0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffc9, &(0x7f0000000140)) 19:22:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000000040)={0x7, 0x0, 0x7e}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x0, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:22:27 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:27 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:27 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext={0x8, 0x101}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:27 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x801, 0x10d082) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r1, &(0x7f00000001c0)="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", &(0x7f00000011c0)=""/222}, 0x18) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x2c80505, 0xffffffffffffffc1}, &(0x7f0000000100)=0x18) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000012c0)={r2, 0x2fb}, &(0x7f0000001300)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000000040)={0x7, 0x0, 0x7e}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:22:27 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:27 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:27 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:27 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x3, 0x2) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000100)={0xfcf9, 0x0, 0x7, 0x401, 0x7}, 0x14) r3 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x4000007, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0) r4 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) pipe(0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r6 = dup2(r5, r4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) getpgid(0x0) write$sndseq(r4, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) ptrace$getregs(0xe, r2, 0x1, &(0x7f00000001c0)=""/197) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:27 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:27 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:27 executing program 2 (fault-call:4 fault-nth:0): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6012, r2, 0x2000) 19:22:27 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000000040)={0x7, 0x0, 0x7e}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) fcntl$setlease(r3, 0x400, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:22:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000000040)={0x7, 0x0, 0x7e}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:22:27 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000240)) r2 = syz_open_dev$sndmidi(&(0x7f0000000340)='/dev/snd/midiC#D#\x00', 0x4, 0x801) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000380)={0x1, 0x7, 0x4f2, 0x80000001}) ioctl(r1, 0xfffffbfffff3ffa7, &(0x7f0000000540)="1f2476f0700bb245ed3d2dae08e4eb1d21e63474c142cb570f886821e3d2e710b61a0355bfc17acf298165caa9019594a3b92cb533b9b080a0462912a3f44333f3b3d72e106999dcf2e1176b90c33deb96406fbb8845466585dc615a446442cf135f221d85b5441f00f5b69ac7a44cbacbca07304a0d6c42d4b26bbf168d4476dced6b6d3c46247ba1f04b6e0161dbf2256046f3f8") r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x80, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x804011}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x30, r4, 0x610, 0x70bd29, 0x25dfdbfb, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x7, 0x9, 0x0, 0x6}}}, ["", "", ""]}, 0x30}}, 0x800) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f00000003c0)={{0xffffffffffffffff, 0x0, 0x1c, 0x3, 0x7fff}, 0x7, 0x3, 0x8}) sysinfo(&(0x7f0000000440)=""/145) ioctl$VIDIOC_G_TUNER(r3, 0xc054561d, &(0x7f0000000280)={0x7, "ac013b8bab523a78c4d791e1b7b3b1205a81950aef7eddace7bb6a06db8c3a08", 0x1, 0x20, 0x1f, 0x1ff, 0x0, 0x2, 0x7fffffff, 0x2}) 19:22:27 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:27 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000040)="730055014f791271f074a85543d483e4ec00000000") [ 1224.578185] FAULT_INJECTION: forcing a failure. [ 1224.578185] name failslab, interval 1, probability 0, space 0, times 0 [ 1224.629124] CPU: 1 PID: 14495 Comm: syz-executor.2 Not tainted 5.0.0+ #12 [ 1224.636101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1224.645761] Call Trace: [ 1224.648470] dump_stack+0x172/0x1f0 [ 1224.652264] should_fail.cold+0xa/0x15 [ 1224.656314] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1224.661453] ? ___might_sleep+0x163/0x280 [ 1224.665632] __should_failslab+0x121/0x190 [ 1224.669914] should_failslab+0x9/0x14 [ 1224.669932] kmem_cache_alloc+0x2b2/0x6f0 [ 1224.669952] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1224.677935] vm_area_dup+0x21/0x170 [ 1224.677953] __split_vma+0xad/0x570 [ 1224.677969] ? find_vma+0x30/0x170 [ 1224.677985] __do_munmap+0x2ef/0xef0 [ 1224.678012] mmap_region+0x227/0x1770 [ 1224.701998] ? __x64_sys_brk+0x760/0x760 [ 1224.706175] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1224.711762] ? get_unmapped_area+0x295/0x3b0 [ 1224.716285] do_mmap+0x8e2/0x1080 [ 1224.719787] vm_mmap_pgoff+0x1c5/0x230 [ 1224.723737] ? vma_is_stack_for_current+0xd0/0xd0 [ 1224.728601] ? ksys_dup3+0x3e0/0x3e0 [ 1224.732349] ksys_mmap_pgoff+0x4aa/0x630 [ 1224.736434] ? find_mergeable_anon_vma+0x2e0/0x2e0 [ 1224.741479] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1224.746387] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1224.751166] ? do_syscall_64+0x26/0x610 [ 1224.755168] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1224.761089] __x64_sys_mmap+0xe9/0x1b0 [ 1224.765140] do_syscall_64+0x103/0x610 [ 1224.769057] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1224.774459] RIP: 0033:0x457f29 [ 1224.777672] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1224.796887] RSP: 002b:00007f30849b4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1224.804620] RAX: ffffffffffffffda RBX: 00007f30849b4c90 RCX: 0000000000457f29 [ 1224.812024] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020007000 [ 1224.819321] RBP: 000000000073bf00 R08: 0000000000000005 R09: 0000000000002000 19:22:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000000040)={0x7, 0x0, 0x7e}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) fcntl$setlease(r3, 0x400, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:22:27 executing program 3: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(0xffffffffffffffff, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:27 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext={0x8, 0x101}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1224.826614] R10: 0000000000006012 R11: 0000000000000246 R12: 00007f30849b56d4 [ 1224.833907] R13: 00000000004c3c88 R14: 00000000004d6e40 R15: 0000000000000006 19:22:28 executing program 3: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(0xffffffffffffffff, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000000040)={0x7, 0x0, 0x7e}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) fcntl$setlease(r3, 0x400, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:22:28 executing program 2 (fault-call:4 fault-nth:1): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6012, r2, 0x2000) 19:22:28 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80001, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000001c0)={0x0, 0x7f, "23b02d5f27ebbe8865d3936971515a43f0ae7acc14b50f0bc609b46a68754ac5fbdaf09805088bbae25b6848dc41b7cef6f8d1486408d36fb45487b944a6309cc1ea1c30fd2c2bf9fcff332ef44dab47c8e0d8651d047ff4219f4dfa87638b1a98234f655acb1755f8b12b572d2a53f11916fe8c44cbaebfa5e0cb965d766a"}, &(0x7f0000000100)=0x87) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000280)={r2, @in6={{0xa, 0x4e23, 0x3, @loopback, 0x3}}}, 0x84) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:28 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext={0x8, 0x101}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1225.085258] FAULT_INJECTION: forcing a failure. [ 1225.085258] name failslab, interval 1, probability 0, space 0, times 0 [ 1225.105744] CPU: 1 PID: 14518 Comm: syz-executor.2 Not tainted 5.0.0+ #12 [ 1225.112741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1225.123177] Call Trace: [ 1225.123203] dump_stack+0x172/0x1f0 [ 1225.123238] should_fail.cold+0xa/0x15 [ 1225.123264] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1225.129507] __should_failslab+0x121/0x190 [ 1225.129530] should_failslab+0x9/0x14 [ 1225.147617] kmem_cache_alloc+0x47/0x6f0 [ 1225.151847] ? vm_area_dup+0x21/0x170 [ 1225.155670] ? rcu_read_lock_sched_held+0x110/0x130 [ 1225.160760] anon_vma_clone+0xde/0x480 [ 1225.164693] __split_vma+0x180/0x570 [ 1225.168463] ? find_vma+0x30/0x170 [ 1225.172057] __do_munmap+0x2ef/0xef0 [ 1225.175825] mmap_region+0x227/0x1770 [ 1225.179673] ? __x64_sys_brk+0x760/0x760 [ 1225.183792] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1225.189466] ? get_unmapped_area+0x295/0x3b0 [ 1225.194166] do_mmap+0x8e2/0x1080 [ 1225.197649] vm_mmap_pgoff+0x1c5/0x230 [ 1225.201570] ? vma_is_stack_for_current+0xd0/0xd0 [ 1225.206434] ? ksys_dup3+0x3e0/0x3e0 [ 1225.210342] ksys_mmap_pgoff+0x4aa/0x630 [ 1225.214428] ? find_mergeable_anon_vma+0x2e0/0x2e0 [ 1225.219377] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1225.224153] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1225.228935] ? do_syscall_64+0x26/0x610 [ 1225.233174] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1225.238563] __x64_sys_mmap+0xe9/0x1b0 [ 1225.242477] do_syscall_64+0x103/0x610 [ 1225.246389] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1225.251599] RIP: 0033:0x457f29 [ 1225.254813] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1225.274318] RSP: 002b:00007f30849b4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1225.282159] RAX: ffffffffffffffda RBX: 00007f30849b4c90 RCX: 0000000000457f29 [ 1225.289443] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020007000 [ 1225.297137] RBP: 000000000073bf00 R08: 0000000000000005 R09: 0000000000002000 [ 1225.304983] R10: 0000000000006012 R11: 0000000000000246 R12: 00007f30849b56d4 [ 1225.312272] R13: 00000000004c3c88 R14: 00000000004d6e40 R15: 0000000000000006 [ 1225.328974] ion_mmap: failure mapping buffer to userspace 19:22:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000000040)={0x7, 0x0, 0x7e}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:22:28 executing program 3: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(0xffffffffffffffff, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:28 executing program 4 (fault-call:3 fault-nth:0): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31}, 0xfe40}}, 0x0) 19:22:28 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext={0x8, 0x101}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:28 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) alarm(0x88f9) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:28 executing program 2 (fault-call:4 fault-nth:2): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6012, r2, 0x2000) [ 1225.480184] FAULT_INJECTION: forcing a failure. [ 1225.480184] name failslab, interval 1, probability 0, space 0, times 0 19:22:28 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31}, 0xfe40}}, 0x0) [ 1225.536351] CPU: 0 PID: 14526 Comm: syz-executor.2 Not tainted 5.0.0+ #12 [ 1225.543427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1225.552932] Call Trace: [ 1225.552958] dump_stack+0x172/0x1f0 [ 1225.552983] should_fail.cold+0xa/0x15 [ 1225.553004] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1225.553028] ? ___might_sleep+0x163/0x280 [ 1225.553051] __should_failslab+0x121/0x190 [ 1225.553072] should_failslab+0x9/0x14 [ 1225.553091] kmem_cache_alloc+0x2b2/0x6f0 19:22:28 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x101}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1225.585745] vm_area_dup+0x21/0x170 [ 1225.589526] __split_vma+0xad/0x570 [ 1225.593177] ? find_vma+0x30/0x170 [ 1225.596774] __do_munmap+0x368/0xef0 [ 1225.600554] mmap_region+0x227/0x1770 [ 1225.604517] ? __x64_sys_brk+0x760/0x760 [ 1225.608797] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1225.608815] ? get_unmapped_area+0x295/0x3b0 [ 1225.608834] do_mmap+0x8e2/0x1080 [ 1225.608859] vm_mmap_pgoff+0x1c5/0x230 [ 1225.608885] ? vma_is_stack_for_current+0xd0/0xd0 [ 1225.608899] ? ksys_dup3+0x3e0/0x3e0 [ 1225.608924] ksys_mmap_pgoff+0x4aa/0x630 [ 1225.608942] ? find_mergeable_anon_vma+0x2e0/0x2e0 [ 1225.608961] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1225.648960] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1225.653952] ? do_syscall_64+0x26/0x610 [ 1225.657947] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1225.663332] __x64_sys_mmap+0xe9/0x1b0 [ 1225.667252] do_syscall_64+0x103/0x610 [ 1225.671171] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1225.676377] RIP: 0033:0x457f29 [ 1225.676394] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1225.676402] RSP: 002b:00007f30849b4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1225.676418] RAX: ffffffffffffffda RBX: 00007f30849b4c90 RCX: 0000000000457f29 [ 1225.676427] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020007000 [ 1225.676437] RBP: 000000000073bf00 R08: 0000000000000005 R09: 0000000000002000 [ 1225.676446] R10: 0000000000006012 R11: 0000000000000246 R12: 00007f30849b56d4 19:22:29 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0x0, &(0x7f0000000140)) 19:22:29 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x101}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1225.676458] R13: 00000000004c3c88 R14: 00000000004d6e40 R15: 0000000000000006 19:22:29 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x84, 0x400000) sendmmsg$nfc_llcp(r1, &(0x7f0000005b80)=[{&(0x7f0000000080)={0x27, 0x1, 0x1, 0x0, 0xff, 0x8, "4cc5fd3fa4fef16090b6a511e81330143f4512d2ac560985f1be9e232cc889c57fc0372ea3380557a493a20132b106fd595832fa150ff579976c2748a6768b", 