] device bridge_slave_1 entered promiscuous mode [ 337.764163][T11438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.775180][T11438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.793057][ T98] device bridge_slave_1 left promiscuous mode [ 337.802080][ T98] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.848949][ T98] device bridge_slave_0 left promiscuous mode [ 337.855071][ T98] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.697871][ T98] device hsr_slave_0 left promiscuous mode [ 339.737187][ T98] device hsr_slave_1 left promiscuous mode [ 339.788500][ T98] team0 (unregistering): Port device team_slave_1 removed [ 339.801839][ T98] team0 (unregistering): Port device team_slave_0 removed [ 339.813905][ T98] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.850355][ T98] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 339.938989][ T98] bond0 (unregistering): Released all slaves [ 340.053171][T11438] team0: Port device team_slave_0 added [ 340.061553][T11438] team0: Port device team_slave_1 added [ 340.120628][T11438] device hsr_slave_0 entered promiscuous mode [ 340.157083][T11438] device hsr_slave_1 entered promiscuous mode [ 340.265651][T11438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.277271][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 340.285356][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 340.299707][T11438] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.313881][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 340.322934][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 340.331384][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.338485][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.346011][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 340.355844][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 340.364263][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.371357][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.416422][ T8708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 340.425445][ T8708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 340.450465][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 340.459323][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 340.468311][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 340.476734][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 340.485700][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 340.500707][T11438] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 340.512504][T11438] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 340.525629][ T8708] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 340.534013][ T8708] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 340.543083][ T8708] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 340.564258][T11438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.577333][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 21:30:02 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xc0000000) 21:30:02 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$IMGETCOUNT(r1, 0x80044943, &(0x7f0000000000)) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, 0x0, 0x0) 21:30:02 executing program 3 (fault-call:6 fault-nth:17): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x0) 21:30:02 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f0000000180)={{0x3, 0x2, 0x0, 0x3, 0x5}, 0x0, 0x4, 0x5}) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 21:30:02 executing program 5: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ppoll(&(0x7f0000000000)=[{r0}, {r1, 0x3}], 0x2, 0x0, 0x0, 0x0) 21:30:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace(0x21, r1) [ 399.430662][T11458] FAULT_INJECTION: forcing a failure. [ 399.430662][T11458] name failslab, interval 1, probability 0, space 0, times 0 [ 399.456842][T11458] CPU: 1 PID: 11458 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 399.465961][T11458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 399.476006][T11458] Call Trace: [ 399.479296][T11458] dump_stack+0x172/0x1f0 [ 399.483634][T11458] should_fail.cold+0xa/0x15 [ 399.488235][T11458] ? fault_create_debugfs_attr+0x180/0x180 [ 399.494038][T11458] ? ___might_sleep+0x163/0x280 [ 399.498887][T11458] __should_failslab+0x121/0x190 [ 399.503820][T11458] should_failslab+0x9/0x14 [ 399.508313][T11458] kmem_cache_alloc_node+0x268/0x740 [ 399.513593][T11458] ? ___might_sleep+0x163/0x280 [ 399.518454][T11458] alloc_vmap_area+0x140/0x2080 [ 399.523300][T11458] ? __get_vm_area_node+0x12b/0x370 [ 399.528491][T11458] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 399.534041][T11458] ? purge_vmap_area_lazy+0x40/0x40 [ 399.539231][T11458] ? find_next_iomem_res+0x3b0/0x3b0 [ 399.544502][T11458] ? __kasan_slab_free+0x102/0x150 [ 399.549612][T11458] ? kasan_slab_free+0xe/0x10 [ 399.554285][T11458] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 399.560519][T11458] __get_vm_area_node+0x179/0x370 [ 399.565537][T11458] ? memremap+0x3c3/0x520 [ 399.569882][T11458] get_vm_area_caller+0x47/0x60 [ 399.574738][T11458] ? memremap+0x3c3/0x520 [ 399.579079][T11458] __ioremap_caller.constprop.0+0x362/0x710 [ 399.584966][T11458] ? memremap+0x3c3/0x520 [ 399.589287][T11458] ? iounmap+0x1b0/0x1b0 [ 399.593521][T11458] ? __kasan_check_write+0x14/0x20 [ 399.598622][T11458] ? _raw_read_unlock+0x2d/0x50 [ 399.603456][T11458] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 399.609685][T11458] ? region_intersects+0x263/0x2f0 [ 399.614788][T11458] ioremap_cache+0x24/0x30 [ 399.619205][T11458] memremap+0x3c3/0x520 [ 399.623362][T11458] ? devm_memremap_match+0x40/0x40 [ 399.628472][T11458] ? _raw_read_unlock+0x2d/0x50 [ 399.633318][T11458] ? iomem_is_exclusive+0x33/0x1af [ 399.638422][T11458] xlate_dev_mem_ptr+0x28/0x50 [ 399.643172][T11458] read_mem+0xdc/0x2c0 [ 399.647233][T11458] do_iter_read+0x4a4/0x660 [ 399.651727][T11458] ? dup_iter+0x260/0x260 [ 399.656060][T11458] vfs_readv+0xf0/0x160 [ 399.660210][T11458] ? compat_rw_copy_check_uvector+0x4c0/0x4c0 [ 399.666273][T11458] ? __kasan_check_read+0x11/0x20 [ 399.671297][T11458] ? ksys_dup3+0x3e0/0x3e0 [ 399.675703][T11458] ? wait_for_completion+0x440/0x440 [ 399.681018][T11458] ? __fget_light+0x1a9/0x230 [ 399.685687][T11458] do_preadv+0x1c4/0x280 [ 399.689921][T11458] ? do_readv+0x330/0x330 [ 399.694241][T11458] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 399.699696][T11458] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 399.705150][T11458] ? do_syscall_64+0x26/0x760 [ 399.709819][T11458] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 399.715876][T11458] ? do_syscall_64+0x26/0x760 [ 399.720555][T11458] __x64_sys_preadv+0x9a/0xf0 [ 399.725248][T11458] do_syscall_64+0xfa/0x760 [ 399.729746][T11458] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 399.735628][T11458] RIP: 0033:0x459879 [ 399.739514][T11458] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 399.759105][T11458] RSP: 002b:00007f1e7f50fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 399.767505][T11458] RAX: ffffffffffffffda RBX: 00007f1e7f50fc90 RCX: 0000000000459879 [ 399.775467][T11458] RDX: 0000000000000002 RSI: 0000000020000200 RDI: 0000000000000004 [ 399.783423][T11458] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 399.791381][T11458] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1e7f5106d4 [ 399.799342][T11458] R13: 00000000004c6b98 R14: 00000000004dbd88 R15: 0000000000000005 21:30:02 executing program 3 (fault-call:6 fault-nth:18): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x0) [ 399.916392][T11472] FAULT_INJECTION: forcing a failure. [ 399.916392][T11472] name failslab, interval 1, probability 0, space 0, times 0 [ 399.939254][T11472] CPU: 1 PID: 11472 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 399.948356][T11472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 399.958397][T11472] Call Trace: [ 399.961684][T11472] dump_stack+0x172/0x1f0 [ 399.966017][T11472] should_fail.cold+0xa/0x15 [ 399.970623][T11472] ? fault_create_debugfs_attr+0x180/0x180 [ 399.976421][T11472] ? ___might_sleep+0x163/0x280 [ 399.981282][T11472] __should_failslab+0x121/0x190 [ 399.986210][T11472] should_failslab+0x9/0x14 [ 399.990706][T11472] kmem_cache_alloc_node_trace+0x274/0x750 [ 399.996498][T11472] ? find_next_iomem_res+0x3b0/0x3b0 [ 400.001765][T11472] ? __kasan_slab_free+0x102/0x150 [ 400.006857][T11472] ? kasan_slab_free+0xe/0x10 [ 400.011526][T11472] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 400.017761][T11472] __get_vm_area_node+0x12b/0x370 [ 400.022771][T11472] ? pat_init+0x4d0/0x4d0 [ 400.027111][T11472] ? memremap+0x3c3/0x520 [ 400.031484][T11472] get_vm_area_caller+0x47/0x60 [ 400.036327][T11472] ? memremap+0x3c3/0x520 [ 400.040651][T11472] __ioremap_caller.constprop.0+0x362/0x710 [ 400.046533][T11472] ? memremap+0x3c3/0x520 [ 400.050861][T11472] ? iounmap+0x1b0/0x1b0 [ 400.055101][T11472] ? __kasan_check_write+0x14/0x20 [ 400.060210][T11472] ? _raw_read_unlock+0x2d/0x50 [ 400.065052][T11472] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 400.071286][T11472] ? region_intersects+0x263/0x2f0 [ 400.076390][T11472] ioremap_cache+0x24/0x30 [ 400.080798][T11472] memremap+0x3c3/0x520 [ 400.084949][T11472] ? devm_memremap_match+0x40/0x40 [ 400.090052][T11472] ? _raw_read_unlock+0x2d/0x50 [ 400.094894][T11472] ? iomem_is_exclusive+0x33/0x1af [ 400.100005][T11472] xlate_dev_mem_ptr+0x28/0x50 [ 400.104760][T11472] read_mem+0xdc/0x2c0 [ 400.108830][T11472] do_iter_read+0x4a4/0x660 [ 400.113327][T11472] ? dup_iter+0x260/0x260 [ 400.117676][T11472] vfs_readv+0xf0/0x160 [ 400.121826][T11472] ? compat_rw_copy_check_uvector+0x4c0/0x4c0 [ 400.127885][T11472] ? __kasan_check_read+0x11/0x20 [ 400.132915][T11472] ? ksys_dup3+0x3e0/0x3e0 [ 400.137322][T11472] ? wait_for_completion+0x440/0x440 [ 400.142598][T11472] ? __fget_light+0x1a9/0x230 [ 400.147276][T11472] do_preadv+0x1c4/0x280 [ 400.151515][T11472] ? do_readv+0x330/0x330 [ 400.155924][T11472] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 400.161486][T11472] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 400.166935][T11472] ? do_syscall_64+0x26/0x760 [ 400.171605][T11472] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 400.177668][T11472] ? do_syscall_64+0x26/0x760 [ 400.182343][T11472] __x64_sys_preadv+0x9a/0xf0 [ 400.187028][T11472] do_syscall_64+0xfa/0x760 [ 400.191532][T11472] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 400.197421][T11472] RIP: 0033:0x459879 [ 400.201310][T11472] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 400.220903][T11472] RSP: 002b:00007f1e7f50fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 400.229327][T11472] RAX: ffffffffffffffda RBX: 00007f1e7f50fc90 RCX: 0000000000459879 [ 400.237297][T11472] RDX: 0000000000000002 RSI: 0000000020000200 RDI: 0000000000000004 [ 400.245265][T11472] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 400.253230][T11472] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1e7f5106d4 21:30:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace(0x4200, r1) [ 400.261190][T11472] R13: 00000000004c6b98 R14: 00000000004dbd88 R15: 0000000000000005 21:30:03 executing program 3 (fault-call:6 fault-nth:19): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x0) 21:30:03 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, 0x0, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000000)={'bridge_slave_0\x00', 0x2}) 21:30:03 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) read$FUSE(r2, &(0x7f0000000100), 0x1000) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000280)={r5}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000000)={r5}, &(0x7f0000000040)=0x8) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x0) write$binfmt_misc(r7, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r8 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r8) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r8, 0x84, 0x0, &(0x7f0000000280)={r10}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000080)={r10, 0xfff}, &(0x7f0000001100)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000001140)={r6, 0x6, 0x101, 0xe14, 0x1ff, 0xc071, 0xc47b, 0xffffffffffffffff, {r11, @in={{0x2, 0x4e23, @rand_addr=0x3f}}, 0x3f, 0x7fff, 0x7, 0x6, 0xfa0}}, &(0x7f0000001200)=0xb0) 21:30:03 executing program 5: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ppoll(&(0x7f0000000000)=[{r0}, {r1, 0x4}], 0x2, 0x0, 0x0, 0x0) [ 400.500426][T11490] FAULT_INJECTION: forcing a failure. [ 400.500426][T11490] name failslab, interval 1, probability 0, space 0, times 0 [ 400.537035][T11490] CPU: 0 PID: 11490 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 400.546164][T11490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 400.556215][T11490] Call Trace: [ 400.559619][T11490] dump_stack+0x172/0x1f0 [ 400.563951][T11490] should_fail.cold+0xa/0x15 [ 400.568549][T11490] ? fault_create_debugfs_attr+0x180/0x180 [ 400.574358][T11490] ? ___might_sleep+0x163/0x280 [ 400.579209][T11490] __should_failslab+0x121/0x190 [ 400.584141][T11490] should_failslab+0x9/0x14 [ 400.588656][T11490] kmem_cache_alloc_node_trace+0x274/0x750 [ 400.594463][T11490] ? find_next_iomem_res+0x3b0/0x3b0 [ 400.599742][T11490] ? mark_held_locks+0xa4/0xf0 [ 400.604495][T11490] ? kasan_slab_free+0xe/0x10 [ 400.609170][T11490] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 400.615405][T11490] __get_vm_area_node+0x12b/0x370 [ 400.620417][T11490] ? pat_init+0x4d0/0x4d0 [ 400.624755][T11490] ? memremap+0x3c3/0x520 [ 400.629088][T11490] get_vm_area_caller+0x47/0x60 [ 400.633931][T11490] ? memremap+0x3c3/0x520 [ 400.638259][T11490] __ioremap_caller.constprop.0+0x362/0x710 [ 400.644146][T11490] ? memremap+0x3c3/0x520 [ 400.648469][T11490] ? iounmap+0x1b0/0x1b0 [ 400.652709][T11490] ? __kasan_check_write+0x14/0x20 [ 400.657809][T11490] ? _raw_read_unlock+0x2d/0x50 [ 400.662648][T11490] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 400.668880][T11490] ? region_intersects+0x263/0x2f0 [ 400.673993][T11490] ioremap_cache+0x24/0x30 [ 400.678426][T11490] memremap+0x3c3/0x520 [ 400.682575][T11490] ? devm_memremap_match+0x40/0x40 [ 400.687702][T11490] ? _raw_read_unlock+0x2d/0x50 [ 400.692565][T11490] ? iomem_is_exclusive+0x33/0x1af [ 400.697676][T11490] xlate_dev_mem_ptr+0x28/0x50 [ 400.702436][T11490] read_mem+0xdc/0x2c0 [ 400.706502][T11490] do_iter_read+0x4a4/0x660 [ 400.710994][T11490] ? dup_iter+0x260/0x260 [ 400.715324][T11490] vfs_readv+0xf0/0x160 [ 400.719474][T11490] ? compat_rw_copy_check_uvector+0x4c0/0x4c0 [ 400.725528][T11490] ? __kasan_check_read+0x11/0x20 [ 400.730556][T11490] ? ksys_dup3+0x3e0/0x3e0 [ 400.734978][T11490] ? wait_for_completion+0x440/0x440 [ 400.740259][T11490] ? __fget_light+0x1a9/0x230 [ 400.744935][T11490] do_preadv+0x1c4/0x280 [ 400.749172][T11490] ? do_readv+0x330/0x330 [ 400.753512][T11490] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 400.758962][T11490] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 400.764414][T11490] ? do_syscall_64+0x26/0x760 [ 400.769085][T11490] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 400.775139][T11490] ? do_syscall_64+0x26/0x760 [ 400.779810][T11490] __x64_sys_preadv+0x9a/0xf0 [ 400.784481][T11490] do_syscall_64+0xfa/0x760 [ 400.788982][T11490] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 400.794864][T11490] RIP: 0033:0x459879 [ 400.798749][T11490] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 400.818341][T11490] RSP: 002b:00007f1e7f50fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 400.826744][T11490] RAX: ffffffffffffffda RBX: 00007f1e7f50fc90 RCX: 0000000000459879 [ 400.834706][T11490] RDX: 0000000000000002 RSI: 0000000020000200 RDI: 0000000000000004 [ 400.842668][T11490] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 400.850646][T11490] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1e7f5106d4 [ 400.858610][T11490] R13: 00000000004c6b98 R14: 00000000004dbd88 R15: 0000000000000005 21:31:26 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfebfe07f) 21:31:26 executing program 3 (fault-call:6 fault-nth:20): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x0) 21:31:26 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x8, 0x4000) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000040)=0x9, 0x4) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, 0x0, 0x0) 21:31:26 executing program 5: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ppoll(&(0x7f0000000000)=[{r0}, {r1, 0x103}], 0x2, 0x0, 0x0, 0x0) 21:31:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace(0x4201, r1) 21:31:26 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x40, 0x100) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x200, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x2, 0x0, 0x8, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 21:31:26 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x143641, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x30005, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x4240a2a0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20000, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0x4240a2a0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x8000, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0x4240a2a0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x0) write$binfmt_misc(r7, &(0x7f0000000140)=ANY=[], 0x4240a2a0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r9, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r8, 0x0, r9, 0x0, 0x30005, 0x0) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, 0x0, 0x0) [ 483.828272][T11521] FAULT_INJECTION: forcing a failure. [ 483.828272][T11521] name failslab, interval 1, probability 0, space 0, times 0 [ 483.866523][T11521] CPU: 0 PID: 11521 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 483.875673][T11521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 483.885735][T11521] Call Trace: [ 483.889026][T11521] dump_stack+0x172/0x1f0 [ 483.893357][T11521] should_fail.cold+0xa/0x15 [ 483.897949][T11521] ? fault_create_debugfs_attr+0x180/0x180 [ 483.903775][T11521] ? ___might_sleep+0x163/0x280 [ 483.908637][T11521] __should_failslab+0x121/0x190 [ 483.913576][T11521] should_failslab+0x9/0x14 [ 483.918086][T11521] kmem_cache_alloc_node+0x268/0x740 [ 483.923364][T11521] ? ___might_sleep+0x163/0x280 [ 483.928223][T11521] alloc_vmap_area+0x140/0x2080 [ 483.933071][T11521] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 483.938529][T11521] ? __this_cpu_preempt_check+0x3a/0x210 [ 483.944174][T11521] ? retint_kernel+0x2b/0x2b [ 483.948766][T11521] ? purge_vmap_area_lazy+0x40/0x40 [ 483.954060][T11521] __get_vm_area_node+0x179/0x370 [ 483.959084][T11521] ? memremap+0x3c3/0x520 [ 483.963430][T11521] get_vm_area_caller+0x47/0x60 [ 483.968287][T11521] ? memremap+0x3c3/0x520 [ 483.972618][T11521] __ioremap_caller.constprop.0+0x362/0x710 [ 483.978512][T11521] ? memremap+0x3c3/0x520 [ 483.982840][T11521] ? iounmap+0x1b0/0x1b0 [ 483.987095][T11521] ? __kasan_check_write+0x14/0x20 [ 483.992208][T11521] ? _raw_read_unlock+0x2d/0x50 [ 483.997065][T11521] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 484.003300][T11521] ? region_intersects+0x263/0x2f0 [ 484.008411][T11521] ioremap_cache+0x24/0x30 [ 484.012839][T11521] memremap+0x3c3/0x520 [ 484.016996][T11521] ? devm_memremap_match+0x40/0x40 [ 484.022105][T11521] ? _raw_read_unlock+0x2d/0x50 [ 484.026959][T11521] ? iomem_is_exclusive+0x33/0x1af [ 484.032093][T11521] xlate_dev_mem_ptr+0x28/0x50 [ 484.036859][T11521] read_mem+0xdc/0x2c0 [ 484.040926][T11521] do_iter_read+0x4a4/0x660 [ 484.045426][T11521] ? dup_iter+0x260/0x260 [ 484.049763][T11521] vfs_readv+0xf0/0x160 [ 484.053918][T11521] ? compat_rw_copy_check_uvector+0x4c0/0x4c0 [ 484.059981][T11521] ? __kasan_check_read+0x11/0x20 [ 484.065016][T11521] ? ksys_dup3+0x3e0/0x3e0 [ 484.069434][T11521] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 484.074893][T11521] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 484.080352][T11521] ? __fget_light+0x1a9/0x230 [ 484.085028][T11521] do_preadv+0x1c4/0x280 [ 484.089272][T11521] ? do_readv+0x330/0x330 [ 484.093597][T11521] ? retint_kernel+0x2b/0x2b [ 484.098192][T11521] __x64_sys_preadv+0x9a/0xf0 [ 484.102865][T11521] ? do_syscall_64+0x5b/0x760 [ 484.107537][T11521] do_syscall_64+0xfa/0x760 [ 484.112037][T11521] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 484.117925][T11521] RIP: 0033:0x459879 [ 484.121815][T11521] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 484.141416][T11521] RSP: 002b:00007f1e7f50fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 484.149821][T11521] RAX: ffffffffffffffda RBX: 00007f1e7f50fc90 RCX: 0000000000459879 [ 484.157786][T11521] RDX: 0000000000000002 RSI: 0000000020000200 RDI: 0000000000000004 [ 484.165750][T11521] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 21:31:26 executing program 5: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ppoll(&(0x7f0000000000)=[{r0}, {r1, 0x108}], 0x2, 0x0, 0x0, 0x0) [ 484.173722][T11521] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1e7f5106d4 [ 484.181687][T11521] R13: 00000000004c6b98 R14: 00000000004dbd88 R15: 0000000000000005 21:31:26 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x4240a2a0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r5, 0x0, r6, 0x0, 0x30005, 0x0) bind$inet(r6, &(0x7f00000002c0)={0x2, 0x4e24, @empty}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x30005, 0x0) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f0000000100)) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0x7) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x20200, 0x0) mlock2(&(0x7f0000002000/0x400000)=nil, 0x400000, 0x7e3a0cb0ee6d5bf2) 21:31:27 executing program 3 (fault-call:6 fault-nth:21): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x0) [ 484.423049][T11546] FAULT_INJECTION: forcing a failure. [ 484.423049][T11546] name failslab, interval 1, probability 0, space 0, times 0 [ 484.502246][T11546] CPU: 1 PID: 11546 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 484.511389][T11546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 484.521442][T11546] Call Trace: [ 484.524738][T11546] dump_stack+0x172/0x1f0 [ 484.529078][T11546] should_fail.cold+0xa/0x15 [ 484.533674][T11546] ? fault_create_debugfs_attr+0x180/0x180 [ 484.539490][T11546] ? ___might_sleep+0x163/0x280 [ 484.544351][T11546] __should_failslab+0x121/0x190 [ 484.549312][T11546] should_failslab+0x9/0x14 [ 484.553826][T11546] kmem_cache_alloc_node+0x268/0x740 [ 484.559109][T11546] ? ___might_sleep+0x163/0x280 [ 484.563973][T11546] alloc_vmap_area+0x140/0x2080 [ 484.568829][T11546] ? __get_vm_area_node+0x12b/0x370 [ 484.574027][T11546] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 484.579589][T11546] ? purge_vmap_area_lazy+0x40/0x40 [ 484.584812][T11546] ? find_next_iomem_res+0x3b0/0x3b0 [ 484.590093][T11546] ? __kasan_slab_free+0x102/0x150 [ 484.595200][T11546] ? kasan_slab_free+0xe/0x10 [ 484.599883][T11546] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 484.606128][T11546] __get_vm_area_node+0x179/0x370 [ 484.611277][T11546] ? memremap+0x3c3/0x520 [ 484.615611][T11546] get_vm_area_caller+0x47/0x60 [ 484.620580][T11546] ? memremap+0x3c3/0x520 [ 484.624917][T11546] __ioremap_caller.constprop.0+0x362/0x710 [ 484.630811][T11546] ? memremap+0x3c3/0x520 [ 484.635146][T11546] ? iounmap+0x1b0/0x1b0 [ 484.639392][T11546] ? __kasan_check_write+0x14/0x20 [ 484.644514][T11546] ? _raw_read_unlock+0x2d/0x50 [ 484.649367][T11546] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 484.655606][T11546] ? region_intersects+0x263/0x2f0 [ 484.660722][T11546] ioremap_cache+0x24/0x30 [ 484.665140][T11546] memremap+0x3c3/0x520 [ 484.669301][T11546] ? devm_memremap_match+0x40/0x40 [ 484.674429][T11546] ? _raw_read_unlock+0x2d/0x50 [ 484.679280][T11546] ? iomem_is_exclusive+0x33/0x1af [ 484.684389][T11546] xlate_dev_mem_ptr+0x28/0x50 [ 484.689170][T11546] read_mem+0xdc/0x2c0 [ 484.693251][T11546] do_iter_read+0x4a4/0x660 [ 484.697749][T11546] ? dup_iter+0x260/0x260 [ 484.702078][T11546] vfs_readv+0xf0/0x160 [ 484.706224][T11546] ? compat_rw_copy_check_uvector+0x4c0/0x4c0 [ 484.712275][T11546] ? __kasan_check_read+0x11/0x20 [ 484.717478][T11546] ? ksys_dup3+0x3e0/0x3e0 [ 484.721902][T11546] ? wait_for_completion+0x440/0x440 [ 484.727186][T11546] ? __fget_light+0x1a9/0x230 [ 484.731853][T11546] do_preadv+0x1c4/0x280 [ 484.736097][T11546] ? do_readv+0x330/0x330 [ 484.740423][T11546] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 484.745879][T11546] ? trace_hardirqs_on_thunk+0x1a/0x20 21:31:27 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x30005, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r3, 0x0, r4, 0x0, 0x30005, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0300002e4c"], 0x15) getsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000000)=0x7, &(0x7f0000000040)=0x4) [ 484.751334][T11546] ? do_syscall_64+0x26/0x760 [ 484.756007][T11546] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 484.762069][T11546] ? do_syscall_64+0x26/0x760 [ 484.766751][T11546] __x64_sys_preadv+0x9a/0xf0 [ 484.771428][T11546] do_syscall_64+0xfa/0x760 [ 484.775934][T11546] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 484.781811][T11546] RIP: 0033:0x459879 [ 484.785691][T11546] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 484.805288][T11546] RSP: 002b:00007f1e7f50fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 484.813707][T11546] RAX: ffffffffffffffda RBX: 00007f1e7f50fc90 RCX: 0000000000459879 [ 484.821676][T11546] RDX: 0000000000000002 RSI: 0000000020000200 RDI: 0000000000000004 [ 484.829653][T11546] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 484.837618][T11546] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1e7f5106d4 [ 484.845574][T11546] R13: 00000000004c6b98 R14: 00000000004dbd88 R15: 0000000000000005 21:31:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace(0x4202, r1) [ 485.883052][T11570] IPVS: ftp: loaded support on port[0] = 21 [ 485.920528][ T98] device bridge_slave_1 left promiscuous mode [ 485.926783][ T98] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.977815][ T98] device bridge_slave_0 left promiscuous mode [ 485.984037][ T98] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.717159][ T98] device hsr_slave_0 left promiscuous mode [ 487.767180][ T98] device hsr_slave_1 left promiscuous mode [ 487.817325][ T98] team0 (unregistering): Port device team_slave_1 removed [ 487.828646][ T98] team0 (unregistering): Port device team_slave_0 removed [ 487.839318][ T98] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 487.880548][ T98] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 487.968501][ T98] bond0 (unregistering): Released all slaves [ 488.104616][T11570] chnl_net:caif_netlink_parms(): no params data found [ 488.136213][T11570] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.143419][T11570] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.151122][T11570] device bridge_slave_0 entered promiscuous mode [ 488.158978][T11570] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.166067][T11570] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.173626][T11570] device bridge_slave_1 entered promiscuous mode [ 488.190325][T11570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 488.200953][T11570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 488.223257][T11570] team0: Port device team_slave_0 added [ 488.229826][T11570] team0: Port device team_slave_1 added [ 488.299846][T11570] device hsr_slave_0 entered promiscuous mode [ 488.357337][T11570] device hsr_slave_1 entered promiscuous mode [ 488.465778][T11570] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.472968][T11570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 488.480345][T11570] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.487449][T11570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 488.553837][T11570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 488.567821][ T8708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 488.582996][ T8708] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.590839][ T8708] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.607226][ T8708] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 488.626353][T11570] 8021q: adding VLAN 0 to HW filter on device team0 [ 488.645692][ T8708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 488.654818][ T8708] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.661924][ T8708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 488.697900][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 488.706651][ T3505] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.713757][ T3505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 488.731207][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 488.754984][T11570] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 488.773769][T11570] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 488.788154][ T8708] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 488.796110][ T8708] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 488.811827][ T8708] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 488.823317][ T8708] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 488.839038][ T8708] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 488.862127][T11570] 8021q: adding VLAN 0 to HW filter on device batadv0 21:32:53 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfebff000) 21:32:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace(0x4203, r1) 21:32:53 executing program 5: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ppoll(&(0x7f0000000000)=[{r0}, {r1, 0x100, 0x3}], 0x2, 0x0, 0x0, 0x0) 21:32:53 executing program 3 (fault-call:6 fault-nth:22): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x0) 21:32:53 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0x6, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000100)={0x1, 0x101}, 0x2) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000040)={0x2, 0xfffffffa}, 0x2) chdir(0x0) symlink(&(0x7f00000006c0)='..', &(0x7f0000000540)='./file0\x00') unlink(&(0x7f0000000340)='./file0\x00') r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0xd0800, 0x0) getsockopt$inet_dccp_buf(r3, 0x21, 0xe, &(0x7f00000001c0)=""/186, &(0x7f0000000280)=0xba) fcntl$setpipe(r1, 0x407, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000080)=@req={0x9, 0x2, 0x1, 0x9}, 0x10) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000040)=0xfffffffffffff001) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 21:32:53 executing program 2: openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x4800, 0x2) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r1, 0x0, 0x30005, 0xc) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$KVM_S390_UCAS_UNMAP(r2, 0x4018ae51, &(0x7f0000000140)={0x9, 0x9, 0x62}) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_N2(r3, 0x103, 0x3, 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x123600, 0x0) pause() mq_timedreceive(r4, &(0x7f00000000c0)=""/48, 0x15, 0x7f, &(0x7f0000000100)={0x0, 0x989680}) [ 571.310751][T11590] FAULT_INJECTION: forcing a failure. [ 571.310751][T11590] name failslab, interval 1, probability 0, space 0, times 0 [ 571.337927][T11590] CPU: 1 PID: 11590 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 571.347135][T11590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 571.357188][T11590] Call Trace: [ 571.360479][T11590] dump_stack+0x172/0x1f0 [ 571.364812][T11590] should_fail.cold+0xa/0x15 [ 571.369415][T11590] ? fault_create_debugfs_attr+0x180/0x180 [ 571.375227][T11590] ? ___might_sleep+0x163/0x280 [ 571.380092][T11590] __should_failslab+0x121/0x190 [ 571.385028][T11590] should_failslab+0x9/0x14 [ 571.389524][T11590] kmem_cache_alloc_node_trace+0x274/0x750 [ 571.395330][T11590] ? find_next_iomem_res+0x3b0/0x3b0 [ 571.400611][T11590] ? __kasan_slab_free+0x102/0x150 [ 571.405723][T11590] ? kasan_slab_free+0xe/0x10 [ 571.410392][T11590] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 571.416635][T11590] __get_vm_area_node+0x12b/0x370 [ 571.421651][T11590] ? pat_init+0x4d0/0x4d0 [ 571.425977][T11590] ? memremap+0x3c3/0x520 [ 571.430304][T11590] get_vm_area_caller+0x47/0x60 [ 571.435149][T11590] ? memremap+0x3c3/0x520 [ 571.439469][T11590] __ioremap_caller.constprop.0+0x362/0x710 [ 571.445351][T11590] ? memremap+0x3c3/0x520 [ 571.449673][T11590] ? iounmap+0x1b0/0x1b0 [ 571.453925][T11590] ? __kasan_check_write+0x14/0x20 [ 571.459031][T11590] ? _raw_read_unlock+0x2d/0x50 [ 571.463874][T11590] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 571.470104][T11590] ? region_intersects+0x263/0x2f0 [ 571.475208][T11590] ioremap_cache+0x24/0x30 [ 571.479650][T11590] memremap+0x3c3/0x520 [ 571.483807][T11590] ? devm_memremap_match+0x40/0x40 [ 571.488919][T11590] ? _raw_read_unlock+0x2d/0x50 [ 571.493764][T11590] ? iomem_is_exclusive+0x33/0x1af [ 571.498873][T11590] xlate_dev_mem_ptr+0x28/0x50 [ 571.503634][T11590] read_mem+0xdc/0x2c0 [ 571.507709][T11590] do_iter_read+0x4a4/0x660 [ 571.512200][T11590] ? dup_iter+0x260/0x260 [ 571.516534][T11590] vfs_readv+0xf0/0x160 [ 571.520697][T11590] ? compat_rw_copy_check_uvector+0x4c0/0x4c0 [ 571.526760][T11590] ? __kasan_check_read+0x11/0x20 [ 571.531792][T11590] ? ksys_dup3+0x3e0/0x3e0 [ 571.536205][T11590] ? debug_smp_processor_id+0x3c/0x214 [ 571.541667][T11590] ? __fget_light+0x1a9/0x230 [ 571.546345][T11590] do_preadv+0x1c4/0x280 [ 571.550684][T11590] ? do_readv+0x330/0x330 [ 571.555009][T11590] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 571.560487][T11590] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 571.565959][T11590] ? do_syscall_64+0x26/0x760 [ 571.570659][T11590] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 571.576725][T11590] ? do_syscall_64+0x26/0x760 [ 571.581400][T11590] __x64_sys_preadv+0x9a/0xf0 [ 571.586074][T11590] do_syscall_64+0xfa/0x760 [ 571.590581][T11590] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 571.596470][T11590] RIP: 0033:0x459879 [ 571.600376][T11590] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 571.619971][T11590] RSP: 002b:00007f1e7f50fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 571.628372][T11590] RAX: ffffffffffffffda RBX: 00007f1e7f50fc90 RCX: 0000000000459879 [ 571.636330][T11590] RDX: 0000000000000002 RSI: 0000000020000200 RDI: 0000000000000004 [ 571.644292][T11590] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 571.652251][T11590] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1e7f5106d4 21:32:54 executing program 5: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ppoll(&(0x7f0000000000)=[{r0}, {r1, 0x100, 0x8}], 0x2, 0x0, 0x0, 0x0) [ 571.660237][T11590] R13: 00000000004c6b98 R14: 00000000004dbd88 R15: 0000000000000005 21:32:54 executing program 3 (fault-call:6 fault-nth:23): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x0) [ 571.790269][T11605] FAULT_INJECTION: forcing a failure. [ 571.790269][T11605] name failslab, interval 1, probability 0, space 0, times 0 [ 571.817079][T11605] CPU: 0 PID: 11605 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 571.826195][T11605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 571.836258][T11605] Call Trace: [ 571.839552][T11605] dump_stack+0x172/0x1f0 [ 571.843890][T11605] should_fail.cold+0xa/0x15 [ 571.848478][T11605] ? fault_create_debugfs_attr+0x180/0x180 [ 571.854289][T11605] ? ___might_sleep+0x163/0x280 [ 571.859140][T11605] __should_failslab+0x121/0x190 [ 571.864074][T11605] should_failslab+0x9/0x14 [ 571.868583][T11605] kmem_cache_alloc_node+0x268/0x740 [ 571.873860][T11605] ? ___might_sleep+0x163/0x280 [ 571.878715][T11605] alloc_vmap_area+0x140/0x2080 [ 571.883560][T11605] ? __get_vm_area_node+0x12b/0x370 [ 571.888776][T11605] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 571.894334][T11605] ? purge_vmap_area_lazy+0x40/0x40 [ 571.899531][T11605] ? find_next_iomem_res+0x3b0/0x3b0 [ 571.904813][T11605] ? __kasan_slab_free+0x102/0x150 [ 571.909912][T11605] ? kasan_slab_free+0xe/0x10 [ 571.914588][T11605] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 571.920828][T11605] __get_vm_area_node+0x179/0x370 [ 571.925855][T11605] ? memremap+0x3c3/0x520 [ 571.930180][T11605] get_vm_area_caller+0x47/0x60 [ 571.935023][T11605] ? memremap+0x3c3/0x520 [ 571.939348][T11605] __ioremap_caller.constprop.0+0x362/0x710 [ 571.945234][T11605] ? memremap+0x3c3/0x520 [ 571.949664][T11605] ? iounmap+0x1b0/0x1b0 [ 571.953901][T11605] ? __kasan_check_write+0x14/0x20 [ 571.959007][T11605] ? _raw_read_unlock+0x2d/0x50 [ 571.963844][T11605] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 571.970193][T11605] ? region_intersects+0x263/0x2f0 [ 571.975301][T11605] ioremap_cache+0x24/0x30 [ 571.979717][T11605] memremap+0x3c3/0x520 [ 571.983868][T11605] ? devm_memremap_match+0x40/0x40 [ 571.988973][T11605] ? _raw_read_unlock+0x2d/0x50 [ 571.993826][T11605] ? iomem_is_exclusive+0x33/0x1af [ 571.998917][T11605] xlate_dev_mem_ptr+0x28/0x50 [ 572.003659][T11605] read_mem+0xdc/0x2c0 [ 572.007714][T11605] do_iter_read+0x4a4/0x660 [ 572.012193][T11605] ? dup_iter+0x260/0x260 [ 572.016503][T11605] vfs_readv+0xf0/0x160 [ 572.020641][T11605] ? compat_rw_copy_check_uvector+0x4c0/0x4c0 [ 572.026685][T11605] ? __kasan_check_read+0x11/0x20 [ 572.031690][T11605] ? ksys_dup3+0x3e0/0x3e0 [ 572.036082][T11605] ? wait_for_completion+0x440/0x440 [ 572.041343][T11605] ? __fget_light+0x1a9/0x230 [ 572.046009][T11605] do_preadv+0x1c4/0x280 [ 572.050228][T11605] ? do_readv+0x330/0x330 [ 572.054555][T11605] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 572.059999][T11605] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 572.065444][T11605] ? do_syscall_64+0x26/0x760 [ 572.070105][T11605] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 572.076158][T11605] ? do_syscall_64+0x26/0x760 [ 572.080818][T11605] __x64_sys_preadv+0x9a/0xf0 [ 572.085471][T11605] do_syscall_64+0xfa/0x760 [ 572.089950][T11605] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 572.095814][T11605] RIP: 0033:0x459879 [ 572.099697][T11605] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 572.119276][T11605] RSP: 002b:00007f1e7f50fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 572.127659][T11605] RAX: ffffffffffffffda RBX: 00007f1e7f50fc90 RCX: 0000000000459879 21:32:54 executing program 5: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ppoll(&(0x7f0000000000)=[{r0}, {r1, 0x100, 0x300}], 0x2, 0x0, 0x0, 0x0) 21:32:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace(0x4204, r1) [ 572.135609][T11605] RDX: 0000000000000002 RSI: 0000000020000200 RDI: 0000000000000004 [ 572.143552][T11605] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 572.151494][T11605] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1e7f5106d4 [ 572.159438][T11605] R13: 00000000004c6b98 R14: 00000000004dbd88 R15: 0000000000000005 21:32:54 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000040)={'ipddp0\x00', 0x1}) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, 0x0, 0x0) 21:32:54 executing program 3 (fault-call:6 fault-nth:24): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x0) [ 572.408845][T11625] FAULT_INJECTION: forcing a failure. [ 572.408845][T11625] name failslab, interval 1, probability 0, space 0, times 0 [ 572.435707][T11625] CPU: 0 PID: 11625 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 572.444825][T11625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 572.454883][T11625] Call Trace: [ 572.458173][T11625] dump_stack+0x172/0x1f0 [ 572.462524][T11625] should_fail.cold+0xa/0x15 [ 572.467113][T11625] ? fault_create_debugfs_attr+0x180/0x180 [ 572.472922][T11625] ? ___might_sleep+0x163/0x280 [ 572.477782][T11625] __should_failslab+0x121/0x190 [ 572.482722][T11625] should_failslab+0x9/0x14 [ 572.487240][T11625] kmem_cache_alloc_node_trace+0x274/0x750 [ 572.493047][T11625] ? find_next_iomem_res+0x3b0/0x3b0 [ 572.498340][T11625] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 572.504577][T11625] __get_vm_area_node+0x12b/0x370 [ 572.509594][T11625] ? pat_init+0x4d0/0x4d0 [ 572.513913][T11625] ? memremap+0x3c3/0x520 [ 572.518237][T11625] get_vm_area_caller+0x47/0x60 [ 572.523081][T11625] ? memremap+0x3c3/0x520 [ 572.527397][T11625] __ioremap_caller.constprop.0+0x362/0x710 [ 572.533273][T11625] ? retint_kernel+0x2b/0x2b [ 572.537840][T11625] ? memremap+0x3c3/0x520 [ 572.542153][T11625] ? iounmap+0x1b0/0x1b0 [ 572.546384][T11625] ? __kasan_check_write+0x14/0x20 [ 572.551495][T11625] ? _raw_read_unlock+0x2d/0x50 [ 572.556321][T11625] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 572.562542][T11625] ? region_intersects+0x263/0x2f0 [ 572.567645][T11625] ioremap_cache+0x24/0x30 [ 572.572048][T11625] memremap+0x3c3/0x520 [ 572.576182][T11625] ? devm_memremap_match+0x40/0x40 [ 572.581299][T11625] ? _raw_read_unlock+0x2d/0x50 [ 572.586141][T11625] ? iomem_is_exclusive+0x33/0x1af [ 572.591229][T11625] xlate_dev_mem_ptr+0x28/0x50 [ 572.595981][T11625] read_mem+0xdc/0x2c0 [ 572.600052][T11625] do_iter_read+0x4a4/0x660 [ 572.604545][T11625] ? dup_iter+0x260/0x260 [ 572.608869][T11625] vfs_readv+0xf0/0x160 [ 572.613033][T11625] ? compat_rw_copy_check_uvector+0x4c0/0x4c0 [ 572.619117][T11625] ? ksys_dup3+0x3e0/0x3e0 [ 572.623539][T11625] ? wait_for_completion+0x440/0x440 [ 572.628812][T11625] ? __fget_light+0x1a9/0x230 [ 572.633476][T11625] do_preadv+0x1c4/0x280 [ 572.637705][T11625] ? do_readv+0x330/0x330 [ 572.642042][T11625] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 572.647492][T11625] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 572.652935][T11625] ? do_syscall_64+0x26/0x760 [ 572.657595][T11625] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 572.663641][T11625] ? do_syscall_64+0x26/0x760 [ 572.668306][T11625] __x64_sys_preadv+0x9a/0xf0 [ 572.672964][T11625] do_syscall_64+0xfa/0x760 [ 572.677452][T11625] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 572.683341][T11625] RIP: 0033:0x459879 [ 572.687223][T11625] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 572.706808][T11625] RSP: 002b:00007f1e7f50fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 572.715215][T11625] RAX: ffffffffffffffda RBX: 00007f1e7f50fc90 RCX: 0000000000459879 [ 572.723181][T11625] RDX: 0000000000000002 RSI: 0000000020000200 RDI: 0000000000000004 [ 572.731151][T11625] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 572.739117][T11625] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1e7f5106d4 [ 572.747097][T11625] R13: 00000000004c6b98 R14: 00000000004dbd88 R15: 0000000000000005 [ 572.936206][T11633] IPVS: ftp: loaded support on port[0] = 21 [ 573.165325][T11633] chnl_net:caif_netlink_parms(): no params data found [ 573.271462][T11633] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.278829][T11633] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.286342][T11633] device bridge_slave_0 entered promiscuous mode [ 573.294550][T11633] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.301713][T11633] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.309236][T11633] device bridge_slave_1 entered promiscuous mode [ 573.389612][T11633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 573.400626][T11633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 573.417567][T11633] team0: Port device team_slave_0 added [ 573.425036][T11633] team0: Port device team_slave_1 added [ 573.541782][T11633] device hsr_slave_0 entered promiscuous mode [ 573.607133][T11633] device hsr_slave_1 entered promiscuous mode [ 573.666928][T11633] debugfs: Directory 'hsr0' with parent '/' already present! [ 573.745987][T11633] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.753138][T11633] bridge0: port 2(bridge_slave_1) entered forwarding state [ 573.760502][T11633] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.767585][T11633] bridge0: port 1(bridge_slave_0) entered forwarding state [ 573.802909][T11633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 573.812192][ T98] device bridge_slave_1 left promiscuous mode [ 573.818817][ T98] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.847651][ T98] device bridge_slave_0 left promiscuous mode [ 573.853773][ T98] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.617548][ T98] device hsr_slave_0 left promiscuous mode [ 575.657147][ T98] device hsr_slave_1 left promiscuous mode [ 575.707623][ T98] team0 (unregistering): Port device team_slave_1 removed [ 575.718553][ T98] team0 (unregistering): Port device team_slave_0 removed [ 575.729147][ T98] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 575.782857][ T98] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 575.848682][ T98] bond0 (unregistering): Released all slaves [ 575.964642][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.972932][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.981958][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 576.004806][T11633] 8021q: adding VLAN 0 to HW filter on device team0 [ 576.012743][T11639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 576.020996][T11639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 576.037243][T11639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 576.046626][T11639] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 576.054962][T11639] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.062083][T11639] bridge0: port 1(bridge_slave_0) entered forwarding state [ 576.069894][T11639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 576.078445][T11639] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 