0x3}, 0x60, &(0x7f00000004c0)=[{&(0x7f0000000100)="0b640f22658a0283d1a1373452ecec73cb28b494bef7acdd5c839191d33838a4a24093239a077f5ecc16023d89db80eed4a30c6f99bb172f04ac", 0x3a}, {&(0x7f00000001c0)}, {&(0x7f0000000200)="0a65a8f7b8", 0x5}, {&(0x7f0000000240)="a61b5d5f3f61e7f1ea613e7935856c541169e45d1b95bd53b47178145232ec696afb946833bb081d77cdf5150cbbc0f4a83f26763a270b1ddc57ea39d17afd3766563e2b41bb0760da9446", 0x4b}, {&(0x7f00000002c0)="8654127e4fd6353686e1fe3b72aeff9095ce30e739c22534970cbd22b294fd9b374e181ac34def7a9b2b13b5734355c7fa8f9a802490f72d", 0x38}, {&(0x7f0000000300)="914b0db9b8538a5eb17b2181fd99ac6dd454a03ce29b119c72b707caf31f5470e93f9ff4363c82917c882e146b37965b178b9d0682af177c939d456130339ecec4bacb06e4aeb3b131c922f2db52bf07359a06ee01e85b58299847a0defe42590ca9096e5f035a4f651c0bc843bedc561d7f4e2667b10f014d1047d06f08498cc4aa4f28547cb968d6198a8a385de72519558c257c4e4d2c7686e8dd10b75ca1", 0xa0}, {&(0x7f00000003c0)="a06dcb0fb9cf565f7f88b3b948cffa2069fdd5d6f23583f225f9ccece973b461a3da500535a378195eee8669aa9d2e052ea98f246e68699a861ca723a7a8cf8e0d2484b4742eadb8841e30c31187c06df3155150144860f2c3f1de7959b4fd0b80b090b864a32694067531cc4d27400c1bb47b8714f88d9dc141c3f40f7885a4a6dbbba851b1c4d4f26763753322846fa4cff80042133d3cc8f005da98aef9aa435248ad5621928fa6f1e7d9b0b7d7eae0462ac0855d87d2a7e499f1e334fd24cc6ec11f89fb619d9f4471a0448bbeaf06c8b735556574128560b0e5", 0xdc}], 0x7, 0x0, 0x0, 0x10}, {&(0x7f0000000540)={0x27, 0x0, 0x0, 0x7, 0x3ff, 0x578e, "16b55a9c34d292e420cb9726bb0cdf3b0077875d553f94dc802dda833131834519ffd752926a6d1c7226f7219302b77b46e070cae817638b9bfda18e52c585", 0x8}, 0x60, &(0x7f0000001bc0)=[{&(0x7f00000005c0)="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", 0x1000}, {&(0x7f00000015c0)="7a582aac64c196aac33d30271dee1478b28f6b5eb781278dbd5a530ad20f231526227e9ecdbd0061371aa6b99c213ab8161df5dc905894c8088233bbff22933d91f418d886b5d0f2bc042c856c0c9fc262d5bf591ef79d10e4d65d270feb59e7d7dcbb0bc2ba869334461c95a881adc9dc7436f1e3c3d4b33635f097358844b757081785", 0x84}, {&(0x7f0000001680)="cbbdd3fb58fdae25660d4a260d7fdbbc", 0x10}, {&(0x7f00000016c0)="225322d3e73329d47740998e3cb8da73a8ade6c841c1a3b5a6a4291c6d2688277ce6cf5aa7de09952cb24cbfc09c618c9dca9b90913c022926c39848ade80be1548f5b94ae983d46ea106437b94f0af630be49a22f55a45a3ba9136d110ee29fc731446597b08e67cb40b7f0d4fc4ab9c7cbbfe446d44213c44cc9872f986d72272e8be8010d14b666bacb1dbdd39c868ad5c920b72b9cc437c02fd034193244c6ae6913d0e55cea5fcb30131e9095f4283a116a18f9e4a9220f35b8a3ab3b1b58ce9e69c971660c38563d5acfc3f3e8456a3310374f0e8e067dce338a7a43b19b43294a114fdb22a02244d73c23f7bc5b63", 0xf2}, {&(0x7f00000017c0)="572561fffb088e7e1462f7c24b341dfbcb97175da6a94bd13562579398034223967b26829b76a3253d41e676b0ce00849928e24a32e7ccecaa7c6d2a96bfff5b6279099884f66d06f1a1208e399700c1f453facc4bad40943caff702bfab55632970221135096436ace2cbd4fb9d36d2f696f407c2dd516ff76b7fcf139f0d86d4f2a797f5ee940a7aec3fdf4bd3b04daeaf41d2a905345188552f82ee3b93c0e80f67b32a25af1f3799d9c2ed1492d040dc764505139dda20ebcc348aa96d4bff322615763aa5e5f26fc78abd5bc6ee", 0xd0}, {&(0x7f00000018c0)="5687d0cc6267e96c4376bdb3e27c01", 0xf}, {&(0x7f0000001900)="d864e88c1d46f2187a57255e728c2dd33acf94c194ea6a38656302276cd1ff307ad99f45a52b785a855f00624b3e3a85b0d9813b188e7c2e57d3e05ea057717b9d475cb60bbf7fa3845d2afa7237324456fc3659835d7c1f317bc9600e5ed32df6bc7f22e06d055f1e04b6b36b918fb5920738c3c59c788be7bc67cf3e79084b2669d38c2fd24a249292888dfde762abc4461c11208b78bac4def776ac3c9830df4a77f81fe7659e6e47eb906a1f59e3b4af316b078a0a7bdc65ed50d8d5046af2b21c5c6aaabedd83e92bfe2ef9771861dffe292ec9980c8f43e7749a1820587225acbcc0b2fe79f0401dd966fe67cd", 0xf0}, {&(0x7f0000001a00)="2fac369349a1a29b31a6165c200e0065d0d9109bce5fbec0f732688c360e96378412a71bbb383183c222a94d5ca46ee8c7065b99d34b35485f12cc9c304399693539ce658ac59e58e40b6e4d6f3e5384bd56715d1b982144466ad9adaed56d0a4f9e512ab3b3bbad388979b40077e1767a0a1fa1a56942cba583ae80180432df76df3bd0d121ef5bdc146a8c9844111c9abb87e7aca9e288ffe69b20b297f89f35e4", 0xa2}, {&(0x7f0000001ac0)="67b62804b38083d94ee9835df8963b46ba48781f58f66f80fccbf5f466497e259dc9aa659a02a45050baa0d38b95c3a27c9d59414ba420b2ab86efcc546c696a33e7139c20402e817c978be1f402", 0x4e}, {&(0x7f0000001b40)="623a7d68a1dafdaae21c173c8fc69d8677151080fdf35561718a8f6f8c8267faef514a7279c061546089baff5bffd6621fa7cf5ee592b1e62dcdd05ed594304d0971", 0x42}], 0xa, 0x0, 0x0, 0x8001}, {&(0x7f0000001c80)={0x27, 0x1, 0x1, 0x7, 0x7, 0x3, "299ae81ace7b9d4517d5c98613bdfa2895916aa40bd8191fc4b64defcf0ca30b65745706096c6a387682dffbf1a47885a2589656302151a71a4ef03c71c54c", 0x19}, 0x60, &(0x7f0000002fc0)=[{&(0x7f0000001d00)="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", 