576.086656][T11639] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.093727][T11639] bridge0: port 2(bridge_slave_1) entered forwarding state [ 576.101328][T11639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 576.109832][T11639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 576.120018][T11639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 576.128637][T11639] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 576.136988][T11639] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 576.152185][ T8708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 576.160830][ T8708] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 576.169353][ T8708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 576.177730][ T8708] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 576.192843][T11633] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 576.204096][T11633] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 576.215671][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 576.224892][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 576.273110][T11633] 8021q: adding VLAN 0 to HW filter on device batadv0 21:34:16 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfebff07f) 21:34:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace(0x4205, r1) 21:34:16 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x82667afb16076ec8) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0xffffffffffffffff, 0xb5eeb3cd14de1f39, 0x8, 0x3, 0xffff}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 21:34:16 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002840)='/dev/dlm-monitor\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000002880)=0x2, 0x4) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x100) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000000100)={@pppoe={0x18, 0x0, {0x3, @dev={[], 0x20}, 'veth1_to_bridge\x00'}}, {&(0x7f0000000040)=""/120, 0x78}, &(0x7f00000000c0), 0x11}, 0xa0) 21:34:16 executing program 3 (fault-call:6 fault-nth:25): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x0) 21:34:16 executing program 5: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ppoll(&(0x7f0000000000)=[{r0}, {r1, 0x100, 0x3000000}], 0x2, 0x0, 0x0, 0x0) 21:34:16 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x3}}) creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x300, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e) [ 654.018261][T11655] FAULT_INJECTION: forcing a failure. [ 654.018261][T11655] name failslab, interval 1, probability 0, space 0, times 0 [ 654.043014][T11655] CPU: 0 PID: 11655 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 654.052136][T11655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 654.062179][T11655] Call Trace: [ 654.065474][T11655] dump_stack+0x172/0x1f0 [ 654.069815][T11655] should_fail.cold+0xa/0x15 [ 654.074417][T11655] ? fault_create_debugfs_attr+0x180/0x180 [ 654.080229][T11655] ? ___might_sleep+0x163/0x280 [ 654.085080][T11655] __should_failslab+0x121/0x190 [ 654.090018][T11655] should_failslab+0x9/0x14 [ 654.094515][T11655] kmem_cache_alloc_node+0x268/0x740 [ 654.099793][T11655] ? ___might_sleep+0x163/0x280 [ 654.104647][T11655] alloc_vmap_area+0x140/0x2080 [ 654.109494][T11655] ? __get_vm_area_node+0x12b/0x370 [ 654.114696][T11655] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 654.120250][T11655] ? purge_vmap_area_lazy+0x40/0x40 [ 654.125452][T11655] ? find_next_iomem_res+0x3b0/0x3b0 [ 654.130735][T11655] ? __kasan_slab_free+0x102/0x150 [ 654.135870][T11655] ? kasan_slab_free+0xe/0x10 [ 654.140547][T11655] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 654.146794][T11655] __get_vm_area_node+0x179/0x370 [ 654.151824][T11655] ? memremap+0x3c3/0x520 [ 654.156180][T11655] get_vm_area_caller+0x47/0x60 [ 654.161025][T11655] ? memremap+0x3c3/0x520 [ 654.165358][T11655] __ioremap_caller.constprop.0+0x362/0x710 [ 654.171247][T11655] ? memremap+0x3c3/0x520 [ 654.175589][T11655] ? iounmap+0x1b0/0x1b0 [ 654.179831][T11655] ? __kasan_check_write+0x14/0x20 [ 654.184951][T11655] ? _raw_read_unlock+0x2d/0x50 [ 654.189801][T11655] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 654.196034][T11655] ? region_intersects+0x263/0x2f0 [ 654.201144][T11655] ioremap_cache+0x24/0x30 [ 654.205563][T11655] memremap+0x3c3/0x520 [ 654.209723][T11655] ? devm_memremap_match+0x40/0x40 [ 654.214842][T11655] ? _raw_read_unlock+0x2d/0x50 [ 654.219696][T11655] ? iomem_is_exclusive+0x33/0x1af [ 654.224811][T11655] xlate_dev_mem_ptr+0x28/0x50 [ 654.229587][T11655] read_mem+0xdc/0x2c0 [ 654.233658][T11655] do_iter_read+0x4a4/0x660 [ 654.238179][T11655] ? dup_iter+0x260/0x260 [ 654.242523][T11655] vfs_readv+0xf0/0x160 [ 654.246681][T11655] ? compat_rw_copy_check_uvector+0x4c0/0x4c0 [ 654.252745][T11655] ? __kasan_check_read+0x11/0x20 [ 654.257774][T11655] ? ksys_dup3+0x3e0/0x3e0 [ 654.262183][T11655] ? debug_smp_processor_id+0x3c/0x214 21:34:16 executing program 5: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ppoll(&(0x7f0000000000)=[{r0}, {r1, 0x100, 0x8000000}], 0x2, 0x0, 0x0, 0x0) 21:34:16 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0xc00, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x30005, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x2, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 21:34:16 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x2000, 0x0) ioctl$RTC_PIE_ON(r5, 0x7005) splice(r3, 0x0, r4, 0x0, 0x30005, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r7, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r6, 0x0, r7, 0x0, 0x30005, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) write$binfmt_misc(r8, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r9) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r9, 0x84, 0x0, &(0x7f0000000280)={r11}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000080)={r11, 0xa0, &(0x7f0000000100)=[@in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e21, 0x7, @mcast1, 0x1}, @in6={0xa, 0x4e23, 0x3f, @ipv4={[], [], @rand_addr=0x10001}, 0x81}, @in={0x2, 0x4e20, @multicast2}, @in6={0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, [], 0x23}, 0x11}, @in6={0xa, 0x4e23, 0x1, @rand_addr="ffd5a3ff6199065ec5a7451d48243dbd", 0xbc}, @in={0x2, 0x4e20, @loopback}]}, &(0x7f00000001c0)=0x10) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0xfffffffffffffdd2) splice(r1, 0x0, r2, 0x0, 0x30005, 0x0) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, 0x0, 0x0) [ 654.267640][T11655] ? __fget_light+0x1a9/0x230 [ 654.272315][T11655] do_preadv+0x1c4/0x280 [ 654.276556][T11655] ? do_readv+0x330/0x330 [ 654.280880][T11655] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 654.286341][T11655] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 654.291801][T11655] ? do_syscall_64+0x26/0x760 [ 654.296480][T11655] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 654.302541][T11655] ? do_syscall_64+0x26/0x760 [ 654.307226][T11655] __x64_sys_preadv+0x9a/0xf0 [ 654.307245][T11655] do_syscall_64+0xfa/0x760 [ 654.307265][T11655] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 654.307277][T11655] RIP: 0033:0x459879 [ 654.307291][T11655] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 654.307303][T11655] RSP: 002b:00007f1e7f50fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 654.316442][T11655] RAX: ffffffffffffffda RBX: 00007f1e7f50fc90 RCX: 0000000000459879 [ 654.316451][T11655] RDX: 0000000000000002 RSI: 0000000020000200 RDI: 0000000000000004 [ 654.316460][T11655] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 654.316469][T11655] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1e7f5106d4 [ 654.316478][T11655] R13: 00000000004c6b98 R14: 00000000004dbd88 R15: 0000000000000005 21:34:17 executing program 5: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ppoll(&(0x7f0000000000)=[{r0}, {r1, 0x100, 0x1000000000000}], 0x2, 0x0, 0x0, 0x0) 21:34:17 executing program 3 (fault-call:6 fault-nth:26): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x0) [ 654.680758][T11692] FAULT_INJECTION: forcing a failure. [ 654.680758][T11692] name failslab, interval 1, probability 0, space 0, times 0 [ 654.693621][T11692] CPU: 1 PID: 11692 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 654.702724][T11692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 654.712778][T11692] Call Trace: [ 654.716066][T11692] dump_stack+0x172/0x1f0 [ 654.720396][T11692] should_fail.cold+0xa/0x15 [ 654.725011][T11692] ? fault_create_debugfs_attr+0x180/0x180 [ 654.730816][T11692] ? ___might_sleep+0x163/0x280 [ 654.735671][T11692] __should_failslab+0x121/0x190 [ 654.740606][T11692] should_failslab+0x9/0x14 [ 654.745104][T11692] kmem_cache_alloc_node_trace+0x274/0x750 [ 654.750908][T11692] ? find_next_iomem_res+0x3b0/0x3b0 [ 654.756190][T11692] ? __kasan_slab_free+0x102/0x150 [ 654.761295][T11692] ? kasan_slab_free+0xe/0x10 [ 654.766072][T11692] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 654.772322][T11692] __get_vm_area_node+0x12b/0x370 [ 654.777332][T11692] ? pat_init+0x4d0/0x4d0 [ 654.781654][T11692] ? memremap+0x3c3/0x520 [ 654.785983][T11692] get_vm_area_caller+0x47/0x60 [ 654.790829][T11692] ? memremap+0x3c3/0x520 [ 654.795159][T11692] __ioremap_caller.constprop.0+0x362/0x710 [ 654.801050][T11692] ? memremap+0x3c3/0x520 [ 654.805397][T11692] ? iounmap+0x1b0/0x1b0 [ 654.809647][T11692] ? __kasan_check_write+0x14/0x20 [ 654.814759][T11692] ? _raw_read_unlock+0x2d/0x50 [ 654.819598][T11692] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 654.819632][T11692] ? region_intersects+0x263/0x2f0 [ 654.819649][T11692] ioremap_cache+0x24/0x30 [ 654.819666][T11692] memremap+0x3c3/0x520 [ 654.830972][T11692] ? devm_memremap_match+0x40/0x40 [ 654.830989][T11692] ? _raw_read_unlock+0x2d/0x50 [ 654.831005][T11692] ? iomem_is_exclusive+0x33/0x1af [ 654.831021][T11692] xlate_dev_mem_ptr+0x28/0x50 [ 654.859324][T11692] read_mem+0xdc/0x2c0 [ 654.863391][T11692] do_iter_read+0x4a4/0x660 [ 654.867886][T11692] ? dup_iter+0x260/0x260 [ 654.872195][T11692] vfs_readv+0xf0/0x160 [ 654.876325][T11692] ? compat_rw_copy_check_uvector+0x4c0/0x4c0 [ 654.882371][T11692] ? __kasan_check_read+0x11/0x20 [ 654.887373][T11692] ? ksys_dup3+0x3e0/0x3e0 [ 654.891765][T11692] ? wait_for_completion+0x440/0x440 [ 654.897025][T11692] ? __fget_light+0x1a9/0x230 [ 654.901675][T11692] do_preadv+0x1c4/0x280 [ 654.905891][T11692] ? do_readv+0x330/0x330 [ 654.910194][T11692] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 654.915625][T11692] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 654.921065][T11692] ? do_syscall_64+0x26/0x760 [ 654.925848][T11692] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 654.931884][T11692] ? do_syscall_64+0x26/0x760 [ 654.936542][T11692] __x64_sys_preadv+0x9a/0xf0 [ 654.941209][T11692] do_syscall_64+0xfa/0x760 [ 654.945691][T11692] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 654.951558][T11692] RIP: 0033:0x459879 [ 654.955431][T11692] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 654.975036][T11692] RSP: 002b:00007f1e7f50fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 654.983427][T11692] RAX: ffffffffffffffda RBX: 00007f1e7f50fc90 RCX: 0000000000459879 [ 654.991382][T11692] RDX: 0000000000000002 RSI: 0000000020000200 RDI: 0000000000000004 [ 654.999337][T11692] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 655.007295][T11692] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1e7f5106d4 [ 655.015239][T11692] R13: 00000000004c6b98 R14: 00000000004dbd88 R15: 0000000000000005 [ 655.634343][T11705] IPVS: ftp: loaded support on port[0] = 21 [ 655.822649][T11705] chnl_net:caif_netlink_parms(): no params data found [ 655.850655][T11705] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.857800][T11705] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.865336][T11705] device bridge_slave_0 entered promiscuous mode [ 655.872832][T11705] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.880318][T11705] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.888217][T11705] device bridge_slave_1 entered promiscuous mode [ 655.967763][T11705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 655.978565][T11705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 655.995304][T11705] team0: Port device team_slave_0 added [ 656.002584][T11705] team0: Port device team_slave_1 added [ 656.118640][T11705] device hsr_slave_0 entered promiscuous mode [ 656.167229][T11705] device hsr_slave_1 entered promiscuous mode [ 656.227768][T11611] device bridge_slave_1 left promiscuous mode [ 656.233934][T11611] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.278122][T11611] device bridge_slave_0 left promiscuous mode [ 656.284280][T11611] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.067405][T11611] device hsr_slave_0 left promiscuous mode [ 658.127043][T11611] device hsr_slave_1 left promiscuous mode [ 658.179151][T11611] team0 (unregistering): Port device team_slave_1 removed [ 658.189871][T11611] team0 (unregistering): Port device team_slave_0 removed [ 658.202247][T11611] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 658.262604][T11611] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 658.334291][T11611] bond0 (unregistering): Released all slaves [ 658.492982][T11705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 658.504800][ T8708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 658.513187][ T8708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 658.524631][T11705] 8021q: adding VLAN 0 to HW filter on device team0 [ 658.534604][T11638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 658.543684][T11638] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 658.552297][T11638] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.559379][T11638] bridge0: port 1(bridge_slave_0) entered forwarding state [ 658.579263][ T2897] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 658.587242][ T2897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 658.595665][ T2897] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 658.604069][ T2897] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.611118][ T2897] bridge0: port 2(bridge_slave_1) entered forwarding state [ 658.620626][ T2897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 658.629287][ T2897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 658.637945][ T2897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 658.646281][ T2897] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 658.654575][ T2897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 658.663027][ T2897] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 658.672097][ T2897] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 658.717217][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 658.726412][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 658.744275][T11705] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 658.756413][T11705] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 658.764739][ T8708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 658.773747][ T8708] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 658.804534][T11705] 8021q: adding VLAN 0 to HW filter on device batadv0 21:35:42 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfebfffff) 21:35:42 executing program 5: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ppoll(&(0x7f0000000000)=[{r0}, {r1, 0x100, 0x300000000000000}], 0x2, 0x0, 0x0, 0x0) 21:35:42 executing program 3 (fault-call:6 fault-nth:27): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x0) 21:35:42 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000240)={0x0, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e21, @local}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x24}}, 0x100, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)='rose0\x00', 0x400, 0x8}) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, 0x0, 0x0) socketpair(0x2, 0x3, 0x80, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r3, 0x0, r4, 0x0, 0x30005, 0x0) syz_open_dev$vcsa(&(0x7f0000000200)='/Fev/vcsa#\x00', 0x2, 0x2) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0x4240a2a0) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0xfffffffffffffe36) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000100)={0x81}, 0x4) bind$ax25(r2, &(0x7f0000000340)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6}, [@null, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x48) bind$xdp(r2, &(0x7f00000000c0)={0x2c, 0x2, r6, 0x28}, 0x10) 21:35:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace(0x4206, r1) 21:35:42 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fsetxattr(r1, &(0x7f0000000040)=@random={'security.', '\x00'}, &(0x7f0000000080)='/dev/snd/timer\x00', 0xf, 0x3) 21:35:42 executing program 5: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ppoll(&(0x7f0000000000)=[{r0}, {r1, 0x100, 0x800000000000000}], 0x2, 0x0, 0x0, 0x0) [ 740.280572][T11726] FAULT_INJECTION: forcing a failure. [ 740.280572][T11726] name failslab, interval 1, probability 0, space 0, times 0 [ 740.347084][T11726] CPU: 0 PID: 11726 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 740.356217][T11726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 740.366318][T11726] Call Trace: [ 740.369633][T11726] dump_stack+0x172/0x1f0 [ 740.373974][T11726] should_fail.cold+0xa/0x15 [ 740.378570][T11726] ? fault_create_debugfs_attr+0x180/0x180 [ 740.384376][T11726] ? ___might_sleep+0x163/0x280 [ 740.389225][T11726] __should_failslab+0x121/0x190 [ 740.394267][T11726] should_failslab+0x9/0x14 [ 740.398771][T11726] kmem_cache_alloc_node_trace+0x274/0x750 [ 740.404579][T11726] ? find_next_iomem_res+0x3b0/0x3b0 [ 740.409863][T11726] ? __kasan_slab_free+0x102/0x150 [ 740.414969][T11726] ? kasan_slab_free+0xe/0x10 [ 740.419659][T11726] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 740.425915][T11726] __get_vm_area_node+0x12b/0x370 [ 740.430937][T11726] ? pat_init+0x4d0/0x4d0 [ 740.435272][T11726] ? memremap+0x3c3/0x520 [ 740.439611][T11726] get_vm_area_caller+0x47/0x60 [ 740.444460][T11726] ? memremap+0x3c3/0x520 [ 740.448791][T11726] __ioremap_caller.constprop.0+0x362/0x710 [ 740.454684][T11726] ? memremap+0x3c3/0x520 [ 740.459009][T11726] ? iounmap+0x1b0/0x1b0 [ 740.463251][T11726] ? __kasan_check_write+0x14/0x20 [ 740.468360][T11726] ? _raw_read_unlock+0x2d/0x50 [ 740.473207][T11726] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 740.479442][T11726] ? region_intersects+0x263/0x2f0 [ 740.484554][T11726] ioremap_cache+0x24/0x30 [ 740.488970][T11726] memremap+0x3c3/0x520 [ 740.493128][T11726] ? devm_memremap_match+0x40/0x40 [ 740.498239][T11726] ? _raw_read_unlock+0x2d/0x50 [ 740.503087][T11726] ? iomem_is_exclusive+0x33/0x1af [ 740.508193][T11726] xlate_dev_mem_ptr+0x28/0x50 [ 740.512971][T11726] read_mem+0xdc/0x2c0 [ 740.517065][T11726] do_iter_read+0x4a4/0x660 [ 740.521563][T11726] ? dup_iter+0x260/0x260 [ 740.525901][T11726] vfs_readv+0xf0/0x160 [ 740.530061][T11726] ? compat_rw_copy_check_uvector+0x4c0/0x4c0 [ 740.536131][T11726] ? __kasan_check_read+0x11/0x20 [ 740.541168][T11726] ? ksys_dup3+0x3e0/0x3e0 [ 740.545598][T11726] ? wait_for_completion+0x440/0x440 [ 740.550899][T11726] ? __fget_light+0x1a9/0x230 [ 740.555582][T11726] do_preadv+0x1c4/0x280 [ 740.559829][T11726] ? do_readv+0x330/0x330 [ 740.564163][T11726] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 740.569622][T11726] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 740.575081][T11726] ? do_syscall_64+0x26/0x760 [ 740.579756][T11726] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 740.585827][T11726] ? do_syscall_64+0x26/0x760 [ 740.590508][T11726] __x64_sys_preadv+0x9a/0xf0 [ 740.595188][T11726] do_syscall_64+0xfa/0x760 [ 740.599694][T11726] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 740.605596][T11726] RIP: 0033:0x459879 [ 740.609491][T11726] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 740.629196][T11726] RSP: 002b:00007f1e7f50fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 740.637691][T11726] RAX: ffffffffffffffda RBX: 00007f1e7f50fc90 RCX: 0000000000459879 [ 740.645656][T11726] RDX: 0000000000000002 RSI: 0000000020000200 RDI: 0000000000000004 [ 740.653620][T11726] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 740.661600][T11726] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1e7f5106d4 [ 740.669571][T11726] R13: 00000000004c6b98 R14: 00000000004dbd88 R15: 0000000000000005 21:35:43 executing program 3 (fault-call:6 fault-nth:28): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x0) 21:35:43 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0xbe897425a5d2e0dc) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) r1 = getpgid(0xffffffffffffffff) ptrace$getenv(0x4201, r1, 0x81, &(0x7f0000000080)) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x80000001) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r1, r2, 0x0, 0x2, &(0x7f0000000040)=')\x00', 0xffffffffffffffff}, 0x30) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) pread64(r0, &(0x7f0000000100)=""/219, 0xdb, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/mixer\x00', 0x42000, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r4, 0x0, r5, 0x0, 0x30005, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000200), &(0x7f0000000240)=0x4) connect$unix(r3, &(0x7f0000001a00)=@abs={0x0, 0x0, 0x4e20}, 0x6e) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) vmsplice(0xffffffffffffffff, &(0x7f0000001900)=[{&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000001380)="ccebe694c25fb27825e8a6d16e47633ab52844309297e6bc3601d2bd5f3c279bb83db2566aa45887b0da643797246d3b0cafca6528482dda806e98fc59c2712b14cf00f6a75593d62d25bd0a0341220b15304f16ded73329a1a4410790df1a037c2e1ee6bc25708ed4976274670cb0d58a8f9fa9e3679affd85f7c28bad8ea05b762b4f849e6f82c14a1d1f47ca467ebc96f5777ad186154acace571eab2946906d9df3e62df5e74e3880d6c75f0efdb92e4a189d51684c192792875b94e7d207cffe3cab6ae3be21df8050c395ce6ff224a6c87ff2a8e084829fe6279c9b881855a04348eee60885adfc2e544571ec39a20", 0xf2}, {&(0x7f0000001480)="df51deaaa7cdd8ce67c80ae518c0137c34e9b86d164b106ee04f45aac1c85004cd886c60e71232d2f18cd642fb18805fb84d6103724b53b5cdba8add8b2e28b339010bb198a16b1f3d95b2d5cbc895d2b6a1227a402e69a24fcc72ee07afbbfc6f922ba6821a267b2c73e4a39f4d814672548f4aa80292a4d36df33f8de66566", 0x80}, {&(0x7f0000001500)="f6e9ea1c51811f0b3a82b92b2a34c4ed09620536460e25f5d4d87f10c533c134ff6810ddda59dbcfc7e9f7f8ef9407b0bb927adefb8874b61a99002176251fa9497d4a859681da88e7734d2ff991cb95ea92d21507610c249e492129253cd7af84fb24f69ad969a04fffbe6b2a427ba85f", 0x71}, {&(0x7f0000001580)="3306f2706e633b2e24523fa7af88b88b0ec3425f3f23b220955de23fe76193792d5f0817bbece4aa5494a32ba76c", 0x2e}, {&(0x7f00000015c0)="7a72b1140fbe63656e6d5e7f6402a24f196f41b8d65d93696a5fec06a90b50e62fb34b0d6d49659b42df75c1549cfa3219fe42342a6f80f4aeaa57925606a6069742995ed49b711aaee8b8134c53886ddf66290ce7d0e0182d2f8a911c6661cecc6f2530f1e4500abf16b04c5a218141bebc2cba05e8e173580e455ba25e5ff9b8393ac4d4cf2666580aef5abc73141efc65f0001600d5cf22bea954fd9a0bbe168bf1e53980bd46e6b4f440acf1b29247576418861d30979491a3f466ba8cedf267c48753416b0f1e69ec5056efa19a02", 0xd1}, {&(0x7f00000016c0)="a7766c848c972855440887e1c770f8", 0xf}, {&(0x7f0000001700)="9e0d82c72330bdf42d7cfe9ed444e0ac8736191e74b910d74cc8ab7f84179eb69b589076c123ad780221b87995fc8196bd8ef376b6887dc67c6c089af49bbd0beb82caf3b9ccc88f4fa704f24e6b186eca44ec218a1c8e2d6b62fa23e35bf43debb4de67186edd67758756dced5a2725a03fa21a48a0267e2679fab6a82525682f98668e33fddd701c2e88564cb15f1a98890bcbc748eec640bed67191f7839abb", 0xa1}, {&(0x7f00000017c0)="89858a0b01aec62b2841748fcb96f884b07174e3ef4192e1098f4d97464824b20851568f3fdf2b0acb7fcb9fe74c4658aade2ac84333b15292e7d1b148645b819a05fa9d019b13e83c9d0664079fd15368546133c9fa75d28c1c069f65018b3c52bbcf230410567e8a924a6e18c42d2b10a17b428baf56878648", 0x7a}, {&(0x7f0000001840)="1901ae09078b26deaed5cf1ece39c8dcd8303ffbbc48a313dc8a58c994bbedc1000a9bd64d26abf9825f790858d7eb303dc171a34285549e13ea6432711d380327272c09ebb0085bcb6a12dfd03f9f928057090f8537a338f0fa07f1fc188b8a0ead0199aca3c9ce3fe93c6f7f82b9d29af85395dd082d564be2d464bafbc4b6da69818c1ce5e8f95abc19a6bb66038f6a426d0cdf8c311298f15f89fcdde5aa797eb197fd", 0xa5}], 0xa, 0x4) [ 740.958346][T11742] FAULT_INJECTION: forcing a failure. [ 740.958346][T11742] name failslab, interval 1, probability 0, space 0, times 0 [ 740.971685][T11742] CPU: 1 PID: 11742 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 740.980790][T11742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 740.980796][T11742] Call Trace: [ 740.980820][T11742] dump_stack+0x172/0x1f0 [ 740.980843][T11742] should_fail.cold+0xa/0x15 [ 740.980863][T11742] ? fault_create_debugfs_attr+0x180/0x180 [ 740.980883][T11742] ? ___might_sleep+0x163/0x280 [ 740.980901][T11742] __should_failslab+0x121/0x190 [ 740.980920][T11742] should_failslab+0x9/0x14 [ 740.980945][T11742] kmem_cache_alloc_node_trace+0x274/0x750 [ 740.980964][T11742] ? find_next_iomem_res+0x3b0/0x3b0 [ 740.994278][T11742] ? __kasan_slab_free+0x102/0x150 [ 740.994291][T11742] ? kasan_slab_free+0xe/0x10 [ 740.994308][T11742] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 740.994331][T11742] __get_vm_area_node+0x12b/0x370 [ 740.994343][T11742] ? pat_init+0x4d0/0x4d0 [ 740.994356][T11742] ? memremap+0x3c3/0x520 [ 740.994373][T11742] get_vm_area_caller+0x47/0x60 [ 741.003234][T11742] ? memremap+0x3c3/0x520 [ 741.003251][T11742] __ioremap_caller.constprop.0+0x362/0x710 [ 741.003267][T11742] ? memremap+0x3c3/0x520 [ 741.003282][T11742] ? iounmap+0x1b0/0x1b0 [ 741.003300][T11742] ? __kasan_check_write+0x14/0x20 [ 741.003316][T11742] ? _raw_read_unlock+0x2d/0x50 [ 741.003335][T11742] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 21:35:43 executing program 3 (fault-call:6 fault-nth:29): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x0) 21:35:43 executing program 2: syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x10800, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040), 0x10) [ 741.013939][T11742] ? region_intersects+0x263/0x2f0 [ 741.013959][T11742] ioremap_cache+0x24/0x30 [ 741.013975][T11742] memremap+0x3c3/0x520 [ 741.013993][T11742] ? devm_memremap_match+0x40/0x40 [ 741.014009][T11742] ? _raw_read_unlock+0x2d/0x50 [ 741.014027][T11742] ? iomem_is_exclusive+0x33/0x1af [ 741.023439][T11742] xlate_dev_mem_ptr+0x28/0x50 [ 741.023456][T11742] read_mem+0xdc/0x2c0 [ 741.023477][T11742] do_iter_read+0x4a4/0x660 [ 741.023491][T11742] ? dup_iter+0x260/0x260 [ 741.023514][T11742] vfs_readv+0xf0/0x160 [ 741.034558][T11742] ? compat_rw_copy_check_uvector+0x4c0/0x4c0 [ 741.034573][T11742] ? __kasan_check_read+0x11/0x20 [ 741.034598][T11742] ? ksys_dup3+0x3e0/0x3e0 [ 741.034615][T11742] ? wait_for_completion+0x440/0x440 [ 741.034630][T11742] ? __fget_light+0x1a9/0x230 [ 741.034646][T11742] do_preadv+0x1c4/0x280 [ 741.044384][T11742] ? do_readv+0x330/0x330 [ 741.044398][T11742] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 741.044412][T11742] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 741.044425][T11742] ? do_syscall_64+0x26/0x760 [ 741.044458][T11742] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 741.044474][T11742] ? do_syscall_64+0x26/0x760 [ 741.044493][T11742] __x64_sys_preadv+0x9a/0xf0 [ 741.055699][T11742] do_syscall_64+0xfa/0x760 [ 741.055717][T11742] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 741.055728][T11742] RIP: 0033:0x459879 [ 741.055741][T11742] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 741.055748][T11742] RSP: 002b:00007f1e7f50fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 741.055760][T11742] RAX: ffffffffffffffda RBX: 00007f1e7f50fc90 RCX: 0000000000459879 [ 741.055772][T11742] RDX: 0000000000000002 RSI: 0000000020000200 RDI: 0000000000000004 [ 741.064387][T11742] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 741.064395][T11742] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1e7f5106d4 [ 741.064402][T11742] R13: 00000000004c6b98 R14: 00000000004dbd88 R15: 0000000000000005 [ 741.255741][T11749] FAULT_INJECTION: forcing a failure. [ 741.255741][T11749] name failslab, interval 1, probability 0, space 0, times 0 [ 741.301307][T11749] CPU: 0 PID: 11749 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 741.316690][T11749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 741.316697][T11749] Call Trace: [ 741.316717][T11749] dump_stack+0x172/0x1f0 [ 741.316737][T11749] should_fail.cold+0xa/0x15 [ 741.316755][T11749] ? fault_create_debugfs_attr+0x180/0x180 [ 741.316775][T11749] ? ___might_sleep+0x163/0x280 [ 741.316793][T11749] __should_failslab+0x121/0x190 [ 741.316809][T11749] should_failslab+0x9/0x14 [ 741.316822][T11749] kmem_cache_alloc_node_trace+0x274/0x750 [ 741.316837][T11749] ? find_next_iomem_res+0x3b0/0x3b0 [ 741.316853][T11749] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 741.316873][T11749] __get_vm_area_node+0x12b/0x370 [ 741.335980][T11749] ? pat_init+0x4d0/0x4d0 [ 741.335997][T11749] ? memremap+0x3c3/0x520 [ 741.336014][T11749] get_vm_area_caller+0x47/0x60 [ 741.336031][T11749] ? memremap+0x3c3/0x520 21:35:44 executing program 3 (fault-call:6 fault-nth:30): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x0) [ 741.336048][T11749] __ioremap_caller.constprop.0+0x362/0x710 [ 741.336065][T11749] ? retint_kernel+0x2b/0x2b [ 741.336077][T11749] ? memremap+0x3c3/0x520 [ 741.336091][T11749] ? iounmap+0x1b0/0x1b0 [ 741.336106][T11749] ? __kasan_check_write+0x14/0x20 [ 741.336126][T11749] ? _raw_read_unlock+0x2d/0x50 [ 741.343696][T11749] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 741.343712][T11749] ? region_intersects+0x263/0x2f0 [ 741.343730][T11749] ioremap_cache+0x24/0x30 [ 741.343746][T11749] memremap+0x3c3/0x520 [ 741.343764][T11749] ? devm_memremap_match+0x40/0x40 [ 741.343781][T11749] ? _raw_read_unlock+0x2d/0x50 [ 741.343795][T11749] ? iomem_is_exclusive+0x33/0x1af [ 741.343824][T11749] xlate_dev_mem_ptr+0x28/0x50 [ 741.354165][T11749] read_mem+0xdc/0x2c0 [ 741.354185][T11749] do_iter_read+0x4a4/0x660 [ 741.354199][T11749] ? dup_iter+0x260/0x260 [ 741.354221][T11749] vfs_readv+0xf0/0x160 [ 741.354236][T11749] ? compat_rw_copy_check_uvector+0x4c0/0x4c0 [ 741.354249][T11749] ? __rcu_read_unlock+0x220/0x6b0 [ 741.354283][T11749] ? __kasan_check_read+0x11/0x20 [ 741.364047][T11749] ? ksys_dup3+0x3e0/0x3e0 [ 741.364065][T11749] ? wait_for_completion+0x440/0x440 [ 741.364085][T11749] ? __fget_light+0x1a9/0x230 [ 741.364103][T11749] do_preadv+0x1c4/0x280 [ 741.364118][T11749] ? do_readv+0x330/0x330 [ 741.364132][T11749] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 741.364150][T11749] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 741.374419][T11749] ? do_syscall_64+0x26/0x760 [ 741.374435][T11749] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 741.374448][T11749] ? do_syscall_64+0x26/0x760 [ 741.374467][T11749] __x64_sys_preadv+0x9a/0xf0 [ 741.374485][T11749] do_syscall_64+0xfa/0x760 [ 741.374504][T11749] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 741.374515][T11749] RIP: 0033:0x459879 [ 741.374537][T11749] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 741.386004][T11749] RSP: 002b:00007f1e7f50fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 741.386017][T11749] RAX: ffffffffffffffda RBX: 00007f1e7f50fc90 RCX: 0000000000459879 [ 741.386028][T11749] RDX: 0000000000000002 RSI: 0000000020000200 RDI: 0000000000000004 [ 741.386035][T11749] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 741.386042][T11749] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1e7f5106d4 [ 741.386049][T11749] R13: 00000000004c6b98 R14: 00000000004dbd88 R15: 0000000000000005 [ 741.521964][T11755] FAULT_INJECTION: forcing a failure. [ 741.521964][T11755] name failslab, interval 1, probability 0, space 0, times 0 [ 741.535779][T11755] CPU: 1 PID: 11755 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 741.565667][T11755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 741.565673][T11755] Call Trace: [ 741.565691][T11755] dump_stack+0x172/0x1f0 [ 741.565711][T11755] should_fail.cold+0xa/0x15 [ 741.565727][T11755] ? fault_create_debugfs_attr+0x180/0x180 [ 741.565745][T11755] ? ___might_sleep+0x163/0x280 [ 741.576094][T11755] __should_failslab+0x121/0x190 [ 741.576111][T11755] should_failslab+0x9/0x14 [ 741.576125][T11755] kmem_cache_alloc_node_trace+0x274/0x750 [ 741.576139][T11755] ? find_next_iomem_res+0x3b0/0x3b0 [ 741.576154][T11755] ? __kasan_slab_free+0x102/0x150 [ 741.599609][T11755] ? kasan_slab_free+0xe/0x10 [ 741.599627][T11755] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 741.599650][T11755] __get_vm_area_node+0x12b/0x370 [ 741.599668][T11755] ? pat_init+0x4d0/0x4d0 [ 741.599683][T11755] ? memremap+0x3c3/0x520 [ 741.599700][T11755] get_vm_area_caller+0x47/0x60 [ 741.599712][T11755] ? memremap+0x3c3/0x520 [ 741.599732][T11755] __ioremap_caller.constprop.0+0x362/0x710 [ 741.616062][T11755] ? memremap+0x3c3/0x520 [ 741.616078][T11755] ? iounmap+0x1b0/0x1b0 [ 741.616095][T11755] ? __kasan_check_write+0x14/0x20 [ 741.616109][T11755] ? _raw_read_unlock+0x2d/0x50 [ 741.616126][T11755] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 741.632126][T11755] ? region_intersects+0x263/0x2f0 [ 741.632146][T11755] ioremap_cache+0x24/0x30 [ 741.632161][T11755] memremap+0x3c3/0x520 [ 741.632189][T11755] ? devm_memremap_match+0x40/0x40 [ 741.632206][T11755] ? _raw_read_unlock+0x2d/0x50 [ 741.632220][T11755] ? iomem_is_exclusive+0x33/0x1af [ 741.632236][T11755] xlate_dev_mem_ptr+0x28/0x50 [ 741.683153][T11755] read_mem+0xdc/0x2c0 [ 741.692023][T11755] do_iter_read+0x4a4/0x660 [ 741.692039][T11755] ? dup_iter+0x260/0x260 [ 741.692071][T11755] vfs_readv+0xf0/0x160 [ 741.842841][T11755] ? compat_rw_copy_check_uvector+0x4c0/0x4c0 [ 741.848896][T11755] ? __kasan_check_read+0x11/0x20 [ 741.853899][T11755] ? ksys_dup3+0x3e0/0x3e0 [ 741.858290][T11755] ? wait_for_completion+0x440/0x440 [ 741.863549][T11755] ? __fget_light+0x1a9/0x230 [ 741.868238][T11755] do_preadv+0x1c4/0x280 [ 741.872457][T11755] ? do_readv+0x330/0x330 [ 741.876869][T11755] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 741.882304][T11755] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 741.887776][T11755] ? do_syscall_64+0x26/0x760 [ 741.892427][T11755] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 741.898467][T11755] ? do_syscall_64+0x26/0x760 [ 741.903130][T11755] __x64_sys_preadv+0x9a/0xf0 [ 741.907820][T11755] do_syscall_64+0xfa/0x760 [ 741.912299][T11755] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 741.918164][T11755] RIP: 0033:0x459879 [ 741.922032][T11755] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 741.941623][T11755] RSP: 002b:00007f1e7f50fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 741.950104][T11755] RAX: ffffffffffffffda RBX: 00007f1e7f50fc90 RCX: 0000000000459879 [ 741.958049][T11755] RDX: 0000000000000002 RSI: 0000000020000200 RDI: 0000000000000004 [ 741.965989][T11755] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 741.973931][T11755] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1e7f5106d4 [ 741.981880][T11755] R13: 00000000004c6b98 R14: 00000000004dbd88 R15: 0000000000000005 [ 742.192857][T11765] IPVS: ftp: loaded support on port[0] = 21 [ 742.381241][T11765] chnl_net:caif_netlink_parms(): no params data found [ 742.410842][T11765] bridge0: port 1(bridge_slave_0) entered blocking state [ 742.418114][T11765] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.425662][T11765] device bridge_slave_0 entered promiscuous mode [ 742.433519][T11765] bridge0: port 2(bridge_slave_1) entered blocking state [ 742.440643][T11765] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.448573][T11765] device bridge_slave_1 entered promiscuous mode [ 742.527025][T11765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 742.537473][T11765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 742.618819][T11765] team0: Port device team_slave_0 added [ 742.625559][T11765] team0: Port device team_slave_1 added [ 742.678463][T11765] device hsr_slave_0 entered promiscuous mode [ 742.727257][T11765] device hsr_slave_1 entered promiscuous mode [ 742.796959][T11765] debugfs: Directory 'hsr0' with parent '/' already present! [ 742.876292][T11765] bridge0: port 2(bridge_slave_1) entered blocking state [ 742.883513][T11765] bridge0: port 2(bridge_slave_1) entered forwarding state [ 742.890892][T11765] bridge0: port 1(bridge_slave_0) entered blocking state [ 742.897982][T11765] bridge0: port 1(bridge_slave_0) entered forwarding state [ 742.995604][T11765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 743.006389][ T2897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 743.014516][ T2897] bridge0: port 1(bridge_slave_0) entered disabled state [ 743.022559][ T2897] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.030638][ T2897] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 743.105889][T11765] 8021q: adding VLAN 0 to HW filter on device team0 [ 743.116941][T11639] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 743.125228][T11639] bridge0: port 1(bridge_slave_0) entered blocking state [ 743.132267][T11639] bridge0: port 1(bridge_slave_0) entered forwarding state [ 743.142677][ T8708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 743.151568][ T8708] bridge0: port 2(bridge_slave_1) entered blocking state [ 743.158646][ T8708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 743.166751][ T352] device bridge_slave_1 left promiscuous mode [ 743.173026][ T352] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.219158][ T352] device bridge_slave_0 left promiscuous mode [ 743.225271][ T352] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.997535][ T352] device hsr_slave_0 left promiscuous mode [ 745.037156][ T352] device hsr_slave_1 left promiscuous mode [ 745.087067][ T352] team0 (unregistering): Port device team_slave_1 removed [ 745.097591][ T352] team0 (unregistering): Port device team_slave_0 removed [ 745.108555][ T352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 745.152572][ T352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 745.238506][ T352] bond0 (unregistering): Released all slaves [ 745.348814][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 745.361066][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 745.371839][ T2897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 745.380626][ T2897] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 745.398210][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 745.406478][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 745.415822][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 745.424492][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 745.434510][T11765] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 745.512909][T11765] 8021q: adding VLAN 0 to HW filter on device batadv0 21:37:09 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x4000) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mISDNtimer\x00', 0x8000, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x80000) getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 21:37:09 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0x2f2}, 0x4) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) connect$vsock_dgram(r1, &(0x7f0000000080)={0x28, 0x0, 0x1388, @host}, 0x10) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f00000000c0)) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000100)=0x8, 0x4) 21:37:09 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfec00000) 21:37:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace(0x4207, r1) 21:37:09 executing program 3 (fault-call:6 fault-nth:31): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x0) 21:37:09 executing program 5: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ppoll(&(0x7f0000000000)=[{r0}, {r1, 0x100}], 0x2, 0x0, 0x0, 0x3) 21:37:09 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x400, 0x10001) accept4$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, &(0x7f0000000080)=0x10, 0x80000) 21:37:09 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x200) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r3, 0x0, r4, 0x0, 0x30005, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r3, 0x29, 0x44, &(0x7f0000000100)={'TPROXY\x00'}, &(0x7f0000000140)=0x1e) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x30005, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000000)=0x3f, 0x2) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x3, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r5, 0x0, r6, 0x0, 0x30005, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000001c0)={0x8, 0x0, [{0x26e, 0x0, 0x9}, {0x1db, 0x0, 0x4}, {0x808}, {0x28f, 0x0, 0x1}, {0x92e}, {0x8ed, 0x0, 0x1ff}, {0x203, 0x0, 0x60}, {0x8f7, 0x0, 0x1}]}) [ 826.921666][T11785] FAULT_INJECTION: forcing a failure. [ 826.921666][T11785] name failslab, interval 1, probability 0, space 0, times 0 [ 827.005399][T11785] CPU: 1 PID: 11785 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 827.014536][T11785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 827.024589][T11785] Call Trace: [ 827.027891][T11785] dump_stack+0x172/0x1f0 [ 827.032226][T11785] should_fail.cold+0xa/0x15 [ 827.036824][T11785] ? fault_create_debugfs_attr+0x180/0x180 [ 827.042632][T11785] ? ___might_sleep+0x163/0x280 [ 827.047484][T11785] __should_failslab+0x121/0x190 [ 827.052424][T11785] should_failslab+0x9/0x14 [ 827.056922][T11785] kmem_cache_alloc_node_trace+0x274/0x750 [ 827.062727][T11785] ? find_next_iomem_res+0x3b0/0x3b0 [ 827.068007][T11785] ? __kasan_slab_free+0x102/0x150 [ 827.073109][T11785] ? kasan_slab_free+0xe/0x10 [ 827.077784][T11785] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 827.084050][T11785] __get_vm_area_node+0x12b/0x370 [ 827.089066][T11785] ? pat_init+0x4d0/0x4d0 [ 827.093388][T11785] ? memremap+0x3c3/0x520 [ 827.097716][T11785] get_vm_area_caller+0x47/0x60 [ 827.102559][T11785] ? memremap+0x3c3/0x520 [ 827.106889][T11785] __ioremap_caller.constprop.0+0x362/0x710 [ 827.112791][T11785] ? memremap+0x3c3/0x520 [ 827.117121][T11785] ? iounmap+0x1b0/0x1b0 [ 827.121366][T11785] ? __kasan_check_write+0x14/0x20 [ 827.126478][T11785] ? _raw_read_unlock+0x2d/0x50 [ 827.131328][T11785] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 827.137565][T11785] ? region_intersects+0x263/0x2f0 [ 827.142688][T11785] ioremap_cache+0x24/0x30 [ 827.147104][T11785] memremap+0x3c3/0x520 [ 827.151259][T11785] ? devm_memremap_match+0x40/0x40 [ 827.156373][T11785] ? _raw_read_unlock+0x2d/0x50 [ 827.161223][T11785] ? iomem_is_exclusive+0x33/0x1af [ 827.166335][T11785] xlate_dev_mem_ptr+0x28/0x50 [ 827.171099][T11785] read_mem+0xdc/0x2c0 [ 827.175168][T11785] do_iter_read+0x4a4/0x660 [ 827.179671][T11785] ? dup_iter+0x260/0x260 [ 827.184095][T11785] vfs_readv+0xf0/0x160 [ 827.188248][T11785] ? compat_rw_copy_check_uvector+0x4c0/0x4c0 [ 827.194315][T11785] ? __kasan_check_read+0x11/0x20 [ 827.199352][T11785] ? ksys_dup3+0x3e0/0x3e0 [ 827.203765][T11785] ? wait_for_completion+0x440/0x440 [ 827.209050][T11785] ? __fget_light+0x1a9/0x230 [ 827.213727][T11785] do_preadv+0x1c4/0x280 [ 827.217970][T11785] ? do_readv+0x330/0x330 [ 827.222308][T11785] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 827.227769][T11785] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 827.233226][T11785] ? do_syscall_64+0x26/0x760 [ 827.237900][T11785] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 827.243960][T11785] ? do_syscall_64+0x26/0x760 [ 827.248642][T11785] __x64_sys_preadv+0x9a/0xf0 [ 827.253325][T11785] do_syscall_64+0xfa/0x760 [ 827.257832][T11785] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 827.263715][T11785] RIP: 0033:0x459879 [ 827.267610][T11785] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 827.287213][T11785] RSP: 002b:00007f1e7f50fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 827.295627][T11785] RAX: ffffffffffffffda RBX: 00007f1e7f50fc90 RCX: 0000000000459879 21:37:10 executing program 5: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ppoll(&(0x7f0000000000)=[{r0}, {r1, 0x100}], 0x2, 0x0, 0x0, 0x8) [ 827.303597][T11785] RDX: 0000000000000002 RSI: 0000000020000200 RDI: 0000000000000004 [ 827.311566][T11785] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 827.319541][T11785] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1e7f5106d4 [ 827.327536][T11785] R13: 00000000004c6b98 R14: 00000000004dbd88 R15: 0000000000000005 21:37:10 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x30005, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f00000000c0)=""/161) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f00000001c0)) ioctl$KVM_SET_PIT2(r6, 0x4070aea0, &(0x7f0000000200)={[], 0x1}) ioctl$KVM_SET_PIT2(r6, 0x4070aea0, &(0x7f0000000280)) ioctl$FICLONE(r2, 0x40049409, r6) fcntl$setpipe(r4, 0x407, 0x0) r7 = shmget$private(0x0, 0x3000, 0x93a7747a1dca93d7, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_INFO(r7, 0x3, &(0x7f0000000080)=""/14) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x4240a2a0) write$capi20(r4, &(0x7f0000000000)={0x10, 0x9, 0x84, 0x80, 0x5, 0x8}, 0x10) 21:37:10 executing program 3 (fault-call:6 fault-nth:32): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x0) [ 827.594213][T11811] FAULT_INJECTION: forcing a failure. [ 827.594213][T11811] name failslab, interval 1, probability 0, space 0, times 0 [ 827.607358][T11811] CPU: 0 PID: 11811 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 827.616459][T11811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 