0x1000}, {&(0x7f0000002d00)="a1e5abe5e404b50fc8b73df539c23fa0fdbce31bb363eb726ab5199856bccf1015a41fd6c8cf91", 0x27}, {&(0x7f0000002d40)="aaf52336d80f4326c25c7711287c927410002480e33d4c3beb", 0x19}, {&(0x7f0000002d80)="45ff01473326b3d087f33cbfde4110848efb7861e9a91d56d4808c2e4c0596494117f6df5daddfb8bbd0d94a764d53be1ffd80edca0cf264984e2da58c9e18fe2b15cfdd8866f9246ba7b4c7c511832d043e143fc4fd622a269215f3a1d79f1df2334b01a5b4fa20e69eeda86d5f420b6801c50d09baa2", 0x77}, {&(0x7f0000002e00)="6b52075928b888e61beb2a54648e12d6795553ef5972574e3f3b7615321ef72ec44173fbe470659fe545be7c686f1391425b66ba78bd268fc31502e8", 0x3c}, {&(0x7f0000002e40)="fbb15a3fbf885b2a96098b793928e8719fc7772fe8233deeb660b2b6742557cb48ed0bc44f7675617f088c3230156212fb9dcc9c4c86faf36d493f33ce433af94f3e87fef73aae61aaf100d2941b2513c9d587106dca2794a96fd4643d7dd8b0249620d75374a807972192308551c30e82b283b2ce7dfabf81bc9130ae570b681fcacb6657095bc3", 0x88}, {&(0x7f0000002f00)="88f88094996b42045e56ebc0bd71ad60ee3bb0eadd9a361f42b8b599b9b1e288126a8aa5881e4f699a233488eda7e3e96f6d00ddcd8d9a70a60986223a2149aa38fee76c10a42cd31c006c612f6b31", 0x4f}, {&(0x7f0000002f80)="55a807265f2e2640bb4fb5f809209feef7987593574556724d8c46", 0x1b}], 0x8}, {&(0x7f0000003040)={0x27, 0x0, 0x0, 0x6, 0x81, 0x9000000000000000, "a7c900253c6a8c0d990975e2b97c5bc90ff2f7735a4d226772e2a3324879a2b56e87dcf1749f677a62f75332af7aacd225c6023030794f5331b87a95e912be", 0x11}, 0x60, &(0x7f0000003300)=[{&(0x7f00000030c0)="5c60adc99d00bd78ade17a3b8bb65f1b724c3a2b864121d42427d25a7b9d0f5e1f9a668654e42f1aab468c27de6831d856e8e34fac79", 0x36}, {&(0x7f0000003100)="a62dd56cce30c0bfb8e186a20b37de195a1560533c44943213cb322fc05e25144c9b6f306d76a0e48641974e26bcada6d811bef9c8a520bb0f14b72a6280ba3e4ab87135ff9777fe49bac2a340c04fbbee2540a96dbf8dca38ce1d02181d2a8a86f81cf59040bf9252a086871f44be2d1614ff3bd9700128e1d7882514f38f9ba03b29633af50fa22f16a9dc0ff97e4256792bc3fe65e848b058ceaf79c13eb638e7563193cc12c7e8f0c5e112c8ffca37572e1725a0f2ba6834978bcd5b21775c6ff001ab7ec8c1050e223ba7d70e142bdf6a90326036960e1721eff4cb0665b9a6cab20018", 0xe6}, {&(0x7f0000003200)="7f6b40e9531c71f0c31ee175917da75ecd35c98ede7f58334483628cc9dcc956bb786bd28d2ea86eb79a9f9363d930931c1e047abc5c75393168d4fc44dbb6c4445083f3cfe1d898ff6aec2a2df75d75b7f0ee598edb77723e68c8558b19f30a970c37bffcecfc42a90f5df6bc08245e38f5738e1d5b86da31ddf54226716f524a38a7a7a13c79f3201c517e7de7a37bc10d8764edd2599ebc1e865e13924bd31ad670912498bb6ebc3c95c4696041ffd931fe851620de717db9e613b45df2695047c548ee5595fb8f59a3beda1d0d9875f023025236a66b312536178874c089eb0e67ddfca9554797f15d2a32c2b4167e8e09e370d83350966b772a3cd6", 0xfe}], 0x3, &(0x7f0000003340)=ANY=[@ANYBLOB="28000000000000009f010000080000006d782220af71300de68f7eb3efcee4af5600000000000000"], 0x28, 0x48810}, {&(0x7f0000003380)={0x27, 0x1, 0x1, 0x2, 0x3, 0x5, "74bd1f3418b628f1f0cb92a5c8f308aaf37b08fb884c91c4fb0bd41e74392203991cd1fa2de202d75a44869c91e392291715dd8db67bc105e5da01ab6c37b5", 0x10}, 0x60, &(0x7f0000003600)=[{&(0x7f0000003400)="b68915625189c71e616ee5121033431193aa6b5db5e62b7ecfa15f8a4538f14b62e374e0f23b2d3b68a9fbc17c72bfd5d20e03b12626a5a17e96c0865360e37379dc8e1884e9e47e6c70ad1ffc1067c1804cba6a6cffa619b056971211225b6c98499171fb2b523ad4f1cbbf5b9e0262b32fac7b5969dc128587701e3becad3d9dfb6016385cfe37a9a402325934e9af3b686514a7503935284ce4ed64476310cc3d1e7aae3f555b064a80d5a520b5e8336dbc946cdf6d5661ce51ff4caeeac75823e4b926bd38133cb5a85c31", 0xcd}, {&(0x7f0000003500)="3ae4cbc8d4f0997930aa5ef9c59ab29dcd6c6787fca99bd6f639bd50c51614cb3a5149c4b7a94067e60ede24e954bd08e170e7040f815e158e1dc88c096ec8e7a54e89804f7cb6be7cd726d5016ac11f8906e8d4250a714572d9396cc20435dd48a58c833de8f83660c7e2f1350a8f1b5bac3fe0a7694c1610d1e0f92efa011fec6cfcab6a0367cb22e832baa661fd3a1b1f08d8f0cb13386483706d83a247f4280606ce07bf94b37bd3cbfdbee0b4224024ac65616c1e3a05eed7b8e483db02d3", 0xc1}], 0x2, &(0x7f0000003640)={0x1010, 0x10d, 0x7, "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"}, 0x1010, 0x1}, {&(0x7f0000004680)={0x27, 0x0, 0x0, 0x7, 0x10000, 0x10001, "8327664a3e05aa9cb859e895f8552c0f5fd8ccd5c7230e7a3a4bb224afded30d528ee843c7ea410aab5c4fc2456e86c6cb34531af42dd7363a07a04d3bf0b2", 0x3b}, 0x60, &(0x7f0000004840)=[{&(0x7f0000004700)="ecf91381daeec9893d40513c3fc946fe0c7d158a4099409e00adf5ef21d5e9db049f39d83d4d83faecfc7eb0108a41df0e4305b3e6da74c12524f012ecfc472ba9f145921f823d8eb9561ef8850ee4fe0da2b2fa744eb8d326994ae9225fa239f215e7279e3255f0527992b2bfe7406921a2f72b6bb3d8473bab270ba3805449a0c449c5983ebf7b2e33a0a8db1dd3f8b3de0d6c9bbb359b4c41b65b0fee465a121b985749fd7c05d8ad0ee64f2d181fb6149c0cccd41c0938a02ab4323d937e5c1e739c77c1a12af7fca524d0481d5fe1ae29b6c384209bb474899a30ce6ef58a6b309383a646b1e5db80cc399368069c8d9f279cfb10", 