827.626505][T11811] Call Trace: [ 827.629801][T11811] dump_stack+0x172/0x1f0 [ 827.634133][T11811] should_fail.cold+0xa/0x15 [ 827.638745][T11811] ? fault_create_debugfs_attr+0x180/0x180 [ 827.644551][T11811] ? ___might_sleep+0x163/0x280 [ 827.649403][T11811] __should_failslab+0x121/0x190 [ 827.654338][T11811] should_failslab+0x9/0x14 [ 827.658836][T11811] kmem_cache_alloc_node+0x268/0x740 [ 827.664115][T11811] ? ___might_sleep+0x163/0x280 [ 827.668984][T11811] alloc_vmap_area+0x140/0x2080 [ 827.673841][T11811] ? __get_vm_area_node+0x12b/0x370 [ 827.679037][T11811] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 827.684589][T11811] ? purge_vmap_area_lazy+0x40/0x40 [ 827.689790][T11811] ? find_next_iomem_res+0x3b0/0x3b0 [ 827.695076][T11811] ? __kasan_slab_free+0x102/0x150 [ 827.700180][T11811] ? kasan_slab_free+0xe/0x10 [ 827.704853][T11811] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 827.711096][T11811] __get_vm_area_node+0x179/0x370 [ 827.716207][T11811] ? memremap+0x3c3/0x520 [ 827.720538][T11811] get_vm_area_caller+0x47/0x60 [ 827.725383][T11811] ? memremap+0x3c3/0x520 [ 827.729718][T11811] __ioremap_caller.constprop.0+0x362/0x710 [ 827.735613][T11811] ? memremap+0x3c3/0x520 [ 827.739945][T11811] ? iounmap+0x1b0/0x1b0 [ 827.744192][T11811] ? __kasan_check_write+0x14/0x20 [ 827.749311][T11811] ? _raw_read_unlock+0x2d/0x50 [ 827.754156][T11811] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 827.760375][T11811] ? region_intersects+0x263/0x2f0 [ 827.765465][T11811] ioremap_cache+0x24/0x30 [ 827.769875][T11811] memremap+0x3c3/0x520 [ 827.774032][T11811] ? devm_memremap_match+0x40/0x40 [ 827.779149][T11811] ? _raw_read_unlock+0x2d/0x50 [ 827.784042][T11811] ? iomem_is_exclusive+0x33/0x1af [ 827.789149][T11811] xlate_dev_mem_ptr+0x28/0x50 [ 827.793904][T11811] read_mem+0xdc/0x2c0 [ 827.797981][T11811] do_iter_read+0x4a4/0x660 [ 827.802496][T11811] ? dup_iter+0x260/0x260 [ 827.806870][T11811] vfs_readv+0xf0/0x160 [ 827.811014][T11811] ? compat_rw_copy_check_uvector+0x4c0/0x4c0 [ 827.817068][T11811] ? __kasan_check_read+0x11/0x20 [ 827.822089][T11811] ? ksys_dup3+0x3e0/0x3e0 [ 827.826484][T11811] ? __this_cpu_preempt_check+0x3a/0x210 [ 827.832102][T11811] ? retint_kernel+0x2b/0x2b [ 827.836685][T11811] ? __fget_light+0x1a9/0x230 [ 827.841347][T11811] do_preadv+0x1c4/0x280 [ 827.845627][T11811] ? do_readv+0x330/0x330 [ 827.849950][T11811] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 827.855399][T11811] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 827.860845][T11811] ? do_syscall_64+0x26/0x760 [ 827.865500][T11811] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 827.871561][T11811] ? do_syscall_64+0x26/0x760 [ 827.876219][T11811] __x64_sys_preadv+0x9a/0xf0 [ 827.880921][T11811] do_syscall_64+0xfa/0x760 [ 827.885453][T11811] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 827.891320][T11811] RIP: 0033:0x459879 [ 827.895225][T11811] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 827.914819][T11811] RSP: 002b:00007f1e7f50fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 827.923209][T11811] RAX: ffffffffffffffda RBX: 00007f1e7f50fc90 RCX: 0000000000459879 [ 827.931158][T11811] RDX: 0000000000000002 RSI: 0000000020000200 RDI: 0000000000000004 21:37:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace(0x4208, r1) 21:37:10 executing program 3 (fault-call:6 fault-nth:33): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x0) [ 827.939112][T11811] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 827.947075][T11811] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1e7f5106d4 [ 827.955076][T11811] R13: 00000000004c6b98 R14: 00000000004dbd88 R15: 0000000000000005 [ 828.039746][T11823] FAULT_INJECTION: forcing a failure. [ 828.039746][T11823] name failslab, interval 1, probability 0, space 0, times 0 [ 828.052764][T11823] CPU: 1 PID: 11823 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 828.061878][T11823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 828.071926][T11823] Call Trace: [ 828.075196][T11823] dump_stack+0x172/0x1f0 [ 828.079509][T11823] should_fail.cold+0xa/0x15 [ 828.084075][T11823] ? fault_create_debugfs_attr+0x180/0x180 [ 828.089862][T11823] ? ___might_sleep+0x163/0x280 [ 828.094731][T11823] __should_failslab+0x121/0x190 [ 828.099659][T11823] should_failslab+0x9/0x14 [ 828.104133][T11823] kmem_cache_alloc_node+0x268/0x740 [ 828.109393][T11823] ? ___might_sleep+0x163/0x280 [ 828.114223][T11823] alloc_vmap_area+0x140/0x2080 [ 828.119048][T11823] ? __get_vm_area_node+0x12b/0x370 [ 828.124219][T11823] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 828.129744][T11823] ? purge_vmap_area_lazy+0x40/0x40 [ 828.134916][T11823] ? find_next_iomem_res+0x3b0/0x3b0 [ 828.140210][T11823] ? __kasan_slab_free+0x102/0x150 [ 828.145291][T11823] ? kasan_slab_free+0xe/0x10 [ 828.149958][T11823] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 828.156174][T11823] __get_vm_area_node+0x179/0x370 [ 828.161176][T11823] ? memremap+0x3c3/0x520 [ 828.165496][T11823] get_vm_area_caller+0x47/0x60 [ 828.170321][T11823] ? memremap+0x3c3/0x520 [ 828.174633][T11823] __ioremap_caller.constprop.0+0x362/0x710 [ 828.180502][T11823] ? memremap+0x3c3/0x520 [ 828.184802][T11823] ? iounmap+0x1b0/0x1b0 [ 828.189024][T11823] ? __kasan_check_write+0x14/0x20 [ 828.194112][T11823] ? _raw_read_unlock+0x2d/0x50 [ 828.198936][T11823] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 828.205146][T11823] ? region_intersects+0x263/0x2f0 [ 828.210231][T11823] ioremap_cache+0x24/0x30 [ 828.214638][T11823] memremap+0x3c3/0x520 [ 828.218769][T11823] ? devm_memremap_match+0x40/0x40 [ 828.223852][T11823] ? _raw_read_unlock+0x2d/0x50 [ 828.228675][T11823] ? iomem_is_exclusive+0x33/0x1af [ 828.233794][T11823] xlate_dev_mem_ptr+0x28/0x50 [ 828.238531][T11823] read_mem+0xdc/0x2c0 [ 828.242577][T11823] do_iter_read+0x4a4/0x660 [ 828.247057][T11823] ? dup_iter+0x260/0x260 [ 828.251365][T11823] vfs_readv+0xf0/0x160 [ 828.255494][T11823] ? compat_rw_copy_check_uvector+0x4c0/0x4c0 [ 828.261534][T11823] ? __kasan_check_read+0x11/0x20 [ 828.266548][T11823] ? ksys_dup3+0x3e0/0x3e0 [ 828.270939][T11823] ? wait_for_completion+0x440/0x440 [ 828.276201][T11823] ? __fget_light+0x1a9/0x230 [ 828.280854][T11823] do_preadv+0x1c4/0x280 [ 828.285073][T11823] ? do_readv+0x330/0x330 [ 828.289378][T11823] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 828.294808][T11823] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 828.300240][T11823] ? do_syscall_64+0x26/0x760 [ 828.304890][T11823] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 828.310931][T11823] ? do_syscall_64+0x26/0x760 [ 828.315583][T11823] __x64_sys_preadv+0x9a/0xf0 [ 828.320237][T11823] do_syscall_64+0xfa/0x760 [ 828.324718][T11823] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 828.330621][T11823] RIP: 0033:0x459879 [ 828.334494][T11823] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 828.354074][T11823] RSP: 002b:00007f1e7f50fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 828.362457][T11823] RAX: ffffffffffffffda RBX: 00007f1e7f50fc90 RCX: 0000000000459879 [ 828.370404][T11823] RDX: 0000000000000002 RSI: 0000000020000200 RDI: 0000000000000004 [ 828.378386][T11823] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 828.386331][T11823] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1e7f5106d4 [ 828.394276][T11823] R13: 00000000004c6b98 R14: 00000000004dbd88 R15: 0000000000000005 21:37:11 executing program 3 (fault-call:6 fault-nth:34): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x0) [ 828.605562][T11834] FAULT_INJECTION: forcing a failure. [ 828.605562][T11834] name failslab, interval 1, probability 0, space 0, times 0 [ 828.643013][T11834] CPU: 1 PID: 11834 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 828.652137][T11834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 828.662194][T11834] Call Trace: [ 828.665490][T11834] dump_stack+0x172/0x1f0 [ 828.669831][T11834] should_fail.cold+0xa/0x15 [ 828.674430][T11834] ? fault_create_debugfs_attr+0x180/0x180 [ 828.680244][T11834] ? ___might_sleep+0x163/0x280 [ 828.685101][T11834] __should_failslab+0x121/0x190 [ 828.690123][T11834] should_failslab+0x9/0x14 [ 828.694626][T11834] kmem_cache_alloc_node_trace+0x274/0x750 [ 828.700429][T11834] ? find_next_iomem_res+0x3b0/0x3b0 [ 828.705705][T11834] ? __kasan_slab_free+0x102/0x150 [ 828.710817][T11834] ? kasan_slab_free+0xe/0x10 [ 828.715505][T11834] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 828.721758][T11834] __get_vm_area_node+0x12b/0x370 [ 828.726785][T11834] ? pat_init+0x4d0/0x4d0 [ 828.731116][T11834] ? memremap+0x3c3/0x520 [ 828.735450][T11834] get_vm_area_caller+0x47/0x60 [ 828.740289][T11834] ? memremap+0x3c3/0x520 [ 828.744601][T11834] __ioremap_caller.constprop.0+0x362/0x710 [ 828.750478][T11834] ? memremap+0x3c3/0x520 [ 828.754779][T11834] ? iounmap+0x1b0/0x1b0 [ 828.759010][T11834] ? __kasan_check_write+0x14/0x20 [ 828.764114][T11834] ? _raw_read_unlock+0x2d/0x50 [ 828.768951][T11834] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 828.775168][T11834] ? region_intersects+0x263/0x2f0 [ 828.780258][T11834] ioremap_cache+0x24/0x30 [ 828.784668][T11834] memremap+0x3c3/0x520 [ 828.788798][T11834] ? devm_memremap_match+0x40/0x40 [ 828.793900][T11834] ? _raw_read_unlock+0x2d/0x50 [ 828.798727][T11834] ? iomem_is_exclusive+0x33/0x1af [ 828.803856][T11834] xlate_dev_mem_ptr+0x28/0x50 [ 828.808600][T11834] read_mem+0xdc/0x2c0 [ 828.812667][T11834] do_iter_read+0x4a4/0x660 [ 828.817160][T11834] ? dup_iter+0x260/0x260 [ 828.821474][T11834] vfs_readv+0xf0/0x160 [ 828.825709][T11834] ? compat_rw_copy_check_uvector+0x4c0/0x4c0 [ 828.831791][T11834] ? __kasan_check_read+0x11/0x20 [ 828.836800][T11834] ? ksys_dup3+0x3e0/0x3e0 [ 828.841238][T11834] ? wait_for_completion+0x440/0x440 [ 828.846501][T11834] ? __fget_light+0x1a9/0x230 [ 828.851162][T11834] do_preadv+0x1c4/0x280 [ 828.855395][T11834] ? do_readv+0x330/0x330 [ 828.859705][T11834] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 828.865175][T11834] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 828.870659][T11834] ? do_syscall_64+0x26/0x760 [ 828.875354][T11834] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 828.881402][T11834] ? do_syscall_64+0x26/0x760 [ 828.886060][T11834] __x64_sys_preadv+0x9a/0xf0 [ 828.890751][T11834] do_syscall_64+0xfa/0x760 [ 828.895235][T11834] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 828.901110][T11834] RIP: 0033:0x459879 [ 828.904994][T11834] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 828.924615][T11834] RSP: 002b:00007f1e7f4eec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 828.933003][T11834] RAX: ffffffffffffffda RBX: 00007f1e7f4eec90 RCX: 0000000000459879 [ 828.940951][T11834] RDX: 0000000000000002 RSI: 0000000020000200 RDI: 0000000000000004 [ 828.948897][T11834] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 828.956851][T11834] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1e7f4ef6d4 [ 828.964803][T11834] R13: 00000000004c6b98 R14: 00000000004dbd88 R15: 0000000000000005 [ 828.991056][T11836] IPVS: ftp: loaded support on port[0] = 21 [ 829.165199][T11836] chnl_net:caif_netlink_parms(): no params data found [ 829.258267][T11836] bridge0: port 1(bridge_slave_0) entered blocking state [ 829.265420][T11836] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.273238][T11836] device bridge_slave_0 entered promiscuous mode [ 829.281387][T11836] bridge0: port 2(bridge_slave_1) entered blocking state [ 829.288570][T11836] bridge0: port 2(bridge_slave_1) entered disabled state [ 829.296032][T11836] device bridge_slave_1 entered promiscuous mode [ 829.374949][T11836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 829.385975][T11836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 829.466162][T11836] team0: Port device team_slave_0 added [ 829.473278][T11836] team0: Port device team_slave_1 added [ 829.609842][T11836] device hsr_slave_0 entered promiscuous mode [ 829.667298][T11836] device hsr_slave_1 entered promiscuous mode [ 829.776623][T11836] bridge0: port 2(bridge_slave_1) entered blocking state [ 829.783769][T11836] bridge0: port 2(bridge_slave_1) entered forwarding state [ 829.791120][T11836] bridge0: port 1(bridge_slave_0) entered blocking state [ 829.798208][T11836] bridge0: port 1(bridge_slave_0) entered forwarding state [ 829.831525][T11836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 829.905673][T11836] 8021q: adding VLAN 0 to HW filter on device team0 [ 829.913144][ T2897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 829.921088][ T2897] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.928726][ T2897] bridge0: port 2(bridge_slave_1) entered disabled state [ 829.936545][ T2897] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 829.947904][T11611] device bridge_slave_1 left promiscuous mode [ 829.954080][T11611] bridge0: port 2(bridge_slave_1) entered disabled state [ 830.017996][T11611] device bridge_slave_0 left promiscuous mode [ 830.024114][T11611] bridge0: port 1(bridge_slave_0) entered disabled state [ 831.847319][T11611] device hsr_slave_0 left promiscuous mode [ 831.906996][T11611] device hsr_slave_1 left promiscuous mode [ 831.953850][T11611] team0 (unregistering): Port device team_slave_1 removed [ 831.968714][T11611] team0 (unregistering): Port device team_slave_0 removed [ 831.981253][T11611] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 832.062845][T11611] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 832.139991][T11611] bond0 (unregistering): Released all slaves [ 832.239094][T11638] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 832.248013][T11638] bridge0: port 1(bridge_slave_0) entered blocking state [ 832.255043][T11638] bridge0: port 1(bridge_slave_0) entered forwarding state [ 832.262723][T11638] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 832.271213][T11638] bridge0: port 2(bridge_slave_1) entered blocking state [ 832.278287][T11638] bridge0: port 2(bridge_slave_1) entered forwarding state [ 832.300037][T11836] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 832.310418][T11836] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 832.321930][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 832.322632][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 832.339700][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 832.348161][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 832.356490][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 832.364791][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 832.373091][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 832.381732][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 832.390026][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 832.398665][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 832.406298][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 832.426385][T11836] 8021q: adding VLAN 0 to HW filter on device batadv0 21:38:36 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfec003ff) 21:38:36 executing program 5: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ppoll(&(0x7f0000000000)=[{r0}, {r1, 0x100}], 0x2, 0x0, 0x0, 0x300) 21:38:36 executing program 2: syz_init_net_socket$netrom(0x6, 0x5, 0x0) restart_syscall() r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x22000, 0x0) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000040)) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, 0x0, 0x0) 21:38:36 executing program 4: r0 = socket(0x1, 0x80003, 0xffff) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000001100)=@gcm_128={{0xfa7422bd17257889}, "f7e5f62ea1fd102e", "4bbe5e9da83a5d74b391426f8fcb20e2", "97148e4a", "b914219229a26327"}, 0x28) r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x2, 0x3f}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) r2 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x101040) write$P9_RREMOVE(r2, &(0x7f0000000080)={0x7, 0x7b, 0x1}, 0x7) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) read(r1, &(0x7f0000000100)=""/4096, 0x1000) 21:38:36 executing program 3 (fault-call:6 fault-nth:35): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x0) 21:38:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace(0x4209, r1) [ 913.831643][T11857] FAULT_INJECTION: forcing a failure. [ 913.831643][T11857] name failslab, interval 1, probability 0, space 0, times 0 21:38:36 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000100)={0x5, 0x8, 0x4, 0x100040, {r1, r2/1000+30000}, {0x2, 0x0, 0x3f, 0x8, 0x80000000, 0x6, "87dd4e88"}, 0x62, 0x4, @fd=0xffffffffffffffff, 0x4}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000080)={0x0, 0x4, 0x9}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 21:38:36 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x2400) getsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f0000000040), &(0x7f0000000080)=0x4) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, 0x0, 0x0) [ 913.874878][T11857] CPU: 0 PID: 11857 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 913.884006][T11857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 913.894052][T11857] Call Trace: [ 913.897353][T11857] dump_stack+0x172/0x1f0 [ 913.901701][T11857] should_fail.cold+0xa/0x15 [ 913.906301][T11857] ? fault_create_debugfs_attr+0x180/0x180 [ 913.912121][T11857] ? ___might_sleep+0x163/0x280 [ 913.916988][T11857] __should_failslab+0x121/0x190 [ 913.921933][T11857] should_failslab+0x9/0x14 [ 913.926435][T11857] kmem_cache_alloc_node+0x268/0x740 [ 913.931718][T11857] ? ___might_sleep+0x163/0x280 [ 913.936570][T11857] alloc_vmap_area+0x140/0x2080 [ 913.941428][T11857] ? __get_vm_area_node+0x12b/0x370 [ 913.946676][T11857] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 913.952229][T11857] ? purge_vmap_area_lazy+0x40/0x40 [ 913.957428][T11857] ? find_next_iomem_res+0x3b0/0x3b0 [ 913.962715][T11857] ? mark_held_locks+0xa4/0xf0 [ 913.967484][T11857] ? kasan_slab_free+0xe/0x10 [ 913.972166][T11857] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 913.978415][T11857] __get_vm_area_node+0x179/0x370 [ 913.983441][T11857] ? memremap+0x3c3/0x520 [ 913.987772][T11857] get_vm_area_caller+0x47/0x60 [ 913.992620][T11857] ? memremap+0x3c3/0x520 [ 913.996969][T11857] __ioremap_caller.constprop.0+0x362/0x710 [ 914.002858][T11857] ? memremap+0x3c3/0x520 [ 914.007184][T11857] ? iounmap+0x1b0/0x1b0 [ 914.011434][T11857] ? __kasan_check_write+0x14/0x20 [ 914.016579][T11857] ? _raw_read_unlock+0x2d/0x50 [ 914.021443][T11857] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 914.027711][T11857] ? region_intersects+0x263/0x2f0 [ 914.032828][T11857] ioremap_cache+0x24/0x30 [ 914.037251][T11857] memremap+0x3c3/0x520 [ 914.041414][T11857] ? devm_memremap_match+0x40/0x40 [ 914.046530][T11857] ? _raw_read_unlock+0x2d/0x50 [ 914.051495][T11857] ? iomem_is_exclusive+0x33/0x1af [ 914.056606][T11857] xlate_dev_mem_ptr+0x28/0x50 [ 914.061370][T11857] read_mem+0xdc/0x2c0 [ 914.065535][T11857] do_iter_read+0x4a4/0x660 [ 914.070057][T11857] ? dup_iter+0x260/0x260 [ 914.074402][T11857] vfs_readv+0xf0/0x160 [ 914.078556][T11857] ? compat_rw_copy_check_uvector+0x4c0/0x4c0 [ 914.084619][T11857] ? __kasan_check_read+0x11/0x20 [ 914.089654][T11857] ? ksys_dup3+0x3e0/0x3e0 [ 914.094070][T11857] ? lockdep_hardirqs_on+0x418/0x5d0 [ 914.099356][T11857] ? retint_kernel+0x2b/0x2b [ 914.103948][T11857] ? trace_hardirqs_on_caller+0x6a/0x240 [ 914.109585][T11857] ? __fget_light+0x1a9/0x230 [ 914.114286][T11857] do_preadv+0x1c4/0x280 [ 914.118530][T11857] ? do_readv+0x330/0x330 [ 914.122863][T11857] __x64_sys_preadv+0x9a/0xf0 [ 914.127541][T11857] do_syscall_64+0xfa/0x760 [ 914.132051][T11857] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 914.137940][T11857] RIP: 0033:0x459879 [ 914.141839][T11857] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 914.161439][T11857] RSP: 002b:00007f1e7f50fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 21:38:36 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x30005, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\b\x00\x00', @ANYRESOCT, @ANYRESHEX=r2], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x4008050) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, r4, 0x0, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x33}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x2}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'nq\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x8000) 21:38:36 executing program 5: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ppoll(&(0x7f0000000000)=[{r0}, {r1, 0x100}], 0x2, 0x0, 0x0, 0x3000000) [ 914.169847][T11857] RAX: ffffffffffffffda RBX: 00007f1e7f50fc90 RCX: 0000000000459879 [ 914.177819][T11857] RDX: 0000000000000002 RSI: 0000000020000200 RDI: 0000000000000004 [ 914.185792][T11857] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 914.193764][T11857] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1e7f5106d4 [ 914.201732][T11857] R13: 00000000004c6b98 R14: 00000000004dbd88 R15: 0000000000000005 21:38:37 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x40000) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 21:38:37 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x4400, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000080)={{0x0, 0x2, 0xffffffffffffffc1, 0x0, 0xfff}}) [ 915.590179][T11901] IPVS: ftp: loaded support on port[0] = 21 [ 915.619981][ T352] device bridge_slave_1 left promiscuous mode [ 915.626148][ T352] bridge0: port 2(bridge_slave_1) entered disabled state [ 915.677706][ T352] device bridge_slave_0 left promiscuous mode [ 915.683841][ T352] bridge0: port 1(bridge_slave_0) entered disabled state [ 917.357660][ T352] device hsr_slave_0 left promiscuous mode [ 917.397127][ T352] device hsr_slave_1 left promiscuous mode [ 917.445905][ T352] team0 (unregistering): Port device team_slave_1 removed [ 917.458470][ T352] team0 (unregistering): Port device team_slave_0 removed [ 917.468854][ T352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 917.520122][ T352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 917.610257][ T352] bond0 (unregistering): Released all slaves [ 917.731366][T11901] chnl_net:caif_netlink_parms(): no params data found [ 917.760929][T11901] bridge0: port 1(bridge_slave_0) entered blocking state [ 917.768229][T11901] bridge0: port 1(bridge_slave_0) entered disabled state [ 917.775703][T11901] device bridge_slave_0 entered promiscuous mode [ 917.783589][T11901] bridge0: port 2(bridge_slave_1) entered blocking state [ 917.790761][T11901] bridge0: port 2(bridge_slave_1) entered disabled state [ 917.798332][T11901] device bridge_slave_1 entered promiscuous mode [ 917.817253][T11901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 917.828414][T11901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 917.844517][T11901] team0: Port device team_slave_0 added [ 917.851892][T11901] team0: Port device team_slave_1 added [ 917.919506][T11901] device hsr_slave_0 entered promiscuous mode [ 917.977203][T11901] device hsr_slave_1 entered promiscuous mode [ 918.085795][T11901] bridge0: port 2(bridge_slave_1) entered blocking state [ 918.092983][T11901] bridge0: port 2(bridge_slave_1) entered forwarding state [ 918.100355][T11901] bridge0: port 1(bridge_slave_0) entered blocking state [ 918.107445][T11901] bridge0: port 1(bridge_slave_0) entered forwarding state [ 918.171321][T11901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 918.191566][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 918.203881][ T3505] bridge0: port 1(bridge_slave_0) entered disabled state [ 918.224287][ T3505] bridge0: port 2(bridge_slave_1) entered disabled state [ 918.243291][T11901] 8021q: adding VLAN 0 to HW filter on device team0 [ 918.257335][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 918.265673][ T3505] bridge0: port 1(bridge_slave_0) entered blocking state [ 918.272776][ T3505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 918.303488][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 918.313004][ T3505] bridge0: port 2(bridge_slave_1) entered blocking state [ 918.320092][ T3505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 918.345735][T11901] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 918.362590][T11901] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 918.378109][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 918.386609][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 918.403296][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 918.414327][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 918.444441][T11901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 918.453954][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 918.465972][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 21:40:00 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfee00fff) 21:40:00 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x800) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 21:40:00 executing program 3 (fault-call:6 fault-nth:36): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x0) 21:40:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace(0x420a, r1) 21:40:00 executing program 5: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ppoll(&(0x7f0000000000)=[{r0}, {r1, 0x100}], 0x2, 0x0, 0x0, 0x8000000) 21:40:00 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x30005, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x16b100, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x8001, 0x0) r5 = accept$alg(0xffffffffffffffff, 0x0, 0x0) fcntl$F_GET_RW_HINT(r5, 0x40b, &(0x7f00000000c0)) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000080)={0x1, 0x2, [{r3, 0x0, 0x10000, 0x2000000}, {r4, 0x0, 0xfffff000, 0x10000}]}) [ 997.956606][T11921] FAULT_INJECTION: forcing a failure. [ 997.956606][T11921] name failslab, interval 1, probability 0, space 0, times 0 [ 997.977192][T11921] CPU: 1 PID: 11921 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 997.986310][T11921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 997.996352][T11921] Call Trace: [ 997.999653][T11921] dump_stack+0x172/0x1f0 [ 998.004073][T11921] should_fail.cold+0xa/0x15 [ 998.008668][T11921] ? fault_create_debugfs_attr+0x180/0x180 [ 998.014473][T11921] ? ___might_sleep+0x163/0x280 [ 998.019318][T11921] __should_failslab+0x121/0x190 [ 998.024270][T11921] should_failslab+0x9/0x14 [ 998.028767][T11921] kmem_cache_alloc_node+0x268/0x740 [ 998.034044][T11921] ? ___might_sleep+0x163/0x280 [ 998.038897][T11921] alloc_vmap_area+0x140/0x2080 [ 998.043756][T11921] ? __get_vm_area_node+0x12b/0x370 [ 998.048944][T11921] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 998.054488][T11921] ? purge_vmap_area_lazy+0x40/0x40 [ 998.059678][T11921] ? find_next_iomem_res+0x3b0/0x3b0 [ 998.064954][T11921] ? __kasan_slab_free+0x102/0x150 [ 998.070052][T11921] ? kasan_slab_free+0xe/0x10 [ 998.074736][T11921] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 998.080981][T11921] __get_vm_area_node+0x179/0x370 [ 998.086003][T11921] ? memremap+0x3c3/0x520 [ 998.090335][T11921] get_vm_area_caller+0x47/0x60 [ 998.095178][T11921] ? memremap+0x3c3/0x520 [ 998.099531][T11921] __ioremap_caller.constprop.0+0x362/0x710 [ 998.105422][T11921] ? memremap+0x3c3/0x520 [ 998.109757][T11921] ? iounmap+0x1b0/0x1b0 [ 998.114008][T11921] ? __kasan_check_write+0x14/0x20 [ 998.119112][T11921] ? _raw_read_unlock+0x2d/0x50 [ 998.123951][T11921] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 998.130188][T11921] ? region_intersects+0x263/0x2f0 [ 998.135297][T11921] ioremap_cache+0x24/0x30 [ 998.139711][T11921] memremap+0x3c3/0x520 [ 998.143865][T11921] ? devm_memremap_match+0x40/0x40 [ 998.148969][T11921] ? _raw_read_unlock+0x2d/0x50 [ 998.153828][T11921] ? iomem_is_exclusive+0x33/0x1af [ 998.158928][T11921] xlate_dev_mem_ptr+0x28/0x50 [ 998.163686][T11921] read_mem+0xdc/0x2c0 [ 998.167767][T11921] do_iter_read+0x4a4/0x660 [ 998.172271][T11921] ? dup_iter+0x260/0x260 [ 998.176595][T11921] vfs_readv+0xf0/0x160 [ 998.180755][T11921] ? compat_rw_copy_check_uvector+0x4c0/0x4c0 [ 998.186826][T11921] ? __kasan_check_read+0x11/0x20 [ 998.191857][T11921] ? ksys_dup3+0x3e0/0x3e0 [ 998.196270][T11921] ? wait_for_completion+0x440/0x440 [ 998.201561][T11921] ? __fget_light+0x1a9/0x230 [ 998.206232][T11921] do_preadv+0x1c4/0x280 [ 998.210466][T11921] ? do_readv+0x330/0x330 [ 998.214790][T11921] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 998.220247][T11921] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 998.225694][T11921] ? do_syscall_64+0x26/0x760 [ 998.230364][T11921] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 998.236420][T11921] ? do_syscall_64+0x26/0x760 [ 998.241093][T11921] __x64_sys_preadv+0x9a/0xf0 [ 998.245770][T11921] do_syscall_64+0xfa/0x760 [ 998.250280][T11921] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 998.256173][T11921] RIP: 0033:0x459879 [ 998.260069][T11921] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 998.279678][T11921] RSP: 002b:00007f1e7f50fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 998.288081][T11921] RAX: ffffffffffffffda RBX: 00007f1e7f50fc90 RCX: 0000000000459879 [ 998.296046][T11921] RDX: 0000000000000002 RSI: 0000000020000200 RDI: 0000000000000004 21:40:01 executing program 5: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ppoll(&(0x7f0000000000)=[{r0}, {r1, 0x100}], 0x2, 0x0, 0x0, 0x1000000000000) [ 998.304007][T11921] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 998.311974][T11921] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1e7f5106d4 [ 998.319939][T11921] R13: 00000000004c6b98 R14: 00000000004dbd88 R15: 0000000000000005 21:40:01 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write$binfmt_misc(r1, &(0x7f0000001580)=ANY=[], 0xfffffdae) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r3) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000001580)=0x36b) setreuid(0x0, r5) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r7, 0x4040ae77, &(0x7f00000001c0)) ioctl$KVM_SET_PIT2(r7, 0x4070aea0, &(0x7f0000000200)={[], 0x1}) ioctl$KVM_SET_PIT2(r7, 0x4070aea0, &(0x7f0000000280)) sendmsg$nl_netfilter(r1, &(0x7f0000001540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x1424, 0x12, 0x11, 0x10, 0x70bd2b, 0x25dfdbfb, {0x2, 0x0, 0x1}, [@nested={0x244, 0x7a, [@generic="398bad8a27dc45f971c55f48646b2c9f157779856869e532ed2411fe2587757a2009c1175602ddd942a8ffc43b2ee529b430aa7a8e0216c116c5ed096443b2abfc9d44c6d350ffb985bb8c7e380b8e70b35a9e1e55e8ccea68525751da956266c58d59dc01c9f826bdbd9409230364f77c223ddbcdde94d86f54fdbddd2e46fbeb5a52da8c67cd28ddbf84152a67e364a45dd4c1d0d83d67256b32f7fd11229c28cb", @typed={0x8, 0x5c, @uid=r3}, @typed={0x8, 0x2c, @uid=r5}, @generic="792d4d3252d43ffa97c5d0d115dae91d804e90bc2202e1ea29b0b064c9aec61a43791e7e12fcfe80f26717401fb69522299bd8f03664146de54c398b9a237b0391ebfbfc353d374f61b582acfa3c58315299132dae037f297ae2af2dc35d7cf45e5a3ddfa7b0d0fe11834b9cf5bdc0854c9018f5ec8dd35e52102dac6f4c63ead199d625ee8e8e099db3b04ba817ed7605aaa5474830745eda68a6c5d158e00e50a3159691f9bbc094a8ba7f", @typed={0x14, 0x85, @ipv6=@local}, @generic="d0bb8ddedbb4c58bc24b5fbb73a749d8f3ec4cf528bff116795dde55cca92e15df940d06e9a1af6ebae5f4fbe4722267ac4b6bcaa4f7412fe642eaef9460703d8e8856e4d2a8ab2a6228d064ebf3b970ca3d8eda7758be98a019d280fdb635aaa18fa790", @generic="275373409e61acf0dc495a1de7e7d1e68d4db0421c54b520399443fa6b02435d626501a2b1541fc2f3d379bcf183a68fd24797a4c90914c9f89b2716345769336f07663b2513177f171652f6b2e804ad7c7236fc3b01837ce1f072dd0d457b3d96e9", @typed={0x8, 0x72, @fd=r7}]}, @nested={0x11cc, 0x95, [@generic="0adbc2d0cd0688c8d230df49f245ce92344c3f114d4c64441c4b8e1700d5d6d3ecab7e519b7d4f049d01b003fe8aefe205388c9540af558db587876423b657816d4d9c68df6682956b0543443abbc4db6af75708e600768616f8b57901d619ba7176fcc01ef36eb6e1de7b2d9b61d469debbe909a584f2b4ed4b9514f9f05fe046a8d966f9bb13cb497d5e6e6303090af405fe31464e372971", @typed={0xe4, 0x39, @binary="95e831d6fff71c2378122ff520abc320cbf36a534f2cd06808822bf8c60dfa8a7d7bdb9ff92f17f332b3a317e893f17955956c15036b555ba293e2bc5cdc22fd84a85b1a0eec02f8190a62914a35076910f9fca45a6886c8c0b76ca20e6b9d80c12b686456b0955d30bd2c6747763705a517fa585310cae0508ae9d7f00ef780b1d47cbdf157478f8d67484eff9bb38fe35a66c432ad307fa9f0888e37742a057e8613bb69c27f5e7b3bdbb53483837679c9d3517db528d06db791f91ba19cecc71e40619242faf4e82c821ade5d408a3168e442e8dfa3cbe0f201d41070"}, @generic="3cb8791e47007c88232dbf6f51ad6e64420a65bb66e0fee10408a263b10f54940b892545afb1575f91948a933169f9dc60ee7b10eaf276d3ca6e9117fcbbb8e8f688dd2377a8c6cb7e7a5cca9adfc22685460256a669e35ea3b49ea48c68e54ce068ba11810dded045f48c127636c22ac0e63ef20212ebb48878232b112e9ae70f5c3fbdea1221736aa6ed87b10be5f21e41ebe3a6414e06d021bba190fd15611f92a45371b45a1ab8f87429e16b972f30425db42ada2b61983c73eb7210d127a3ee9b6d1f47c1e4daf37225e7ee59cc73e65532b6e8b3f53e6c74bf0f46534380519c23ae9572c2b286232d68e0ae3a1382847dddd011f5be03550689db9126aeb8e9dfea8fa6c96be1e4da48fc5da4e292452fa6cf659f3f7bae2cbcee154dcbc59fd0c0a925399cc9e30d5a08173b9482103b3d642b5836ab4ffb0a2d2a17d0cea45cee652011359fd770d2e5c45e6ce93dcb6e0cbdc0bcde5ba3727446bbe298124bd305d74661acbf93aa8a992b9a17922c940dff42c7f077619b54ccaa5b97e5360e268afde37e99cfef31f98d5162ab6c8d521ba49e636cfa823b8861cdbe3b1bfb9a7401a9e80a4e920a53aacd359510a8cd56eefd7555504cdeef408b4a5049b723f436c32986a8f2dc21ca23484903f3e80879507c01dec267b08434d83d06c713187121a5b3ebf715eb6b3dd8a5aded8ee5fcac8a773224e89182b6d173dbc56c5d793d0c02f1ba19bfec8d73eb97106a389752f91958044d7ae4b79efb08ae044aa17af5af32b03267df211c4355f99017dcca95e584aa47d0357cf6145236324c57db5089ac3c945e93fc12b68300b94612120aaf483836190116e60784cbeb95e1ed7b4dac51e0d889c64754782cd2e6dc4f041071a2ff1fa5b5c05d41deec6d91d75284a9cb95312c99d6a7d02884fa546b7595958aa81af0162f852214541d991ffa2d07da44620ea7cf15e284def817b6488d97b7775633128846171e879d9ce38987cb870e09b026c93c535ca2d77caee75598d78cc3302663063315155b721f3e03b2e9a85acec620bce4471619e993dd4743e80c760bfde22b176247a99ef420b3589ebc18c1c514859eb6f0cef6b5b1f775018b4062da28e00bdfd24f128ac41f01475e19eeca0dd1b2f062f9880defb4bf790376e731be3ff1ea6b53ca62eec34e655881e3b80174f22248280a5a30571388cdbb0d4ce6f2a112a783b1f4f7e4f74496dbfc935c16ad53318ad45c9ca80a9b672ea44f65181422510b83a633126b7aba3ab327c5fb9ba50945a33c264e8ed6f6ad01fa3e33953548952ff343e5687a4f0787d954faf42fd214da777a9ea07b210045a7b91be9e85c245ac376dc372250a3f14ba4b5db241eca658c5beb232053b964470cff4b79e69fbbfb47b645cad01a1593d1cf948531b9f9d58c3885ee7209278d023bb77ebb17c3d19d2bd94d3cb6434093f3d4e4b835a713497100378efca30b155e3cc1ab27911f3c59e952225564ab242bd4f3e74b9f8e8ba2e269f7e34ec6081398c508d31b2ec0daacd4646eb3c0d76b2c80d067ff54d921e837f7db38b42cdd395e80c266175d21112d47b94980377d020c4b3ed5ab0d4fe945bf7a939b8f64c4b29ed205ca0cce583c034750c092bb12a5392ed6198cb8bcb34aefb7aa3c1732cef26120f3c6d38a233589a914b1c1334f7b5ba839a38b1e9e94501e6de1d9c6dfc5b30256c527ef8054abc68cfb3247bbcf39745fd3e77e3641f658b1a9e693c791afa1b71004b7b85180523befdc28cf743b0a3190dc41eee4c1314419f4e4e8a3cad9f4039413ca5181b1f7a2e5bf9577d3ce0c5e34e351a470c9cc87aa115b825419319b15f90e403f226c4869bade9928d57975d4307516537bc7b15841e94f5a6bde923e8c8bc3c6aa6f83ec5bafdff166f87504c3b84a706c96eceecd742a6e5c200832c0a44fb8a04c3acb932a2d7677170ed2239c6eaa947161435cd45b5dc89aca0f97485fae45a06c415427ac27dff47ecc475bb3ea780e0084a57df80391c5dcda1d15352ea8b81e2e3a7af6fdbb514bda5c57de43d58f0653d4dad22d4f9f1e9bcfb47a90e47a838f2df76a99109efecfc257aff8fa2ca50f5499c752dfa7713e613871f41e1ead448c9d0c35ecc7059edbad65537a906f85127065a32f4d16f95790f56c9b853f0d24b6fd7e425393a30f34ca96286b138bcd1cbad19744e8965633f495bb6d8162cf3026e7e1741dbe354dc8a5862f6c93e3a07e55231d30ba9f01902be64d9745dd72a3492ff717182cff95ea53adaa3a6b17c6a2c303244f52ff6f8eb1ff89c0d386aad182a591086a4fa0f2c4b6aa768c3e51be96b470f72446f1d255b99d3636431ffbec533cad788e2bae754db405075dfbc755a0cf2ba0acca66ab507a2d0476e5f7576be7c41114f06de3d595588dba3c5c1419735c08a31127c30d0c095f1f19a7d85def08e08f2e0d2b73df4842ccc96f641d6c560cc59effb98ce7b7b58ec79e6c6c5f2ef2ac28289f5a35df137efe2c28b39b90c210360f682c52a2d48ecc0dddd2d93498ebe113d97c5f06ede969ffd4087a822463df9022249d5b479c552e306a2b66cc972a4d476554142960dfc79ff178d47787cd1ae0760b946257dc8986b4fa71a984c3c170ff417b2e813d7c3d338b2ae27d8046e2f6926ad0e2ea94ae223807a0f66f385a38aa9b1c55dbc3021dbb8b17aa8ec35f0c1f6455266727380b89a16d3a9a6d9a0711de1f869e8ad97f91c9383b54d51df83a10b4e64f61c0cba492e3eb1c37fd973e48a12ee442185f9da86961cd90ba1da02983ba31b47322eb97f9764ea699255069ddba7de141a26c86513f3d74ae97b43370eef3a964e2e9b4b2bfb0170eba108d35ad91586448467d4427dad1e1be89705a097cba7d738ef7e7a1530c9e6e7f267da6bb1badfc6da8e9127cc68e5d0c8cfe58837a9dd2d83ddad45cdabcc834f2f40fef35d6a2a98d9f3e8c486bf4aae0b13595cc8fa5905381dddb48ab50fb1d05c8fb0bd79dad51029ef05e47b00d65322cff7fd0d0d69b5fac13a9b2f58260868ab381d896b88e3b958c2ba6db9b79cb423dbc371fdcf0d8df5015f2cb9f0205d47b8a4468c628a2fe6680ba314def51c3cfce82f097bec9cd25a883c732a5277a891265e41af691527acd36865812ce4c0066e7a96708f70a53914765942c68d479c768e31a10ddeb49a45f365b87adfdb56a357e4fe4147cedb2c1629dbb916bb64849330e8a607d265b6788e715031aa5e9c34b0d58923494bda67616162b976590d3f1d0969bf9c81719ab77de46964e93799c054e37181fa7396da64e58c8c7e7970a28e40378d31666a37fe980bcae5ba236d09b39c8662ba3a1d3bd5fb062be802a355264b8ec4374fdf2cfabd1d6d8deb0d1453de4b2cadba6b6fb4e9c2cd4884a53fbff3f3d36cd5050cafddcb9e4ec04fd852665e2d390faf0c4daab0addaeb0f45477a5f9318bfe60025ae25d023e3ed96fad65bfd77ffcac7c718e400d010e1b793c4913089f15320287120f38349eebbaec008bd406e0217567a9100284a2347fb385cdb29e66caea53cffcb1d3f285884b7858e3ac70157b0d4b888ee9c748882069520aaafc7251a2e0cd7613edc6f2757db423f3a6d08944e75cbd4861f376b95fc54fda46a099d05c4bd8b3bf88c90de99f623d69155598c4788f36e623568e758ccd3feea1163c4c712cca80bfdba4b390e2d07730b497111412a4e8b314c3149a47e92c122ec6db6ae0320e221df3b7c48bb2f324707667ed83d54c59ba57b9aa4127e733b453d216caa660882ecf5b19f9fe014245daed128f8696929dc3b2ae4ec73adaa2fa707799823f03753152eda481861b65ca55ee349fec90dc0e9dc406878d62dfa9700e10ddd8a97a264ff2c6fd2176b98d3b94e8cfed2d274f782b31b0a15aecb8a566472260930d5e039ac07e3d69d0becf5941199a1a2786b2f81315f95f663fdc190a7e808511554612d5d2dda19acc2bf3335b2ee45845ef4bebaa4cb89fd5454e4467b069eb800df10cb46f73086e4924b4bccecf66b4578efe9998f0c2534d2ead0e86ca37d37b274e30dcaa3381f394ba60d80a1f58cb0ff76ab78d34cf3cfbd85eb141464957d240be00423dc52c6b3dd103a5bd16bccfde372ad16a07c4fa6620da9a90d27761e4aecd358c7c1ab9add5cf458ba6a371809d7eebc3018848b4c65732cc662ade51f09bf839525d2ef8c4b892672e1e9662a27456c736a02ecce47131cdc1c1679fad3d88b17bd544965b31d3a8ba6386c0164eec7395462080edcd72538c324cbc2ba1663498c28214f716b50bb3573426bede40c3b21bd1987ff30ac78d45897810c276d0f57fe91a1999fac15a684eb1eb04df29acdb6327d147e8d158d0c451cbcbc11f48e547d2e79c2f1c714ec090737e59c6d76afbf8a641561bde0d3b3a6fae14fe0ddbdc1775560eeaa12586d24aa32e4c134e6aa8a826ca809d0cef039d3b41d21b2cfa433a5227fba60fa7ad875e9a139a11041ffc59cdb2a6b61f0c474c7f6a2e8054314c433128065f44a1d350e371d8ee47832d94aaea3e368542f7ce3282d5169aec9d7a6cf5e00172c87d02c9bf14bc3d6106e6d5861ff3aa4855c6e5cc2e242403193d2b89876b028f86e1f2db8391a0ebf7e35fa204d35d84c25993c660a8d6a6177f6a36063a8013f7064361a4105c0454fb8ce75ea0fcb6acda430a18a050708410d01865514c100572a11f41038fc7f3c21420114d2f4bd361be6c6440c43315fe6e384a840175f226b879c5af2d6a337ba98d200c0e3ecddc4e179531ab1492c169dccdd6215033cf1553da27e65b98fb676331b3fb59afec3dfa780682c5d68d7e0f70e8f7994f56da17176a7162f4a43da808981c5b1cfb66085dbec6c1edccc0810934b5b8a5380ed2b75d2e62b7177b04a42dad757e7d8365656da9a75b38b402b64e2ef0f9840202bed0eef99edfc0b64db24230c8c03f8feb80fa0f65aba3ec43eed1e1722631ec91298a44ddb4cefe00e950b15dbb6d6ff63c3e75ba3c6e06457653fa02ad1c954ea95c9dfe4a4bd160e48c70aeef3f96bed30820bce663ba05f4029f2a03a17aab466d35e1b6de91d9cdf0fa4e8d241cf5869aeaf9c66bce84970e459abfd553b385c1b1008851fb6b96412d16585a503c47c42581e9865ce55432cd1d0ea0013367c92b089c89f622564f3112aa9f0ad2c442fff592bdc2cc7f64e65e8e15ead6dc2e530cbf5fd7e03439c365117623fd5f3c58fe24c1aef6c82890da75c23e7358b76c0343e89e8f456f2467b9361cae9474a3b9c5021c2a2bfff818acca97b4cf1551ce26b8510fa551cc2b3a571e2eb914294bc5da67c5f45fc98f62d3d9a0f0a0f769325e4aa262fb192ef290606ce55ad7870eddd45e458a2301412d465e3dc06c096427ad3dcbb84bc8352ff1abe996f9176a402cd2d2ac097378ae5453fc350e07926c82aeb03c58660fcfd09ecf4a86730d4066fddb5c77db4169a7ae957191cd596870a2e11cd09e2e8636fc8a2bd9316bbe5735ecaa383359bafe61984c18210dd0e4fde20adfa76118b9a184d74e3cd9b5ee486f6754a4b4c9e10e618c35c209b3ce10fbcb38481cfb7a2b9b0f43527bf8a95ce1a92ce91e8b3bd22ac970d3a8b2e1ba0507f66c298d586f1f6d492e6c20b674b095a2f37c0d114494ef0d9e212933d02585aee456a7439d3695ecdf4c36283a063fa12205526e88a01b08cd896ee3ffe2507cc5", @generic="9866b18dc429b4687f571aa0513dc548bd9a4811ef031382020bba09a185a693b307e41ba4bd67ddfc6cbbb2d0cb37ee", @typed={0x18, 0x18, @binary="0375cab20799d54d0c9abaab7eaf717f91af7f97"}]}]}, 0x1424}, 0x1, 0x0, 0x0, 0x20000000}, 0x48010) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 21:40:01 executing program 3 (fault-call:6 fault-nth:37): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x0) [ 998.508219][T11938] FAULT_INJECTION: forcing a failure. [ 998.508219][T11938] name failslab, interval 1, probability 0, space 0, times 0 [ 998.521224][T11938] CPU: 0 PID: 11938 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 998.530422][T11938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 998.540490][T11938] Call Trace: [ 998.543797][T11938] dump_stack+0x172/0x1f0 [ 998.548127][T11938] should_fail.cold+0xa/0x15 [ 998.552720][T11938] ? fault_create_debugfs_attr+0x180/0x180 [ 998.558530][T11938] ? ___might_sleep+0x163/0x280 [ 998.563377][T11938] __should_failslab+0x121/0x190 [ 998.568304][T11938] should_failslab+0x9/0x14 [ 998.572823][T11938] kmem_cache_alloc_node+0x268/0x740 [ 998.578125][T11938] ? ___might_sleep+0x163/0x280 [ 998.582997][T11938] alloc_vmap_area+0x140/0x2080 [ 998.587845][T11938] ? __get_vm_area_node+0x12b/0x370 [ 998.593038][T11938] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 998.598592][T11938] ? purge_vmap_area_lazy+0x40/0x40 [ 998.603784][T11938] ? find_next_iomem_res+0x3b0/0x3b0 [ 998.609060][T11938] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 998.615316][T11938] __get_vm_area_node+0x179/0x370 [ 998.620334][T11938] ? memremap+0x3c3/0x520 [ 998.624673][T11938] get_vm_area_caller+0x47/0x60 [ 998.629524][T11938] ? memremap+0x3c3/0x520 [ 998.633850][T11938] __ioremap_caller.constprop.0+0x362/0x710 [ 998.639739][T11938] ? memremap+0x3c3/0x520 [ 998.644062][T11938] ? iounmap+0x1b0/0x1b0 [ 998.648297][T11938] ? __kasan_check_write+0x14/0x20 [ 998.653401][T11938] ? _raw_read_unlock+0x2d/0x50 [ 998.658241][T11938] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 998.664478][T11938] ? region_intersects+0x263/0x2f0 [ 998.669610][T11938] ioremap_cache+0x24/0x30 [ 998.674032][T11938] memremap+0x3c3/0x520 [ 998.678186][T11938] ? devm_memremap_match+0x40/0x40 [ 998.683303][T11938] ? _raw_read_unlock+0x2d/0x50 [ 998.688148][T11938] ? iomem_is_exclusive+0x33/0x1af [ 998.693236][T11938] xlate_dev_mem_ptr+0x28/0x50 [ 998.697987][T11938] read_mem+0xdc/0x2c0 [ 998.702042][T11938] do_iter_read+0x4a4/0x660 21:40:01 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f00000001c0)) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000200)={[], 0x1}) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000280)) fcntl$getown(r3, 0x9) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f0000000000)) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, 0x0, 0x0) [ 998.706522][T11938] ? dup_iter+0x260/0x260 [ 998.710856][T11938] vfs_readv+0xf0/0x160 [ 998.715032][T11938] ? compat_rw_copy_check_uvector+0x4c0/0x4c0 [ 998.721108][T11938] ? __kasan_check_read+0x11/0x20 [ 998.726139][T11938] ? ksys_dup3+0x3e0/0x3e0 [ 998.730554][T11938] ? wait_for_completion+0x440/0x440 [ 998.735839][T11938] ? __fget_light+0x1a9/0x230 [ 998.740514][T11938] do_preadv+0x1c4/0x280 [ 998.744745][T11938] ? do_readv+0x330/0x330 [ 998.749061][T11938] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 998.754507][T11938] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 998.759958][T11938] ? do_syscall_64+0x26/0x760 [ 998.764635][T11938] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 998.770703][T11938] ? do_syscall_64+0x26/0x760 [ 998.775380][T11938] __x64_sys_preadv+0x9a/0xf0 [ 998.780059][T11938] do_syscall_64+0xfa/0x760 [ 998.784564][T11938] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 998.790439][T11938] RIP: 0033:0x459879 [ 998.794320][T11938] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 998.813897][T11938] RSP: 002b:00007f1e7f50fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 998.822285][T11938] RAX: ffffffffffffffda RBX: 00007f1e7f50fc90 RCX: 0000000000459879 [ 998.830233][T11938] RDX: 0000000000000002 RSI: 0000000020000200 RDI: 0000000000000004 [ 998.838185][T11938] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 998.846134][T11938] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1e7f5106d4 21:40:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace(0x420b, r1) [ 998.854079][T11938] R13: 00000000004c6b98 R14: 00000000004dbd88 R15: 0000000000000005 21:40:01 executing program 3 (fault-call:6 fault-nth:38): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x0) [ 998.983409][T11955] FAULT_INJECTION: forcing a failure. [ 998.983409][T11955] name failslab, interval 1, probability 0, space 0, times 0 [ 999.005639][T11955] CPU: 0 PID: 11955 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 999.014767][T11955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 