0xf7}, {&(0x7f0000004800)="d719103e539258329348bc3279a2b52824b5449d002d6d4f101936e1c64642f2e50c30720e9ce5c5af7ecbde2c118b67636edcdf3772d73115", 0x39}], 0x2, 0x0, 0x0, 0x1}, {&(0x7f0000004880)={0x27, 0x1, 0x0, 0x7, 0x10001, 0x3, "543b776cd4517b3a98323a5b98ef3e18ef8009a1c629db039de77507c163fb75ae0711c822e963cad854fc79676e5c9b86c1d9da5515b5cc57e96545a0a542", 0x37}, 0x60, &(0x7f0000005ac0)=[{&(0x7f0000004900)="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", 0x1000}, {&(0x7f0000005900)="02412a", 0x3}, {&(0x7f0000005940)="1b42e33296e40dc11fb628667882fe2098b6bf7b9da2e00ebb68af343fb093722f2b80b0a6638fe583ac21ac841f3cc861af8f5df58565dce0a07df8cae136d6463104f3636101ad5d6dc328f27d7622944cc702a0fc2c8b70cd6a947ac3d2fbaa0cc6a305963e3f046595103c020d6e9fc50676880619e08c6bd4066142cfa9169639f019db49e368f3cafe0d12227316fbef7a81bd9d1558153b05dde0cab1be", 0xa1}, {&(0x7f0000005a00)="c5d4dc6a03d3da0725d02c7877c20a823242f0eaff7b5d87a4e5fdff3dbdd89e2bb426b273114ee307cc2a9e805dbf9f88f5a9b7838843155caa0745977efaba00f0070d57ef7996405a9c06aced2fb162d7bf56143e154cafa703f3cf84b119c03f93b08051500a241416b1282dc03fb264c72bfe94ad6b7ab5f73684648f78b3e276f4cb91f0ee321a47e9", 0x8c}], 0x4, &(0x7f0000005b00)={0x70, 0x119, 0xff, "cec796c8c058ef3ec96e560f00a589a6e4d2a1714c4c10f6c997b0ef505aa7b8ceb13bdcb81de7e037ae88e078a1407cdaae47a879c6fd1d83438fbd0a6bdbf376b44cd305b1c2b71404e6e1e8fb220279a93cbe4fbce58d3b366a08"}, 0x70, 0x1}], 0x7, 0x20000001) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext={0x3, 0x56}, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:29 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31}, 0xfe40}}, 0x0) 19:22:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000000040)={0x7, 0x0, 0x7e}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='trusted.overlay.origin\x00', &(0x7f0000000180)='y\x00', 0x2, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:22:29 executing program 2 (fault-call:4 fault-nth:3): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6012, r2, 0x2000) 19:22:29 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x101}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:29 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0x0, &(0x7f0000000140)) 19:22:29 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x100000000, 0x4000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:29 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext={0x0, 0x101}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:29 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0x0, &(0x7f0000000140)) 19:22:29 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31}, 0xfe40}}, 0x0) 19:22:29 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffff9c, &(0x7f0000000280)=[{{&(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/25, 0x19}], 0x1, &(0x7f0000000200)=""/74, 0x4a}, 0x80000001}], 0x1, 0x2040, &(0x7f00000002c0)) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) 19:22:29 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, 0x0) [ 1226.231379] FAULT_INJECTION: forcing a failure. [ 1226.231379] name failslab, interval 1, probability 0, space 0, times 0 19:22:29 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1226.333358] CPU: 1 PID: 14669 Comm: syz-executor.2 Not tainted 5.0.0+ #12 [ 1226.340347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1226.350280] Call Trace: [ 1226.352898] dump_stack+0x172/0x1f0 [ 1226.356694] should_fail.cold+0xa/0x15 [ 1226.360776] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1226.365917] __should_failslab+0x121/0x190 [ 1226.370186] should_failslab+0x9/0x14 [ 1226.374543] kmem_cache_alloc+0x47/0x6f0 [ 1226.378668] ? vm_area_dup+0x21/0x170 [ 1226.382537] ? rcu_read_lock_sched_held+0x110/0x130 [ 1226.387758] anon_vma_clone+0xde/0x480 [ 1226.391752] __split_vma+0x180/0x570 [ 1226.395520] ? find_vma+0x30/0x170 [ 1226.399107] __do_munmap+0x368/0xef0 [ 1226.402952] mmap_region+0x227/0x1770 [ 1226.407038] ? __x64_sys_brk+0x760/0x760 [ 1226.411576] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1226.417583] ? get_unmapped_area+0x295/0x3b0 [ 1226.422600] do_mmap+0x8e2/0x1080 [ 1226.426572] vm_mmap_pgoff+0x1c5/0x230 [ 1226.431012] ? vma_is_stack_for_current+0xd0/0xd0 [ 1226.436553] ? ksys_dup3+0x3e0/0x3e0 [ 1226.440424] ksys_mmap_pgoff+0x4aa/0x630 [ 1226.445124] ? find_mergeable_anon_vma+0x2e0/0x2e0 [ 1226.450539] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1226.455913] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1226.460857] ? do_syscall_64+0x26/0x610 [ 1226.464895] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1226.471200] __x64_sys_mmap+0xe9/0x1b0 [ 1226.475282] do_syscall_64+0x103/0x610 [ 1226.479312] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1226.484525] RIP: 0033:0x457f29 [ 1226.487765] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1226.506690] RSP: 002b:00007f3084993c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1226.514458] RAX: ffffffffffffffda RBX: 00007f3084993c90 RCX: 0000000000457f29 [ 1226.521878] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020007000 [ 1226.529241] RBP: 000000000073bfa0 R08: 0000000000000004 R09: 0000000000002000 [ 1226.529251] R10: 0000000000006012 R11: 0000000000000246 R12: 00007f30849946d4 [ 1226.529260] R13: 00000000004c3c88 R14: 00000000004d6e40 R15: 0000000000000005 19:22:29 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/btrfs-control\x00', 0x400, 0x0) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f00000002c0)={0x1ff, 0x7, 0x2, 0xd6d8, 0xb19, 0x2}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x301000, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x54, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, [], 0x26}}, @in6={0xa, 0x4e24, 0x5, @remote, 0x9}, @in6={0xa, 0x4e23, 0x77b0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8001}]}, &(0x7f0000000200)=0x10) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000240)={r3, 0xfffffffffffffffe, 0x26c}, 0x8) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) socket$inet(0x2, 0x4, 0x6ffc583b) [ 1226.609063] ion_mmap: failure mapping buffer to userspace 19:22:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffffffffe) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000000040)={0x7, 0x0, 0x7e}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$x25(r0, 0x0, &(0x7f0000000000), 0x800) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:22:30 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:30 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, 0x0) 19:22:30 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31}, 0xfe40}}, 0x0) 19:22:30 executing program 2 (fault-call:4 fault-nth:4): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6012, r2, 0x2000) 19:22:30 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x2, 0x4442) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000000)=[0x0], 0x1}) r1 = dup3(r0, r0, 0x80000) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f00000000c0), &(0x7f0000000100)) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1226.810814] FAULT_INJECTION: forcing a failure. [ 1226.810814] name failslab, interval 1, probability 0, space 0, times 0 [ 1226.842246] CPU: 0 PID: 14793 Comm: syz-executor.2 Not tainted 5.0.0+ #12 [ 1226.849248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1226.858882] Call Trace: [ 1226.858908] dump_stack+0x172/0x1f0 [ 1226.858932] should_fail.cold+0xa/0x15 [ 1226.858954] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1226.858976] ? ___might_sleep+0x163/0x280 [ 1226.859000] __should_failslab+0x121/0x190 [ 1226.883398] should_failslab+0x9/0x14 [ 1226.887221] kmem_cache_alloc+0x2b2/0x6f0 [ 1226.891394] ? __do_munmap+0x8a0/0xef0 [ 1226.895436] vm_area_alloc+0x20/0x110 [ 1226.899258] mmap_region+0x964/0x1770 [ 1226.903091] ? __x64_sys_brk+0x760/0x760 [ 1226.907187] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1226.912774] ? get_unmapped_area+0x295/0x3b0 [ 1226.917212] do_mmap+0x8e2/0x1080 [ 1226.920733] vm_mmap_pgoff+0x1c5/0x230 [ 1226.924658] ? vma_is_stack_for_current+0xd0/0xd0 [ 1226.929523] ? ksys_dup3+0x3e0/0x3e0 [ 1226.933273] ksys_mmap_pgoff+0x4aa/0x630 [ 1226.937432] ? find_mergeable_anon_vma+0x2e0/0x2e0 [ 1226.942389] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1226.947253] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1226.952034] ? do_syscall_64+0x26/0x610 [ 1226.956033] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1226.961540] __x64_sys_mmap+0xe9/0x1b0 [ 1226.965590] do_syscall_64+0x103/0x610 [ 1226.969505] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1226.975319] RIP: 0033:0x457f29 [ 1226.978530] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1226.997527] RSP: 002b:00007f30849b4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 19:22:30 executing program 0: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:30 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, 0x0) [ 1227.005376] RAX: ffffffffffffffda RBX: 00007f30849b4c90 RCX: 0000000000457f29 [ 1227.012662] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020007000 [ 1227.019984] RBP: 000000000073bf00 R08: 0000000000000005 R09: 0000000000002000 [ 1227.027359] R10: 0000000000006012 R11: 0000000000000246 R12: 