999.024809][T11955] Call Trace: [ 999.028097][T11955] dump_stack+0x172/0x1f0 [ 999.032427][T11955] should_fail.cold+0xa/0x15 [ 999.037048][T11955] ? fault_create_debugfs_attr+0x180/0x180 [ 999.042854][T11955] ? ___might_sleep+0x163/0x280 [ 999.047700][T11955] __should_failslab+0x121/0x190 [ 999.052627][T11955] should_failslab+0x9/0x14 [ 999.057118][T11955] kmem_cache_alloc_node_trace+0x274/0x750 [ 999.062920][T11955] ? find_next_iomem_res+0x3b0/0x3b0 [ 999.068196][T11955] ? __kasan_slab_free+0x102/0x150 [ 999.073311][T11955] ? kasan_slab_free+0xe/0x10 [ 999.077979][T11955] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 999.084219][T11955] __get_vm_area_node+0x12b/0x370 [ 999.089228][T11955] ? pat_init+0x4d0/0x4d0 [ 999.093541][T11955] ? memremap+0x3c3/0x520 [ 999.097854][T11955] get_vm_area_caller+0x47/0x60 [ 999.102685][T11955] ? memremap+0x3c3/0x520 [ 999.106994][T11955] __ioremap_caller.constprop.0+0x362/0x710 [ 999.112865][T11955] ? memremap+0x3c3/0x520 [ 999.117166][T11955] ? iounmap+0x1b0/0x1b0 [ 999.121385][T11955] ? __kasan_check_write+0x14/0x20 [ 999.126482][T11955] ? _raw_read_unlock+0x2d/0x50 [ 999.131316][T11955] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 999.137531][T11955] ? region_intersects+0x263/0x2f0 [ 999.142623][T11955] ioremap_cache+0x24/0x30 [ 999.147022][T11955] memremap+0x3c3/0x520 [ 999.151154][T11955] ? devm_memremap_match+0x40/0x40 [ 999.156240][T11955] ? _raw_read_unlock+0x2d/0x50 [ 999.161200][T11955] ? iomem_is_exclusive+0x33/0x1af [ 999.166303][T11955] xlate_dev_mem_ptr+0x28/0x50 [ 999.171086][T11955] read_mem+0xdc/0x2c0 [ 999.175135][T11955] do_iter_read+0x4a4/0x660 [ 999.179612][T11955] ? dup_iter+0x260/0x260 [ 999.183934][T11955] vfs_readv+0xf0/0x160 [ 999.188078][T11955] ? compat_rw_copy_check_uvector+0x4c0/0x4c0 [ 999.194128][T11955] ? __kasan_check_read+0x11/0x20 [ 999.199162][T11955] ? ksys_dup3+0x3e0/0x3e0 [ 999.203578][T11955] ? wait_for_completion+0x440/0x440 [ 999.208865][T11955] ? __fget_light+0x1a9/0x230 [ 999.213551][T11955] do_preadv+0x1c4/0x280 [ 999.217791][T11955] ? do_readv+0x330/0x330 [ 999.222106][T11955] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 999.222123][T11955] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 999.232997][T11955] ? do_syscall_64+0x26/0x760 [ 999.237676][T11955] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 999.243739][T11955] ? do_syscall_64+0x26/0x760 [ 999.248414][T11955] __x64_sys_preadv+0x9a/0xf0 [ 999.253094][T11955] do_syscall_64+0xfa/0x760 [ 999.257602][T11955] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 999.263483][T11955] RIP: 0033:0x459879 [ 999.267558][T11955] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 999.287134][T11955] RSP: 002b:00007f1e7f50fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 999.295521][T11955] RAX: ffffffffffffffda RBX: 00007f1e7f50fc90 RCX: 0000000000459879 [ 999.303505][T11955] RDX: 0000000000000002 RSI: 0000000020000200 RDI: 0000000000000004 [ 999.311462][T11955] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 999.319412][T11955] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1e7f5106d4 [ 999.327476][T11955] R13: 00000000004c6b98 R14: 00000000004dbd88 R15: 0000000000000005 [ 999.536800][T11962] IPVS: ftp: loaded support on port[0] = 21 [ 999.784315][T11962] chnl_net:caif_netlink_parms(): no params data found [ 999.899855][T11962] bridge0: port 1(bridge_slave_0) entered blocking state [ 999.907190][T11962] bridge0: port 1(bridge_slave_0) entered disabled state [ 999.914708][T11962] device bridge_slave_0 entered promiscuous mode [ 999.922230][T11962] bridge0: port 2(bridge_slave_1) entered blocking state [ 999.929707][T11962] bridge0: port 2(bridge_slave_1) entered disabled state [ 999.937616][T11962] device bridge_slave_1 entered promiscuous mode [ 1000.019752][T11962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1000.030417][T11962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1000.047433][T11962] team0: Port device team_slave_0 added [ 1000.118886][T11962] team0: Port device team_slave_1 added [ 1000.158561][T11962] device hsr_slave_0 entered promiscuous mode [ 1000.207334][T11962] device hsr_slave_1 entered promiscuous mode [ 1000.257047][T11962] debugfs: Directory 'hsr0' with parent '/' already present! [ 1000.332757][T11962] bridge0: port 2(bridge_slave_1) entered blocking state [ 1000.339817][T11962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1000.347156][T11962] bridge0: port 1(bridge_slave_0) entered blocking state [ 1000.354181][T11962] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1000.378426][T11611] device bridge_slave_1 left promiscuous mode [ 1000.384591][T11611] bridge0: port 2(bridge_slave_1) entered disabled state [ 1000.408100][T11611] device bridge_slave_0 left promiscuous mode [ 1000.414223][T11611] bridge0: port 1(bridge_slave_0) entered disabled state [ 1002.117569][T11611] device hsr_slave_0 left promiscuous mode [ 1002.187132][T11611] device hsr_slave_1 left promiscuous mode [ 1002.256238][T11611] team0 (unregistering): Port device team_slave_1 removed [ 1002.268562][T11611] team0 (unregistering): Port device team_slave_0 removed [ 1002.279182][T11611] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1002.320733][T11611] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1002.397996][T11611] bond0 (unregistering): Released all slaves [ 1002.512661][ T3505] bridge0: port 1(bridge_slave_0) entered disabled state [ 1002.520154][ T3505] bridge0: port 2(bridge_slave_1) entered disabled state [ 1002.539943][T11962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1002.551759][ T8708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1002.559743][ T8708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1002.570130][T11962] 8021q: adding VLAN 0 to HW filter on device team0 [ 1002.583199][ T2897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1002.592621][ T2897] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1002.601097][ T2897] bridge0: port 1(bridge_slave_0) entered blocking state [ 1002.608179][ T2897] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1002.615753][ T2897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1002.624792][ T2897] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1002.633134][ T2897] bridge0: port 2(bridge_slave_1) entered blocking state [ 1002.640209][ T2897] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1002.657045][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1002.665447][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1002.673886][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1002.682274][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1002.690718][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1002.699087][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1002.707797][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1002.717420][T11639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1002.725647][T11639] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1002.766295][T11962] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1002.778119][T11962] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1002.786167][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1002.795005][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1002.817990][T11962] 8021q: adding VLAN 0 to HW filter on device batadv0 21:41:22 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffbc002) 21:41:22 executing program 3 (fault-call:6 fault-nth:39): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x0) 21:41:22 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000100)={{0x7, 0x7fffffff}, 'port0\x00', 0x22, 0x8815, 0xffff, 0x10000, 0xb0, 0xed, 0x3, 0x0, 0x6, 0x80}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000200)={'syz0', "d5c0683fbf1c382dd45dda30aa2d305b56"}, 0x15) syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x8, 0x404000) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000040)={0x2, @loopback, 0x4e21, 0x4, 'wlc\x00', 0x0, 0x23c8}, 0x2c) 21:41:22 executing program 5: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ppoll(&(0x7f0000000000)=[{r0}, {r1, 0x100}], 0x2, 0x0, 0x0, 0x300000000000000) 21:41:22 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/connector\x00') r3 = socket(0xa, 0x5, 0x6) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vga_arbiter\x00', 0x8040, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r7, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r5, 0x0, r7, 0x0, 0x30005, 0x0) ioctl$FIBMAP(r6, 0x1, &(0x7f00000000c0)) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) write$binfmt_misc(r8, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer2\x00', 0x40000, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x82000001}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x84, r1, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_SIZE_BYTES={0xfeb5, 0x2, 0x7}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfff}, @NBD_ATTR_SOCKETS={0x34, 0x7, [{0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r8}, {0x8, 0x1, r9}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x800}, 0x0) 21:41:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace(0x420c, r1) 21:41:22 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000040)) [ 1079.714573][T11988] FAULT_INJECTION: forcing a failure. [ 1079.714573][T11988] name failslab, interval 1, probability 0, space 0, times 0 [ 1079.769957][T11988] CPU: 0 PID: 11988 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1079.779078][T11988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1079.779085][T11988] Call Trace: [ 1079.779108][T11988] dump_stack+0x172/0x1f0 [ 1079.779130][T11988] should_fail.cold+0xa/0x15 [ 1079.779147][T11988] ? fault_create_debugfs_attr+0x180/0x180 [ 1079.779165][T11988] ? ___might_sleep+0x163/0x280 [ 1079.779185][T11988] __should_failslab+0x121/0x190 [ 1079.817111][T11988] should_failslab+0x9/0x14 [ 1079.817127][T11988] kmem_cache_alloc_node_trace+0x274/0x750 [ 1079.817144][T11988] ? find_next_iomem_res+0x3b0/0x3b0 [ 1079.817156][T11988] ? __kasan_slab_free+0x102/0x150 [ 1079.817168][T11988] ? kasan_slab_free+0xe/0x10 [ 1079.817183][T11988] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1079.817204][T11988] __get_vm_area_node+0x12b/0x370 [ 1079.853735][T11988] ? pat_init+0x4d0/0x4d0 [ 1079.858062][T11988] ? memremap+0x3c3/0x520 [ 1079.858080][T11988] get_vm_area_caller+0x47/0x60 [ 1079.858096][T11988] ? memremap+0x3c3/0x520 [ 1079.871544][T11988] __ioremap_caller.constprop.0+0x362/0x710 [ 1079.871561][T11988] ? memremap+0x3c3/0x520 [ 1079.871577][T11988] ? iounmap+0x1b0/0x1b0 [ 1079.871593][T11988] ? __kasan_check_write+0x14/0x20 [ 1079.871613][T11988] ? _raw_read_unlock+0x2d/0x50 [ 1079.896026][T11988] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1079.902269][T11988] ? region_intersects+0x263/0x2f0 [ 1079.907385][T11988] ioremap_cache+0x24/0x30 [ 1079.911806][T11988] memremap+0x3c3/0x520 [ 1079.915962][T11988] ? devm_memremap_match+0x40/0x40 [ 1079.921087][T11988] ? _raw_read_unlock+0x2d/0x50 [ 1079.925932][T11988] ? iomem_is_exclusive+0x33/0x1af [ 1079.931128][T11988] xlate_dev_mem_ptr+0x28/0x50 [ 1079.935901][T11988] read_mem+0xdc/0x2c0 [ 1079.940077][T11988] do_iter_read+0x4a4/0x660 [ 1079.944585][T11988] ? dup_iter+0x260/0x260 [ 1079.949022][T11988] vfs_readv+0xf0/0x160 [ 1079.953176][T11988] ? compat_rw_copy_check_uvector+0x4c0/0x4c0 [ 1079.959239][T11988] ? __kasan_check_read+0x11/0x20 [ 1079.964271][T11988] ? ksys_dup3+0x3e0/0x3e0 [ 1079.968771][T11988] ? wait_for_completion+0x440/0x440 [ 1079.974051][T11988] ? __fget_light+0x1a9/0x230 [ 1079.978734][T11988] do_preadv+0x1c4/0x280 [ 1079.982972][T11988] ? do_readv+0x330/0x330 [ 1079.987399][T11988] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 1079.992854][T11988] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 1079.998310][T11988] ? do_syscall_64+0x26/0x760 [ 1080.002986][T11988] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1080.009046][T11988] ? do_syscall_64+0x26/0x760 [ 1080.013724][T11988] __x64_sys_preadv+0x9a/0xf0 [ 1080.018396][T11988] do_syscall_64+0xfa/0x760 [ 1080.022896][T11988] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1080.028780][T11988] RIP: 0033:0x459879 [ 1080.032672][T11988] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1080.052265][T11988] RSP: 002b:00007f1e7f50fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1080.060669][T11988] RAX: ffffffffffffffda RBX: 00007f1e7f50fc90 RCX: 0000000000459879 21:41:22 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)="4fe542ae456e", 0x6, 0xfffffffffffffffd) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) pipe(&(0x7f0000000300)={0xffffffffffffffff}) syz_init_net_socket$bt_l2cap(0x1f, 0xfc65c24ec96abf1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r3, 0x0, r4, 0x0, 0x30005, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x100000000}) splice(r1, 0x0, r2, 0x0, 0x30005, 0x0) syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x6, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 21:41:22 executing program 5: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ppoll(&(0x7f0000000000)=[{r0}, {r1, 0x100}], 0x2, 0x0, 0x0, 0x800000000000000) [ 1080.068629][T11988] RDX: 0000000000000002 RSI: 0000000020000200 RDI: 0000000000000004 [ 1080.076592][T11988] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1080.084642][T11988] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1e7f5106d4 [ 1080.092611][T11988] R13: 00000000004c6b98 R14: 00000000004dbd88 R15: 0000000000000005 21:41:23 executing program 3 (fault-call:6 fault-nth:40): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x0) [ 1080.417217][T12012] FAULT_INJECTION: forcing a failure. [ 1080.417217][T12012] name failslab, interval 1, probability 0, space 0, times 0 [ 1080.430625][T12012] CPU: 0 PID: 12012 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1080.439735][T12012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1080.449787][T12012] Call Trace: [ 1080.453083][T12012] dump_stack+0x172/0x1f0 [ 1080.457419][T12012] should_fail.cold+0xa/0x15 [ 1080.462020][T12012] ? fault_create_debugfs_attr+0x180/0x180 [ 1080.467820][T12012] ? ___might_sleep+0x163/0x280 [ 1080.467841][T12012] __should_failslab+0x121/0x190 [ 1080.467874][T12012] should_failslab+0x9/0x14 [ 1080.467891][T12012] kmem_cache_alloc_node+0x268/0x740 [ 1080.487399][T12012] ? ___might_sleep+0x163/0x280 [ 1080.492275][T12012] alloc_vmap_area+0x140/0x2080 [ 1080.497133][T12012] ? __get_vm_area_node+0x12b/0x370 [ 1080.502333][T12012] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1080.507886][T12012] ? purge_vmap_area_lazy+0x40/0x40 [ 1080.513086][T12012] ? find_next_iomem_res+0x3b0/0x3b0 [ 1080.518371][T12012] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1080.524617][T12012] __get_vm_area_node+0x179/0x370 [ 1080.529730][T12012] ? memremap+0x3c3/0x520 [ 1080.534064][T12012] get_vm_area_caller+0x47/0x60 [ 1080.538912][T12012] ? memremap+0x3c3/0x520 [ 1080.543244][T12012] __ioremap_caller.constprop.0+0x362/0x710 [ 1080.549135][T12012] ? memremap+0x3c3/0x520 [ 1080.553460][T12012] ? iounmap+0x1b0/0x1b0 [ 1080.557717][T12012] ? __kasan_check_write+0x14/0x20 [ 1080.562838][T12012] ? _raw_read_unlock+0x2d/0x50 [ 1080.567693][T12012] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1080.574022][T12012] ? region_intersects+0x263/0x2f0 [ 1080.579135][T12012] ioremap_cache+0x24/0x30 [ 1080.583556][T12012] memremap+0x3c3/0x520 [ 1080.587732][T12012] ? devm_memremap_match+0x40/0x40 [ 1080.592842][T12012] ? _raw_read_unlock+0x2d/0x50 [ 1080.597697][T12012] ? iomem_is_exclusive+0x33/0x1af [ 1080.602799][T12012] xlate_dev_mem_ptr+0x28/0x50 [ 1080.607545][T12012] read_mem+0xdc/0x2c0 [ 1080.611602][T12012] do_iter_read+0x4a4/0x660 [ 1080.616255][T12012] ? dup_iter+0x260/0x260 [ 1080.620582][T12012] vfs_readv+0xf0/0x160 [ 1080.624731][T12012] ? compat_rw_copy_check_uvector+0x4c0/0x4c0 [ 1080.630772][T12012] ? __kasan_check_read+0x11/0x20 [ 1080.635777][T12012] ? ksys_dup3+0x3e0/0x3e0 [ 1080.640188][T12012] ? wait_for_completion+0x440/0x440 [ 1080.645463][T12012] ? __fget_light+0x1a9/0x230 [ 1080.650139][T12012] do_preadv+0x1c4/0x280 [ 1080.654379][T12012] ? do_readv+0x330/0x330 [ 1080.658698][T12012] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 1080.664143][T12012] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 1080.669584][T12012] ? do_syscall_64+0x26/0x760 [ 1080.674282][T12012] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1080.680359][T12012] ? do_syscall_64+0x26/0x760 [ 1080.685042][T12012] __x64_sys_preadv+0x9a/0xf0 [ 1080.689716][T12012] do_syscall_64+0xfa/0x760 [ 1080.694195][T12012] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1080.700070][T12012] RIP: 0033:0x459879 [ 1080.703951][T12012] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1080.723537][T12012] RSP: 002b:00007f1e7f50fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1080.731942][T12012] RAX: ffffffffffffffda RBX: 00007f1e7f50fc90 RCX: 0000000000459879 [ 1080.739890][T12012] RDX: 0000000000000002 RSI: 0000000020000200 RDI: 0000000000000004 [ 1080.747847][T12012] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1080.755898][T12012] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1e7f5106d4 21:41:23 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x30005, 0x0) sendmmsg$nfc_llcp(r1, &(0x7f0000003200)=[{&(0x7f0000000080)={0x27, 0x0, 0x0, 0x4, 0xc9ea, 0x8, "df5fd4ee0adb82582c87ed58f91d36c8126c6ad0a9e5cb4784638b9b6adb49143ba663cba476896ab69fbe2a49e1f7197c78a9116449ab260d2cfea64a8798", 0x3d}, 0x60, &(0x7f0000001380)=[{&(0x7f0000000100)="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", 0x1000}, {&(0x7f0000001100)="2d4a270255074a5c86e8ab0b7dc16463590f3b94d479b4d69a893c3537e44772683bd8", 0x23}, {&(0x7f0000001140)="a8001b0eb50427f47f8cbfa917a2eced767b59c04359b8639cb52e2525e8e6db426254e68ff59a1ec27507cdfa3a0744db37adbc24abf2719d5b98deb05fa7b6371f1f092f8896ad7223e3cadb0267707140b7fc2615492bf8a2b9ce7ddc0078346337191efd25aff61044128943430a2829f4", 0x73}, {&(0x7f00000011c0)="e1f94d3c62c2f7a1006ec5216a05d845feaab8f685ec2f163df6ea13b61ee6c5187819b7769f409d3f39c3f2b8728d9fde1d6f757d51bfaeb6a6ec5e301745807da274d696", 0x45}, {&(0x7f0000001240)="a07ead", 0x3}, {&(0x7f0000001280)="65468d3d1837460afaf76ba7bc24214b929b3e87a6327651d6458b926d66635951061729e2d41bfa855c0f89aef21857c4fe58bdfbf8943e9755d8a684f2c17d4d8e17dc9a2b12d8a7de7931a6fd0f8c7c63b5a22eb19c1f26d8b7cfe5f4943aecb16dbb65ac772f5abb163e0af5dd1c1d1b7299d9227a02c875038000c6c90d47e9012ac06b4ba9b03828c8d0295bb82556a194542afbdbc3d16e02bdd7e43d", 0xa0}, {&(0x7f0000001340)="da26cd678cadbbdbca86666b1cf3c498709988ea5271d6f90a91b673", 0x1c}], 0x7, &(0x7f0000001400)={0xa0, 0x113, 0x1, "3d9e715e8c777d3d2277f2248644a7f13293a75f71abbc4ad142fabbe05604bc3940e5c7d5c6dcb95f070ce192f9ffa9d40d5dc2e77bb39472ae38139fbd3bf32570b4137ea7685857c50724080216dd7ffb056d90ed32c4c169a0d93eb95989eb61130c899bc836685994486b13624de7ef3ece6afbdd76dd27ec7ecbb8b30a23ba91097d05c06394460dee89"}, 0xa0, 0x4080}, {&(0x7f00000014c0)={0x27, 0x1, 0x2, 0x4, 0x4, 0x5, "de88279bdcd6fd3331b6969cefb7579a5005427fcd499c28a6237ddaabd1c9eb3711bc4c4a202013d3127eafbfe47e17972896e4c8b98f55f38d7594971e2c", 0x35}, 0x60, &(0x7f0000001780)=[{&(0x7f0000001540)="1bd5423e7297b103e76f2e00b4ea3883750740ac46cdfaf539eaa121ec52f58cf6b5e7a92fb9bda89ca45e049fbfd6bb598b67f4525fe2ed84bdedfd729150249d21289d78dfa2a3e0c8f0f735a6d9130e835c5d2a48f911285f5fdd44f41e61ffed2a949ee1cb860907ea3b60a93e18777d4b415deeb3eaa6", 0x79}, {&(0x7f00000015c0)="b91842fe1100c07eff34be4b0d6fb40c073eef1e49656c6cc31fd897bb1df7aa9f41055a306569503b264ae3ceb58df8281c4799ae4d4367bb3f520e7c9b6ffa8d7cfc41397153b3e8a2878058d8ce9271c80b6e4374aa19189d945a5b6875af014d02f60b52ced877b47472ee79d1bd32f9eb357ea4d8135183da039f2e6507854d498bd2a11309f76a178427bc7d60a21d5a8ffa1b9b0b4cba81b22da7da79aa6523604b45309c646c249b8a8e149cfdaf2363", 0xb4}, {&(0x7f0000001680)="cce65b1ed983c371c5914c7bb285dff1d31046247b5e1d45d850e4674a2f2fd89ba389547577489e2ad01065a9349bc0fbce89d5718f6582d6d0697b6209f01fbd3cfe52774253d82d351b89951c34b68c2725c37ac75f6a46c19aab3bfebad5cedcc11b3afea1e262451adeac5a3d8bdd21d69e7fff1375bdb2c34908700de56455a8b738159276f699025b", 0x8c}, {&(0x7f0000001740)="39a47ac7c8eed7b303c88ed5e710a3865842f1b60d825dcfb6f67ef094c4214d9764ab221b9a1abffdbbbdf0d6ab3c3a4163861cfb83cd", 0x37}], 0x4, 0x0, 0x0, 0x440}, {&(0x7f00000017c0)={0x27, 0x1, 0x2, 0x7, 0x4c8, 0x8, "8f394ffccad0809d273fcf32143168ad21b96fbbaba1e8af7b5fe3480dcb24f57d40e7921218655306e012d0b1bb3ece22d307d544be9bbcdc5d821f726e4b", 0x37}, 0x60, &(0x7f0000002a80)=[{&(0x7f0000001840)="dbb1744707c9c97f0e5b31866e28c6f57218f1994f77f9a7ef1ba05878ed0bd7e220842809eb0a134837b45dddd811bf485d27584dad7f65fb02ef9917091e2dec30b79ab6261ae8c6df5ef1b9b2d02549f59ba28445212fc03f00cdd7a0d81ad27e3e7997932eb26ff91667bde1d0d4f91064045877b0011af211dbbd356d0fdd298eba5b8483b9d6b7126a9cfdc24a0610a5", 0x93}, {&(0x7f0000001900)="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", 0x1000}, {&(0x7f0000002900)="481cf0a4c5d3a8a04e8e1d1a4a6ce55f8318c0641a06b4982c17c13f674e69ac7670c2559219163062879ead7d17a52db177bc74e0fd46fddea10b3d264d55065ef75b29999d5cf9f94270c3aba02df4a39826af9faf4b7f5a990a7135c12eb281b60f8ba6e0eef9adb9ecbfc872c1ea08c6883012600140139e191dd83996287807bfa88bc586a5d4d38147e25fa8a596b6d48ade688797633a2a29ff8916720f3830d0707d3062da11cd06234e402ee86e40dccc4d36958e1ee817e2b8351c0055db327282bb8a9a84685d5295d988", 0xd0}, {&(0x7f0000002a00)="a53ec74bee1207d94a2ee55abcc52f8762a4ba6c1c277acbdd9bb7b0186e7b3b7246f602fe04e33e97723cf9c1250153218d49453592a64bd54293666ce87191c2b46933221f484672de1ada7a4855aa50cd0a157d6ce9c6d7614057ba5a", 0x5e}], 0x4, &(0x7f0000002ac0)={0xc8, 0x113, 0x20000000000, "56d9cf759804237bcd064d5d70171e59e979a8925303436d8ff15a655072b4dcb564bd2b41a1f2e70d1f367464309dd610a461658b48aa8f7cf96d546cf7ae7c756485260e70b048382f036cade59845da7c8c7313f2b1c20ceabc5b9674986f4dc1e3a57c357b3a128327d8fbe41337f2a7d9d195cd4d3a06ff297fc9c4c99b7a6b8d25922915a97f781e7b6f8c0f30019ab8422cf799188912fa9344323f5cdfb9fc62df4397b9e2196a3965c736a983"}, 0xc8, 0x24044080}, {&(0x7f0000002bc0)={0x27, 0x0, 0x0, 0x5, 0x8, 0x1ffc000000, "74f1371e34fdf452f3dcb83c27c1c0ec031dde076f97bb32ab11ad557d9d861eec61076fab07bdaa2f234a5b12b5202eb8330efdae4d5032a1916087da5d40", 0x21}, 0x60, &(0x7f0000003180)=[{&(0x7f0000002c40)="b427756e9f20daa05f2ca2bd7795edcf483dfa1012821d6f6af05561cb23ec11bb865f7c59720bddf46e741ae86c0d342186b78be94f3a0cbf1eec702f24d6ce86ab4845568b7c9b22c29887c7ca42873aface72ea69d18a51cc8dcc8f66a5c82ec657b2b5a3e894cfd88c5f3ee701cb1a5f6c72a339dae914e7bd2283f9437ec1e3e1a280ac7400677af3c7f994534b4fa8748122684757fc6aeec6f27d2857b73de038f109dc3f309d644c6ccf24a8b09928f554473398a3", 0xb9}, {&(0x7f0000002d00)="591e8bc0c84b4ec8b2b41da37899c3ee6911796ea895d7de72d85a7e58504e6699b9368f5044c8b9964843eeb529fdf44cf33dd66e209ea61c8d162ac5d0b118807351ead8d266f438bb0d2934c40ed980", 0x51}, {&(0x7f0000002d80)="7f8c88b5c6597be5974e659aa8c134f25912f4ed02e94dcfc544c0cafad04668dfc2d4bced719064c76d16066decaf7ac412e11ddb5c0317c123db18b2d017bedca6e1bca9862953abc623fd120f74d203336723dee218", 0x57}, {&(0x7f0000002e00)="51b3daff16ee015dcac35f9b3c2e6f4b65ff723099c4d7051bc70917d24937d5cb629fb8747d90450bba9e65bfabf20e53c45cc6e28d524fd1f44ae631e3d268f814591c93d2d7305c5ba87d190c41ca55a67963683c32c393bb39878790775d4c2f319cb545a2e2b5872e7aeac726c162f567a3931cc0da77113d5b94e8a1d10c3600d3885d8dd001b594819caee07fdb427e703b78accf9b5d7c98d2c1b950dee2913862520abb2a5d4dacac444869c1032c73cbe9", 0xb6}, {&(0x7f0000002ec0)="49a1c97659ec07e621cd54d2e248d6af7a0cef4b553f704b7e752af391c4f177f4eba6a49f6275ba67390f7e10029e7021e1b0e67758908f4edc1f89cbe5511581dd8327897f4d839b9300debd10", 0x4e}, {&(0x7f0000002f40)="a6fc51823e56171dd7c711d17560da24366b78309de3664d6b7f65bb4a8f900517432391682346fa877687fb29d88a61451b00e26e8b961a8f9f4d1c8821c1bc5d1c7183b06034877afee4c1982ee311ff9011e8e5cd2a938e7a2e839c9e3536f514719b77357fd028751a772884853634a27a514119885b8aba", 0x7a}, {&(0x7f0000002fc0)="345b997a85b291539098ffb4292b409b6d08f2bf71c1cc4c44cb4711a218eb11d5c5f0a4b030751186a137001cf92b9d5884dc126b4f25de0b582b14a6e2737e6b86c022fb48cfaa3b6d80db04e32327109046c250dd007f3c649871b20062b16298938201d06a70148e3bdb8bfa57e26893a9ddefd91b3c676a0f3d0d7709586e07dbda5968bed7e5e82c5cc8f337cf04ec4664f4cb16c6ff2012ed1e30f093491dc895c7d03f9eb4ead43a1bfa29cd2bac6c611a5be4b5433bf8ca9e3463a10a9533e8", 0xc4}, {&(0x7f00000030c0)="a89288a92904715150ef44a09e756a713901140f8690ede51f62f242ac3cbf80334acd9cc4273e0688b8663f4ec75ea87043981e889df2abbd333e239cf44e6c6095dee5216d4841339629a67fab6985f94ba4f11b47fb0271f7c9b070d87d0297a1eb44ab7ade4aaea591ff772b41a8d25eb6d3d4b6619b0d53e0b256fc3276e74001c0cea8c2a24ef57dc41cb6e4e9a1b6716e53646170f428c625c75ffebd7f5a7ee308ac2aad314dbf15", 0xac}], 0x8, 0x0, 0x0, 0x84001}], 0x4, 0x400) r3 = getpid() sched_setattr(r3, 0x0, 0x0) ptrace$setsig(0x4203, r3, 0x5, &(0x7f0000000000)={0x9, 0x2, 0x1000}) 21:41:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace(0x420d, r1) [ 1080.763886][T12012] R13: 00000000004c6b98 R14: 00000000004dbd88 R15: 0000000000000005 [ 1081.671236][T11611] device bridge_slave_1 left promiscuous mode [ 1081.677873][T11611] bridge0: port 2(bridge_slave_1) entered disabled state [ 1081.737887][T11611] device bridge_slave_0 left promiscuous mode [ 1081.744128][T11611] bridge0: port 1(bridge_slave_0) entered disabled state [ 1083.567357][T11611] device hsr_slave_0 left promiscuous mode [ 1083.606979][T11611] device hsr_slave_1 left promiscuous mode [ 1083.654336][T11611] team0 (unregistering): Port device team_slave_1 removed [ 1083.667137][T11611] team0 (unregistering): Port device team_slave_0 removed [ 1083.677930][T11611] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1083.711614][T11611] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1083.799457][T11611] bond0 (unregistering): Released all slaves [ 1084.981728][T12034] IPVS: ftp: loaded support on port[0] = 21 [ 1085.069041][T12034] chnl_net:caif_netlink_parms(): no params data found [ 1085.095837][T12034] bridge0: port 1(bridge_slave_0) entered blocking state [ 1085.103206][T12034] bridge0: port 1(bridge_slave_0) entered disabled state [ 1085.111022][T12034] device bridge_slave_0 entered promiscuous mode [ 1085.119138][T12034] bridge0: port 2(bridge_slave_1) entered blocking state [ 1085.126211][T12034] bridge0: port 2(bridge_slave_1) entered disabled state [ 1085.133977][T12034] device bridge_slave_1 entered promiscuous mode [ 1085.150523][T12034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1085.161022][T12034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1085.178262][T12034] team0: Port device team_slave_0 added [ 1085.184886][T12034] team0: Port device team_slave_1 added [ 1085.248687][T12034] device hsr_slave_0 entered promiscuous mode [ 1085.287330][T12034] device hsr_slave_1 entered promiscuous mode [ 1085.363899][T12034] bridge0: port 2(bridge_slave_1) entered blocking state [ 1085.371033][T12034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1085.378421][T12034] bridge0: port 1(bridge_slave_0) entered blocking state [ 1085.385455][T12034] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1085.421803][T12034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1085.432742][ T8708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1085.441030][ T8708] bridge0: port 1(bridge_slave_0) entered disabled state [ 1085.448987][ T8708] bridge0: port 2(bridge_slave_1) entered disabled state [ 1085.457150][ T8708] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1085.468723][T12034] 8021q: adding VLAN 0 to HW filter on device team0 [ 1085.479116][T11967] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1085.487525][T11967] bridge0: port 1(bridge_slave_0) entered blocking state [ 1085.494554][T11967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1085.516517][T12034] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1085.527287][T12034] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1085.540071][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1085.549084][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 1085.556111][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1085.564456][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1085.574666][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1085.583186][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1085.591485][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1085.609774][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1085.617362][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1085.626331][T12034] 8021q: adding VLAN 0 to HW filter on device batadv0 21:41:28 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffbc004) 21:41:28 executing program 5: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ppoll(&(0x7f0000000000)=[{r0}, {r1, 0x100}], 0x2, 0x0, 0x0, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x2000, 0x0) 21:41:28 executing program 3 (fault-call:6 fault-nth:41): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x0) 21:41:28 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x30005, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000040)=0x80000000) 21:41:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace(0x420e, r1) 21:41:28 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x6) [ 1085.853333][T12057] FAULT_INJECTION: forcing a failure. [ 1085.853333][T12057] name failslab, interval 1, probability 0, space 0, times 0 [ 1085.885012][T12057] CPU: 1 PID: 12057 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1085.894226][T12057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1085.904282][T12057] Call Trace: [ 1085.907579][T12057] dump_stack+0x172/0x1f0 [ 1085.911919][T12057] should_fail.cold+0xa/0x15 [ 1085.916519][T12057] ? fault_create_debugfs_attr+0x180/0x180 [ 1085.922353][T12057] ? ___might_sleep+0x163/0x280 [ 1085.927208][T12057] __should_failslab+0x121/0x190 [ 1085.932153][T12057] should_failslab+0x9/0x14 [ 1085.936657][T12057] kmem_cache_alloc_node+0x268/0x740 [ 1085.941942][T12057] ? ___might_sleep+0x163/0x280 [ 1085.946808][T12057] alloc_vmap_area+0x140/0x2080 21:41:28 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffbc006) [ 1085.951669][T12057] ? __get_vm_area_node+0x12b/0x370 [ 1085.956865][T12057] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1085.962421][T12057] ? purge_vmap_area_lazy+0x40/0x40 [ 1085.967616][T12057] ? find_next_iomem_res+0x3b0/0x3b0 [ 1085.972892][T12057] ? __kasan_slab_free+0x102/0x150 [ 1085.978004][T12057] ? kasan_slab_free+0xe/0x10 [ 1085.982679][T12057] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1085.988913][T12057] __get_vm_area_node+0x179/0x370 [ 1085.994021][T12057] ? memremap+0x3c3/0x520 [ 1085.998330][T12057] get_vm_area_caller+0x47/0x60 [ 1086.003155][T12057] ? memremap+0x3c3/0x520 [ 1086.007458][T12057] __ioremap_caller.constprop.0+0x362/0x710 [ 1086.013325][T12057] ? memremap+0x3c3/0x520 [ 1086.017628][T12057] ? iounmap+0x1b0/0x1b0 [ 1086.021850][T12057] ? __kasan_check_write+0x14/0x20 [ 1086.027004][T12057] ? _raw_read_unlock+0x2d/0x50 [ 1086.031833][T12057] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1086.038045][T12057] ? region_intersects+0x263/0x2f0 [ 1086.043130][T12057] ioremap_cache+0x24/0x30 [ 1086.047520][T12057] memremap+0x3c3/0x520 [ 1086.051653][T12057] ? devm_memremap_match+0x40/0x40 [ 1086.056741][T12057] ? _raw_read_unlock+0x2d/0x50 [ 1086.061569][T12057] ? iomem_is_exclusive+0x33/0x1af [ 1086.066655][T12057] xlate_dev_mem_ptr+0x28/0x50 [ 1086.071403][T12057] read_mem+0xdc/0x2c0 [ 1086.075460][T12057] do_iter_read+0x4a4/0x660 [ 1086.079962][T12057] ? dup_iter+0x260/0x260 [ 1086.084293][T12057] vfs_readv+0xf0/0x160 [ 1086.088427][T12057] ? compat_rw_copy_check_uvector+0x4c0/0x4c0 [ 1086.094488][T12057] ? __kasan_check_read+0x11/0x20 [ 1086.099508][T12057] ? ksys_dup3+0x3e0/0x3e0 [ 1086.103927][T12057] ? wait_for_completion+0x440/0x440 [ 1086.109189][T12057] ? __fget_light+0x1a9/0x230 [ 1086.113844][T12057] do_preadv+0x1c4/0x280 [ 1086.118077][T12057] ? do_readv+0x330/0x330 [ 1086.122383][T12057] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 1086.127826][T12057] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 1086.133258][T12057] ? do_syscall_64+0x26/0x760 [ 1086.137912][T12057] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1086.143950][T12057] ? do_syscall_64+0x26/0x760 [ 1086.148610][T12057] __x64_sys_preadv+0x9a/0xf0 [ 1086.153263][T12057] do_syscall_64+0xfa/0x760 [ 1086.157742][T12057] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1086.163613][T12057] RIP: 0033:0x459879 [ 1086.167515][T12057] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1086.187090][T12057] RSP: 002b:00007f1e7f50fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1086.195485][T12057] RAX: ffffffffffffffda RBX: 00007f1e7f50fc90 RCX: 0000000000459879 [ 1086.203432][T12057] RDX: 0000000000000002 RSI: 0000000020000200 RDI: 0000000000000004 [ 1086.211380][T12057] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1086.219328][T12057] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1e7f5106d4 [ 1086.227273][T12057] R13: 00000000004c6b98 R14: 00000000004dbd88 R15: 0000000000000005 21:41:29 executing program 3 (fault-call:6 fault-nth:42): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x0) 21:41:29 executing program 5: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") inotify_init1(0x1249fb3a2a23350e) ppoll(&(0x7f0000000000)=[{r0}, {r1, 0x100}], 0x2, 0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x2100, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0xb) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r3, 0x0, r4, 0x0, 0x30005, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0xffffffffffffe282}, 0x10) [ 1086.395536][T12075] FAULT_INJECTION: forcing a failure. [ 1086.395536][T12075] name failslab, interval 1, probability 0, space 0, times 0 [ 1086.432748][T12075] CPU: 1 PID: 12075 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1086.441890][T12075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1086.451945][T12075] Call Trace: [ 1086.455242][T12075] dump_stack+0x172/0x1f0 [ 1086.459592][T12075] should_fail.cold+0xa/0x15 [ 1086.464189][T12075] ? fault_create_debugfs_attr+0x180/0x180 [ 1086.470002][T12075] ? ___might_sleep+0x163/0x280 [ 1086.474858][T12075] __should_failslab+0x121/0x190 [ 1086.479801][T12075] should_failslab+0x9/0x14 [ 1086.484308][T12075] kmem_cache_alloc_node_trace+0x274/0x750 [ 1086.490116][T12075] ? find_next_iomem_res+0x3b0/0x3b0 [ 1086.495404][T12075] ? __kasan_slab_free+0x102/0x150 [ 1086.500516][T12075] ? kasan_slab_free+0xe/0x10 [ 1086.505197][T12075] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1086.511445][T12075] __get_vm_area_node+0x12b/0x370 [ 1086.516472][T12075] ? pat_init+0x4d0/0x4d0 [ 1086.520804][T12075] ? memremap+0x3c3/0x520 [ 1086.525140][T12075] get_vm_area_caller+0x47/0x60 [ 1086.529997][T12075] ? memremap+0x3c3/0x520 [ 1086.534332][T12075] __ioremap_caller.constprop.0+0x362/0x710 [ 1086.540234][T12075] ? memremap+0x3c3/0x520 [ 1086.544564][T12075] ? iounmap+0x1b0/0x1b0 [ 1086.548810][T12075] ? __kasan_check_write+0x14/0x20 [ 1086.553924][T12075] ? _raw_read_unlock+0x2d/0x50 [ 1086.558780][T12075] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1086.565023][T12075] ? region_intersects+0x263/0x2f0 [ 1086.570143][T12075] ioremap_cache+0x24/0x30 [ 1086.574676][T12075] memremap+0x3c3/0x520 [ 1086.578837][T12075] ? devm_memremap_match+0x40/0x40 [ 1086.583956][T12075] ? _raw_read_unlock+0x2d/0x50 [ 1086.588808][T12075] ? iomem_is_exclusive+0x33/0x1af [ 1086.593922][T12075] xlate_dev_mem_ptr+0x28/0x50 [ 1086.598685][T12075] read_mem+0xdc/0x2c0 [ 1086.602766][T12075] do_iter_read+0x4a4/0x660 [ 1086.607277][T12075] ? dup_iter+0x260/0x260 [ 1086.611612][T12075] vfs_readv+0xf0/0x160 [ 1086.615777][T12075] ? compat_rw_copy_check_uvector+0x4c0/0x4c0 [ 1086.621845][T12075] ? __kasan_check_read+0x11/0x20 [ 1086.626882][T12075] ? ksys_dup3+0x3e0/0x3e0 [ 1086.631302][T12075] ? wait_for_completion+0x440/0x440 [ 1086.636591][T12075] ? __fget_light+0x1a9/0x230 [ 1086.641283][T12075] do_preadv+0x1c4/0x280 [ 1086.645529][T12075] ? do_readv+0x330/0x330 [ 1086.649871][T12075] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 1086.655334][T12075] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 1086.660805][T12075] ? do_syscall_64+0x26/0x760 [ 1086.665482][T12075] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1086.671550][T12075] ? do_syscall_64+0x26/0x760 [ 1086.676242][T12075] __x64_sys_preadv+0x9a/0xf0 [ 1086.680925][T12075] do_syscall_64+0xfa/0x760 [ 1086.685438][T12075] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1086.691332][T12075] RIP: 0033:0x459879 [ 1086.695223][T12075] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1086.714825][T12075] RSP: 002b:00007f1e7f50fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1086.723241][T12075] RAX: ffffffffffffffda RBX: 00007f1e7f50fc90 RCX: 0000000000459879 [ 1086.731211][T12075] RDX: 0000000000000002 RSI: 0000000020000200 RDI: 0000000000000004 [ 1086.739185][T12075] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 21:41:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x800000001d, &(0x7f0000000000)={0x0, 0x0, 0x400000000000}) ptrace(0x10, r1) ptrace(0x11, r1) 21:41:29 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000080)='silent\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) [ 1086.747155][T12075] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1e7f5106d4 [ 1086.755129][T12075] R13: 00000000004c6b98 R14: 00000000004dbd88 R15: 0000000000000005 21:41:29 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffbcfff) 21:41:29 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0x10}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000000c0)=0x8001) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000000)) ptrace(0x10, r4) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x2, 0x6, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffd, 0x25dfdbff}, 0x10}}, 0x24041808) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000180)=0x0) ptrace(0x4208, r6) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x0) write$binfmt_misc(r7, &(0x7f0000000140)=ANY=[], 0x4240a2a0) write$P9_RCLUNK(r3, &(0x7f0000000140)={0xffffffffffffffe7, 0x79, 0x2}, 0xffffffffffffff02) r8 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x3, 0x200000) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r8, 0x2405, r2) 21:41:29 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x301, 0x0) accept$nfc_llcp(r1, &(0x7f0000000100), &(0x7f0000000080)=0x60) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 21:41:29 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x200000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) r1 = getpgid(0xffffffffffffffff) ptrace$getenv(0x4201, r1, 0x81, &(0x7f0000000080)) r2 = syz_open_procfs(r1, &(0x7f0000000040)='net/udp6\x00') mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 21:41:29 executing program 3 (fault-call:6 fault-nth:43): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x0) 21:41:29 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffbd000) [ 1087.231438][T12116] FAULT_INJECTION: forcing a failure. [ 1087.231438][T12116] name failslab, interval 1, probability 0, space 0, times 0 [ 1087.298580][T12116] CPU: 0 PID: 12116 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1087.307701][T12116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1087.317744][T12116] Call Trace: [ 1087.321052][T12116] dump_stack+0x172/0x1f0 [ 1087.325405][T12116] should_fail.cold+0xa/0x15 [ 1087.330001][T12116] ? fault_create_debugfs_attr+0x180/0x180 [ 1087.335814][T12116] ? ___might_sleep+0x163/0x280 [ 1087.340666][T12116] __should_failslab+0x121/0x190 [ 1087.345692][T12116] should_failslab+0x9/0x14 [ 1087.350204][T12116] kmem_cache_alloc_node+0x268/0x740 [ 1087.355489][T12116] ? ___might_sleep+0x163/0x280 [ 1087.360338][T12116] alloc_vmap_area+0x140/0x2080 [ 1087.365175][T12116] ? __get_vm_area_node+0x12b/0x370 [ 1087.370362][T12116] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1087.375898][T12116] ? purge_vmap_area_lazy+0x40/0x40 [ 1087.381081][T12116] ? find_next_iomem_res+0x3b0/0x3b0 [ 1087.386346][T12116] ? __kasan_slab_free+0x102/0x150 [ 1087.391434][T12116] ? kasan_slab_free+0xe/0x10 [ 1087.396102][T12116] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1087.402333][T12116] __get_vm_area_node+0x179/0x370 [ 1087.407343][T12116] ? memremap+0x3c3/0x520 [ 1087.411658][T12116] get_vm_area_caller+0x47/0x60 [ 1087.416490][T12116] ? memremap+0x3c3/0x520 [ 1087.420805][T12116] __ioremap_caller.constprop.0+0x362/0x710 [ 1087.426678][T12116] ? memremap+0x3c3/0x520 [ 1087.430996][T12116] ? iounmap+0x1b0/0x1b0 [ 1087.435224][T12116] ? __kasan_check_write+0x14/0x20 [ 1087.440322][T12116] ? _raw_read_unlock+0x2d/0x50 [ 1087.445153][T12116] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1087.451465][T12116] ? region_intersects+0x263/0x2f0 [ 1087.456555][T12116] ioremap_cache+0x24/0x30 [ 1087.460951][T12116] memremap+0x3c3/0x520 [ 1087.465086][T12116] ? devm_memremap_match+0x40/0x40 [ 1087.470177][T12116] ? _raw_read_unlock+0x2d/0x50 [ 1087.475031][T12116] ? iomem_is_exclusive+0x33/0x1af [ 1087.480124][T12116] xlate_dev_mem_ptr+0x28/0x50 [ 1087.484880][T12116] read_mem+0xdc/0x2c0 [ 1087.488929][T12116] do_iter_read+0x4a4/0x660 [ 1087.493409][T12116] ? dup_iter+0x260/0x260 [ 1087.497725][T12116] vfs_readv+0xf0/0x160 [ 1087.501862][T12116] ? compat_rw_copy_check_uvector+0x4c0/0x4c0 [ 1087.507912][T12116] ? __kasan_check_read+0x11/0x20 [ 1087.512937][T12116] ? ksys_dup3+0x3e0/0x3e0 [ 1087.517337][T12116] ? __fget_light+0x1a9/0x230 [ 1087.521994][T12116] do_preadv+0x1c4/0x280 [ 1087.526215][T12116] ? do_readv+0x330/0x330 [ 1087.530525][T12116] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 1087.535962][T12116] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 1087.541408][T12116] ? do_syscall_64+0x26/0x760 [ 1087.546060][T12116] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1087.552098][T12116] ? do_syscall_64+0x26/0x760 [ 1087.556752][T12116] __x64_sys_preadv+0x9a/0xf0 [ 1087.561422][T12116] do_syscall_64+0xfa/0x760 [ 1087.566125][T12116] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1087.571995][T12116] RIP: 0033:0x459879 [ 1087.575867][T12116] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 21:41:30 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000440)='/dev/btrfs-control\x00', 0x2000, 0x0) openat$cgroup_type(r1, &(0x7f0000000540)='cgroup.type\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x100000, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000580)='/dev/sequencer2\x00', 0x24100, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r4 = accept(r3, &(0x7f00000004c0)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000000)=0x80) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000009c0)={{{@in6, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000ac0)=0xe8) sendmsg$nl_route_sched(r4, &(0x7f0000000b80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4008000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)=@gettfilter={0x34, 0x2e, 0x0, 0x70bd2a, 0x25dfdbfc, {0x0, r5, {0xffe0}, {0xf, 0xfff1}, {0x7, 0xb}}, [{0x8, 0xb, 0x3}, {0x8, 0xb, 0x14}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) sendmsg$xdp(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x2c, 0x8, r5, 0x1c}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000100)="3f8cdfae97216db5ad51704be379108a095b536655daf7a19e90ad5791ce5dd0fc4ee3e8b04d1058849a1840f22846037c9562377cb602a954b94ed004253c51598a9d10fdac14e65074f50493d18c3b77b6b59be34fb0f204f85494725541b2fa224532f769", 0x66}, {&(0x7f0000000180)="13dc1a4ae78764ac7e21e9be2cfcc37957c530e562a0860804195b59f6f43705f79a772c949458019adaf942ad55376fe80e37a4c883a4ccbd8b6dff903652f86c9790c6680eb09964fb0fa3e91417b6152d8ea6677ac03334c34fa99f3112ce7b49cb65a2d260f0a941b63f4f4a925dd004472b01d0d5201b10087aaaf808078db5b59956452ea6f7a679932727105f7e5d2c7053ade79874999f9826075ea9ee1dd73f35628ef27553cc1f206798b8e5094c82a2", 0xb5}, {&(0x7f0000000240)="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", 0xfd}, {&(0x7f0000000340)="6eab396a92b61ed3c7f7daa9fbe698efe7489aab0096263db48683f8700b8b5e3689003d95aec6b1a8b5", 0x2a}], 0x4, 0x0, 0x0, 0x20000}, 0x40000) [ 1087.595444][T12116] RSP: 002b:00007f1e7f50fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1087.603830][T12116] RAX: ffffffffffffffda RBX: 00007f1e7f50fc90 RCX: 0000000000459879 [ 1087.611968][T12116] RDX: 0000000000000002 RSI: 0000000020000200 RDI: 0000000000000004 [ 1087.619921][T12116] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1087.627972][T12116] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1e7f5106d4 [ 1087.635916][T12116] R13: 00000000004c6b98 R14: 00000000004dbd88 R15: 0000000000000005 21:41:30 executing program 5: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") pipe(&(0x7f0000000300)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r3, 0x0, 0x30005, 0x0) ioctl$VIDIOC_G_EDID(r2, 0xc0285628, &(0x7f0000000100)={0x0, 0x54, 0x101, [], &(0x7f0000000040)=0x7ff}) ppoll(&(0x7f0000000000)=[{r0}, {r1, 0x100}], 0x2, 0x0, 0x0, 0x0) 21:41:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="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") clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace(0x11, r1) 21:41:30 executing program 3 (fault-call:6 fault-nth:44): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x0) 21:41:30 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffbdfff) 21:41:30 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f00000001c0)) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000200)={[], 0x1}) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000280)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f00000001c0)) ioctl$KVM_SET_PIT2(r5, 0x4070aea0, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x1}) ioctl$KVM_SET_PIT2(r5, 0x4070aea0, &(0x7f0000000280)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x8, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}]}) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000180)={0x0, 0x9, 0x1f, 0x400, 0x6318, 0x3, 0x8}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) pipe2$9p(&(0x7f0000000080), 0x6bc27fa7290e50e0) r8 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r8, 0x40045532, &(0x7f00000001c0)) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000100)={0x0, 0xfffffc1a, 0xfa00, {0x0, 0x0}}, 0x1c3) r10 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x8000000000000, 0x405) write$RDMA_USER_CM_CMD_REJECT(r10, 0x0, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r14 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r15, 0x4040ae77, &(0x7f00000001c0)) ioctl$KVM_SET_PIT2(r15, 0x4070aea0, &(0x7f0000000200)={[], 0x1}) ioctl$KVM_SET_PIT2(r15, 0x4070aea0, &(0x7f0000000280)) r16 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x400000, 0x0) r17 = ioctl$KVM_CREATE_VM(r16, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r17, 0x4040ae77, &(0x7f00000001c0)) ioctl$KVM_SET_PIT2(r17, 0x4070aea0, &(0x7f0000000200)={[], 0x1}) ioctl$KVM_SET_PIT2(r17, 0x4070aea0, &(0x7f0000000280)) r18 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r19 = ioctl$KVM_CREATE_VM(r18, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r19, 0x4040ae77, &(0x7f00000001c0)) ioctl$KVM_SET_PIT2(r19, 0x4070aea0, &(0x7f0000000200)={[], 0x1}) ioctl$KVM_SET_PIT2(r19, 0x4070aea0, &(0x7f0000000280)) write$binfmt_misc(r3, &(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRES64=r5, @ANYPTR64=&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYRES32, @ANYRES64=r7, @ANYPTR=&(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], @ANYRESOCT, @ANYPTR=&(0x7f0000001740)=ANY=[@ANYRESHEX=r12, @ANYBLOB="92e4cd191e508cde7aa23c9defba0f8fe88715fc5483d5b0b3e3f0a3109b5bce7e53885219ebc70d6d75c83d502c1300b17cdefc4ceaa1ee2fe25b2c3d2b78ad51004ff66fe7618bb6c72552742eca5595ef800ab71cfd03af3fb8fa539e13ee51eda35d1e1f7b2c764a48bd4401c0163629bbeb5cc2eff9f61fd4ff5059f7438a9bcd8588b1acabed662f055bb082d453e5c1a346bbee9995759145eb2dc63b64c4467600", @ANYRESOCT=r11, @ANYRES16=r15, @ANYRES16, @ANYBLOB="a4a551da997eb96cbed1b1fbe81a4e3729a6a7ca694dedb77b5d1b8a65bfa4caea997fbcd493b9f9d191e1d77d3750c5690de87243dd1e9a090314ba3fa7f6ef8a8045892505019d6f80634ae6a7df74a689f6830f522b34b0f59a82f57d8ebb934623a04493f512bf2077ae2ff240d22bd82dac7a3b0822c1d67875237894e98572c373e767405fbacff3d9b5d8fbe31a759e3877736621e997a5bcaacc5c0b05f31e9f4bb054184719525e630feec9a32922b87bcf1fa87e4209", @ANYBLOB="fbf6f36cbe55fd86085966e050c0eb3a0bcad85e31dfc568ef5363c2b8a43d2cdab9ae74614c0684c2a6fe475a4ebe8b7be85bd818781fecbde79f77e7d42aafcaef306fece180502839cfaad108e12a0b3ada6aa93a87e150821e04e5c7615e18c0658e8fdbc959ff546d50a0bef81d14c210f6314f7810c55bc28ceec4279e4fe5fa152eb36580db70b3f8ff473a5208edc71ad26ec88d315571ef5b727fc45c2419cd18274aee82dca3cad8d4d09fb0af5d3af171e0833b0c2372a5833406aaa0a9db19"], @ANYRES16=r13, @ANYRESDEC=r17, @ANYRESOCT, @ANYBLOB="702d18ff5d91b864f4882c36840b9fa557521db615bb924d705450a795a03a2057a049f1fd98f482fd65122261196fe677c72db51194be99f4c13c5fc0c9730bb45b5098198803393ba69c16a087ea8dc113fbeba3eef53aa18e4fb19f609c5ab36eb0502add7c61515cab14fe0fae1403fd5fde0865fd9832affd050d9f7dd7148291e195ced8256788c80020879a1219dacd978e30b698ad085f4f1e037d40e12877f54e98361f554fa6fcdf857bf4dbeb7fea49c015e0", @ANYRESOCT=r19]]], 0x18) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x81) [ 1088.124913][T12144] FAULT_INJECTION: forcing a failure. [ 1088.124913][T12144] name failslab, interval 1, probability 0, space 0, times 0 [ 1088.172915][T12144] CPU: 1 PID: 12144 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1088.182031][T12144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1088.192080][T12144] Call Trace: [ 1088.196502][T12144] dump_stack+0x172/0x1f0 [ 1088.200841][T12144] should_fail.cold+0xa/0x15 [ 1088.205442][T12144] ? fault_create_debugfs_attr+0x180/0x180 [ 1088.211278][T12144] ? ___might_sleep+0x163/0x280 [ 1088.216226][T12144] __should_failslab+0x121/0x190 [ 1088.221166][T12144] should_failslab+0x9/0x14 [ 1088.225671][T12144] kmem_cache_alloc_node_trace+0x274/0x750 [ 1088.231485][T12144] ? find_next_iomem_res+0x3b0/0x3b0 [ 1088.236773][T12144] ? __this_cpu_preempt_check+0x3a/0x210 [ 1088.242412][T12144] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1088.248662][T12144] __get_vm_area_node+0x12b/0x370 [ 1088.253688][T12144] ? pat_init+0x4d0/0x4d0 [ 1088.258042][T12144] ? memremap+0x3c3/0x520 [ 1088.262411][T12144] get_vm_area_caller+0x47/0x60 [ 1088.267261][T12144] ? memremap+0x3c3/0x520 [ 1088.271591][T12144] __ioremap_caller.constprop.0+0x362/0x710 [ 1088.277483][T12144] ? memremap+0x3c3/0x520 [ 1088.281812][T12144] ? iounmap+0x1b0/0x1b0 [ 1088.286058][T12144] ? __kasan_check_write+0x14/0x20 [ 1088.291176][T12144] ? _raw_read_unlock+0x2d/0x50 [ 1088.296032][T12144] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1088.302274][T12144] ? region_intersects+0x263/0x2f0 [ 1088.307392][T12144] ioremap_cache+0x24/0x30 [ 1088.311814][T12144] memremap+0x3c3/0x520 [ 1088.315977][T12144] ? devm_memremap_match+0x40/0x40 [ 1088.321094][T12144] ? _raw_read_unlock+0x2d/0x50 [ 1088.325948][T12144] ? iomem_is_exclusive+0x33/0x1af [ 1088.331070][T12144] xlate_dev_mem_ptr+0x28/0x50 [ 1088.335841][T12144] read_mem+0xdc/0x2c0 [ 1088.339918][T12144] do_iter_read+0x4a4/0x660 [ 1088.344417][T12144] ? dup_iter+0x260/0x260 [ 1088.348747][T12144] vfs_readv+0xf0/0x160 [ 1088.352899][T12144] ? compat_rw_copy_check_uvector+0x4c0/0x4c0 [ 1088.358955][T12144] ? __kasan_check_read+0x11/0x20 [ 1088.363986][T12144] ? ksys_dup3+0x3e0/0x3e0 [ 1088.368408][T12144] ? wait_for_completion+0x440/0x440 [ 1088.373693][T12144] ? __fget_light+0x1a9/0x230 [ 1088.378364][T12144] do_preadv+0x1c4/0x280 [ 1088.382599][T12144] ? do_readv+0x330/0x330 [ 1088.386931][T12144] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 1088.392393][T12144] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 1088.397862][T12144] ? do_syscall_64+0x26/0x760 [ 1088.402536][T12144] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1088.408597][T12144] ? do_syscall_64+0x26/0x760 [ 1088.413274][T12144] __x64_sys_preadv+0x9a/0xf0 [ 1088.417944][T12144] do_syscall_64+0xfa/0x760 [ 1088.422442][T12144] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1088.428322][T12144] RIP: 0033:0x459879 [ 1088.432212][T12144] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1088.451813][T12144] RSP: 002b:00007f1e7f50fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1088.460223][T12144] RAX: ffffffffffffffda RBX: 00007f1e7f50fc90 RCX: 0000000000459879 [ 1088.468185][T12144] RDX: 0000000000000002 RSI: 0000000020000200 RDI: 0000000000000004 [ 1088.476143][T12144] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1088.484124][T12144] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1e7f5106d4 [ 1088.492084][T12144] R13: 00000000004c6b98 R14: 00000000004dbd88 R15: 0000000000000005 21:41:31 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffbe000) 21:41:31 executing program 3 (fault-call:6 fault-nth:45): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x0) 21:41:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r2, 0x1000) ptrace(0x10, r1) ptrace(0x11, r1) [ 1088.791817][T12160] FAULT_INJECTION: forcing a failure. [ 1088.791817][T12160] name failslab, interval 1, probability 0, space 0, times 0 [ 1088.862276][T12160] CPU: 1 PID: 12160 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1088.871407][T12160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1088.871414][T12160] Call Trace: [ 1088.871439][T12160] dump_stack+0x172/0x1f0 [ 1088.871462][T12160] should_fail.cold+0xa/0x15 [ 1088.871486][T12160] ? fault_create_debugfs_attr+0x180/0x180 [ 1088.899464][T12160] ? ___might_sleep+0x163/0x280 [ 1088.904322][T12160] __should_failslab+0x121/0x190 21:41:31 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffbefff) [ 1088.909361][T12160] should_failslab+0x9/0x14 [ 1088.913867][T12160] kmem_cache_alloc_node+0x268/0x740 [ 1088.919145][T12160] ? ___might_sleep+0x163/0x280 [ 1088.919173][T12160] alloc_vmap_area+0x140/0x2080 [ 1088.919187][T12160] ? __get_vm_area_node+0x12b/0x370 [ 1088.919205][T12160] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1088.939574][T12160] ? purge_vmap_area_lazy+0x40/0x40 [ 1088.944794][T12160] ? find_next_iomem_res+0x3b0/0x3b0 [ 1088.950069][T12160] ? __kasan_slab_free+0x102/0x150 [ 1088.955171][T12160] ? kasan_slab_free+0xe/0x10 21:41:31 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r1, 0x0, 0x30005, 0x0) ioctl$RTC_PIE_OFF(r0, 0x7006) io_uring_setup(0xa4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000340)={0x0, 0xfb, 0x1015, 0x2, 0x8, "76ea2694f612f7dc2204795820c90297", "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"}, 0x1015, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x1) ppoll(&(0x7f0000000000), 0x2, 0x0, 0x0, 0xfffffdf6) [ 1088.959846][T12160] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1088.966096][T12160] __get_vm_area_node+0x179/0x370 [ 1088.971120][T12160] ? memremap+0x3c3/0x520 [ 1088.975462][T12160] get_vm_area_caller+0x47/0x60 [ 1088.980312][T12160] ? memremap+0x3c3/0x520 [ 1088.984640][T12160] __ioremap_caller.constprop.0+0x362/0x710 [ 1088.990538][T12160] ? memremap+0x3c3/0x520 [ 1088.994871][T12160] ? iounmap+0x1b0/0x1b0 [ 1088.999186][T12160] ? __kasan_check_write+0x14/0x20 [ 1089.004298][T12160] ? _raw_read_unlock+0x2d/0x50 [ 1089.009232][T12160] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1089.015469][T12160] ? region_intersects+0x263/0x2f0 [ 1089.020582][T12160] ioremap_cache+0x24/0x30 [ 1089.025009][T12160] memremap+0x3c3/0x520 [ 1089.029169][T12160] ? devm_memremap_match+0x40/0x40 [ 1089.034285][T12160] ? _raw_read_unlock+0x2d/0x50 [ 1089.039153][T12160] ? iomem_is_exclusive+0x33/0x1af [ 1089.044266][T12160] xlate_dev_mem_ptr+0x28/0x50 [ 1089.049032][T12160] read_mem+0xdc/0x2c0 [ 1089.053104][T12160] do_iter_read+0x4a4/0x660 [ 1089.057609][T12160] ? dup_iter+0x260/0x260 [ 1089.061947][T12160] vfs_readv+0xf0/0x160 [ 1089.066108][T12160] ? compat_rw_copy_check_uvector+0x4c0/0x4c0 [ 1089.072176][T12160] ? __kasan_check_read+0x11/0x20 [ 1089.077210][T12160] ? ksys_dup3+0x3e0/0x3e0 [ 1089.081625][T12160] ? wait_for_completion+0x440/0x440 [ 1089.086912][T12160] ? __fget_light+0x1a9/0x230 [ 1089.091590][T12160] do_preadv+0x1c4/0x280 [ 1089.095828][T12160] ? do_readv+0x330/0x330 [ 1089.100156][T12160] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 1089.105615][T12160] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 1089.111069][T12160] ? do_syscall_64+0x26/0x760 [ 1089.115743][T12160] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1089.121810][T12160] ? do_syscall_64+0x26/0x760 [ 1089.126489][T12160] __x64_sys_preadv+0x9a/0xf0 [ 1089.131172][T12160] do_syscall_64+0xfa/0x760 [ 1089.135685][T12160] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1089.141572][T12160] RIP: 0033:0x459879 [ 1089.145472][T12160] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1089.165069][T12160] RSP: 002b:00007f1e7f50fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1089.173495][T12160] RAX: ffffffffffffffda RBX: 00007f1e7f50fc90 RCX: 0000000000459879 [ 1089.181468][T12160] RDX: 0000000000000002 RSI: 0000000020000200 RDI: 0000000000000004 [ 1089.189437][T12160] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1089.197407][T12160] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1e7f5106d4 [ 1089.205377][T12160] R13: 00000000004c6b98 R14: 00000000004dbd88 R15: 0000000000000005 21:41:32 executing program 3 (fault-call:6 fault-nth:46): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x0) 21:41:32 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffbf000) 21:41:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000001c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000200)={[], 0x1}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000280)) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r1) r2 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) 21:41:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace(0x11, r1) mknod(&(0x7f0000000140)='./file0\x00', 0x265a2359fc61c52, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x180, 0x0) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000100)) [ 1089.513777][T12181] FAULT_INJECTION: forcing a failure. [ 1089.513777][T12181] name failslab, interval 1, probability 0, space 0, times 0 [ 1089.601505][T12181] CPU: 1 PID: 12181 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1089.610645][T12181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1089.610652][T12181] Call Trace: [ 1089.610673][T12181] dump_stack+0x172/0x1f0 [ 1089.610695][T12181] should_fail.cold+0xa/0x15 [ 1089.632920][T12181] ? fault_create_debugfs_attr+0x180/0x180 [ 1089.638737][T12181] ? ___might_sleep+0x163/0x280 [ 1089.643593][T12181] __should_failslab+0x121/0x190 [ 1089.648527][T12181] should_failslab+0x9/0x14 [ 1089.653116][T12181] kmem_cache_alloc_node_trace+0x274/0x750 [ 1089.658919][T12181] ? find_next_iomem_res+0x3b0/0x3b0 [ 1089.664197][T12181] ? __kasan_slab_free+0x102/0x150 [ 1089.669318][T12181] ? kasan_slab_free+0xe/0x10 [ 1089.673999][T12181] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1089.680242][T12181] __get_vm_area_node+0x12b/0x370 [ 1089.685261][T12181] ? pat_init+0x4d0/0x4d0 [ 1089.689589][T12181] ? memremap+0x3c3/0x520 [ 1089.693939][T12181] get_vm_area_caller+0x47/0x60 [ 1089.698788][T12181] ? memremap+0x3c3/0x520 [ 1089.703121][T12181] __ioremap_caller.constprop.0+0x362/0x710 [ 1089.709015][T12181] ? memremap+0x3c3/0x520 [ 1089.713347][T12181] ? iounmap+0x1b0/0x1b0 [ 1089.717589][T12181] ? __kasan_check_write+0x14/0x20 [ 1089.722703][T12181] ? _raw_read_unlock+0x2d/0x50 [ 1089.727560][T12181] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1089.733796][T12181] ? region_intersects+0x263/0x2f0 [ 1089.738910][T12181] ioremap_cache+0x24/0x30 [ 1089.743325][T12181] memremap+0x3c3/0x520 [ 1089.747482][T12181] ? devm_memremap_match+0x40/0x40 [ 1089.752600][T12181] ? _raw_read_unlock+0x2d/0x50 [ 1089.757453][T12181] ? iomem_is_exclusive+0x33/0x1af [ 1089.762653][T12181] xlate_dev_mem_ptr+0x28/0x50 [ 1089.767446][T12181] read_mem+0xdc/0x2c0 [ 1089.771523][T12181] do_iter_read+0x4a4/0x660 [ 1089.776054][T12181] ? dup_iter+0x260/0x260 [ 1089.780395][T12181] vfs_readv+0xf0/0x160 [ 1089.784557][T12181] ? compat_rw_copy_check_uvector+0x4c0/0x4c0 [ 1089.790632][T12181] ? __kasan_check_read+0x11/0x20 [ 1089.795686][T12181] ? ksys_dup3+0x3e0/0x3e0 [ 1089.800102][T12181] ? wait_for_completion+0x440/0x440 [ 1089.805407][T12181] ? __fget_light+0x1a9/0x230 [ 1089.810088][T12181] do_preadv+0x1c4/0x280 [ 1089.814334][T12181] ? do_readv+0x330/0x330 [ 1089.818667][T12181] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 1089.824123][T12181] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 1089.829578][T12181] ? do_syscall_64+0x26/0x760 [ 1089.834274][T12181] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1089.840341][T12181] ? do_syscall_64+0x26/0x760 [ 1089.845023][T12181] __x64_sys_preadv+0x9a/0xf0 [ 1089.849793][T12181] do_syscall_64+0xfa/0x760 [ 1089.854302][T12181] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1089.860201][T12181] RIP: 0033:0x459879 [ 1089.864090][T12181] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1089.883684][T12181] RSP: 002b:00007f1e7f50fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1089.892179][T12181] RAX: ffffffffffffffda RBX: 00007f1e7f50fc90 RCX: 0000000000459879 [ 1089.900156][T12181] RDX: 0000000000000002 RSI: 0000000020000200 RDI: 0000000000000004 [ 1089.908124][T12181] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1089.916092][T12181] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1e7f5106d4 [ 1089.924059][T12181] R13: 00000000004c6b98 R14: 00000000004dbd88 R15: 0000000000000005 21:41:32 executing program 3 (fault-call:6 fault-nth:47): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x0) 21:41:32 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffbffff) [ 1090.266386][T12203] FAULT_INJECTION: forcing a failure. [ 1090.266386][T12203] name failslab, interval 1, probability 0, space 0, times 0 [ 1090.319268][T12203] CPU: 0 PID: 12203 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1090.328387][T12203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1090.328393][T12203] Call Trace: [ 1090.328417][T12203] dump_stack+0x172/0x1f0 [ 1090.328440][T12203] should_fail.cold+0xa/0x15 [ 1090.328460][T12203] ? fault_create_debugfs_attr+0x180/0x180 [ 1090.328500][T12203] ? ___might_sleep+0x163/0x280 [ 1090.328520][T12203] __should_failslab+0x121/0x190 [ 1090.328537][T12203] should_failslab+0x9/0x14 [ 1090.328550][T12203] kmem_cache_alloc_node+0x268/0x740 [ 1090.328563][T12203] ? ___might_sleep+0x163/0x280 [ 1090.328585][T12203] alloc_vmap_area+0x140/0x2080 [ 1090.370845][T12203] ? __get_vm_area_node+0x12b/0x370 [ 1090.390948][T12203] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1090.396523][T12203] ? purge_vmap_area_lazy+0x40/0x40 [ 1090.401722][T12203] ? find_next_iomem_res+0x3b0/0x3b0 [ 1090.407002][T12203] ? __kasan_slab_free+0x102/0x150 [ 1090.412124][T12203] ? kasan_slab_free+0xe/0x10 [ 1090.416796][T12203] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1090.423038][T12203] __get_vm_area_node+0x179/0x370 [ 1090.428064][T12203] ? memremap+0x3c3/0x520 [ 1090.432406][T12203] get_vm_area_caller+0x47/0x60 [ 1090.437252][T12203] ? memremap+0x3c3/0x520 [ 1090.441574][T12203] __ioremap_caller.constprop.0+0x362/0x710 [ 1090.447467][T12203] ? memremap+0x3c3/0x520 [ 1090.451798][T12203] ? iounmap+0x1b0/0x1b0 [ 1090.456036][T12203] ? __kasan_check_write+0x14/0x20 [ 1090.461154][T12203] ? _raw_read_unlock+0x2d/0x50 [ 1090.466021][T12203] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1090.472255][T12203] ? region_intersects+0x263/0x2f0 [ 1090.477361][T12203] ioremap_cache+0x24/0x30 [ 1090.481771][T12203] memremap+0x3c3/0x520 [ 1090.485919][T12203] ? devm_memremap_match+0x40/0x40 [ 1090.491026][T12203] ? _raw_read_unlock+0x2d/0x50 [ 1090.495875][T12203] ? iomem_is_exclusive+0x33/0x1af [ 1090.500984][T12203] xlate_dev_mem_ptr+0x28/0x50 [ 1090.505754][T12203] read_mem+0xdc/0x2c0 [ 1090.509821][T12203] do_iter_read+0x4a4/0x660 [ 1090.514314][T12203] ? dup_iter+0x260/0x260 [ 1090.518649][T12203] vfs_readv+0xf0/0x160 [ 1090.522804][T12203] ? compat_rw_copy_check_uvector+0x4c0/0x4c0 [ 1090.528876][T12203] ? __kasan_check_read+0x11/0x20 [ 1090.533899][T12203] ? ksys_dup3+0x3e0/0x3e0 [ 1090.538316][T12203] ? wait_for_completion+0x440/0x440 [ 1090.543596][T12203] ? __fget_light+0x1a9/0x230 [ 1090.548264][T12203] do_preadv+0x1c4/0x280 [ 1090.552592][T12203] ? do_readv+0x330/0x330 [ 1090.556911][T12203] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 1090.562368][T12203] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 1090.567827][T12203] ? do_syscall_64+0x26/0x760 [ 1090.572503][T12203] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1090.578564][T12203] ? do_syscall_64+0x26/0x760 [ 1090.583325][T12203] __x64_sys_preadv+0x9a/0xf0 [ 1090.588003][T12203] do_syscall_64+0xfa/0x760 [ 1090.592503][T12203] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1090.598405][T12203] RIP: 0033:0x459879 21:41:33 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffc0000) [ 1090.602290][T12203] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1090.621880][T12203] RSP: 002b:00007f1e7f50fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1090.630286][T12203] RAX: ffffffffffffffda RBX: 00007f1e7f50fc90 RCX: 0000000000459879 [ 1090.638250][T12203] RDX: 0000000000000002 RSI: 0000000020000200 RDI: 0000000000000004 [ 1090.646209][T12203] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1090.654172][T12203] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1e7f5106d4 [ 1090.662135][T12203] R13: 00000000004c6b98 R14: 00000000004dbd88 R15: 0000000000000005 21:41:33 executing program 5: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r2 = socket$vsock_stream(0x28, 0x1, 0x0) fsetxattr$security_ima(r2, &(0x7f0000000040)='security.ima\x00', &(0x7f0000000100)=@v2={0x0, 0x0, 0xd, 0xcc08, 0xc9, "b3249f1a4beeb2c7d7ea9b8c624b9a8a6721501afa9ae53e03875ebf91316ff0e102260dc3262462fbee3fe4d3f4e0bd8c3b31c1c3f92c05e0b419c15894ecae3b4f2b0fe37c738911cb6c049c82cdf02e66b1189227f9d7b6897a17b352911b90f37a560785dac75f7b7a0572778600cd9377dd7a62d9daa311ce19e2f104212b4d40139c65439492634280e4d5f0f0620ed86f262b4e2e3a5f51d010557a1cc6b2e8ad7aacd010b460bcd84bba8ac39c72fd03fa940f6f19366f1ec148918abf31510a523d5e0a06"}, 0xd3, 0x2) ppoll(&(0x7f0000000000)=[{r0}, {r1, 0x100}], 0x2, 0x0, 0x0, 0x0) 21:41:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)={0x0, 0x0, 0xffff}) ptrace(0x10, r1) ptrace(0x11, r1) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x400000, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x3f, 0x200) ioctl$VIDIOC_G_AUDOUT(r2, 0x80345631, &(0x7f0000000140)) 21:41:33 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000001c0)) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000200)={[], 0x1}) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000280)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r5) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000280)={r7}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000040)={r7, 0x4}, 0x8) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 21:41:33 executing program 5: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0}, {r1, 0x100}], 0x2, 0x0, 0x0, 0x0) 21:41:33 executing program 3 (fault-call:6 fault-nth:48): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x0) 21:41:33 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffc0fff) 21:41:33 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = syz_open_dev$usb(&(0x7f0000000240)='/dev/bus/usb/00#/00#\x00', 0x6, 0x88080) getdents(r1, &(0x7f0000000280)=""/233, 0xe9) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) r2 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000140)={{0x3, @bcast}, [@rose, @netrom, @remote, @null, @null, @rose, @netrom, @null]}, &(0x7f00000001c0)=0x48, 0x80000) setsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f0000000200)=0x8, 0x4) r3 = socket(0x10, 0x2, 0x4) accept4$nfc_llcp(r3, &(0x7f0000000040), &(0x7f0000000100)=0x60, 0x180000) 21:41:33 executing program 5: r0 = io_uring_setup(0x6d7, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x3, 0x2f2}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SET_DUMPABLE(0x4, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") getuid() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f00000001c0)) ioctl$KVM_SET_PIT2(r4, 0x4070aea0, &(0x7f0000000200)={[], 0x1}) ioctl$KVM_SET_PIT2(r4, 0x4070aea0, &(0x7f0000000280)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f00000001c0)) ioctl$KVM_SET_PIT2(r6, 0x4070aea0, &(0x7f0000000200)={[], 0x1}) ioctl$KVM_SET_PIT2(r6, 0x4070aea0, &(0x7f0000000280)) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x80, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r10 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r10, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r10, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r9, 0x0, r10, 0x0, 0x30005, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r9, 0x40045730, &(0x7f0000000180)=0x1000000000000000) r11 = socket$isdn_base(0x22, 0x3, 0x0) ppoll(&(0x7f00000000c0)=[{r1, 0x8000}, {r0, 0x2000}, {r4, 0xa5499bf60013e9a8}, {r2, 0x6000}, {r6}, {r7, 0x8}, {r8, 0x80}, {r11}], 0x8, 0x0, 0x0, 0x0) 21:41:33 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x0) 21:41:34 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffc1000) 21:41:34 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x30005, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 21:41:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) r2 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x0, @hyper}, &(0x7f0000000140)=0x80, 0x400) recvfrom$llc(r2, &(0x7f0000000180)=""/147, 0x93, 0x0, &(0x7f0000000240)={0x1a, 0x10e, 0x401, 0x2, 0x18e, 0x400000, @dev={[], 0x27}}, 0x10) ptrace(0x11, r1) 21:41:34 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffc1fff) 21:41:34 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0x2000014c}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x0) 21:41:34 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffc2000) 21:41:34 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0x7ffff000}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x0) 21:41:34 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffc2fff) 21:41:34 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x9ffff174}], 0x2, 0x0) 21:41:35 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffc3000) 21:41:35 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x8, 0x0) 21:41:35 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$SG_SET_DEBUG(r4, 0x227e, &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000080), &(0x7f0000000100)=0xb) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r5, 0x0, r6, 0x0, 0x30005, 0x0) write$UHID_CREATE(r5, &(0x7f0000000340)={0x0, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xff\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe1\x00', 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\xff\xf0\xb8V\xff\xcbY\xd3W\x00\x00\x00b\x00\xa3\x19G\x88\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x01\x00', 'syz1\x00', &(0x7f0000000180)=""/217, 0xd8, 0x2, 0x0, 0x1, 0x59e, 0x7}, 0x120) splice(r1, 0x0, r3, 0x0, 0x30005, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 21:41:35 executing program 5: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x10480, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@initdev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@dev}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) r8 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000180)=0xc) r11 = getgid() fchown(r8, r10, r11) fsetxattr$system_posix_acl(r2, &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="02000000010001000000000002000200", @ANYRES32=r3, @ANYBLOB="02000100", @ANYRES32=r4, @ANYBLOB="02000500", @ANYRES32=r6, @ANYBLOB="040004000000000008000100", @ANYRES32=r7, @ANYBLOB="080006001b8410000013be7bae939d3dec5952e4f6985dde2e08a7b3254e7742d7de5ca98086e520177aae0aa00d0a2595056697341dadcde285", @ANYRES32=r11, @ANYBLOB="10000200000000002000010000000000"], 0x4c, 0x0) ppoll(&(0x7f0000000000)=[{r0}, {r1, 0x100}], 0x2, 0x0, 0x0, 0x0) 21:41:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) ioctl$TUNSETOWNER(r1, 0x400454cc, r4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x40, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)=0x113) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = getpid() rt_tgsigqueueinfo(r5, r5, 0x16, &(0x7f0000000000)) ptrace(0x8, r5) ptrace(0x11, r5) 21:41:35 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffc3fff) 21:41:35 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x2) 21:41:35 executing program 5: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ppoll(&(0x7f0000000000)=[{r0, 0x40}, {r1, 0x100}], 0x2, 0x0, 0x0, 0x0) 21:41:35 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffc4000) 21:41:35 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x3) 21:41:35 executing program 5: io_uring_setup(0xa4, &(0x7f0000000080)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) write$binfmt_misc(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="a8fecf996561ef2bedfa1c4f9cc888934275b8583c831e36031136f15dd9b5bf222e7d0dcb2f7f8bfcaac9c975abb0c7efb0959fccac9c5f776caa4547f7d959a388e05a6486cfe09babb4e5c77323706c06a47fa04aa31ae593550f51cd2dbeb174cbc47985edde15a53bb97679807bca52f18eea12772bfb893d7d08165f36abcaec0375568346e732c118584ee17ec2120b8908a4683116e33c045f", @ANYRES64, @ANYRESDEC, @ANYBLOB="04a83ff365ea206a7128ed68ad987fb46b04d9e08d3830f8dc80e22de3a05668148956b2bb3a48a2eceedbeaaef9724ab83dfba81073a5745de6aae3cfb13db2365681f4b2265f76a1fe94bc33e299eed0d203f3a90fbb7a63b73452e741131c9725dff5269f3ae38879a0724c1840b40810dccf4ccb6e65820875cebb7bcddd807411d659a42e7793eed3755c0969060dba768db49b8fefa4077620a049fc3f4722eae82ee16e0a36cae11a5e3357549f34118168cd80ff2b765f75e3ef16c7fd9fa0b875c93023fa2c19b9b0f7e3fd289f7982313936ee9f4d3db79afe965708ddf8", @ANYRESHEX], 0x1ae) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000100)) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000180)=0xc) r6 = getgid() fchown(r3, r5, r6) ioctl$TUNSETGROUP(r1, 0x400454ce, r6) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r7}, {0xffffffffffffffff, 0x100}], 0x1, 0x0, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000500)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_OVERLAY(r9, 0x4004560e, &(0x7f0000000540)=0x4) fcntl$setpipe(r8, 0x407, 0x0) write$binfmt_misc(r8, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r10 = getpgrp(0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r8, 0xc1105518, &(0x7f00000001c0)={{0x8, 0x5, 0x6, 0x3, 'syz0\x00', 0x20}, 0x2, 0x400, 0xe2, r10, 0x0, 0x80, 'syz1\x00', &(0x7f0000000180), 0x0, [], [0x200, 0xfffffffffffffffe, 0x0, 0xff]}) 21:41:35 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x4) 21:41:36 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffc4fff) 21:41:36 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x10) 21:41:36 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x400000, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x932}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 21:41:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)={0x0, 0x0, 0x6}) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r3 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x2000) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r4, 0x0, r5, 0x0, 0x30005, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0206434, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x2, 0x7fff}) ioctl$DRM_IOCTL_SG_FREE(r3, 0x40106439, &(0x7f00000001c0)={0x7, r6}) listen(r2, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000006c0)='veno\x00', 0x5) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r7, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) write(r7, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r7, &(0x7f0000001840)=""/31, 0x1f, 0x100, &(0x7f0000001880)={0xa, 0x4e21, 0x5, @remote}, 0x1c) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000000)={'lo\x00'}) r9 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet6(r9, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r10, 0x84, 0x13, &(0x7f0000000080), 0x4) ptrace(0x1f, r1) 21:41:36 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x88) 21:41:36 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffc5000) 21:41:36 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000540)={0x200000, 0x1, 0x6, 'queue1\x00', 0x3}) fcntl$setpipe(r4, 0x407, 0x0) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x4240a2a0) recvmsg$kcm(r4, &(0x7f0000000240)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000100)=""/157, 0x9d}, {&(0x7f00000001c0)=""/60, 0x3c}], 0x2, &(0x7f0000000340)=""/239, 0xef}, 0xcd8ecc088931da07) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$VIDIOC_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000000480)={0x0, @bt={0x400, 0xfffffffffffffffe, 0x0, 0x0, 0x101, 0x0, 0x5, 0x5, 0x400, 0x53a, 0x5, 0x456, 0x7fffffff, 0x7, 0xe, 0x3e}}) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x30005, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000280)={0x10000, 0x0, 0x10000, 0x100000001}) ioctl$DRM_IOCTL_SG_ALLOC(r4, 0xc0106438, &(0x7f0000000440)={0x7, r6}) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000000)={0x0, @loopback, @remote}, &(0x7f0000000040)=0xc) 21:41:36 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x30005, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000040)=0x7f) [ 1093.714018][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 21:41:36 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xc0) 21:41:36 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffc5fff) 21:41:36 executing program 5: r0 = io_uring_setup(0xa4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x102, 0x14f}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x80, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='/dev/net/tun\x00', &(0x7f0000000180)='\x00', 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0xc1103, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ppoll(&(0x7f0000000000)=[{r0}, {r2, 0x100}], 0x2, 0x0, 0x0, 0x0) 21:41:36 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x300) 21:41:36 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffc6000) 21:41:37 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xb00) 21:41:37 executing program 5: io_uring_setup(0x7ffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x7, 0x2000000001, 0x3d2}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x10000, &(0x7f0000000000)="11dca5055e0bcfe47bf070") pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000480)={'veth1_to_team\x00'}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$inet(r2, 0x0, 0x20000000) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r3, 0x0, r4, 0x0, 0x30005, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000600)={{{@in=@dev, @in=@empty}}, {{@in6=@mcast1}, 0x0, @in6=@mcast2}}, &(0x7f00000005c0)=0xb4) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) unshare(0x2040400) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_flags=0x8e00}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) write$P9_RSETATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ifreq(r5, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) fcntl$setpipe(r1, 0x407, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x40480, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r8, 0x4040ae77, &(0x7f00000001c0)) ioctl$KVM_SET_PIT2(r8, 0x4070aea0, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x8, 0x7, 0x0, 0x0, 0x1, 0x100000000000000, 0x4}], 0xfffffffffffffffe}) ioctl$KVM_SET_PIT2(r8, 0x4070aea0, &(0x7f0000000280)={[{0x4}, {0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}]}) write$binfmt_misc(r8, &(0x7f0000000440)=ANY=[], 0xfffffffffffffe4d) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000140)) r9 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x1c97990f7cd6e778, 0x0) ioctl$SG_GET_NUM_WAITING(r9, 0x227d, &(0x7f0000000040)) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r11, 0x4040ae77, &(0x7f00000001c0)) ioctl$KVM_SET_PIT2(r11, 0x4070aea0, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x800000000000}, {0x0, 0x8000, 0x0, 0x0, 0x0, 0x81}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000002}], 0x1}) ioctl$KVM_SET_PIT2(r11, 0x4070aea0, &(0x7f0000000280)) socket$pptp(0x18, 0x1, 0x2) r12 = socket$pppoe(0x18, 0x1, 0x0) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r14, 0x4040ae77, &(0x7f00000001c0)) ioctl$KVM_SET_PIT2(r14, 0x4070aea0, &(0x7f0000000200)={[], 0x1}) ioctl$KVM_SET_PIT2(r14, 0x4070aea0, &(0x7f0000000280)={[{0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffdfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}]}) r15 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/d\xea\x81\a\x00', 0x2, 0x0) ioctl$KVM_CREATE_VM(r15, 0xae01, 0x0) r16 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r17 = ioctl$KVM_CREATE_VM(r16, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r17, 0x4040ae77, &(0x7f00000001c0)) ioctl$KVM_SET_PIT2(r17, 0x4070aea0, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe}], 0x1}) ioctl$KVM_SET_PIT2(r17, 0x4070aea0, &(0x7f0000000280)={[{0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}]}) ppoll(&(0x7f0000000440)=[{r11, 0x8000}, {r17, 0x10c2}, {r12, 0x100}, {r14, 0x8002}, {r15, 0x9414}], 0x5, 0x0, 0x0, 0xff2c) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x8000, 0x0) 21:41:37 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffc6fff) 21:41:37 executing program 1: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f00000000c0)={0x10000, 0x0, [0xb3ed, 0x80, 0xfffffffffffffffc, 0x7ff, 0x56, 0x9, 0x84, 0x2]}) socket$inet_udplite(0x2, 0x2, 0x88) r2 = accept4$unix(r0, 0x0, &(0x7f0000000200), 0x40000) ioctl(r2, 0x3, &(0x7f0000000140)="a365f070b462d0842db7922007961f0dd14939da1f7f257c9e01578395468b9b5f8402928c50f9ea421365bc5388bc7102fdecb1e318e8f115887f6f4b5bbd542c7471465cddafc3d503e60bc86a51d046a93269d43f4138103d322b4ff0bed839a9ecacf8b579777f48403edcce902734196bacbceb48542af535af5f70420e33feceef1a5d73423f05a76def3b8813462fef6ae4f6e34b2ebd2bb15a9b77ad44ad962aa0cf") clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000000)) ptrace(0x10, r3) ptrace(0x11, r3) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f0000000080)={0x101, 0x0, 0x0, @discrete={0xfffffffffffffffe, 0x93f}}) [ 1094.449598][T12441] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved 21:41:37 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070") preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0xfed3}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/igmp\x00') preadv(r2, &(0x7f0000000480), 0x35e, 0x6c00020000000000) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r3, 0x0, r4, 0x0, 0x30005, 0x0) getsockname$netrom(r3, &(0x7f0000000080)={{0x3, @netrom}, [@bcast, @netrom, @remote, @remote, @remote, @rose, @bcast, @netrom]}, &(0x7f0000000100)=0x48) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, 0x0, 0x0) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x880c40, 0x0) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000040)) 21:41:37 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x4000, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000100)=ANY=[@ANYBLOB="04000000000000000000000042000000010000004000000002000000f80f000005000000000000000000000000000000b39d11215605000002000000030000000008000003000000070000000000000000000000600800000004000000760d0000fdffffffff070000050000000000000000000000000000000a000000080000000200000081000000c0010000ff0000000100e2903e0e5174b65700"/168]) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 21:41:37 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xc00) 21:41:37 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffc7000) 21:41:37 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xd00) 21:41:37 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10000000012, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000100000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000001280)='/dev/cachefiles\x00', 0x100000, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/406]) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) r2 = accept(0xffffffffffffffff, &(0x7f0000000040)=@nl=@unspec, &(0x7f0000000100)=0x80) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r3, 0x0, r4, 0x0, 0x30005, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r5, 0x0, r6, 0x0, 0x30005, 0x0) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000001640)={0xfff, 0x4, 0x4, 0x9d70249c482097af, {0x77359400}, {0x5, 0x2, 0x8, 0x7, 0x4, 0x7, "c1cfadc9"}, 0x4, 0x0, @planes=&(0x7f0000001440)={0xffff, 0x8, @fd=r5, 0x9}, 0x4}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r9, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) ioctl$BLKRESETZONE(r8, 0x40101283, &(0x7f0000001400)={0x1, 0x4}) splice(r7, 0x0, r9, 0x0, 0x30005, 0x0) statx(r7, &(0x7f00000012c0)='./file0\x00', 0x0, 0x1, &(0x7f0000001300)) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f00000011c0)={'filter\x00', 0x0, 0x3, 0x1000, [], 0x6, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}], &(0x7f00000001c0)=""/4096}, &(0x7f0000001240)=0x78) 21:41:37 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffc7fff) 21:41:37 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xe00) 21:41:37 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x1fff) [ 1095.189211][T12497] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved 21:41:38 executing program 5: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x30005, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000100)={0x5, 0x70, 0x800, 0x100000000, 0x7, 0x101, 0x0, 0x7, 0x8, 0x5, 0x9, 0xba, 0x4, 0x0, 0x0, 0x1, 0x8, 0x401, 0x4f, 0x2622, 0x8, 0x2, 0x7fffffff, 0xc349, 0xffffffffffffff15, 0x3, 0x5, 0x364, 0x1, 0xfff, 0x3ff, 0xb688, 0x3ff, 0x0, 0x81, 0x4, 0x6, 0x7f, 0x0, 0x4, 0x2, @perf_config_ext={0xffff, 0x81}, 0x20000, 0x89, 0xffffffffffff0000, 0x7, 0x8, 0x82b, 0xfff}, r1, 0xd, 0xffffffffffffffff, 0x1) fchdir(r3) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ppoll(&(0x7f0000000000)=[{r0}, {r4, 0x100}], 0x2, 0x0, 0x0, 0x0) 21:41:38 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffc8000) 21:41:38 executing program 1: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x15, &(0x7f0000000000)) ptrace(0x10, r0) ptrace(0x11, r0) r1 = getpgid(0xffffffffffffffff) r2 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x2, 0x800) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000280)={r5}, &(0x7f00000002c0)=0x10) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f0000000180), 0x1) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000100)={r5, 0x1ff}, &(0x7f0000000140)=0x8) ptrace$getenv(0x4201, r1, 0x81, &(0x7f0000000080)) ptrace$pokeuser(0x6, r1, 0x1, 0x8000) 21:41:38 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x2fff) 21:41:38 executing program 2: syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, 0x0, 0x0) 21:41:38 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffc8fff) 21:41:38 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) prctl$PR_GET_FP_MODE(0x2e) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) syz_open_pts(r1, 0x1) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000080)={0xe0, &(0x7f0000000000)=[{}, {}]}) 21:41:38 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x3fff) 21:41:38 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x800, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000100)={0x0, {{0xa, 0x4e20, 0x7, @remote, 0x5}}, 0x1, 0x2, [{{0xa, 0x4e21, 0x100000000, @ipv4={[], [], @multicast2}, 0x4}}, {{0xa, 0x4e20, 0x4800000000000000, @empty, 0x7fffffff}}]}, 0x190) r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) 21:41:38 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffc9000) 21:41:38 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x4000) 21:41:38 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x4fff) 21:41:39 executing program 5: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) move_mount(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', r2, &(0x7f0000000100)='./file0\x00', 0x60) ppoll(&(0x7f0000000000)=[{r0}, {r1, 0x100}], 0x2, 0x0, 0x0, 0x0) 21:41:39 executing program 1: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = fcntl$getown(r0, 0x9) r2 = getpgid(0xffffffffffffffff) ptrace$getenv(0x4201, r2, 0x81, &(0x7f0000000080)) setpgid(r1, r2) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000000)) ptrace(0x10, r3) r4 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x100000001, 0x450000) ioctl$VIDIOC_G_FBUF(r4, 0x8030560a, &(0x7f0000001100)={0x1, 0x2585ac7986319cae, &(0x7f0000000100)="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", {0xda, 0xab0, 0x31364d59, 0x1, 0xadaa, 0x8, 0x0, 0x9}}) ptrace(0x11, r3) 21:41:39 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = open(&(0x7f0000000040)='./file0\x00', 0x20c000, 0x82) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x4) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 21:41:39 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffc9fff) 21:41:39 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x5fff) 21:41:39 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff, 0x2, 0x1, 0xc7e2b40b04162e36, 0x800}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 21:41:39 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x800, 0x0) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, 0x0, 0x0) 21:41:39 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x6fff) 21:41:39 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffca000) 21:41:39 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x8fff) 21:41:39 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001440)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000001500)={{0x6, 0x1, 0x5, 0x5, '\x00', 0x20000000000000}, 0x5, 0x20000000, 0x933, r3, 0x3, 0xc000000000000000, 'syz1\x00', &(0x7f0000001480)=['em1+procmime_type\x00', '/proc/capi/capi20ncci\x00', ')mime_type,cpusetposix_acl_access#nodev\x00'], 0x50, [], [0x401, 0x6, 0x3, 0x6]}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) bind$rose(r2, &(0x7f0000000340)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}, 0x1c) getdents(r1, &(0x7f0000000440)=""/4096, 0x1000) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000380)='/proc/capi/capi20ncci\x00', 0x585200, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1d}}, {0x306, @local}, 0xa, {0x2, 0x4e22, @broadcast}, 'tunl0\x00'}) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r4, 0x0, r6, 0x0, 0x30005, 0x0) write$FUSE_GETXATTR(r4, &(0x7f00000001c0)={0x18, 0x0, 0x7}, 0x18) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40180}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="d1e787c4", @ANYRES16=r7, @ANYBLOB="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"], 0x108}, 0x1, 0x0, 0x0, 0x4090}, 0x4000) 21:41:39 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x9fff) 21:41:39 executing program 5: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x6, 0x105200) ppoll(&(0x7f0000000000)=[{r0}, {r1, 0x100}], 0x2, 0x0, 0x0, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x8, 0x208000) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x600000, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) 21:41:39 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffcafff) 21:41:39 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xafff) 21:41:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x81800) ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0x7f) ptrace(0x10, r1) ptrace(0x11, r1) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r4 = getpgid(0xffffffffffffffff) ptrace$getenv(0x4201, r4, 0x81, &(0x7f0000000080)) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000100)={[], 0xffffffff9f6daf9e, 0x100000001, 0x5, 0x3, 0x6e, r4}) 21:41:40 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) r1 = open(&(0x7f0000000080)='./file0\x00', 0x2, 0x188) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r3, 0x0, 0x30005, 0x0) ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f00000000c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 21:41:40 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffcb000) 21:41:40 executing program 5: r0 = syz_open_dev$dspn(&(0x7f00000003c0)='/dev/dsp#\x00', 0x4, 0x800) r1 = io_uring_setup(0xa4, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(r2, &(0x7f0000000380)={&(0x7f0000000100)=@isdn={0x22, 0x4, 0x2, 0x7fff, 0x828d}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000180)="dd91f3ac8beec28f4e657e738d56274484de9c9cb9e14722642e00736566933117598f811facb8c6a79858e7babd94e73c7377053425e9f8dab6d43fc5d51e6a4afb026b", 0x44}], 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/352], 0x160}, 0x12003) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r0, 0xc0385720, &(0x7f0000000400)={0x0, {}, 0x8, 0x6}) ppoll(&(0x7f0000000000)=[{r1}, {r2, 0x100}], 0x2, 0x0, 0x0, 0x0) 21:41:40 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xbfff) 21:41:40 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, 0x0, 0x0) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000000)=0x4000) 21:41:40 executing program 5: ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0xdcf) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f00000001c0)) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000200)={[], 0x1}) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000280)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f00000001c0)) ioctl$KVM_SET_PIT2(r5, 0x4070aea0, &(0x7f0000000200)={[], 0x1}) ioctl$KVM_SET_PIT2(r5, 0x4070aea0, &(0x7f0000000280)={[{}, {0x0, 0x2, 0x0, 0x0, 0x3, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x1}]}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r7 = accept4$netrom(r6, &(0x7f0000000100)={{0x3, @netrom}, [@remote, @netrom, @rose, @null, @bcast, @null, @rose, @null]}, &(0x7f0000000040)=0x48, 0x80000) ioctl(r7, 0x2001000088911, &(0x7f0000000180)="11dca5075e0bcfe459f170b37314f53aac4b1c20a7c7d0328b4a685aa6037c26b3e753a56fb5ce6b710b66af6be2cbc282b2e2ce4bc8aa8513a6315117a253ab6b8bc8b5f8ebd9f908ab8314791c9676472710d9c59fd6af2f928f3bfaa7ca61245fbde6196c15ad5a0c594772a9e28d559ed42c769862fa67d6ad2e59e91fc874901b8a18e23f32bd9bcfafb59be2503ca612c99ad85dca9f83f5416f2ccd276c8e48c11c5d1bc88dc8c2a1fc799c6f0af101d8") ppoll(&(0x7f0000000000)=[{r0}, {r1, 0x100}], 0x2, 0x0, 0x0, 0x0) 21:41:40 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffcbfff) 21:41:40 executing program 2: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x8000, 0x404800) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x100000000000003, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) r2 = syz_open_dev$cec(&(0x7f0000000200)='/dev/cec#\x00', 0x3, 0x2) ioctl$BLKFLSBUF(r2, 0x1261, &(0x7f0000000240)=0x200) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f00000000c0)={0x8, 0x120, 0xfa00, {0x4, {0x0, 0x1f, "847b210c9cea5b5f2c4e4fcec55366d668bfae6fa853fdd61b38abee6228eacec027dc83ff3b224c164113841ab93a2e08426aff8e8ac9afbc45ef4bfa527d286717896889a63cd43b9890116a17658038cee92a500d4defb9c8c07f2864af725296c501b76f42035fb5d046cf4891acd215ab1772d07b7dc083b66bcace6a94e671df3dc56da2a8c7a6be8e9c31a658f38577a3f116f83f7cf1503798e212fd089b47c17b7907aab4d680bcbf1ac14fb9ee6a53f122c167388331f239e64422c269ed0325d29c328aac1b723a71de399fb9b8547e1f549cb6288a89f1cb3f5fcf29883a0483c3a786de80c6094a67b2a0b800fe607e726779a47a9d76f4bfb2", 0x98, 0x8, 0x6, 0xffffffff, 0x1, 0x400}, r1}}, 0x128) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_N2(r3, 0x103, 0x3, 0x0, 0x0) 21:41:40 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xcfff) 21:41:40 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRES64=r1], 0x8) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x17}]}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'dummy0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x14, r4}) fallocate(r2, 0x0, 0x0, 0x4003fd) write$binfmt_elf64(r2, &(0x7f0000000680)=ANY=[@ANYRESDEC], 0x100be) fallocate(r2, 0x3, 0x8004, 0x7fff) fallocate(r2, 0x3, 0x5e89, 0xfff9) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0x4240a2a0) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, 0x0, 0x0) 21:41:40 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffcc000) 21:41:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) signalfd(r0, &(0x7f0000000100)={0x7}, 0x8) r1 = getpid() pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @empty}], 0x10) rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$EVIOCGABS2F(r4, 0x8018456f, &(0x7f0000000140)=""/253) ptrace(0x11, r1) 21:41:40 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x30005, 0x0) readlinkat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=""/4096, 0x1000) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000001100)={{0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x3, 'ovf\x00', 0x31, 0x2, 0x68}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x4e20, 0x0, 0x4043ba00, 0x80000000, 0x7}}, 0x44) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r4, 0x0, r5, 0x0, 0x30005, 0x0) ioctl$VT_OPENQRY(r4, 0x5600, &(0x7f0000000080)) 21:41:40 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xdfff) 21:41:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) select(0x40, &(0x7f00000000c0)={0xc3, 0x3, 0x6, 0x1, 0x1, 0x5, 0x80, 0x2}, &(0x7f0000000100)={0x2, 0x48041051, 0x89, 0x0, 0x4, 0x5, 0x7fffffff, 0xffffffff}, &(0x7f0000000140)={0x8, 0xdc42, 0x2, 0x95, 0x95, 0x140000000000, 0x3, 0x6}, &(0x7f00000001c0)={r1, r2/1000+30000}) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000000)) ptrace(0x10, r3) ptrace(0x11, r3) 21:41:40 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffccfff) 21:41:41 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xefff) 21:41:41 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffcd000) 21:41:41 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xff0f) 21:41:41 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xff1f) 21:41:41 executing program 2: syz_init_net_socket$netrom(0x6, 0x5, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) io_setup(0x101, &(0x7f0000000000)) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, 0x0, 0x0) 21:41:41 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffcdfff) 21:41:41 executing program 5: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x201) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x17}]}, 0x20}}, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f00000006c0)=@buf={0x8f, &(0x7f0000000600)="ccfccfa1e02d4e972f92381de693ea682f03a5b8b33096ba0759415a0178afe3b724fd25a8adc34ee44a3d887badc82513ea6bbef124d433ad91d25a42c956573c0752cf84a72f5845848b53400e2c3fcc9606776f227ad3dda323364c904ef4978e2f3401d9b79fc74284210f06e2336ef88f645b4e0d063b67934f85369ae9f864eb8998a65206b39be5410b500b"}) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r4 = accept(r2, &(0x7f00000004c0)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000000)=0x80) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000009c0)={{{@in6, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000ac0)=0xe8) r6 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x80400, 0x0) r7 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r7) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000280)={r9}, &(0x7f00000002c0)=0x10) getpeername(r7, &(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000440)=0x80) ioctl$SIOCX25GDTEFACILITIES(r10, 0x89ea, &(0x7f00000005c0)) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000000200)={r9, 0x6, 0x4, [0x2, 0x400, 0x0, 0x6]}, &(0x7f0000000240)=0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000b80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4008000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)=@gettfilter={0x34, 0x2e, 0x0, 0x70bd2a, 0x25dfdbfc, {0x0, r5, {0xffe0}, {0xf, 0xfff1}, {0x7, 0xb}}, [{0x8, 0xb, 0x3}, {0x8, 0xb, 0x14}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f0000000140)={0x9, 0x4, [0x0]}) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000100)={@rand_addr=0xffffffffffff0000, @rand_addr=0x6, r5}, 0xc) r11 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r11, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") setsockopt$inet6_group_source_req(r4, 0x29, 0x2c, &(0x7f00000002c0)={0x81, {{0xa, 0x4e23, 0x4, @mcast1, 0x3}}, {{0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, [], 0x14}}}}, 0x108) ppoll(&(0x7f0000000000)=[{r0}, {r11, 0x100}], 0x2, 0x0, 0x0, 0x0) msgget(0x2, 0x1) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r12, 0x407, 0x0) write$binfmt_misc(r12, &(0x7f0000000140)=ANY=[], 0x4240a2a0) write$char_usb(r12, &(0x7f0000000700)="7aa12aad32ddabe5ca76a47c411e4f507311e510c106257e85bcb6bcf4359ce44594f5af365e918e9391ecb134bb880b919640be98b136ff6eaef1ce162df5263f9784f86fea23f6cf98015cdca306058c28e18b740ba335723dcd11b4c1fdb00fbee0e8476fed963c1a89c323ce06da0aadd63c25f2b1f6fd95bb87d4bd61f48d40397d9745c5f22decebe6dc2368adb661e39da6fe52f9bffa55d16a9ffaea402f93", 0xa3) 21:41:41 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xff2f) 21:41:41 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x30005, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet(r6, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000040)={0x2, 0x20000, @multicast1}, 0x10) splice(r5, 0x0, r6, 0x0, 0x30005, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r3, 0x0, r4, 0x0, 0x30005, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2572f750dab13a4e, 0x40110, r3, 0x0) 21:41:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)={0x0, 0x8000}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f00000001c0)) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000200)={[], 0x1}) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000280)) vmsplice(r3, &(0x7f00000011c0)=[{&(0x7f00000000c0)="a50b77d85c62f23d49ae5167ac1aa2", 0xf}, {&(0x7f0000000100)="f370771e9f8764653e546c1aa423c03d0b49a65c66a21b7a0801d49c1a12776de76dd4d1cf4e693bbb33d47e70a078b93e1543f11d01d0bcb7955006720a1aac6e761f6ac47a6ba8cee93bffcfa718ce4dd2225f4f0fdec2183e6917a81b93e81c3eba87466b5494dc316894ac2200462ba50ffa05501ba68f438039b42f16387273ed98c2135bca79b910b449e4d456444880b496bfa3d9", 0x98}, {&(0x7f00000001c0)="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", 0x1000}], 0x3, 0x2) ptrace(0x10, r1) ptrace(0x11, r1) 21:41:41 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffce000) 21:41:42 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xff3f) 21:41:42 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffcefff) 21:41:42 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xff4f) 21:41:42 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffcf000) 21:41:42 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x5, 0x800) getsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) 21:41:42 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, 0x0, 0x0) openat$usbmon(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon0\x00', 0x40, 0x0) 21:41:42 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xff5f) 21:41:42 executing program 5: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ppoll(&(0x7f0000000000)=[{r0}, {r1, 0x100}], 0x2, 0x0, 0x0, 0xffffffffffffffd8) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f00000003c0)={0x4e5}) pipe(&(0x7f0000000300)={0xffffffffffffffff}) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/qat_adf_ctl\x00', 0x400, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r4, 0x0, r5, 0x0, 0x30005, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000400)={0x10000000000, {{0x2, 0x4e23, @empty}}}, 0x88) splice(r2, 0x0, r3, 0x0, 0x30005, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) getpeername$unix(r6, &(0x7f0000000240), &(0x7f0000000340)=0x6e) write$P9_RGETATTR(r2, &(0x7f0000000140)={0xa0, 0x19, 0x2, {0x62, {0x12dbef3656d9be7, 0x1}, 0x8, 0x0, 0x0, 0x8000, 0x6, 0xffffffffffffff00, 0x7fffffff, 0x2, 0x4b7f, 0x8001, 0x3, 0x1, 0x3, 0x3, 0xff, 0x6, 0x7, 0x81}}, 0xa0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000100)) 21:41:42 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffcffff) 21:41:42 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/udmabuf\x00', 0x2) mmap(&(0x7f0000ff0000/0xf000)=nil, 0xf000, 0x8, 0x10, r1, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 21:41:42 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, 0x0, 0x0) sigaltstack(&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000000)) 21:41:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") clone(0x20049fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x17, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace(0x11, r1) 21:41:42 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xff6f) 21:41:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") clone(0x422041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) gettid() r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x17}]}, 0x20}}, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000000c0)=0x0) r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) r5 = openat$usbmon(0xffffffffffffff9c, &(0x7f0000000240)='/dev/usbmon0\x00', 0x400181, 0x0) ioctl$MON_IOCQ_RING_SIZE(r5, 0x9205) accept4$ax25(r4, &(0x7f0000000180)={{0x3, @netrom}, [@default, @remote, @bcast, @default, @bcast, @netrom, @rose, @bcast]}, &(0x7f0000000200)=0x48, 0x80000) ptrace(0x10, r3) ptrace(0x11, r1) 21:41:43 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, r1) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000000)) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, 0x0, 0x0) 21:41:43 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffd0000) [ 1100.447196][T12826] IPVS: ftp: loaded support on port[0] = 21 21:41:43 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xff7f) 21:41:43 executing program 4: socket$l2tp(0x18, 0x1, 0x1) r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000040)={0x7303, 0x8, 0x8}) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x30005, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f0000000080), &(0x7f0000000100)=0x4) [ 1100.653489][T12830] IPVS: ftp: loaded support on port[0] = 21 21:41:43 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x7, 0x72a6406793e4e62e) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r3, 0x0, 0x30005, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r4, 0x0, r5, 0x0, 0x30005, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0x4240a2a0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x40) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x0) write$binfmt_misc(r7, &(0x7f0000000140)=ANY=[], 0x4240a2a0) accept(0xffffffffffffffff, &(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast1}}, &(0x7f0000000100)=0x80) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, 0x0, 0x0) 21:41:43 executing program 5: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") llistxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/92, 0x5c) ppoll(&(0x7f0000000000)=[{r0}, {r1, 0x100}], 0x2, 0x0, 0x0, 0x0) 21:41:43 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffd0fff) 21:41:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) pipe(&(0x7f0000000400)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r3, 0x0, 0x30005, 0x0) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r4) socket$inet6_sctp(0xa, 0x5, 0x84) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x10000, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f00000001c0)) ioctl$KVM_SET_PIT2(r6, 0x4070aea0, &(0x7f0000000200)={[], 0x1}) ioctl$KVM_SET_PIT2(r6, 0x4070aea0, &(0x7f0000000280)) ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, &(0x7f00000001c0)={0x3, 0x0, [{0x4000000000000000, 0x1, 0x0, 0x0, @irqchip={0xb679, 0xfffffffffffffff8}}, {0x40, 0x3, 0x0, 0x0, @irqchip={0x8, 0x40}}, {0xdc7, 0x2, 0x0, 0x0, @adapter={0x80000001, 0x7, 0x1000, 0x2, 0x2}}]}) r7 = socket$packet(0x11, 0x2, 0x300) fchdir(r7) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000280)={r9}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f00000000c0)={r9, 0x7, 0x10, 0x2f9, 0x7}, &(0x7f0000000100)=0x18) ptrace(0x10, r1) ptrace(0x11, r1) 21:41:43 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xff8f) 21:41:43 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xff9f) 21:41:43 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffd1000) 21:41:43 executing program 5: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ppoll(&(0x7f0000000000)=[{r0}, {r1, 0x100}], 0x2, 0x0, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x10880, 0x0) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f0000000100)='syz0\x00') 21:41:44 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xffaf) 21:41:44 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffd1fff) 21:41:44 executing program 5: io_uring_setup(0xa4, &(0x7f0000000080)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') r3 = syz_open_dev$sndpcmp(&(0x7f0000000300)='/dev/snd/pcmC#D#p\x00', 0x8, 0x20000) ioctl$KVM_GET_REGS(r3, 0x8090ae81, &(0x7f0000000340)) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x34, r2, 0x439, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'caif0\x00'}]}]}, 0x34}}, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f00000001c0)) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x40000, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r6, 0xc0bc5351, &(0x7f0000000100)={0xffffffff, 0x3, 'client0\x00', 0x7fffffffc0000003, "3f5c67fe89bc73a4", "c2a5b27621d955f10b8d537826865910e707792c87e2c29a6dd55250fc04b324", 0x5, 0x101}) ioctl$KVM_SET_PIT2(r5, 0x4070aea0, &(0x7f0000000200)={[], 0x1}) ioctl$KVM_SET_PIT2(r5, 0x4070aea0, &(0x7f0000000280)) ppoll(&(0x7f0000000000)=[{r5}, {r0, 0x100}], 0x2000000000000278, 0x0, 0x0, 0x0) 21:41:44 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x17}]}, 0x20}}, 0x0) connect$l2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x0, 0x4, 0x2, 0x4, {0xa, 0x4e20, 0xff, @local, 0x80}}}, 0x32) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x30005, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 21:41:44 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x17}]}, 0x20}}, 0x0) getsockname(r1, &(0x7f0000000000)=@tipc, &(0x7f0000000080)=0x80) 21:41:44 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xffbf) 21:41:44 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffd2000) [ 1101.846951][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1101.853011][ C0] protocol 88fb is buggy, dev hsr_slave_1 21:41:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000180)={0x1, 0x0, [{0x80000019, 0x4, 0x5, 0xffd, 0x5}]}) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)) ptrace(0x10, r2) ptrace(0x11, r2) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$VIDIOC_G_MODULATOR(r3, 0xc0445636, &(0x7f00000000c0)={0x1, "af8500b75043d96932a0897d4ace75bc3b3539e7756d92e6f87c8ed14afdfa7a", 0x2, 0x100, 0x1, 0x1, 0x2}) 21:41:44 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x30005, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 21:41:44 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x11000, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x17}]}, 0x20}}, 0x0) getsockopt(r3, 0x5, 0x8001, &(0x7f00000000c0)=""/117, &(0x7f0000000140)=0x75) splice(r1, 0x0, r2, 0x0, 0x30005, 0x0) write$P9_RWRITE(r1, &(0x7f0000000080)={0xb, 0x77, 0x2, 0x6}, 0xb) set_tid_address(&(0x7f0000000180)) r4 = fcntl$getown(0xffffffffffffffff, 0x9) write$P9_RGETLOCK(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="290000003701000101000000000000000300000000000000", @ANYRES32=r4, @ANYBLOB="0b005a65746831776c616e31d4"], 0x29) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_N2(r5, 0x103, 0x3, 0x0, 0x0) 21:41:44 executing program 5: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x800, 0x0) ioctl$TCSETX(r2, 0x5433, &(0x7f0000000100)={0x5, 0x9ce3, [0x4, 0x5, 0x10000, 0x1, 0x6], 0x4}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ppoll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x4}, {r3, 0x70c1b412a710e4be}, {r4, 0x2000}, {r0}, {r5, 0x8000}, {r1, 0xc018}], 0x0, 0x0, 0x0, 0x1f2) 21:41:44 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xffcf) 21:41:44 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffd2fff) 21:41:44 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xffdf) 21:41:45 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffd3000) [ 1102.406951][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1102.412825][ C1] protocol 88fb is buggy, dev hsr_slave_1 21:41:45 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xffef) 21:41:45 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffd3fff) 21:41:45 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x10fff) 21:41:45 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffd4000) 21:41:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(0x0, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace(0x11, r1) 21:41:45 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) uname(&(0x7f0000000100)=""/220) read$alg(0xffffffffffffffff, &(0x7f0000000040)=""/40, 0x28) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 21:41:45 executing program 2: syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xffff, 0x2000) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x404201, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @ib={0x1b, 0xa000000000000, 0x3, {"b0c396c28c8b676395f5418f62b80770"}, 0x100, 0x8, 0x53}}}, 0x90) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xb, 0x3}) getsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, 0x0, 0x0) [ 1103.046989][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1103.052987][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1103.058856][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1103.064724][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1103.070609][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1103.076385][ C1] protocol 88fb is buggy, dev hsr_slave_1 21:41:45 executing program 5: io_uring_setup(0xa4, &(0x7f0000000080)) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x100, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r0, 0x4004ae8b, &(0x7f0000000140)={0x8, "05da17d4b70816b5"}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x100, 0x200) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") pipe(&(0x7f0000000300)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r3, 0x0, 0x30005, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r5 = accept(r4, &(0x7f00000004c0)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000000)=0x80) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000009c0)={{{@in6, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000ac0)=0xe8) sendmsg$nl_route_sched(r5, &(0x7f0000000b80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4008000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)=@gettfilter={0x34, 0x2e, 0x0, 0x70bd2a, 0x25dfdbfc, {0x0, r6, {0xffe0}, {0xf, 0xfff1}, {0x7, 0xb}}, [{0x8, 0xb, 0x3}, {0x8, 0xb, 0x14}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) sendmsg$nl_route(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8002006}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@ipv6_deladdr={0x3c, 0x15, 0x1, 0x70bd2a, 0x25dfdbfc, {0xa, 0x10, 0x210, 0xff, r6}, [@IFA_FLAGS={0x8, 0x8, 0x28}, @IFA_FLAGS={0x8, 0x8, 0x40}, @IFA_ADDRESS={0x14, 0x1, @empty}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x1) 21:41:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000000c0)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000100)) r4 = getpid() sched_setattr(r4, 0x0, 0x0) ptrace(0x4208, r4) 21:41:45 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x30005, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 21:41:45 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x11fff) 21:41:46 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffd4fff) 21:41:46 executing program 2: syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, 0x0, 0x0) 21:41:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000240)={'sit0\x00', @ifru_flags}) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, 0x0, 0x0) 21:41:46 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x12fff) 21:41:46 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffd5000) 21:41:46 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x17}]}, 0x20}}, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000000), &(0x7f0000000040)=0x10) 21:41:46 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x13fff) 21:41:46 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffd5fff) 21:41:46 executing program 2: syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) accept(0xffffffffffffffff, &(0x7f0000000040)=@l2, &(0x7f00000000c0)=0x80) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x1000, 0x8000) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r3, 0x0, 0x30005, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x5, 0x2a8840) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x4240a2a0) getsockopt$netrom_NETROM_N2(r4, 0x103, 0x3, 0x0, 0x0) 21:41:46 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x14fff) 21:41:46 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x101, 0x800) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000100)={{0x5, 0x5, 0x1, 0x401, '\x00', 0x3ff}, 0x0, [0x4, 0x1, 0x3, 0xcc, 0x7b, 0x5, 0x3, 0x46, 0x10001, 0x9, 0x4, 0x6448, 0x401, 0x9, 0x4, 0x3, 0x6, 0x2, 0x1, 0x5, 0x2, 0x100, 0xfffffffffffffff7, 0x8000, 0x6, 0x4, 0x8001, 0x9fdb, 0x100000000, 0x1ff, 0x0, 0x2, 0x4, 0x4, 0xa2c, 0x100000001, 0x7, 0x8000, 0x100, 0x3, 0x2, 0x3, 0x4, 0xb8b, 0x10000, 0x8, 0x5, 0xfffffffffffffff8, 0x7fff, 0x101, 0x81, 0x400, 0x9, 0x100000000, 0x3, 0xd87, 0x2, 0x57, 0x3, 0x8, 0x3ff, 0x800, 0x100, 0x1000, 0x0, 0x3e2f, 0x3b01, 0x7f0, 0xbc, 0x6, 0x7, 0x4, 0x80000001, 0x2, 0xed, 0x5, 0x8, 0x7, 0x8, 0x8, 0x2, 0x6, 0x2, 0x1000, 0x401, 0x1ff, 0x0, 0x7, 0x401, 0x2, 0x1, 0xffffffffffffffe1, 0x10000, 0x0, 0x6, 0x3, 0x7ff, 0x6, 0x3, 0x0, 0x6, 0xd6e2, 0x9, 0x401, 0x451a, 0x10001, 0x5, 0x9, 0x0, 0x7, 0x5, 0x9, 0x3, 0xc5, 0x9, 0x3, 0x8, 0x800, 0x6, 0x100000001, 0xffff, 0x7, 0x2, 0xba8, 0x100000000, 0x2, 0x80000000, 0xfffffffffffffc00], {r2, r3+10000000}}) r4 = socket$caif_stream(0x25, 0x1, 0x4) dup2(r4, r0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 21:41:46 executing program 5: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ppoll(&(0x7f0000000000)=[{r0}, {r1, 0x100}], 0x2, 0x0, 0x0, 0x0) 21:41:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x10000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r2, 0xc0605345, &(0x7f0000000100)={0x8, 0x2, {0xffffffffffffffff, 0x1, 0x48, 0x0, 0x6}}) r3 = getpid() sched_setattr(r3, 0x0, 0x0) rt_tgsigqueueinfo(r3, r1, 0x16, &(0x7f0000000000)) ptrace(0x4208, r1) ptrace(0x11, r1) 21:41:46 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffd6000) 21:41:47 executing program 5: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={0x2, @default, @rose={'rose', 0x0}, 0x7f, 'syz0\x00', @bcast, 0x1, 0x8, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast]}) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ppoll(&(0x7f0000000000)=[{r0}, {r1, 0x100}], 0x2, 0x0, 0x0, 0x0) 21:41:47 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x15fff) 21:41:47 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x30005, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000100)=ANY=[@ANYBLOB="0000cc2edd0d95f0c9c8b8b77c5dff90afcbe04b37c09692599e724992d342ef99cabbbd228174004da3733be8b2ad017a1b713c8c9607a9c4707ae3ca8f488dc80f1a065c355d689f88c4ec4df1c773c9580b6807d10f1fac66516fde268055ebc42aa420aae66b87d115c479278d313a2a5fba7cf78c2c7945d610ded2e837827d6f249b52e36b4c9f1ea7fa6687d406f08abc8e4a0d", @ANYRES32=0x0], &(0x7f0000000080)=0x8) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) socket$isdn_base(0x22, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 21:41:47 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffd6fff) 21:41:47 executing program 5: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r3, 0x0, 0x30005, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, 0x0, 0x410c, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ppoll(&(0x7f0000000000)=[{r0}, {r1, 0x100}], 0x2, 0x0, 0x0, 0x0) 21:41:47 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x16fff) 21:41:47 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x38c84e535e0d140a, 0x0) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x1, 0x4) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, 0x0, 0x0) 21:41:47 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffd7000) 21:41:47 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x17fff) 21:41:47 executing program 1: r0 = getpgid(0xffffffffffffffff) ptrace$getenv(0x4201, r0, 0x81, &(0x7f0000000080)) waitid(0xba33b9d7788b33c5, r0, 0x0, 0x1000000, &(0x7f0000000180)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) r3 = gettid() rt_tgsigqueueinfo(r2, r3, 0x21, &(0x7f0000000100)={0x1d, 0x8000, 0xffffffff}) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") socket$netlink(0x10, 0x3, 0x2) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000000)) ptrace(0x10, r4) ptrace(0x11, r4) 21:41:47 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40000) ioctl$BLKRRPART(r1, 0x125f, 0x0) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, 0x0, 0x0) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000040)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$BLKRRPART(r2, 0x125f, 0x0) 21:41:48 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x18fff) 21:41:48 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffd7fff) 21:41:48 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffd8000) 21:41:48 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2, 0x100}}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x400, 0x0) write$P9_RCREATE(r1, &(0x7f0000000100)={0x18, 0x73, 0x2, {{0x77, 0x4, 0x6}, 0x2}}, 0x18) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x7ff, 0x400000) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 21:41:48 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x19fff) 21:41:48 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x5, 0x6002) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r3, 0x0, r4, 0x0, 0x30005, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r5, 0x54a1) 21:41:48 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffd8fff) 21:41:48 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x1afff) 21:41:48 executing program 5: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfe47b7070") ppoll(&(0x7f0000000000)=[{r0}, {r1, 0x100}], 0x2, 0x0, 0x0, 0x0) 21:41:48 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffd9000) 21:41:48 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x1bfff) 21:41:48 executing program 2: syz_init_net_socket$netrom(0x6, 0x5, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r3, 0x0, 0x30005, 0x0) ioctl$KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, &(0x7f0000000100)={0x0, 0x9c, 0x401, &(0x7f00000000c0)=0x7fff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) getsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, 0x0, 0x0) set_robust_list(&(0x7f0000000080)={&(0x7f0000000040)={&(0x7f0000000000)}, 0xfffffffffffffc34}, 0x18) 21:41:48 executing program 5: io_uring_setup(0xa4, &(0x7f0000000080)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = semget$private(0x0, 0x4, 0x2) semctl$GETNCNT(r1, 0x0, 0xe, &(0x7f0000000100)=""/109) ppoll(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) semget$private(0x0, 0x4, 0x40) 21:41:48 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffd9fff) 21:41:48 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x1cfff) 21:41:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x17}]}, 0x20}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000001400bfa30000000000000703000000feffff7a0af0fff8ffffff71a4f0ff00000000b7060000000000811e6403000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r3, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380)=r4, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000140)='^wlan1*keyring\x00', r4}, 0x30) r5 = getpgid(0xffffffffffffffff) ptrace$getenv(0x4201, r5, 0x81, &(0x7f0000000080)) r6 = getpgid(0xffffffffffffffff) ptrace$getenv(0x4201, r6, 0x81, &(0x7f0000000080)) ptrace(0x8, r6) ptrace(0x11, r1) 21:41:49 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x1dfff) 21:41:49 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/\xff\x0f;(\xf5\x06mer\x00', 0x0, 0x100) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) 21:41:49 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffda000) 21:41:49 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x1efff) 21:41:49 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x1ffff) 21:41:49 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffdafff) 21:41:49 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x20fff) 21:41:49 executing program 2: syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) getsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, 0x0, 0x0) 21:41:49 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffdb000) 21:41:49 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x21fff) 21:41:49 executing program 5: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000100)={0x0, 0x7, 0x3, &(0x7f0000000040)=0xfff}) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r4, 0x0, r5, 0x0, 0x30005, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) pread64(r6, &(0x7f0000000240)=""/62, 0x3e, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x1, 0x30}, &(0x7f0000000180)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f00000001c0)={r7, 0x6}, &(0x7f0000000200)=0x8) ioctl(r1, 0x1000008913, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ppoll(&(0x7f0000000000)=[{r0}, {r1, 0x100}], 0x2, 0x0, 0x0, 0x0) [ 1107.206928][ C1] net_ratelimit: 18 callbacks suppressed [ 1107.206936][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1107.218503][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1107.224305][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1107.230098][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1107.236024][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1107.241834][ C1] protocol 88fb is buggy, dev hsr_slave_1 21:41:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") clone(0x20041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) r2 = getpid() sched_setattr(r2, 0x0, 0x0) ptrace(0x4207, r2) ptrace(0x11, r1) 21:41:50 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffdbfff) [ 1107.286903][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1107.292943][ C0] protocol 88fb is buggy, dev hsr_slave_1 21:41:50 executing program 2: pipe(&(0x7f0000000300)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r1, 0x0, 0xffff, 0x1) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r3, 0x0, 0x30005, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) fcntl$dupfd(r1, 0x0, r0) splice(r4, 0x0, r5, 0x0, 0x30005, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) connect$inet(r7, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r6, 0x0, r7, 0x0, 0x30005, 0x0) ioctl$TIOCGISO7816(r6, 0x80285442, &(0x7f0000000100)) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_N2(r8, 0x103, 0x3, 0x0, 0x0) 21:41:50 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x22fff) 21:41:50 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) syz_mount_image$nfs4(&(0x7f0000000040)='nfs4\x00', &(0x7f0000000080)='./file0\x00', 0x2, 0x4, &(0x7f00000013c0)=[{&(0x7f0000000200)="a0d5c2094fc01098d7145fa88b49745b0ce24955bcd143f09781bfb01780ef18", 0x20, 0x9}, {&(0x7f0000000240)="581172dbd015fb9bae66b26f7b73a357a65eeb8c3a24b4681a818d7ca6a7b3f1f28d57149248af7979d0c756443e776444110ca464afcf4457bcd19f4fd795cc9606990dfd2dcfb7d96607d92b0247b53be10c1dcd8c2403c3feae8ccb322c22f8470cc6eb79dfd6c5d13b6e57", 0x6d, 0x7ff}, {&(0x7f00000002c0)="f868e70eaffd8b3da2ae9a787eeeb8bafc8ac670437e1a2d77b72f1b18c7e915d1256354a94223a67e4263dc2f7c80f029832c4f8f1328caa8e4395363252b5af44c2239659c15bd4021edd295d09853ce9ff32df882dc27d83df4add3a3b4bd686da9d349b136c4b3774eea583740644dd6ef4be0afe7ed1b44f042412fa016a8634955556f5d2a3fa440618893f7fd0788fe93ae92578cf7c1470f8e4d11d4a583472b463899e212a15500729b9cc82d7578fe7c524b85d90e4b9a2611edce5440ae97fd5f3a69e1cc010406255558953346d747770c2cda151e9b78dea31d0d13996d5dc44526d1e0f8103edeb022455b1be0", 0xf4, 0x7fff}, {&(0x7f00000003c0)="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", 0x1000, 0x4}], 0x4080004, &(0x7f0000001440)='/dev/snd/timer\x00') ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000100)) 21:41:50 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffdc000) 21:41:50 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x23fff) 21:41:50 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffdcfff) 21:41:50 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x30005, 0x0) setsockopt$inet_dccp_int(r1, 0x21, 0xb, &(0x7f0000000040)=0x4, 0x4) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 21:41:50 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x24fff) 21:41:50 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffdd000) 21:41:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x60, 0x7fff, 0x4, 0x8, 0x7ff, 0x1f}) r1 = io_uring_setup(0xa4, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ppoll(&(0x7f0000000000)=[{r1}, {r2, 0x100}], 0x2, 0x0, 0x0, 0x0) [ 1108.086924][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1108.092815][ C0] protocol 88fb is buggy, dev hsr_slave_1 21:41:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000001c0)) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000200)={[], 0x1}) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000280)) ioctl$KVM_ASSIGN_DEV_IRQ(r2, 0x4040ae70, &(0x7f00000000c0)={0x0, 0x9, 0xfffffffffffffffd, 0x100}) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000000)) ptrace(0x10, r3) ptrace(0x11, r3) 21:41:50 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffddfff) 21:41:51 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x25fff) 21:41:51 executing program 5: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x4d0102, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000200)={0x98, 0x1, 0x8, 0xbbeb, 0x9, 0xa3bd}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getrandom(&(0x7f0000000100)=""/252, 0xfc, 0x3) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ppoll(&(0x7f0000000000)=[{r0}, {r2, 0x100}], 0x2, 0x0, 0x0, 0x0) 21:41:51 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffde000) 21:41:51 executing program 2: pipe(&(0x7f0000000300)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r1, 0x0, 0x30005, 0x0) ioctl$KDENABIO(r0, 0x4b36) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000000)=0x3) 21:41:51 executing program 5: io_uring_setup(0xa4, &(0x7f0000000080)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10, 0x1000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$caif_stream(0x25, 0x1, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)={&(0x7f0000000100)='./file0\x00'}, 0x10) ppoll(&(0x7f0000000180), 0x40, 0x0, 0x0, 0x0) 21:41:51 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x26fff) 21:41:51 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000080)={0x0, 0xffffffff}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x8000) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 21:41:51 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffdefff) 21:41:51 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x27fff) 21:41:51 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffdf000) 21:41:51 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x28fff) 21:41:51 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffdffff) 21:41:51 executing program 1: pipe(&(0x7f0000000300)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r1, 0x0, 0x30005, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r0, 0x0, 0x28, &(0x7f00000000c0)='em1@systemmime_typebdevposix_acl_access\x00', 0xffffffffffffffff}, 0x30) r3 = getpid() sched_setattr(r3, 0x0, 0x0) rt_tgsigqueueinfo(r2, r3, 0xa, &(0x7f0000000140)={0x1b, 0x6, 0x18}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x6c840, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r7, 0x800442d3, &(0x7f0000000280)={0xdd, 0x4, 0x22840000000000, @empty, 'ip6gre0\x00'}) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r5, 0x0, r6, 0x0, 0x30005, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl(r4, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r8 = getpid() rt_tgsigqueueinfo(r8, r8, 0x13, &(0x7f0000000000)={0x1}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) fremovexattr(r9, &(0x7f0000000400)=ANY=[@ANYBLOB="73656375726974792e656d314073797374656d6d696d655f7479706562646576706f7369785f61636c5f61636365737300ed82164a3c1a240811801afd16d93f99c2b538b3d4c64f1f32f21ab9b1683a9ee11fc1425bb2f94d4018175994ac83558875a7402ddcdbf2081724f47d873f3ab4619324bf749b10044e1622"]) ptrace(0x10, r8) ptrace(0x11, r8) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r10, 0x407, 0x0) write$binfmt_misc(r10, &(0x7f0000000140)=ANY=[], 0x4240a2a0) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r10, &(0x7f0000000380)='./file0\x00', r11, 0xffffffffffffffff, 0x800) 21:41:51 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x29fff) 21:41:52 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffe0000) 21:41:52 executing program 2: syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_open_dev$cec(&(0x7f0000000080)='\x006\x00\x00\x01\x00\xce\x04\x00\xff', 0x3, 0x2) getsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, 0x0, 0x0) 21:41:52 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffe0fff) 21:41:52 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x2afff) 21:41:52 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) fcntl$setsig(r0, 0xa, 0x21) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x401, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x2, 0x2) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x400, 0x0) ioctl$EVIOCGABS0(r3, 0x80184540, &(0x7f0000000240)=""/67) setsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f0000000040)=0x9, 0x4) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0xa7041b3a492cf77b, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r4, 0x4c09, 0xfca4) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r7, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r8, r6}}, 0x18) write$RDMA_USER_CM_CMD_JOIN_MCAST(r5, &(0x7f0000000300)={0x16, 0x98, 0xfa00, {&(0x7f00000002c0), 0x3, r8, 0x10, 0x0, @ib={0x1b, 0x2, 0x8000, {"6f0210784483c3fd8c0ba50be2283931"}, 0x5, 0x9, 0x10000}}}, 0xa0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x800, 0x0) r9 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000180)={{}, [@default, @rose, @bcast, @rose, @bcast, @remote, @netrom, @null]}, &(0x7f0000000200)=0xffffffffffffffcd, 0x81000) getsockopt$netrom_NETROM_N2(r9, 0x103, 0x3, 0x0, 0x0) 21:41:52 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='\x00\x00\x00\x178\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00', 0x0, 0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x34dd494f62cb6d74, 0xc2, 0x1, 0x101}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) r1 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x0, 0x2) getsockname$ax25(0xffffffffffffffff, &(0x7f0000000140)={{0x3, @rose}, [@remote, @bcast, @null, @bcast, @bcast, @null]}, &(0x7f00000001c0)=0x48) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000100)={0xffffffffffffffc0, 0x8, 0x4, 0x3f}, 0x8) 21:41:52 executing program 5: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f00000001c0)) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000200)={[{}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe}], 0x1}) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000280)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68}]}) ioctl(r3, 0x1000008912, &(0x7f0000000180)="11dca5055e0bcfe47bf0702d8126166f90c262a6577ff265ef24b5e734e54d1ed6dc97663da18275904ff6ea2b7e4b99e6a5b5c030a0092fae508cce5f5f69191cbdad99") ppoll(&(0x7f0000000000)=[{r0}, {r1, 0x100}], 0x2, 0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$describe(0x6, r7, 0x0, 0xffffffb0) r8 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, r7) keyctl$read(0xb, r8, &(0x7f0000000400)=""/27, 0x1b) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f00000001c0)) r9 = creat(&(0x7f0000000440)='./file0\x00', 0x171) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f00000005c0)=0xe8) open$dir(&(0x7f0000000740)='./file1\x00', 0x600, 0x0) sendmsg$FOU_CMD_ADD(r9, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4c02802}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x68, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, [], 0x27}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @rand_addr="6791ccf046914ca478e7c4e382d5cc3e"}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e24}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}, @FOU_ATTR_PEER_PORT={0x8, 0xa, 0x4e23}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IFINDEX={0x8, 0xb, r10}, @FOU_ATTR_PEER_PORT={0x8, 0xa, 0x4e23}]}, 0x68}, 0x1, 0x0, 0x0, 0xa000}, 0xc800) ioctl$KVM_SET_PIT2(r6, 0x4070aea0, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x1}) ioctl$KVM_SET_PIT2(r6, 0x4070aea0, &(0x7f0000000280)={[{0x0, 0x0, 0xdf1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffeffff, 0x0, 0x800000}, {0xfffffffffffffffc, 0xfffffffffffffffd, 0x0, 0x654, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x40000000}]}) fstat(r6, &(0x7f0000000380)) r11 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='cpu.weight.nice\x00', 0x2, 0x0) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000100), &(0x7f0000000140)=0x8) fcntl$setstatus(r11, 0x4, 0x4c00) keyctl$join(0x1, &(0x7f0000000700)={'syz', 0x3}) 21:41:52 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x5, 0x0, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x2, &(0x7f0000000140)=0xce48, 0x4) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') 21:41:52 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffe1000) 21:41:52 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x3, 0x300080) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = dup3(r0, r2, 0x6fbaa06d8c685ab5) ioctl$VIDIOC_G_AUDIO(r3, 0x80345621, &(0x7f0000000100)) ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 21:41:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() pipe(&(0x7f0000000300)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r3, 0x0, 0x30005, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r2, 0x800443d3, &(0x7f00000000c0)={{0x1ff, 0x5, 0x2, 0x0, 0x1ab0, 0x3}, 0x9, 0x4, 0x4}) rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace(0x11, r1) 21:41:52 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x2bfff) 21:41:52 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2, 0x20000}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 21:41:53 executing program 5: r0 = io_uring_setup(0x291, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000100)={0x2a, 0x4, 0x0, {0x3, 0xff, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) ppoll(&(0x7f0000000000)=[{r0}, {0xffffffffffffffff, 0x100}], 0x2, 0x0, 0x0, 0x0) 21:41:53 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffe1fff) 21:41:53 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x2cfff) 21:41:53 executing program 2: pipe(&(0x7f0000000300)={0xffffffffffffffff}) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r1, 0x0, 0x30005, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') pipe(&(0x7f0000000300)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r3, 0x0, r4, 0x0, 0x30005, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0505405, &(0x7f0000000180)={{0x0, 0x2, 0x4, 0x2, 0x4}, 0x8, 0xfffffffffffffff7, 0xe417}) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000c0}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="1000000c410000010c001433947a300000000026465607a0b755cdf5c3c6205e9128555bd35d95f308151170e170fe9da3122dfd670ab7e74b9c"], 0x28}, 0x1, 0x0, 0x0, 0x40c14}, 0x40d0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_N2(r5, 0x103, 0x3, 0x0, 0x0) 21:41:53 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x2, 0x2) sendto$unix(r1, &(0x7f0000000080), 0x0, 0x1, 0x0, 0x0) 21:41:53 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffe2000) 21:41:53 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) socket$inet(0x2, 0x3, 0x8) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, [@sadb_sa={0x2, 0x17}]}, 0x20}}, 0x0) sendmsg(r1, &(0x7f0000000780)={&(0x7f0000000040)=@x25={0x9, @remote={[], 0x2}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000100)="1382804117ddbedc1a93ad1f9e48ada89ac55cd4e3d89b78552a377904b0e84a8dc69358234929da8289706220f0ffa6886895757f5f39b482b45db62018fa7730dcee66286b704b59000a78a86405a10187ada7ea6beecffc51fdfd9844901ea40bca26d1c1c1eb8aaabf7427c24d48c2e9c390e3af1ac9db6f6d8b2daa859da71cc82ae6ea4a13d7c5d8d2a0b58d5764f104219ea702ded96cafe5091abdea14d92435ebd3f22690b4f0e654ca1f6801de7895a0b3cd1ee5", 0xb9}, {&(0x7f00000001c0)="c60ac7ec714a5488a79e7e0cc04aed29a932635ff0e32203f2775da33b4cda5adfa9697294512cc58015cb5228ce822d3877d97a4141332751a2da250f5d68a2b17caddcb7f6d713aa231983a8f7c0100ded3329d24f8ec715939c4483c54cd353882ce747a1f882c33ac7d090601d980d1baddf97b06cf3e2d9fdd747d24c4117761c15b1691b31252ce591e61848d4566e972b4962233343581b02aa5f0c49cb23b0e6e4105341a7b58b51b846ef912c2b1c0f08fc828a", 0x85}, {&(0x7f0000000280)="cde486cbf34cb5b13e23dade4fcf5c5bb37a5922ff021f564c86c06d57b2e652a950719f61fd0b3143eb75b38f5fbe0a840b0357ab2c52ab0f651ebac9126fa0b0fb8b4798f1389df3ba025d1fc2139aecd31455", 0x54}, {&(0x7f0000000300)="21e9ca141c15844505935df5d76f0749775be9e5b9e48c97f0fcadf16c534c6236ca268d14bf0c176bb2df217b21c5dd62a87007f3775c080040fdd3a190cbefab45e342ced3167c8078d2ce11642e9bf42fe0127cd75410a8c1812596f774d66935054afe44b47c2330a65fe766318f44099195a37e31acb10bd1ceb6b9dd13a5ef4c6e80721ce7464cbab576a65a3327abadc9a33b1002353696587eab9279cc4bab41e4371a432ee17cefbff4421475a9d69c54a5d32b3cd65755e8ece44b5b39a7b94f5d", 0xc6}], 0x4, &(0x7f0000000800)=[{0x38, 0x10d, 0x401, "96c22332acaa5aea47c502ac32ca991d9efa4e8e06d50900eff0bc71501a30458c8bd35b2a5bbb"}, {0x80, 0x38a, 0x7, "094c4aa44bc2ff93ff3efc66d007cfebe5456386e99d942b2a27e6f2f28b679a93dc1d8f37ca7671948841c3bff8ba9692fae51202166f4eb2b3e30e5b8076a1de48fe87320f7f5a80cf4cfe288d1fde0a09854bc4bdf4210cd1c1693a7068358af05ce623812a95356bee437ac5"}, {0xe0, 0x116, 0x6, "ad46b8fbe32bd133be6113eca4c3a871e113be419988cd0feff30c5a428f377fd10383a9a396006200610da3c2ea758a939af7f7b1ad66b0af27e0ea4ca76beede26dd0bb7a4b56a75e991431edac45385a0464cc59b2d1a0ccc7a4c9dbb46eedfa13fb026ae4b240c7da43abbcd629d2a9057cf7d40a1a221a3ea8a73e9f1e95278a94ef896c58456d88c52007d6716961282cdc00703c91a18b2695f14d46f33b03987ae69f80788d80066e4085fa7c617fbfa48135d2ebc7ca631ab4d4ebb7727e6369a2fff030eede3cbcbe6"}, {0xe8, 0x105, 0x4, "a96f8b9bf21c96c532ae6d7a4952fd41b27a8d3e3c1afd224dce940bca3c58e0d0d39eb4f798a716ae3ebc55def41f89bc3d0d7713e5c9776ec7de92dba0a89df4665debe978259412b91e2900b95c54f984a2fdc1c1e331ddd452605c741307f0ad7c2334065cd0e054ac6e570799d85ad5a98d87b76d2414bd358a62372e36c094d22755f50782661c360cbadd4190b6a216a1438e712ab5f894991392978046245d8a187c6bae09f92fdfc0589e39a9cc5fb109ac151bff2304383f5cc83089a3256f9e77b5a49ce88bceaff7c03a6a33e3aeeba0a8"}, {0x90, 0x118, 0x7ff, "fa25d70400000000000000b49286823970ae4c1d1453801cfe135594a4ea3ad1d22373317d0817bcacf01dd626224dbb4d9a851bd4c2997e757f490a0f324a343743a539632ad3684424083fc11f7365cf35fe600a6b2a692d305771fdb50f7586196ece4023e62d2262987d5b7c235f087d7ef19b7b996d6a43f8f4e011e1ab49dec466d9"}], 0x310}, 0x40) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000007c0)=@ccm_128={{0x304}, "475664b4dc10a060", "8f4aad3996d0c7d61a41a8b6bed9c9cd", "e5a6d8c2", "5e9c2b997593f88d"}, 0x28) inotify_init1(0x800) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 21:41:53 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x2dfff) 21:41:53 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x2efff) [ 1111.012819][T13521] ptrace attach of "/root/syz-executor.1"[13464] was attempted by "/root/syz-executor.1"[13521] 21:41:53 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffe2fff) 21:41:53 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x2, 0x8000, 0x1, 0x81}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f00000001c0)) ioctl$KVM_SET_PIT2(r4, 0x4070aea0, &(0x7f0000000200)={[], 0x1}) ioctl$KVM_SET_PIT2(r4, 0x4070aea0, &(0x7f0000000280)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r7, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r6, 0x0, r7, 0x0, 0x30005, 0x0) r8 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r8) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000540)=ANY=[@ANYBLOB="01000000792524f65c1246ae8e88d3c9da91c44a819203981f79ae44d19add9d466292f20894cb77405837f95a0d2dc815dcac9e1d7df52e76dd5c12076d548965550a2b85e8a099c3cb96138c10d6ba30e02a7e821b4fcb0913ea3320ea89c3850d4b5c6a0171b985ed8fc342d8d59027e53b6b6d344b667715f0568786a30d5f0c6c84d3c6be1d6e5f84a6f15dbf58f64552e4a58a30676495df96121572bca054760c3abe9594092f21b22a", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r8, 0x84, 0x0, &(0x7f0000000280)={r10}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000380)={r10, 0x3}, 0x8) dup3(r4, r5, 0x80000) splice(r1, 0x0, r2, 0x0, 0x30005, 0x0) r11 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r11, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r11, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r11, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r12 = accept(r11, &(0x7f00000004c0)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000000)=0x80) getsockopt$inet_IP_XFRM_POLICY(r11, 0x0, 0x11, &(0x7f00000009c0)={{{@in6, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000ac0)=0xe8) sendmsg$nl_route_sched(r12, &(0x7f0000000b80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4008000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)=ANY=[@ANYBLOB="340000002e0000002abd7000fcdbdf2500000000", @ANYRES32=r13, @ANYBLOB="e0ff00000f00f1ff07000b000800f2ff0300000008000b0013ffffe8"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="cc0100002400000327bd7000ffdbdf2500000000", @ANYRES32=r13, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x40010}, 0x4000000) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 21:41:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f00000001c0)) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000200)={[], 0x1}) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000280)) ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f00000003c0)={0x1001, 0x5000, 0x1ff, 0x5, 0xfffffffffffff001}) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="02050000040000000000000093407500000000020017000000000000000000000000003d57565e6250c8b417098468794e96112017867b16303295d0ec6207b9b93ed4e9872035d768c068b389965b746185f17451675a2343f796a1c6e448cf2c9e586b96"], 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000380)={@mcast1, r5}, 0x14) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = getpid() rt_tgsigqueueinfo(r6, r6, 0x3f, &(0x7f0000000000)={0x2}) ptrace(0x10, r6) r7 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x0, 0x2) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r9, 0x4040ae77, &(0x7f00000001c0)) ioctl$KVM_SET_PIT2(r9, 0x4070aea0, &(0x7f0000000200)={[], 0x1}) ioctl$KVM_SET_PIT2(r9, 0x4070aea0, &(0x7f0000000280)={[{0x0, 0x0, 0x0, 0x0, 0x1}]}) r10 = getpgid(0xffffffffffffffff) r11 = getpgid(0xffffffffffffffff) ptrace$getenv(0x4201, r11, 0x81, &(0x7f0000000080)) sched_setscheduler(r11, 0x3, &(0x7f0000000300)=0x2) ptrace$getenv(0x4201, r10, 0x81, &(0x7f0000000080)) sendmsg$nl_netfilter(r7, &(0x7f00000025c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x829ada1fad73c6d7}, 0xc, &(0x7f0000002580)={&(0x7f0000006e00)=ANY=[@ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="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", @ANYRES32=r10, @ANYBLOB="1dba4429c678be5df314de5d8e090e356ba05fd787a488b625b0b1e1afb7242d839b66c76f28b9d47a95607be08cdd216c206caf26a87963a9608c9ad295c680ed28b2e65e0f3f5a4c9fc50d39703c51d738105693bc905c2645286556fcabb81ca399932619f26bfbe1048e3909551e25f47390de8df4f0409b14005700fe8000000000000000000000000000aa00008c0159000c00150002000000000000003aa10f2f0f3b2ce75547f5de093d0ea15eaa79626aa2c457890b526b6a724381e9c544dc156e3be4055489b812615144526ddee5d5bbe4429a47293b3d8a6baec0d5cafaeca4e4e08d746d88ada6591434849860d37e6dc93900423935272bd823a843fde5423eaf8f76d25dcfa87d7305101240f6f635a5df951b9bf88a655e32d9f3f14638222cb3b57c08e21a6211b747ecb8d638fea21429de38514882a48d87e92b19b80276787b1461234d0499f06e56b47a8697ae21bed85bb6ddbdc8633678c4c184516e5e8af48619d4cabab4e68bb4a1be8c418e706a1371b927fda42f283366ae74230043b7e131d0eda44e0777d60c1018004b92031a04e532210783fdbc366649889af9c0d2067b2b806e9f3ffe53f70bedba2163832111c808612fa58751a15db0f815aa6175b544750b8c700009b31122396fd0e7543cae5aba0ee2cb6ad3ad4fcb6ac452f8c9be08180cde1c5be301be378047fed84cfb56779811029857acf33944f3dbd632b4dbba7f247aa75a8b7a6341456e12e1cbec6b1b81d922aed461bd9dde01ac30371d5cd644408a2e7afbf172f1c2f611724a7cc83fe33b4277012c5cec0f7ca8b33b9cdb818dbf1a04559da9bc8df820046467bab708f86cfd292e63be7bf256035c2d63b9c906989f178e2fcfc203377458fadf020575f618e9ad90209a18c14d4db42c99d9f57c322655f72a1cf5e132c8ded3a40fad81c4486a3df6f6d5267c36d9628ff2dbd9ade057dc4b001700ba2117482d3b5971dd1b2866e80481bfe860ba60d0dfcd02ac698e1f17f623f00adb77edf0d78f04837c49dedf608508cbed335c38a7b05e0e4f5efb79ff7fe01e05fef7151c2bfd42ac3799ebeac330d606a8e20284461a41723816596217bb380964739285cbecacf95948160152547b1316a6580c44d06fa92cb88a82e58cbeab8be484ea999f63fe945245702fc04b728cb6fe670f136520442a422e4d2c38290dfaaa290a331f1567dd9fb3c39d009a7f02b2416d579fd61c1fa9f79d1f09b9d83646d32c174fe603460507c0a54c9d3632304b871a839fd2d8aad99d8f39c9621550e7dd8f6ca07d0971b1b3a403f1a1398981cc76e4fbc12eff7b484485062a607c64bc958d936b0c7e0a8d588f2a8c2bb9e76357160d445ccc9678a4c02c179c92a1cd7150b3e1641d0884dae251f3a8ebde15e560cf0f4cf8e445b72ad27030186e0dfae6a9491fce807bab608da53df5681437ebfccd9b1c0cfc8b3837354e6a5325a4cb3988e377cf175c314396d4739c39dd0ee569292f6b3e00af3621f871c2e0f2203a14f00a834ca395d6b86901e0ce9a5d9a7fdb511ebd2a16c30a9eb996bebb079f65380518610207f2a93274528396ad8256ad4bb2958f8a6bb501dbd5f042b95c74fb205627d43c658f1d76d002a6134158f508fb1933efc86576166c8dff1bb0fcbfe7268250cbd6a4e3a31001e2e40a493a976ad2b8086aac584282eec99f125e80a9f2d14ca0b36ae32a82fc5bad1bc23bce814201b1890a8e302fdd7b40c39d64f6e557c6f27559b175871dff98a6ab0c8013e9b7a3c02597b7995fda2eca0d0642cd0bc1ee04350022f447bbda3e859420e58036cd78d5d3794fdaf1531462b59f9dcce5ebf297062e3855d20e59599fd99bc02137a93087ab02a0bd5957c4498ab57409ede292599f2221ee417e368ef08a636ba993cdce862cdd104794336bc6144e9331bfa50c2200b1ff2e3fb5be9a1dd3990b6b653bb8403e2f9006db6dae9e0710a2a0120e0d20a65fece515ff7e06e3e680c74a14080f6f66a5a7939e6538bb65a57c7e63dd267ff32060da3eed3453ba79d8d14f0cae4320f74ce8e9ed5b07d252876c5f99b0da8da0bc3208784711db0579e9b0b7569a4c42b061c7428f268e9ee7bc3bd9b849611b139b483e93749190558ba99852168aa015b01dbd34b7eda945faaf19830f43d6f0f90c818b1290c81964b164df8ad44e464a049ead3e0f6059a38fbadca6f0fe97702f4c18428d11038f29a7fba9a685efbd76a85e76a3732b511b65c1e8018d68a3bc2dd06d9edb5d13abc7ad1d08978a9e040e6c35c4f84ed1c3379a64c90d142f5077c39f87ca670d106048a47c39b6232d8eb27904dca240d8d7f21e4d15f930fbd9ec9eb646c49884d1ee12c69900d61f82caaa78bc38314bf4d6aacd002583e4bc2263d228b01b37fa9be187938598e0574e375aac220b46a19044f1a34ef9349c82ea923e0889483489f293ea14b7535ea01b4e4095966081bafdae8d9aa56ac35cc21656045dd3a767b8651118d2826fc0e43f6834392eba9935fb94ea4f488790ecbf57559d3d32074dae563570a3ff52d7b24333fd8e34613a37f011811985e0aeef986ae8d4be9757e7b49cfc6714a4de350282e738540325cf91029e6bb404b0c5fb424d30fb3e8992161a6499c209b4c49c16cc9a6fe68a39925ba2105d359f0f68f8461d1fbee98ea2033dce214a12118bb7dd6fcacfed44a98b7a616d3b48b61ab3d59256fcc84fd4b1ad0c29ecdb78b077a4da43bab04df68b99d91d38a7f2dc5445cf8ec6aae636530b8a07b778d2e6f16234904af80ab69492cebd3e38ac9b10c7484433fd2ae742c6125ec487e0c0d5f76fbca8d2a4938c3251169768dbe9df78ff14365942869c168ba99e6ff120a25521380ba27fc26892d5683bf9275bd8c5ec57c0b7c27a5d183a8446dcfdba2c477cd43da38f623f47c4b437ed0c94ed6b883de9ea102ddd2b2de3b5e5ceae7ce752d9c4a8ac6f4dd754a6c28d08f973fa4fe43afb89366f8b8d144d57c74f9b58fd4eb972417fc05f5f48db8cc4087206c5a7f0719cca5a7506c2c21429e3b73f9021be6b289d035ce05ddb26b8028a4e4d9f17e730d1ba8f098b1537f25ca0a29308fe5b3ff248dcfe288eaec37a3de04796718b1decd1e9ac84e5e6c5fb74dee3d49c33dfaa2ea1dd4d3e51dc9bf3069284070e989180fc9fde1d86dc28d4c6ea75d2e5772ec4e407ea36b6a52dd6cf286a9595705ada50cbd6e7857aa283e04e1f960003ba43d548d79e741abe20c7d906f52e0651ea19ae0d63d7dbaeee5e5ecdae0eee1d277f248025d621ee5e7a40b170c08e21a147d10ce9c1e09f7f0122db9c89065f6e72c18d656fe27c3c178dbc9c216bc2c55135284d2a456d0b8bccd253fbdfc99ea4c4bbcee68cc2e485a746d5495f00d616fd9c7be3da735ea77768a642484e0d8e7395f6244f60d3c8c0a9a79e1a17366e44b51c737e9fb6264bb5b4bbc665d325440d3bda3234a9d19ed19291725956e19f08dd534ada46d84f2d20aa1d798ee247e124f44fbd4191fda2bd2bd5e2e7fcc2275f4fdd947863d161724cb7240be26adb26d4a190fe671de73e21ba28dcd10df3c5af661dd2b012e31be38bfcf4b36e047dda62cfe8536f15c97d3756c6cddcff50705b0c21555824fe00e49ae3b8d6ec450f72eb7537a291cbd8f631e339dee8070696f6e6cd37e88314541a54f35e6875c5aac0177e155835de0fa275fa1c5ffd568f85d25d50985f1be3d4559bba702174851e33f7e28c8a16753ce2d8280b98cca1b8096159e5e965ab9f489aca348a8777c7dee7e56053b770257a3b71287bc4d2cb4825a18552530d67ef8b140742246cf19a060b85b03df135f0603a9164032acd8da71f5744d31033b8b52a7a94a25bbce00b7f409fbd7478ef95a409f64dd806fcd2b3bc0de6c9d83fc85a9e4e185267e2c603e849a31d72b3146d80121930413292701c427d140204dbfa9ca18929a4fd1a46836e39d05ce6a03854ea43d5d6adcb270c48a92865f8a31b1a512d0b4f13b3da6032979165978397f472223847b25fac75774207bb16ea23149fac346cc50e38cc7df46f2e6b1fc946eef0682ea0669dac5938995278bdd1bad41815b04dac6345c7656dcded03a81d47fc23747c91c5909b79339dbc06594ee2b9bbff334a12caa577874de619a7b4f66b26f7c900c281e95917de983cc8d6975e410ee3d5e23ea6be16d3b924b361318792787d6778f0c50e5335eef5a0a4d4e749b552a55d6f15ba6358742682e70c8206622b9a2e45aeaccfbd7c5a5a28fdff46847d7612cdb8098e2d7bb7a30f09f197f722a95a444eda12d16402adb5d66ae3a4e3d7efeb63707c4d47672d8bb35e3f2d825d493a001768ab6de5371d8c1062bbca7b6a2fc184b2e4144dace9bb9d48015ebec814b237aecf46eb96316be38c24dee9c305c9061dd7f153b008f063e2da24472050bf50810f7b672a908f5f2054bd212b2f243605a5d06245ab005186c3efed2dbae799ac1e22906992aa16d69bef615479afa1cd6a3395dff992db4045821c79a12b3e75df59f760f9fc8cd8b49cc52d27e3136c336d425989936b6e7395d4d6b7a6c5705ff36475f6cce96902c1b4d619a9cf6fad1ad85a4c431d8114eadd2cd536f3a149b9c7def30d86bd778aa75f0011f6d27042ceae6890ed8a5a8bc09b7fbe52109ab32bf59545fa51d28986ac8512db823228a9d6bde88e200e1f787a4ba8447bfc8ee724a203a2f4e33779ab2140fde91c677bcb00f6cbd8bc5a1993bc96a44ab6cd5df0c95b6fb2b58171d7f955e5c91feb8968ab3470bf86c07f73edaac720635b5f8c8065d7041b2f0f8af6266d1ca81bc31052f688023b6e0f4e367e38e9e00503fad71198d41eb86210650299f8589399d3714dc101faaf8e0d89e675b00537b0894f28fefb098b700de1cfcca4138cb330f94b744aaa6f70de42d731c0cf7935a8c757806f1791ddd0fa2b225635f08fdda99389f0c250a36e9119dd198177c050e1992a3629c8e14853ccfff464caa321f5d2a6c2864e2205a00ef4cbb4afe98dc43c49113ebcbc472df73bb9e9f934bbfc251faf6edc0177729366107027c94daba4324473b37ce78f050c9df02211cf30250904207e65be59ce10bb6576c2a4c8ff3c5056336ce64cc625d2c56d716df9baf367d45fdcb625d368b62e22993f3e161814a25eb06bd65d261568cb89eb3fdfa504877878498b0e8e188a8d53e19c625843cdb6d93e0fbb311dfe2db2ecb575599933dc8076c29db0693f432acb3e55dae5dfe47394d78f034da158e8b97ab30bd91f51acc0cc3150db1f7ab644c0596bc908cb9aa00278ddd69132bfe1a818de445f04be97b893d74178c65a2188c06a24df23a51c1e33e6484d1757bae2bdda6fb9464282749142de4e5c2b9c1e81ab5b5f4c7b49e8b47a2839f609722030abbda7129373edf2679bad4d6f2b87e58e227123b21b204203132a49821591c826462e50df521d83a75556b80004dcb7e2818fc7de66d050a081fe34252b34b68a97db16ceeca59ed6bf85f16206b3f30cc6f05a0c61c900569adfd7f85728cd3626331ad8fb131ad922a34ff02cefe2d3883c00249a8a88f7aa80065853d7683b159de64a96d5b305e7ea5c1d7c4825270f1ba5b479cca867cf55c9acd5ffae1460a65f57603e9eb067a801e5681f51b726082fdba2e7394ef9f7e28a083a495ba738171ad11e3b61bddc942c97f241edfcfcc1142499528c30d41299cb6f49c164d36d312f0293e3ec80fea1a6e2e1b8e4fb2a5323524035566b018d25e893cc55cacf2abd211a754aa26e9fd0caa09fc24e84e38d9f10489d8b3c2b19bf10d5517214914434fe5b858beb9964afbbff500e0f98331f1d770b20fadaf5d6837a68d0b2cc7f75c51c5430e7c1e9687ec8c854985efce3e057c0b9baac5e2bd2a37ba2f2d17ff52f11c6c1a824a4fc5a11aad9b001680120b7c945b41e2151f8e7f307a2bf7d689a445d2143aa215314b892490acc965cfa86cb545bc917373b8dfc6ff85bda4d345f95f2ee09ebeb17c3b6bf56ca2dbd65b4193232ec2547c4563f9f807866b07652d8864ac3276b938c295e1155298c50585fea8f81e20c4cda21d97d38d7c14abbcb74ffddd820492ea148460108bf05e1854568b71b59edbad835a7ea1f55a31b55d021454e7e545cd42165702d36fef0067c614f47e9a8e5fec70c1c9b207751c163e55eb3d92935b4751830af771b46a89ce2a57c21892bb89650920cc462fcc6684b97f87781ded9b54bfbb534efed554b395ae219133b6fdbe70c4cee4b7c05"], 0xfffffffffffffe2f}, 0x1, 0x0, 0x0, 0x400c0c1}, 0x4000) r12 = getpid() sched_setattr(r12, 0x0, 0x0) sched_setscheduler(r12, 0x2, &(0x7f0000000180)=0x9) ptrace(0x11, r6) [ 1111.218564][T13534] syz-executor.1 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1111.237942][T13534] CPU: 1 PID: 13534 Comm: syz-executor.1 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1111.247063][T13534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1111.257108][T13534] Call Trace: [ 1111.257139][T13534] dump_stack+0x172/0x1f0 [ 1111.257159][T13534] dump_header+0x177/0x1152 [ 1111.257179][T13534] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1111.264745][T13534] ? ___ratelimit+0x2c8/0x595 [ 1111.264759][T13534] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1111.264779][T13534] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1111.290766][T13534] ? trace_hardirqs_on+0x67/0x240 [ 1111.295797][T13534] ? pagefault_out_of_memory+0x11c/0x11c [ 1111.301421][T13534] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1111.307205][T13534] ? ___ratelimit+0x60/0x595 [ 1111.311769][T13534] ? do_raw_spin_unlock+0x57/0x270 [ 1111.316860][T13534] oom_kill_process.cold+0x10/0x15 [ 1111.321947][T13534] out_of_memory+0x334/0x1340 [ 1111.326612][T13534] ? lock_downgrade+0x920/0x920 [ 1111.331483][T13534] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1111.337308][T13534] ? oom_killer_disable+0x280/0x280 [ 1111.342525][T13534] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1111.348047][T13534] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1111.353665][T13534] ? do_raw_spin_unlock+0x57/0x270 [ 1111.358759][T13534] ? _raw_spin_unlock+0x2d/0x50 [ 1111.363589][T13534] try_charge+0xf4b/0x1440 [ 1111.367990][T13534] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1111.373516][T13534] ? find_held_lock+0x35/0x130 [ 1111.378259][T13534] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1111.383791][T13534] ? lock_downgrade+0x920/0x920 [ 1111.388628][T13534] ? percpu_ref_tryget_live+0x111/0x290 [ 1111.394173][T13534] __memcg_kmem_charge_memcg+0x71/0xf0 [ 1111.399619][T13534] ? memcg_kmem_put_cache+0x50/0x50 [ 1111.404820][T13534] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1111.410348][T13534] __memcg_kmem_charge+0x13a/0x3a0 [ 1111.415442][T13534] __alloc_pages_nodemask+0x4f7/0x900 [ 1111.420793][T13534] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1111.426319][T13534] ? __alloc_pages_slowpath+0x2540/0x2540 [ 1111.432021][T13534] ? kasan_unpoison_shadow+0x35/0x50 [ 1111.437288][T13534] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1111.443509][T13534] alloc_pages_current+0x107/0x210 [ 1111.448605][T13534] __vmalloc_node_range+0x4a9/0x7e0 [ 1111.453809][T13534] __vmalloc+0x44/0x50 [ 1111.457863][T13534] ? vmx_vm_alloc+0x44/0x60 [ 1111.462345][T13534] vmx_vm_alloc+0x44/0x60 [ 1111.466654][T13534] kvm_dev_ioctl+0x1bf/0x1650 [ 1111.471312][T13534] ? kvm_debugfs_release+0x90/0x90 [ 1111.476403][T13534] ? kvm_debugfs_release+0x90/0x90 [ 1111.481492][T13534] do_vfs_ioctl+0xdb6/0x13e0 [ 1111.486070][T13534] ? ioctl_preallocate+0x210/0x210 [ 1111.491162][T13534] ? __fget+0x384/0x560 [ 1111.495321][T13534] ? ksys_dup3+0x3e0/0x3e0 [ 1111.499724][T13534] ? nsecs_to_jiffies+0x30/0x30 [ 1111.504561][T13534] ? tomoyo_file_ioctl+0x23/0x30 [ 1111.509480][T13534] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1111.515719][T13534] ? security_file_ioctl+0x8d/0xc0 [ 1111.520831][T13534] ksys_ioctl+0xab/0xd0 [ 1111.524990][T13534] __x64_sys_ioctl+0x73/0xb0 [ 1111.529576][T13534] do_syscall_64+0xfa/0x760 [ 1111.534075][T13534] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1111.539954][T13534] RIP: 0033:0x459879 [ 1111.543838][T13534] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1111.563910][T13534] RSP: 002b:00007feecf6fcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1111.572320][T13534] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459879 [ 1111.580288][T13534] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000005 [ 1111.588247][T13534] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1111.596200][T13534] R10: 0000000000000000 R11: 0000000000000246 R12: 00007feecf6fd6d4 [ 1111.604153][T13534] R13: 00000000004c2808 R14: 00000000004d5e48 R15: 00000000ffffffff [ 1111.621587][T13534] memory: usage 307200kB, limit 307200kB, failcnt 26 [ 1111.634078][T13534] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1111.657226][T13534] Memory cgroup stats for /syz1: [ 1111.657562][T13534] anon 277721088 [ 1111.657562][T13534] file 0 [ 1111.657562][T13534] kernel_stack 5636096 [ 1111.657562][T13534] slab 10276864 [ 1111.657562][T13534] sock 2592768 [ 1111.657562][T13534] shmem 0 [ 1111.657562][T13534] file_mapped 0 [ 1111.657562][T13534] file_dirty 0 [ 1111.657562][T13534] file_writeback 0 [ 1111.657562][T13534] anon_thp 262144000 [ 1111.657562][T13534] inactive_anon 0 [ 1111.657562][T13534] active_anon 277721088 [ 1111.657562][T13534] inactive_file 0 [ 1111.657562][T13534] active_file 0 [ 1111.657562][T13534] unevictable 0 [ 1111.657562][T13534] slab_reclaimable 1757184 [ 1111.657562][T13534] slab_unreclaimable 8519680 21:41:54 executing program 5: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ppoll(&(0x7f0000000000)=[{r0}, {r1, 0x100}], 0x2, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 21:41:54 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffe3000) 21:41:54 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x2ffff) 21:41:54 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="6b7f9bfde3636ea942161826c68901068d12939fd7ef4104309565a701", 0x1d, 0x1080, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, 0x0, 0x0) [ 1111.657562][T13534] pgfault 8877 [ 1111.657562][T13534] pgmajfault 0 [ 1111.657562][T13534] workingset_refault 0 [ 1111.657562][T13534] workingset_activate 0 [ 1111.657562][T13534] workingset_nodereclaim 0 [ 1111.657562][T13534] pgrefill 74 [ 1111.657562][T13534] pgscan 66 [ 1111.657562][T13534] pgsteal 0 [ 1111.657562][T13534] pgactivate 33 21:41:54 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x30fff) 21:41:54 executing program 2: syz_genetlink_get_family_id$SEG6(&(0x7f0000001080)='SEG6\x00') r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x401, 0x80000) syz_init_net_socket$netrom(0x6, 0x5, 0x0) read$char_usb(r1, &(0x7f0000000040)=""/4096, 0x1000) fremovexattr(0xffffffffffffffff, &(0x7f0000001040)=@random={'os2.', '\x00'}) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, 0x0, 0x0) 21:41:54 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x21fffffff) [ 1111.917212][T13534] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=12921,uid=0 [ 1111.942510][T13534] Memory cgroup out of memory: Killed process 12921 (syz-executor.1) total-vm:73104kB, anon-rss:4268kB, file-rss:35812kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 [ 1112.014357][ T1066] [ 1112.016711][ T1066] ============================================ [ 1112.022889][ T1066] WARNING: possible recursive locking detected [ 1112.029035][ T1066] 5.3.0-rc6-next-20190830 #75 Not tainted [ 1112.034744][ T1066] -------------------------------------------- [ 1112.040888][ T1066] oom_reaper/1066 is trying to acquire lock: [ 1112.046857][ T1066] ffffffff8904ff60 (mmu_notifier_invalidate_range_start){+.+.}, at: __mmu_notifier_invalidate_range_end+0x0/0x360 [ 1112.051865][T13533] kobject: 'kvm' (00000000bdd5f871): kobject_uevent_env [ 1112.058836][ T1066] [ 1112.058836][ T1066] but task is already holding lock: [ 1112.058842][ T1066] ffffffff8904ff60 (mmu_notifier_invalidate_range_start){+.+.}, at: __oom_reap_task_mm+0x196/0x490 [ 1112.058872][ T1066] [ 1112.058872][ T1066] other info that might help us debug this: [ 1112.058875][ T1066] Possible unsafe locking scenario: [ 1112.058875][ T1066] [ 1112.058877][ T1066] CPU0 [ 1112.058887][ T1066] ---- [ 1112.074803][T13536] kobject: 'kvm' (00000000bdd5f871): kobject_uevent_env [ 1112.083793][ T1066] lock(mmu_notifier_invalidate_range_start); [ 1112.083801][ T1066] lock(mmu_notifier_invalidate_range_start); [ 1112.083808][ T1066] [ 1112.083808][ T1066] *** DEADLOCK *** [ 1112.083808][ T1066] [ 1112.083811][ T1066] May be due to missing lock nesting notation [ 1112.083811][ T1066] [ 1112.083819][ T1066] 2 locks held by oom_reaper/1066: [ 1112.083821][ T1066] #0: ffff88805ec14f50 (&mm->mmap_sem#2){++++}, at: oom_reaper+0x3a7/0x1320 [ 1112.083855][ T1066] #1: ffffffff8904ff60 (mmu_notifier_invalidate_range_start){+.+.}, at: __oom_reap_task_mm+0x196/0x490 [ 1112.098868][T13533] kobject: 'kvm' (00000000bdd5f871): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1112.099325][ T1066] [ 1112.099325][ T1066] stack backtrace: [ 1112.099339][ T1066] CPU: 0 PID: 1066 Comm: oom_reaper Not tainted 5.3.0-rc6-next-20190830 #75 [ 1112.099352][ T1066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1112.102854][T13536] kobject: 'kvm' (00000000bdd5f871): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1112.105872][ T1066] Call Trace: [ 1112.105891][ T1066] dump_stack+0x172/0x1f0 [ 1112.105906][ T1066] __lock_acquire.cold+0x15d/0x385 [ 1112.105925][ T1066] ? mark_held_locks+0xf0/0xf0 [ 1112.227817][ T1066] ? unmap_page_range+0x1df4/0x2380 [ 1112.233009][ T1066] lock_acquire+0x190/0x410 [ 1112.237491][ T1066] ? __mmu_notifier_invalidate_range_start+0x210/0x210 [ 1112.244315][ T1066] __mmu_notifier_invalidate_range_end+0x3c/0x360 [ 1112.250707][ T1066] ? __mmu_notifier_invalidate_range_start+0x210/0x210 [ 1112.257529][ T1066] ? __mmu_notifier_invalidate_range_start+0x1a5/0x210 [ 1112.264352][ T1066] __oom_reap_task_mm+0x3fa/0x490 [ 1112.269356][ T1066] ? process_shares_mm+0x130/0x130 [ 1112.274454][ T1066] ? oom_reaper+0x3a7/0x1320 [ 1112.279023][ T1066] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1112.285247][ T1066] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 1112.291216][ T1066] ? __kasan_check_read+0x11/0x20 [ 1112.296214][ T1066] ? do_raw_spin_unlock+0x57/0x270 [ 1112.301302][ T1066] oom_reaper+0x2b2/0x1320 [ 1112.305695][ T1066] ? lock_downgrade+0x920/0x920 [ 1112.310524][ T1066] ? __oom_reap_task_mm+0x490/0x490 [ 1112.315704][ T1066] ? trace_hardirqs_on+0x67/0x240 [ 1112.320704][ T1066] ? finish_wait+0x260/0x260 [ 1112.325271][ T1066] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1112.331486][ T1066] ? __kthread_parkme+0x108/0x1c0 [ 1112.336486][ T1066] ? __kasan_check_read+0x11/0x20 [ 1112.341486][ T1066] kthread+0x361/0x430 [ 1112.345534][ T1066] ? __oom_reap_task_mm+0x490/0x490 [ 1112.350712][ T1066] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 1112.356932][ T1066] ret_from_fork+0x24/0x30 21:41:54 executing program 5: r0 = io_uring_setup(0xa4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r3, 0x0, 0x30005, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x110, 0x5, &(0x7f00000000c0)=[0x3, 0x4], 0x2) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$RNDADDTOENTCNT(r4, 0x40045201, &(0x7f0000000080)=0x6) ppoll(&(0x7f0000000000)=[{r0, 0x311}, {r1, 0x100}], 0x2, 0x0, 0x0, 0x0) [ 1112.364775][ T3892] kobject: 'loop2' (00000000e6b32cdb): kobject_uevent_env [ 1112.377749][ T3892] kobject: 'loop2' (00000000e6b32cdb): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1112.389475][ T3892] kobject: 'loop5' (00000000c2f21abe): kobject_uevent_env [ 1112.396766][ T3892] kobject: 'loop5' (00000000c2f21abe): fill_kobj_path: path = '/devices/virtual/block/loop5' 21:41:55 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, 0x0, 0x0) sendto(r0, &(0x7f0000000000)="c2ac46f379ca0df8411049bc3e604ff93f57cb", 0x13, 0x24044894, 0x0, 0x0) [ 1112.412063][ T3892] kobject: 'loop0' (00000000483e2afa): kobject_uevent_env [ 1112.419719][ T3892] kobject: 'loop0' (00000000483e2afa): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1112.432752][T13530] syz-executor.1 invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=0, oom_score_adj=1000 [ 1112.485493][ T1066] oom_reaper: reaped process 12921 (syz-executor.1), now anon-rss:0kB, file-rss:34852kB, shmem-rss:0kB [ 1112.501626][T13530] CPU: 1 PID: 13530 Comm: syz-executor.1 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1112.509133][T13532] kobject: 'kvm' (00000000bdd5f871): kobject_uevent_env [ 1112.510741][T13530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1112.510746][T13530] Call Trace: [ 1112.510765][T13530] dump_stack+0x172/0x1f0 [ 1112.510784][T13530] dump_header+0x177/0x1152 [ 1112.517903][T13532] kobject: 'kvm' (00000000bdd5f871): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1112.527727][T13530] ? ___ratelimit+0xf8/0x595 [ 1112.527742][T13530] ? trace_hardirqs_on+0x67/0x240 [ 1112.527757][T13530] ? pagefault_out_of_memory+0x11c/0x11c [ 1112.527776][T13530] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1112.547193][T13532] kobject: 'kvm' (00000000bdd5f871): kobject_uevent_env [ 1112.549514][T13530] ? ___ratelimit+0x60/0x595 [ 1112.549525][T13530] ? do_raw_spin_unlock+0x57/0x270 [ 1112.549542][T13530] oom_kill_process.cold+0x10/0x15 [ 1112.554224][T13532] kobject: 'kvm' (00000000bdd5f871): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1112.559125][T13530] out_of_memory+0x334/0x1340 [ 1112.559139][T13530] ? lock_downgrade+0x920/0x920 [ 1112.559154][T13530] ? oom_killer_disable+0x280/0x280 [ 1112.559173][T13530] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1112.559193][T13530] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1112.627159][ T3892] kobject: 'loop4' (000000005cdad202): kobject_uevent_env [ 1112.628022][T13530] ? do_raw_spin_unlock+0x57/0x270 [ 1112.635118][ T3892] kobject: 'loop4' (000000005cdad202): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1112.640184][T13530] ? _raw_spin_unlock+0x2d/0x50 [ 1112.640200][T13530] try_charge+0xa2d/0x1440 [ 1112.640218][T13530] ? __lock_acquire+0x800/0x4a00 [ 1112.664478][T13530] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1112.670024][T13530] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 1112.675998][T13530] ? cache_grow_begin+0x122/0xd20 [ 1112.681021][T13530] ? find_held_lock+0x35/0x130 [ 1112.685876][T13530] ? cache_grow_begin+0x122/0xd20 [ 1112.690901][T13530] __memcg_kmem_charge_memcg+0x71/0xf0 [ 1112.696441][T13530] ? memcg_kmem_put_cache+0x50/0x50 [ 1112.698865][ T3892] kobject: 'loop2' (00000000e6b32cdb): kobject_uevent_env [ 1112.701633][T13530] ? __kasan_check_read+0x11/0x20 [ 1112.713720][T13530] cache_grow_begin+0x629/0xd20 [ 1112.714230][ T3892] kobject: 'loop2' (00000000e6b32cdb): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1112.718577][T13530] ? __sanitizer_cov_trace_cmp2+0x11/0x20 [ 1112.718591][T13530] ? mempolicy_slab_node+0x139/0x390 [ 1112.718602][T13530] fallback_alloc+0x1fd/0x2d0 [ 1112.718618][T13530] ____cache_alloc_node+0x1bc/0x1d0 [ 1112.736544][T13581] kobject: 'kvm' (00000000bdd5f871): kobject_uevent_env [ 1112.739724][T13530] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1112.739744][T13530] kmem_cache_alloc+0x1ef/0x710 [ 1112.739765][T13530] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1112.745133][T13581] kobject: 'kvm' (00000000bdd5f871): fill_kobj_path: path = '/devices/virtual/misc/kvm' 21:41:55 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x444000) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, &(0x7f0000000080)={0x0, {0x10000, 0x5}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 21:41:55 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000001c0)) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000200)={[], 0x1}) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000280)) ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f0000000000)={0x5, 0x8}) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, 0x0, 0x0) [ 1112.749599][T13530] vm_area_alloc+0x20/0x110 [ 1112.749612][T13530] mmap_region+0x964/0x1760 [ 1112.749628][T13530] ? __x64_sys_brk+0x760/0x760 [ 1112.749642][T13530] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1112.749659][T13530] ? get_unmapped_area+0x2ad/0x3d0 [ 1112.797946][T13580] kobject: 'kvm' (00000000bdd5f871): kobject_uevent_env [ 1112.803282][T13530] do_mmap+0x853/0x1190 [ 1112.803301][T13530] vm_mmap_pgoff+0x1c5/0x230 [ 1112.808546][T13580] kobject: 'kvm' (00000000bdd5f871): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1112.815300][T13530] ? randomize_stack_top+0x110/0x110 [ 1112.815312][T13530] ? __kasan_check_read+0x11/0x20 [ 1112.815327][T13530] ? _copy_to_user+0x118/0x160 [ 1112.848708][T13530] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1112.854930][T13530] ksys_mmap_pgoff+0xf7/0x630 [ 1112.859587][T13530] ? find_mergeable_anon_vma+0x2e0/0x2e0 [ 1112.865206][T13530] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 1112.870640][T13530] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 1112.876090][T13530] ? do_syscall_64+0x26/0x760 [ 1112.880750][T13530] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1112.886800][T13530] __x64_sys_mmap+0xe9/0x1b0 [ 1112.891379][T13530] do_syscall_64+0xfa/0x760 [ 1112.895863][T13530] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1112.901756][T13530] RIP: 0033:0x4598ca [ 1112.905637][T13530] Code: 89 f5 41 54 49 89 fc 55 53 74 35 49 63 e8 48 63 da 4d 89 f9 49 89 e8 4d 63 d6 48 89 da 4c 89 ee 4c 89 e7 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 4e 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 00 [ 1112.925215][T13530] RSP: 002b:00007ffe8e941058 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1112.933607][T13530] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000004598ca [ 1112.941563][T13530] RDX: 0000000000000003 RSI: 0000000000021000 RDI: 0000000000000000 [ 1112.949514][T13530] RBP: ffffffffffffffff R08: ffffffffffffffff R09: 0000000000000000 [ 1112.957469][T13530] R10: 0000000000020022 R11: 0000000000000246 R12: 0000000000000000 [ 1112.965422][T13530] R13: 0000000000021000 R14: 0000000000020022 R15: 0000000000000000 [ 1112.984120][T13530] memory: usage 302792kB, limit 307200kB, failcnt 26 [ 1113.001653][T13530] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1113.003398][T13581] kobject: 'kvm' (00000000bdd5f871): kobject_uevent_env [ 1113.010012][T13530] Memory cgroup stats for /syz1: [ 1113.010106][T13530] anon 273522688 [ 1113.010106][T13530] file 0 [ 1113.010106][T13530] kernel_stack 5570560 [ 1113.010106][T13530] slab 10276864 [ 1113.010106][T13530] sock 2592768 [ 1113.010106][T13530] shmem 0 [ 1113.010106][T13530] file_mapped 0 [ 1113.010106][T13530] file_dirty 0 [ 1113.010106][T13530] file_writeback 0 [ 1113.010106][T13530] anon_thp 257949696 [ 1113.010106][T13530] inactive_anon 0 [ 1113.010106][T13530] active_anon 273522688 [ 1113.010106][T13530] inactive_file 0 [ 1113.010106][T13530] active_file 0 [ 1113.010106][T13530] unevictable 0 [ 1113.010106][T13530] slab_reclaimable 1757184 [ 1113.010106][T13530] slab_unreclaimable 8519680 [ 1113.010106][T13530] pgfault 8877 [ 1113.010106][T13530] pgmajfault 0 [ 1113.010106][T13530] workingset_refault 0 [ 1113.010106][T13530] workingset_activate 0 [ 1113.010106][T13530] workingset_nodereclaim 0 [ 1113.010106][T13530] pgrefill 74 [ 1113.010106][T13530] pgscan 66 [ 1113.010106][T13530] pgsteal 0 [ 1113.010106][T13530] pgactivate 33 [ 1113.115561][T13581] kobject: 'kvm' (00000000bdd5f871): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1113.125469][T13530] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=13257,uid=0 [ 1113.137786][T13581] kobject: 'kvm' (00000000bdd5f871): kobject_uevent_env [ 1113.149701][T13530] Memory cgroup out of memory: Killed process 13257 (syz-executor.1) total-vm:72972kB, anon-rss:4260kB, file-rss:35808kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 [ 1113.156269][T13581] kobject: 'kvm' (00000000bdd5f871): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1113.168701][ T3892] kobject: 'loop3' (0000000089db930c): kobject_uevent_env [ 1113.194118][T13534] kobject: 'kvm' (00000000bdd5f871): kobject_uevent_env [ 1113.198975][ T3892] kobject: 'loop3' (0000000089db930c): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1113.205458][T13534] kobject: 'kvm' (00000000bdd5f871): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1113.238059][ T3892] kobject: 'loop0' (00000000483e2afa): kobject_uevent_env [ 1113.245611][ T3892] kobject: 'loop0' (00000000483e2afa): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1113.252337][T13593] kobject: 'kvm' (00000000bdd5f871): kobject_uevent_env [ 1113.257379][ T3892] kobject: 'loop5' (00000000c2f21abe): kobject_uevent_env [ 1113.265230][T13593] kobject: 'kvm' (00000000bdd5f871): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1113.270011][ T3892] kobject: 'loop5' (00000000c2f21abe): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1113.291573][ T3892] kobject: 'loop2' (00000000e6b32cdb): kobject_uevent_env [ 1113.292297][T13530] kobject: 'kvm' (00000000bdd5f871): kobject_uevent_env [ 1113.298864][ T3892] kobject: 'loop2' (00000000e6b32cdb): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1113.308418][T13530] kobject: 'kvm' (00000000bdd5f871): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1113.369516][T13530] kobject: 'kvm' (00000000bdd5f871): kobject_uevent_env [ 1113.376496][T13530] kobject: 'kvm' (00000000bdd5f871): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1113.409430][T13534] kobject: 'kvm' (00000000bdd5f871): kobject_uevent_env [ 1113.416402][T13534] kobject: 'kvm' (00000000bdd5f871): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1113.434424][T13600] kobject: 'kvm' (00000000bdd5f871): kobject_uevent_env [ 1113.441776][T13600] kobject: 'kvm' (00000000bdd5f871): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1113.454088][T13600] kobject: 'kvm' (00000000bdd5f871): kobject_uevent_env 21:41:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)={0x0, 0x0, 0x7f}) ptrace(0x10, r1) r2 = syz_open_dev$rtc(&(0x7f00000000c0)='/dev/rtc#\x00', 0x20, 0x40) ioctl$RTC_PLL_SET(r2, 0x40207012, &(0x7f0000000100)={0x5, 0x2, 0x9, 0x7f, 0x95, 0x7, 0x638}) ptrace(0x11, r1) 21:41:56 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x31fff) 21:41:56 executing program 5: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000100)=ANY=[@ANYBLOB="88005300306fe728cec77175a55aab49bed1e2e87e87d9a5263de2a8ee4957e9e62eb813d840f260e598afb9c1635abd87ca8405588882248b88d2ac6dd8a23f8f5b27200bd3b0a474e2bc9881"]) ppoll(&(0x7f0000000000)=[{r0}, {r1, 0x100}], 0x2, 0x0, 0x0, 0x0) 21:41:56 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffbc000) 21:41:56 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000001c0)) r3 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x2, 0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) getresuid(&(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f0000000180)) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r7, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r6, 0x0, r7, 0x0, 0x30005, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000400)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x891008, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@loose='loose'}, {@aname={'aname', 0x3d, 'eth0'}}, {@aname={'aname', 0x3d, '/dev/kvm\x00'}}], [{@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@uid_eq={'uid', 0x3d, r5}}, {@uid_lt={'uid<', r8}}]}}) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000200)={[], 0x1}) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000280)) fchdir(r2) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, 0x0, 0x0) [ 1113.461391][T13600] kobject: 'kvm' (00000000bdd5f871): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1113.506703][ T3892] kobject: 'loop1' (00000000050f4364): kobject_uevent_env [ 1113.523607][T13612] kobject: 'kvm' (00000000bdd5f871): kobject_uevent_env [ 1113.532915][ T3892] kobject: 'loop1' (00000000050f4364): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1113.550312][T13612] kobject: 'kvm' (00000000bdd5f871): fill_kobj_path: path = '/devices/virtual/misc/kvm' 21:41:56 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x202100) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000080)={{0x2, 0x0, 0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000040)=[0x6, 0x3]) [ 1113.585064][T13612] kobject: 'kvm' (00000000bdd5f871): kobject_uevent_env [ 1113.598656][T13612] kobject: 'kvm' (00000000bdd5f871): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1113.623527][ T3892] kobject: 'loop4' (000000005cdad202): kobject_uevent_env 21:41:56 executing program 5: r0 = io_uring_setup(0xa4, &(0x7f0000000080)={0x0, 0x0, 0x2}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = open(&(0x7f0000001280)='./file0\x00', 0x520000, 0x10) ioctl$KVM_PPC_GET_PVINFO(r2, 0x4080aea1, &(0x7f00000012c0)=""/4096) r3 = epoll_create1(0x80000) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x4, &(0x7f0000002340)=ANY=[@ANYBLOB="1800000000000000000080000000000061158800000000009500000000000000ef38e043f13fb3d971827dc34c9aa914145d9eb2f328cf81969c275a7c592ff3937220859207b3feda"], &(0x7f0000000100)='GPL\x00'}, 0x48) bind$inet(r7, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r7, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r6, 0x0, r7, 0x0, 0x30005, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000002300)=0x2100, 0x4) ioctl$VFIO_IOMMU_UNMAP_DMA(r6, 0x3b72, &(0x7f00000022c0)={0x20, 0x2, 0x8, 0x4, 0xc0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FIBMAP(r9, 0x1, &(0x7f00000011c0)=0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r4, 0x0, r5, 0x0, 0x30005, 0x0) sendto$inet(r4, &(0x7f0000000140)="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", 0x1000, 0x48081, 0x0, 0x0) r10 = openat$audio(0xffffffffffffff9c, &(0x7f0000001200)='/dev/audio\x00', 0x80, 0x0) ioctl$PPPIOCGIDLE(r10, 0x8010743f, &(0x7f0000001240)) epoll_pwait(r3, &(0x7f0000000040)=[{}, {}, {}], 0x3, 0x401, &(0x7f0000000100)={0x6}, 0x8) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ppoll(&(0x7f0000000000)=[{r0, 0x4003}, {r1, 0x100}], 0x2, 0x0, 0x0, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000001140)) 21:41:56 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x32fff) 21:41:56 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) pipe2(&(0x7f00000000c0), 0x800) chdir(&(0x7f00000002c0)='./file0\x00') ptrace(0x8, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffbc000) [ 1113.651449][ T3892] kobject: 'loop4' (000000005cdad202): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1113.721032][ T3892] kobject: 'loop5' (00000000c2f21abe): kobject_uevent_env [ 1113.743779][ T3892] kobject: 'loop5' (00000000c2f21abe): fill_kobj_path: path = '/devices/virtual/block/loop5' 21:41:56 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x33fff) 21:41:56 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) r1 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x4, 0x442440) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)={0x20, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x300}]}]}, 0x39b}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400600}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)={0x1b8, r3, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x44, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffffffffeff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5b97}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xcf}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x28, 0x5, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x57ed}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb56a}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_LINK={0xcc, 0x4, [@TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x58d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9b88}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2fa3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}, @TIPC_NLA_BEARER={0x2c, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x87}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffff}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffbc000) [ 1113.773271][ T3892] kobject: 'loop3' (0000000089db930c): kobject_uevent_env [ 1113.791465][ T3892] kobject: 'loop3' (0000000089db930c): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1113.840462][ T3892] kobject: 'loop0' (00000000483e2afa): kobject_uevent_env [ 1113.850767][ T3892] kobject: 'loop0' (00000000483e2afa): fill_kobj_path: path = '/devices/virtual/block/loop0' 21:41:56 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x34fff) [ 1113.944539][ T3892] kobject: 'loop3' (0000000089db930c): kobject_uevent_env [ 1113.956137][ T3892] kobject: 'loop3' (0000000089db930c): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1114.000051][ T3892] kobject: 'loop0' (00000000483e2afa): kobject_uevent_env [ 1114.026681][ T3892] kobject: 'loop0' (00000000483e2afa): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1114.060272][ T3892] kobject: 'loop3' (0000000089db930c): kobject_uevent_env [ 1114.068631][ T3892] kobject: 'loop3' (0000000089db930c): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1114.320355][T13609] kobject: 'kvm' (00000000bdd5f871): kobject_uevent_env [ 1114.327512][T13609] kobject: 'kvm' (00000000bdd5f871): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1114.357270][T13609] kobject: 'kvm' (00000000bdd5f871): kobject_uevent_env 21:41:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f0000000440)={{&(0x7f0000000340)=""/142, 0x8e}, &(0x7f0000000400), 0x48}, 0x20) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)) ptrace(0x10, r2) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r7, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r5, 0x0, r7, 0x0, 0x30005, 0x0) r8 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000140)='NET_DM\x00') syz_genetlink_get_family_id$net_dm(&(0x7f0000000240)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x418000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r8, 0x10, 0x70bd2b, 0x4, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x10) statx(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0, 0xb2f4220898abec55, &(0x7f00000004c0)) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r10 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r10, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r10, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r9, 0x0, r10, 0x0, 0x30005, 0x0) bind$inet(r6, &(0x7f00000002c0)={0x2, 0x4e22, @local}, 0x10) r11 = socket$inet(0x2, 0x800, 0x7) ioctl$FS_IOC_GETFLAGS(r11, 0x80086601, &(0x7f00000005c0)) splice(r3, 0x0, r4, 0x0, 0x30005, 0x0) setsockopt$packet_int(r3, 0x107, 0xb, &(0x7f00000000c0)=0xdf, 0x4) ptrace(0x11, r2) 21:41:57 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = socket$kcm(0x29, 0x7, 0x0) write$binfmt_elf32(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/1148], 0x47c) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x27}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffbc000) 21:41:57 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x35fff) [ 1114.364448][T13609] kobject: 'kvm' (00000000bdd5f871): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1114.375161][ T3892] kobject: 'loop1' (00000000050f4364): kobject_uevent_env [ 1114.391413][T13617] kobject: 'kvm' (00000000bdd5f871): kobject_uevent_env [ 1114.404887][ T3892] kobject: 'loop1' (00000000050f4364): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1114.415891][T13617] kobject: 'kvm' (00000000bdd5f871): fill_kobj_path: path = '/devices/virtual/misc/kvm' 21:41:57 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x101000) [ 1114.458733][T13668] kobject: 'kvm' (00000000bdd5f871): kobject_uevent_env [ 1114.512485][T13668] kobject: 'kvm' (00000000bdd5f871): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1114.523734][ T3892] kobject: 'loop4' (000000005cdad202): kobject_uevent_env [ 1114.534687][ T3892] kobject: 'loop4' (000000005cdad202): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1114.561586][T13609] kobject: 'kvm' (00000000bdd5f871): kobject_uevent_env [ 1114.582599][ T3892] kobject: 'loop3' (0000000089db930c): kobject_uevent_env [ 1114.586930][T13609] kobject: 'kvm' (00000000bdd5f871): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1114.589801][ T3892] kobject: 'loop3' (0000000089db930c): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1114.611199][ T3892] kobject: 'loop4' (000000005cdad202): kobject_uevent_env [ 1114.618562][ T3892] kobject: 'loop4' (000000005cdad202): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1114.637274][ T3892] kobject: 'loop0' (00000000483e2afa): kobject_uevent_env [ 1114.644517][ T3892] kobject: 'loop0' (00000000483e2afa): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1114.657354][T13609] kobject: 'kvm' (00000000bdd5f871): kobject_uevent_env [ 1114.666289][T13609] kobject: 'kvm' (00000000bdd5f871): fill_kobj_path: path = '/devices/virtual/misc/kvm' 21:41:57 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='loginuid\x00') sendfile(r0, r0, 0x0, 0x2) write$binfmt_elf32(r0, 0x0, 0x0) 21:41:57 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x36fff) 21:41:57 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x3, 0x500000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000040)={0x1, 0x7f, 0x9159}) 21:41:57 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3f, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000000)={0x0, 0x1, 0x0, [0x7000000], &(0x7f0000000200)={0x980912}}) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffbc000) 21:41:57 executing program 5: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r2, 0x40045730, &(0x7f0000000040)=0xaad0) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ppoll(&(0x7f0000000000)=[{r0}, {r1, 0x100}], 0x2, 0x0, 0x0, 0x0) [ 1114.730926][ T3892] kobject: 'loop5' (00000000c2f21abe): kobject_uevent_env [ 1114.765744][ T3892] kobject: 'loop5' (00000000c2f21abe): fill_kobj_path: path = '/devices/virtual/block/loop5' 21:41:57 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) [ 1114.796691][ T3892] kobject: 'loop2' (00000000e6b32cdb): kobject_uevent_env [ 1114.821281][ T3892] kobject: 'loop2' (00000000e6b32cdb): fill_kobj_path: path = '/devices/virtual/block/loop2' 21:41:57 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='loginuid\x00') sendfile(r0, r0, 0x0, 0x2) write$binfmt_elf32(r0, 0x0, 0x0) 21:41:57 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x8, 0x80000) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r4, 0x0, 0x30005, 0x0) getsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000240), &(0x7f0000000280)=0x4) r5 = getpgid(0xffffffffffffffff) ptrace$getenv(0x4201, r5, 0x81, &(0x7f0000000080)) write$cgroup_pid(r3, &(0x7f00000003c0)=r5, 0x12) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000080)=""/24, 0x18, 0x10120, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x184000) connect$rds(r6, &(0x7f0000000380)={0x2, 0x4e24, @multicast2}, 0x10) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000100)=""/195) [ 1114.852205][ T3892] kobject: 'loop4' (000000005cdad202): kobject_uevent_env [ 1114.876963][ T3892] kobject: 'loop4' (000000005cdad202): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1114.947785][ T3892] kobject: 'loop3' (0000000089db930c): kobject_uevent_env [ 1114.954947][ T3892] kobject: 'loop3' (0000000089db930c): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1115.000334][ T3892] kobject: 'loop2' (00000000e6b32cdb): kobject_uevent_env [ 1115.007702][ T3892] kobject: 'loop2' (00000000e6b32cdb): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1115.022495][ T3892] kobject: 'loop0' (00000000483e2afa): kobject_uevent_env [ 1115.031416][ T3892] kobject: 'loop0' (00000000483e2afa): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1115.073649][ T3892] kobject: 'loop4' (000000005cdad202): kobject_uevent_env [ 1115.080913][ T3892] kobject: 'loop4' (000000005cdad202): fill_kobj_path: path = '/devices/virtual/block/loop4' 21:41:57 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='loginuid\x00') sendfile(r0, r0, 0x0, 0x2) write$binfmt_elf32(r0, 0x0, 0x0) 21:41:57 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x37fff) 21:41:57 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000001c0)) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000200)={[], 0x1}) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000280)) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x3a}], 0x2, 0xfffbc000) 21:41:57 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f00000001c0)) socket$nl_crypto(0x10, 0x3, 0x15) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000200)={[], 0x1}) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000280)) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000100)={0x3, 0xa490, 0x5, 0x0, 0x0, [{r3, 0x0, 0x505}, {r0, 0x0, 0x8}, {r0, 0x0, 0xffff}, {r0, 0x0, 0xb18}, {0xffffffffffffffff, 0x0, 0x5}]}) 21:41:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() r2 = getpgid(0xffffffffffffffff) ptrace$getenv(0x4201, r2, 0x81, &(0x7f0000000080)) rt_tgsigqueueinfo(r1, 0xffffffffffffffff, 0x16, &(0x7f0000000000)={0x11, 0x0, 0x800}) ptrace(0x10, r1) ptrace(0x11, r1) 21:41:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) r2 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x80000000, 0x100) ioctl$TUNSETOWNER(r2, 0x400454cc, 0xee01) ptrace(0x11, r1) [ 1115.246163][T13726] kobject: 'kvm' (00000000bdd5f871): kobject_uevent_env [ 1115.255329][ T3892] kobject: 'loop1' (00000000050f4364): kobject_uevent_env [ 1115.268603][ T3892] kobject: 'loop1' (00000000050f4364): fill_kobj_path: path = '/devices/virtual/block/loop1' 21:41:57 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='loginuid\x00') sendfile(r0, r0, 0x0, 0x2) write$binfmt_elf32(r0, 0x0, 0x0) [ 1115.288324][T13726] kobject: 'kvm' (00000000bdd5f871): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1115.321253][T13739] kobject: 'kvm' (00000000bdd5f871): kobject_uevent_env [ 1115.340495][ T3892] kobject: 'loop2' (00000000e6b32cdb): kobject_uevent_env [ 1115.359092][T13730] kobject: 'kvm' (00000000bdd5f871): kobject_uevent_env 21:41:58 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x38fff) [ 1115.366478][ T3892] kobject: 'loop2' (00000000e6b32cdb): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1115.373970][T13739] kobject: 'kvm' (00000000bdd5f871): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1115.377434][T13730] kobject: 'kvm' (00000000bdd5f871): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1115.402995][ T3892] kobject: 'loop1' (00000000050f4364): kobject_uevent_env [ 1115.405102][T13724] kobject: 'kvm' (00000000bdd5f871): kobject_uevent_env [ 1115.414414][ T3892] kobject: 'loop1' (00000000050f4364): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1115.431062][ T3892] kobject: 'loop2' (00000000e6b32cdb): kobject_uevent_env [ 1115.439443][ T3892] kobject: 'loop2' (00000000e6b32cdb): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1115.452892][ T3892] kobject: 'loop3' (0000000089db930c): kobject_uevent_env [ 1115.456563][T13724] kobject: 'kvm' (00000000bdd5f871): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1115.480366][ T3892] kobject: 'loop3' (0000000089db930c): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1115.481099][T13725] kobject: 'kvm' (00000000bdd5f871): kobject_uevent_env [ 1115.508322][T13724] kobject: 'kvm' (00000000bdd5f871): kobject_uevent_env [ 1115.552955][T13724] kobject: 'kvm' (00000000bdd5f871): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1115.619477][T13725] kobject: 'kvm' (00000000bdd5f871): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1115.620548][T13726] kobject: 'kvm' (00000000bdd5f871): kobject_uevent_env [ 1115.648784][T13739] kobject: 'kvm' (00000000bdd5f871): kobject_uevent_env [ 1115.655777][T13739] kobject: 'kvm' (00000000bdd5f871): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1115.668441][T13726] kobject: 'kvm' (00000000bdd5f871): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1115.693745][T13730] kobject: 'kvm' (00000000bdd5f871): kobject_uevent_env [ 1115.698788][T13726] kobject: 'kvm' (00000000bdd5f871): kobject_uevent_env [ 1115.707731][T13726] kobject: 'kvm' (00000000bdd5f871): fill_kobj_path: path = '/devices/virtual/misc/kvm' 21:41:58 executing program 5: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x800000, 0x0) ioctl$UI_GET_VERSION(r2, 0x8004552d, &(0x7f0000000100)) r3 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x0, 0x10d900) ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f0000000180)={0x9c7}) ppoll(&(0x7f0000000000)=[{r0}, {r1, 0x100}], 0x2, 0x0, 0x0, 0x0) 21:41:58 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='loginuid\x00') sendfile(r0, r0, 0x0, 0x2) 21:41:58 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x39fff) [ 1115.716148][T13730] kobject: 'kvm' (00000000bdd5f871): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1115.732997][ T3892] kobject: 'loop5' (00000000c2f21abe): kobject_uevent_env [ 1115.750383][T13726] kobject: 'kvm' (00000000bdd5f871): kobject_uevent_env [ 1115.753333][ T3892] kobject: 'loop5' (00000000c2f21abe): fill_kobj_path: path = '/devices/virtual/block/loop5' 21:41:58 executing program 2: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) 21:41:58 executing program 4: ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000080)={0x34, 0x0, &(0x7f0000000040)}) r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) socket$l2tp(0x18, 0x1, 0x1) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) [ 1115.783839][T13726] kobject: 'kvm' (00000000bdd5f871): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1115.809290][T13730] kobject: 'kvm' (00000000bdd5f871): kobject_uevent_env [ 1115.821211][ T3892] kobject: 'loop2' (00000000e6b32cdb): kobject_uevent_env 21:41:58 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x3afff) [ 1115.834121][ T3892] kobject: 'loop2' (00000000e6b32cdb): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1115.850320][T13730] kobject: 'kvm' (00000000bdd5f871): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1115.855766][ T3892] kobject: 'loop4' (000000005cdad202): kobject_uevent_env [ 1115.875371][ T3892] kobject: 'loop4' (000000005cdad202): fill_kobj_path: path = '/devices/virtual/block/loop4' 21:41:58 executing program 2: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) 21:41:58 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 21:41:58 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x6, 0xb4b77ae4dd6b1ffa) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={0x0, 0x6}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000240)={r2, 0x3}, &(0x7f0000000300)=0x8) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r3, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffbc000) [ 1115.926462][ T3892] kobject: 'loop4' (000000005cdad202): kobject_uevent_env [ 1115.934186][ T3892] kobject: 'loop4' (000000005cdad202): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1115.966057][ T3892] kobject: 'loop3' (0000000089db930c): kobject_uevent_env [ 1115.986161][ T3892] kobject: 'loop3' (0000000089db930c): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1115.999048][ T3892] kobject: 'loop5' (00000000c2f21abe): kobject_uevent_env [ 1116.025318][ T3892] kobject: 'loop5' (00000000c2f21abe): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1116.067314][ T3892] kobject: 'loop0' (00000000483e2afa): kobject_uevent_env [ 1116.080308][ T3892] kobject: 'loop0' (00000000483e2afa): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1116.091993][ T3892] kobject: 'loop2' (00000000e6b32cdb): kobject_uevent_env [ 1116.099329][ T3892] kobject: 'loop2' (00000000e6b32cdb): fill_kobj_path: path = '/devices/virtual/block/loop2' 21:41:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000088912, &(0x7f00000000c0)="11dca5f070") clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() r2 = gettid() rt_tgsigqueueinfo(r1, r2, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace(0x11, r1) 21:41:58 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ppoll(&(0x7f0000000000)=[{}, {r0, 0x100}], 0x2, 0x0, 0x0, 0x0) 21:41:58 executing program 2: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) 21:41:58 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='loginuid\x00') sendfile(r0, r0, 0x0, 0x2) write$binfmt_elf32(r0, 0x0, 0x0) 21:41:58 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x3bfff) [ 1116.111888][ T3892] kobject: 'loop3' (0000000089db930c): kobject_uevent_env [ 1116.119109][ T3892] kobject: 'loop3' (0000000089db930c): fill_kobj_path: path = '/devices/virtual/block/loop3' 21:41:58 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x2) [ 1116.185402][ T3892] kobject: 'loop1' (00000000050f4364): kobject_uevent_env [ 1116.204816][ T3892] kobject: 'loop1' (00000000050f4364): fill_kobj_path: path = '/devices/virtual/block/loop1' 21:41:58 executing program 5: r0 = io_uring_setup(0xa4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ppoll(&(0x7f0000000000)=[{r0}, {r1, 0x100}], 0x2, 0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x4) ioctl$PPPIOCGDEBUG(r2, 0x80047441, &(0x7f0000000100)) 21:41:59 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='loginuid\x00') sendfile(r0, r0, 0x0, 0x2) write$binfmt_elf32(r0, 0x0, 0x0) [ 1116.284557][ T3892] kobject: 'loop2' (00000000e6b32cdb): kobject_uevent_env 21:41:59 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x3cfff) [ 1116.329651][T13805] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 1116.351722][ T3892] kobject: 'loop2' (00000000e6b32cdb): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1116.376974][T13805] CPU: 0 PID: 13805 Comm: syz-executor.1 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1116.385277][ T3892] kobject: 'loop5' (00000000c2f21abe): kobject_uevent_env [ 1116.386103][T13805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1116.403230][T13805] Call Trace: [ 1116.406510][T13805] dump_stack+0x172/0x1f0 [ 1116.410841][T13805] dump_header+0x177/0x1152 [ 1116.415326][T13805] ? ___ratelimit+0xf8/0x595 [ 1116.419901][T13805] ? trace_hardirqs_on+0x67/0x240 [ 1116.424903][T13805] ? pagefault_out_of_memory+0x11c/0x11c [ 1116.430518][T13805] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1116.436303][T13805] ? ___ratelimit+0x60/0x595 [ 1116.440874][T13805] ? do_raw_spin_unlock+0x57/0x270 [ 1116.445966][T13805] oom_kill_process.cold+0x10/0x15 [ 1116.451057][T13805] out_of_memory+0x334/0x1340 [ 1116.455715][T13805] ? lock_downgrade+0x920/0x920 [ 1116.460558][T13805] ? oom_killer_disable+0x280/0x280 [ 1116.465758][T13805] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1116.471280][T13805] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1116.476902][T13805] ? do_raw_spin_unlock+0x57/0x270 [ 1116.481990][T13805] ? _raw_spin_unlock+0x2d/0x50 [ 1116.486823][T13805] try_charge+0xf4b/0x1440 [ 1116.491224][T13805] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1116.496748][T13805] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1116.502268][T13805] ? __kasan_check_read+0x11/0x20 [ 1116.507288][T13805] ? lock_downgrade+0x920/0x920 [ 1116.512126][T13805] ? percpu_ref_tryget_live+0x111/0x290 [ 1116.517661][T13805] __memcg_kmem_charge_memcg+0x71/0xf0 [ 1116.523104][T13805] ? memcg_kmem_put_cache+0x50/0x50 [ 1116.528285][T13805] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1116.533810][T13805] __memcg_kmem_charge+0x13a/0x3a0 [ 1116.538908][T13805] __alloc_pages_nodemask+0x4f7/0x900 [ 1116.544277][T13805] ? __alloc_pages_slowpath+0x2540/0x2540 [ 1116.549974][T13805] ? percpu_ref_put_many+0xb6/0x190 [ 1116.555150][T13805] ? trace_hardirqs_on+0x67/0x240 [ 1116.560156][T13805] ? __kasan_check_read+0x11/0x20 [ 1116.565179][T13805] copy_process+0x3f8/0x6830 [ 1116.569767][T13805] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1116.576015][T13805] ? __cleanup_sighand+0x60/0x60 [ 1116.580935][T13805] ? sock_ioctl+0x489/0x780 [ 1116.585419][T13805] ? __might_fault+0x12b/0x1e0 [ 1116.590163][T13805] ? __kasan_check_read+0x11/0x20 [ 1116.595169][T13805] _do_fork+0x146/0xfa0 [ 1116.599308][T13805] ? copy_init_mm+0x20/0x20 [ 1116.603790][T13805] ? __kasan_check_read+0x11/0x20 [ 1116.608787][T13805] ? _copy_to_user+0x118/0x160 [ 1116.613542][T13805] __x64_sys_clone+0x1ab/0x270 [ 1116.618290][T13805] ? __ia32_sys_vfork+0xd0/0xd0 [ 1116.623124][T13805] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1116.629170][T13805] ? trace_hardirqs_off_caller+0x65/0x230 [ 1116.634864][T13805] ? trace_hardirqs_on+0x67/0x240 [ 1116.639866][T13805] do_syscall_64+0xfa/0x760 [ 1116.644370][T13805] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1116.650240][T13805] RIP: 0033:0x459879 [ 1116.654114][T13805] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1116.673695][T13805] RSP: 002b:00007feecf6fcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1116.682084][T13805] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000459879 [ 1116.690046][T13805] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 00000000000041fc [ 1116.697994][T13805] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 1116.705944][T13805] R10: 0000000000000000 R11: 0000000000000246 R12: 00007feecf6fd6d4 [ 1116.713906][T13805] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 00000000ffffffff 21:41:59 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x2) 21:41:59 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x3dfff) [ 1116.739548][ T3892] kobject: 'loop5' (00000000c2f21abe): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1116.766742][ T3892] kobject: 'loop4' (000000005cdad202): kobject_uevent_env [ 1116.775948][ T3892] kobject: 'loop4' (000000005cdad202): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1116.799369][T13805] memory: usage 307180kB, limit 307200kB, failcnt 60 [ 1116.807573][ T3892] kobject: 'loop3' (0000000089db930c): kobject_uevent_env [ 1116.809621][T13805] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1116.814725][ T3892] kobject: 'loop3' (0000000089db930c): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1116.827219][T13805] Memory cgroup stats for /syz1: [ 1116.827317][T13805] anon 276078592 [ 1116.827317][T13805] file 0 [ 1116.827317][T13805] kernel_stack 5767168 [ 1116.827317][T13805] slab 11198464 [ 1116.827317][T13805] sock 2592768 [ 1116.827317][T13805] shmem 0 [ 1116.827317][T13805] file_mapped 0 [ 1116.827317][T13805] file_dirty 0 [ 1116.827317][T13805] file_writeback 0 [ 1116.827317][T13805] anon_thp 260046848 [ 1116.827317][T13805] inactive_anon 0 [ 1116.827317][T13805] active_anon 276078592 [ 1116.827317][T13805] inactive_file 0 [ 1116.827317][T13805] active_file 0 [ 1116.827317][T13805] unevictable 0 [ 1116.827317][T13805] slab_reclaimable 2027520 [ 1116.827317][T13805] slab_unreclaimable 9170944 [ 1116.827317][T13805] pgfault 9240 [ 1116.827317][T13805] pgmajfault 0 [ 1116.827317][T13805] workingset_refault 0 [ 1116.827317][T13805] workingset_activate 0 [ 1116.827317][T13805] workingset_nodereclaim 0 [ 1116.827317][T13805] pgrefill 107 [ 1116.827317][T13805] pgscan 66 [ 1116.827317][T13805] pgsteal 0 [ 1116.827317][T13805] pgactivate 66 [ 1116.841656][ T3892] kobject: 'loop2' (00000000e6b32cdb): kobject_uevent_env [ 1116.952300][T13805] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=12375,uid=0 [ 1116.971723][T13805] Memory cgroup out of memory: Killed process 12375 (syz-executor.1) total-vm:73236kB, anon-rss:4276kB, file-rss:35792kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 [ 1117.004380][T13803] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 1117.024931][T13803] CPU: 1 PID: 13803 Comm: syz-executor.1 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1117.034060][T13803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1117.044199][T13803] Call Trace: [ 1117.047487][T13803] dump_stack+0x172/0x1f0 [ 1117.051810][T13803] dump_header+0x177/0x1152 [ 1117.056302][T13803] ? ___ratelimit+0xf8/0x595 [ 1117.060896][T13803] ? trace_hardirqs_on+0x67/0x240 [ 1117.065922][T13803] ? pagefault_out_of_memory+0x11c/0x11c [ 1117.071549][T13803] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1117.077347][T13803] ? ___ratelimit+0x60/0x595 [ 1117.081926][T13803] ? do_raw_spin_unlock+0x57/0x270 [ 1117.087031][T13803] oom_kill_process.cold+0x10/0x15 [ 1117.092134][T13803] out_of_memory+0x334/0x1340 [ 1117.096803][T13803] ? lock_downgrade+0x920/0x920 [ 1117.101646][T13803] ? oom_killer_disable+0x280/0x280 [ 1117.106701][ T3892] kobject: 'loop2' (00000000e6b32cdb): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1117.106842][T13803] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1117.106855][T13803] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1117.106873][T13803] ? do_raw_spin_unlock+0x57/0x270 [ 1117.118890][ T3892] kobject: 'loop4' (000000005cdad202): kobject_uevent_env [ 1117.122546][T13803] ? _raw_spin_unlock+0x2d/0x50 [ 1117.128470][ T3892] kobject: 'loop4' (000000005cdad202): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1117.133242][T13803] try_charge+0xa2d/0x1440 [ 1117.141745][ T3892] kobject: 'loop3' (0000000089db930c): kobject_uevent_env [ 1117.145161][T13803] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1117.156104][ T3892] kobject: 'loop3' (0000000089db930c): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1117.159667][T13803] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1117.159679][T13803] ? __kasan_check_read+0x11/0x20 [ 1117.159697][T13803] ? lock_downgrade+0x920/0x920 [ 1117.168072][ T3892] kobject: 'loop2' (00000000e6b32cdb): kobject_uevent_env [ 1117.172304][T13803] ? percpu_ref_tryget_live+0x111/0x290 [ 1117.183231][ T3892] kobject: 'loop2' (00000000e6b32cdb): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1117.187947][T13803] __memcg_kmem_charge_memcg+0x71/0xf0 [ 1117.187960][T13803] ? memcg_kmem_put_cache+0x50/0x50 [ 1117.187978][T13803] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1117.195599][ T3892] kobject: 'loop5' (00000000c2f21abe): kobject_uevent_env [ 1117.197805][T13803] __memcg_kmem_charge+0x13a/0x3a0 [ 1117.197818][T13803] __alloc_pages_nodemask+0x4f7/0x900 [ 1117.197830][T13803] ? __alloc_pages_slowpath+0x2540/0x2540 [ 1117.197846][T13803] ? percpu_ref_put_many+0xb6/0x190 [ 1117.205824][ T3892] kobject: 'loop5' (00000000c2f21abe): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1117.210450][T13803] ? trace_hardirqs_on+0x67/0x240 [ 1117.210462][T13803] ? __kasan_check_read+0x11/0x20 [ 1117.210482][T13803] copy_process+0x3f8/0x6830 [ 1117.289836][T13803] ? psi_memstall_leave+0x12e/0x180 [ 1117.295033][T13803] ? __kasan_check_read+0x11/0x20 [ 1117.300055][T13803] ? record_times+0x1e/0x2b0 [ 1117.304644][T13803] ? __cleanup_sighand+0x60/0x60 [ 1117.309579][T13803] ? trace_hardirqs_on+0x67/0x240 [ 1117.314604][T13803] ? _raw_spin_unlock_irq+0x5e/0x90 [ 1117.319800][T13803] _do_fork+0x146/0xfa0 [ 1117.323955][T13803] ? copy_init_mm+0x20/0x20 [ 1117.328454][T13803] ? __kasan_check_read+0x11/0x20 [ 1117.333477][T13803] ? lock_downgrade+0x920/0x920 [ 1117.338331][T13803] ? percpu_ref_tryget_live+0x290/0x290 [ 1117.343885][T13803] __x64_sys_clone+0x1ab/0x270 [ 1117.348648][T13803] ? __ia32_sys_vfork+0xd0/0xd0 [ 1117.353500][T13803] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1117.359745][T13803] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1117.365802][T13803] ? trace_hardirqs_off_caller+0x65/0x230 [ 1117.371498][T13803] ? trace_hardirqs_on+0x67/0x240 [ 1117.376513][T13803] do_syscall_64+0xfa/0x760 [ 1117.380995][T13803] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1117.386858][T13803] RIP: 0033:0x45c249 [ 1117.390752][T13803] Code: ff 48 85 f6 0f 84 27 8e fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c fe 8d fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 1117.410327][T13803] RSP: 002b:00007ffe8e941048 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 1117.418820][T13803] RAX: ffffffffffffffda RBX: 00007feecf6dc700 RCX: 000000000045c249 [ 1117.426775][T13803] RDX: 00007feecf6dc9d0 RSI: 00007feecf6dbdb0 RDI: 00000000003d0f00 [ 1117.434718][T13803] RBP: 00007ffe8e941260 R08: 00007feecf6dc700 R09: 00007feecf6dc700 [ 1117.442662][T13803] R10: 00007feecf6dc9d0 R11: 0000000000000202 R12: 0000000000000000 21:42:00 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x3efff) [ 1117.450606][T13803] R13: 00007ffe8e9410ff R14: 00007feecf6dc9c0 R15: 000000000075bfd4 [ 1117.468360][T13803] memory: usage 302752kB, limit 307200kB, failcnt 60 [ 1117.484153][ T3892] kobject: 'loop0' (00000000483e2afa): kobject_uevent_env [ 1117.493027][T13803] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1117.496615][ T3892] kobject: 'loop0' (00000000483e2afa): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1117.501008][T13803] Memory cgroup stats for /syz1: [ 1117.501102][T13803] anon 271822848 [ 1117.501102][T13803] file 0 [ 1117.501102][T13803] kernel_stack 5767168 [ 1117.501102][T13803] slab 11198464 [ 1117.501102][T13803] sock 2592768 [ 1117.501102][T13803] shmem 0 [ 1117.501102][T13803] file_mapped 0 [ 1117.501102][T13803] file_dirty 0 [ 1117.501102][T13803] file_writeback 0 [ 1117.501102][T13803] anon_thp 255852544 [ 1117.501102][T13803] inactive_anon 0 [ 1117.501102][T13803] active_anon 271822848 [ 1117.501102][T13803] inactive_file 0 [ 1117.501102][T13803] active_file 0 [ 1117.501102][T13803] unevictable 0 [ 1117.501102][T13803] slab_reclaimable 2027520 [ 1117.501102][T13803] slab_unreclaimable 9170944 [ 1117.501102][T13803] pgfault 9240 [ 1117.501102][T13803] pgmajfault 0 [ 1117.501102][T13803] workingset_refault 0 [ 1117.501102][T13803] workingset_activate 0 [ 1117.501102][T13803] workingset_nodereclaim 0 [ 1117.501102][T13803] pgrefill 107 [ 1117.501102][T13803] pgscan 66 [ 1117.501102][T13803] pgsteal 0 [ 1117.501102][T13803] pgactivate 66 [ 1117.522066][ T3892] kobject: 'loop3' (0000000089db930c): kobject_uevent_env [ 1117.616750][ T3892] kobject: 'loop3' (0000000089db930c): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1117.620795][T13803] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=12564,uid=0 21:42:00 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x2) 21:42:00 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='loginuid\x00') sendfile(r0, r0, 0x0, 0x2) write$binfmt_elf32(r0, 0x0, 0x0) 21:42:00 executing program 5: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x1, 0x400000) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000140)) write$P9_RREADLINK(r3, &(0x7f0000000180)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r5, 0x0, 0x30005, 0x0) setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, &(0x7f0000000040)={0x7d01, 0x100000001, 0x1f, 0xfffffffffffffffc}, 0x10) ppoll(&(0x7f0000000000)=[{r0}, {r1, 0x100}], 0x2, 0x0, 0x0, 0x0) 21:42:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace(0x11, r1) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$VIDIOC_ENUMSTD(r2, 0xc0485619, &(0x7f00000000c0)={0x4, 0xf900, "c121793f6c42355ea976e0b82c2b4a0a4f99505315db0e87", {0xfc, 0x8}, 0x2}) 21:42:00 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30005, 0x0) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f00000000c0)) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000500)={@in={{0x2, 0x4e23, @remote}}, 0x0, 0x1, 0x0, "c98ffff67e2a2c5cdb5ff907ab8134d639471fc41764308d726ac810654ccb62b75688e290c1092dac38b010f392b317fecab3436006081b2ac0559b464e32050a3525e6392878c9b06075404efe038d"}, 0xd8) arch_prctl$ARCH_GET_CPUID(0x1011) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r3, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f0000000100)=0x6a65113f8869e5e9) preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffbc000) [ 1117.656489][T13803] Memory cgroup out of memory: Killed process 12564 (syz-executor.1) total-vm:72840kB, anon-rss:4252kB, file-rss:35796kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 [ 1117.681345][ T1066] oom_reaper: reaped process 12564 (syz-executor.1), now anon-rss:0kB, file-rss:34836kB, shmem-rss:0kB [ 1117.682797][T13824] ptrace attach of "/root/syz-executor.1"[13803] was attempted by "/root/syz-executor.1"[13824] 21:42:00 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x3ffff) 21:42:00 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='loginuid\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x2) [ 1117.721404][ T3892] kobject: 'loop1' (00000000050f4364): kobject_uevent_env [ 1117.740869][ T3892] kobject: 'loop1' (00000000050f4364): fill_kobj_path: path = '/devices/virtual/block/loop1' 21:42:00 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='loginuid\x00') sendfile(r0, r0, 0x0, 0x2) [ 1117.782460][ T3892] kobject: 'loop3' (0000000089db930c): kobject_uevent_env [ 1117.796608][ T3892] kobject: 'loop3' (0000000089db930c): fill_kobj_path: path = '/devices/virtual/block/loop3' 21:42:00 executing program 5: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x1, 0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000280)={r5}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000100)={r5, 0x80000000}, 0x8) ppoll(&(0x7f0000000000)=[{r0}, {r1, 0x100}], 0x2, 0x0, 0x0, 0x0) 21:42:00 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='loginuid\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x2) 21:42:00 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='loginuid\x00') [ 1117.876350][ T3892] kobject: 'loop2' (00000000e6b32cdb): kobject_uevent_env [ 1117.925340][ T3892] kobject: 'loop2' (00000000e6b32cdb): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1117.952986][ T3892] kobject: 'loop4' (000000005cdad202): kobject_uevent_env [ 1117.962825][ T3892] kobject: 'loop4' (000000005cdad202): fill_kobj_path: path = '/devices/virtual/block/loop4' 21:42:00 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='loginuid\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x2) 21:42:00 executing program 4: syz_open_procfs(0xffffffffffffffff, 0x0) [ 1117.975884][ T3892] kobject: 'loop5' (00000000c2f21abe): kobject_uevent_env [ 1117.986572][ T3892] kobject: 'loop5' (00000000c2f21abe): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1118.007137][ T3892] kobject: 'loop4' (000000005cdad202): kobject_uevent_env 21:42:00 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x40fff) [ 1118.023319][ T3892] kobject: 'loop4' (000000005cdad202): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1118.057608][ T3892] kobject: 'loop3' (0000000089db930c): kobject_uevent_env 21:42:00 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='loginuid\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x2) [ 1118.079835][ T3892] kobject: 'loop3' (0000000089db930c): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1118.130746][ T3892] kobject: 'loop2' (00000000e6b32cdb): kobject_uevent_env [ 1118.154004][ T3892] kobject: 'loop2' (00000000e6b32cdb): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1118.174260][ T3892] kobject: 'loop5' (00000000c2f21abe): kobject_uevent_env [ 1118.184229][ T3892] kobject: 'loop5' (00000000c2f21abe): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1118.199353][ T3892] kobject: 'loop4' (000000005cdad202): kobject_uevent_env [ 1118.206517][ T3892] kobject: 'loop4' (000000005cdad202): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1118.227972][ T3892] kobject: 'loop3' (0000000089db930c): kobject_uevent_env [ 1118.235120][ T3892] kobject: 'loop3' (0000000089db930c): fill_kobj_path: path = '/devices/virtual/block/loop3' 21:42:01 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x41fff) [ 1118.575109][ T3892] kobject: 'loop1' (00000000050f4364): kobject_uevent_env [ 1118.588976][ T3892] kobject: 'loop1' (00000000050f4364): fill_kobj_path: path = '/devices/virtual/block/loop1' 21:42:01 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f00000000c0)) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) r1 = dup(r0) ioctl$SCSI_IOCTL_DOORLOCK(r1, 0x5380) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffbc000) 21:42:01 executing program 5: io_uring_setup(0xa4, &(0x7f0000000080)) socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r1 = accept$netrom(r0, &(0x7f0000000140)={{}, [@null, @rose, @netrom, @rose, @default, @remote, @remote, @netrom]}, &(0x7f00000001c0)=0x48) ioctl(r1, 0x1000008910, &(0x7f0000000300)="a85a024913209e14d068506828a791e0f5668156be78215a1a003baedc24be32327b7eb220b9692d8e4f0a808613541159ad930bed0fe7d6126854532466e0f6009c0118011f6b1899399986afd9dac68ccb79c6aa2bd8154d8778cf738b52f29f60e12df93f28d06ec1cce90c00cbf13a257bc9c6120d0ec82801f98b87e98c38232df95648a3f8db9b2651c0dcc0f3a515782207adec94b8aaebe710c90073be5b9c7d47c867cc249a9ec9675181780c5f4b3fb080547cae572dc50928998d9300005c3cbf848ba10785305f7ec55950") ppoll(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) 21:42:01 executing program 4: syz_open_procfs(0xffffffffffffffff, 0x0) 21:42:01 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='loginuid\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x2) 21:42:01 executing program 1: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000a00000/0x600000)=nil, 0x2000, 0x1}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000100)=0x5) ioctl(r2, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") clone(0x10640000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = getpid() sendto$x25(r0, &(0x7f0000000400)="678a18cb092ef3944fd2642a32dae43fc4c99ca7ec016593c13ba42ef24f732129f4713a1d8ac54413f8fbf2a36eae8f720d9694dd9d7278c9ec1a062fbe447be1622f954f44317dd1ff84f542486eabf5260f36383d02aa0b811a868176fdc53ab4", 0xffffffffffffffcc, 0x80, &(0x7f0000000380)={0x9, @null=' \x00'}, 0x12) r4 = getpid() flistxattr(r0, &(0x7f0000000480)=""/4096, 0x1000) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r5, 0x0, r6, 0x0, 0x30005, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x541a, &(0x7f0000000340)=0xfffffffffffffffa) sched_setattr(r4, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f00000002c0)={0x2, 0xfffffffffffffffc, @local}, 0x10) connect$inet(r8, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r7, 0x0, r8, 0x0, 0x30005, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r7, 0xc0106401, &(0x7f00000002c0)={0x74, &(0x7f0000000000)=""/116}) r9 = getpid() sched_setattr(r9, 0x0, 0x0) rt_tgsigqueueinfo(r9, r3, 0x33, &(0x7f0000000240)={0x0, 0xffffffff, 0x4}) ptrace(0x10, r3) ptrace(0x11, r3) 21:42:01 executing program 4: syz_open_procfs(0xffffffffffffffff, 0x0) [ 1118.660977][ T3892] kobject: 'loop0' (00000000483e2afa): kobject_uevent_env [ 1118.677340][ T3892] kobject: 'loop0' (00000000483e2afa): fill_kobj_path: path = '/devices/virtual/block/loop0' 21:42:01 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='loginuid\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x2) 21:42:01 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x42fff) [ 1118.737969][ T3892] kobject: 'loop4' (000000005cdad202): kobject_uevent_env [ 1118.745140][ T3892] kobject: 'loop4' (000000005cdad202): fill_kobj_path: path = '/devices/virtual/block/loop4' 21:42:01 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001700)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfffbc000) [ 1118.797964][ T3892] kobject: 'loop2' (00000000e6b32cdb): kobject_uevent_env [ 1118.810920][ T3892] kobject: 'loop2' (00000000e6b32cdb): fill_kobj_path: path = '/devices/virtual/block/loop2' 21:42:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x40000000000027, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x24) [ 1118.851483][ T3892] kobject: 'loop3' (0000000089db930c): kobject_uevent_env [ 1118.864060][ T3892] kobject: 'loop3' (0000000089db930c): fill_kobj_path: path = '/devices/virtual/block/loop3' 21:42:01 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='loginuid\x00') sendfile(r0, r0, 0x0, 0x0) [ 1118.894420][ T3892] kobject: 'loop0' (00000000483e2afa): kobject_uevent_env [ 1118.901973][ T3892] kobject: 'loop0' (00000000483e2afa): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1118.923133][ T3892] kobject: 'loop4' (000000005cdad202): kobject_uevent_env 21:42:01 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x43fff) [ 1118.939761][ T3892] kobject: 'loop4' (000000005cdad202): fill_kobj_path: path = '/devices/virtual/block/loop4' 21:42:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x40000000000027, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e0000002ac1414bb0000000005000000e00000020000f5ffdf00000100010000000000aafaebbfc459597a2ef4b1212a8a9d81c7f4c3c7c09037fbb8b58489107d78dd35c918fb5c5782963d1666756fe1fa6a0ed61f25eae0f00663600c22c17b768a873252c4a5e27cf84891decd4afaebeac099b434e8d548bad10b81d7a2aa37f41cac93341da2029657fcf3e01297341f81808d8511f1901a575498c2d40ec0705bdd46a9f23eae0e09000000d14a4b16f039c045f2b637ac7d0978f543654fb3e7225aff8e9ebe8173f2b73bd763873293258d327a2567d328e271fec691d9aebc43fd316490518810aa7dc996e85ebddda9688db5c674dedf2a367c20f81a05082f7eeb4fa0aeb1fc8cacfbf4f9582be08e84212aa8ceeced75c2db15a47aae4ca5ff9c4f9b6333ff9efca0cd4d02d3ea23fd00046ec173b4a108e99d2e728ed008925df55d0f1b99d9f9235246600ee29dc89147c276cdf817a8a22529e7ca681baaec72cd40d9daf6a4f800aa6512c2aa77eff663a2cc7d556274753f8849960abb56e93428f5ac97a2ab3027c8f6425fdf02e461ddf87046d51a2211df0dcbd3450000000000000000000000b5f60ad416e677605c512873e96a7f83e4fa6c825a1bbe3675"], 0x24) [ 1118.979517][ T3892] kobject: 'loop2' (00000000e6b32cdb): kobject_uevent_env [ 1119.013405][ T3892] kobject: 'loop2' (00000000e6b32cdb): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1119.045835][ T3892] kobject: 'loop3' (0000000089db930c): kobject_uevent_env [ 1119.056368][ T3892] kobject: 'loop3' (0000000089db930c): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1119.068994][ T3892] kobject: 'loop2' (00000000e6b32cdb): kobject_uevent_env [ 1119.077234][ T3892] kobject: 'loop2' (00000000e6b32cdb): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1119.108534][ T3892] kobject: 'loop4' (000000005cdad202): kobject_uevent_env [ 1119.115685][ T3892] kobject: 'loop4' (000000005cdad202): fill_kobj_path: path = '/devices/virtual/block/loop4' 21:42:02 executing program 5: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000040)=[r1, 0xffffffffffffffff, r3, r1], 0x4) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ppoll(&(0x7f0000000000)=[{r0}, {r1, 0x100}], 0x2, 0x0, 0x0, 0x0) 21:42:02 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r1, 0x0, 0x30005, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) wri