00007f30849b56d4 [ 1227.034646] R13: 00000000004c3c88 R14: 00000000004d6e40 R15: 0000000000000006 19:22:30 executing program 0: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:30 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f00000000c0)={0x5, 0x70, 0x8, 0x5, 0x7, 0xffffffff, 0x0, 0x1, 0x10, 0x2, 0x2, 0x8, 0x5, 0x0, 0xfffffffffffff000, 0x80, 0x6, 0x401, 0x4, 0x3, 0x5000, 0x2, 0x9, 0x6, 0x1000000000004, 0x20, 0x6, 0x8000, 0x68, 0x80000001, 0x9, 0x7, 0x5, 0x7, 0x0, 0x9, 0x5, 0x3, 0x0, 0x100000001, 0x2, @perf_config_ext={0x4, 0x200}, 0x0, 0xc48, 0x5, 0x9, 0x3, 0xffffffffffffffff, 0x6}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x20, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000040)) 19:22:30 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31}, 0xfe40}}, 0x0) 19:22:30 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x408202, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r3, 0x2) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000000040)={0x7, 0x0, 0x7e}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:22:30 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0x0, &(0x7f0000000100)="6bf8e4631c85ed8cc78a37ab26f0dbaa557d281978241c8aec404c86f4990040247f9bbc7d926c6b7e4f8c7e922cda6bef57896a0823526b") r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x20480, 0x0) ioctl$VIDIOC_G_FBUF(r1, 0x8030560a, &(0x7f0000000080)={0x94, 0x2, &(0x7f00000001c0)="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", {0x0, 0x8000, 0x30314752, 0x0, 0x7, 0x10, 0x1, 0x72008c50}}) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}, 0x2800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000011c0)={0x0, 0x2}, &(0x7f0000001200)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000001240)={r2, 0xfc07, 0x100000001}, &(0x7f0000001280)=0x8) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f00000000c0)) 19:22:30 executing program 2 (fault-call:4 fault-nth:5): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6012, r2, 0x2000) 19:22:30 executing program 0: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:30 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:30 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x2, 0x1) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000080)={0xa0, 0x87, 0xfff}) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1227.381628] ion_mmap: failure mapping buffer to userspace 19:22:30 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31}, 0xfe40}}, 0x0) 19:22:30 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6012, r2, 0x2000) 19:22:30 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0x0, &(0x7f0000000140)) 19:22:30 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = accept$inet(0xffffffffffffffff, &(0x7f0000000b80)={0x2, 0x0, @initdev}, &(0x7f0000000bc0)=0x10) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000c00), &(0x7f0000000c40)=0x4) r3 = socket$inet(0x2, 0x2, 0x80) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000000ac0)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f00000001c0)=[{}, {}], 0x0, [{}, {}]}, 0x98) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000c80)={0x0, 0x8, 0x9, 0x6, 0x3}) r4 = semget(0x2, 0x3, 0x0) semctl$GETPID(r4, 0xf0fb83b52ed18a9b, 0xb, &(0x7f00000001c0)) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x100, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x780, 0x550, 0x118, 0x280, 0x0, 0x118, 0x6b0, 0x6b0, 0x6b0, 0x6b0, 0x6b0, 0x6, &(0x7f0000000140), {[{{@ipv6={@remote, @mcast2, [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xff0000ff, 0xffffff00, 0xff000000], 'bond_slave_1\x00', 'vlan0\x00', {}, {}, 0x3b, 0x9, 0x5, 0x2}, 0x0, 0xf0, 0x118, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x1}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [0xffffff00, 0xff0000ff, 0xff, 0xff000000], [0x0, 0x0, 0x0, 0xffffff00], 'veth1\x00', 'hwsim0\x00', {}, {0xff}, 0x3a, 0xffffffffffffff81, 0x0, 0x10}, 0x0, 0x140, 0x168, 0x0, {}, [@common=@inet=@ipcomp={0x30, 'ipcomp\x00', 0x0, {0x4d5, 0x4d3, 0x1}}, @common=@hbh={0x48, 'hbh\x00', 0x0, {0xffffffff, 0x2, 0x1, [0x4, 0xffffffffffffff74, 0x3, 0x1ff, 0x1, 0x4, 0x10001, 0x0, 0x180000000000, 0x2, 0x4, 0x3, 0x1, 0x0, 0x8, 0xcce], 0xf}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x9, 0x1}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x1, 0x0}, @rand_addr="e3e3aa379c5ae13c374da31520503edc", [0xffffffff, 0x0, 0xffffffff, 0xffffffff], [0xffffffff, 0xff000000, 0xff000000], 'team_slave_1\x00', 'teql0\x00', {0xff}, {0xff}, 0x9f, 0x1, 0x2, 0x20}, 0x0, 0x158, 0x198, 0x0, {}, [@common=@srh1={0x90, 'srh\x00', 0x1, {0x87, 0x2, 0x8, 0x100000001, 0xa3, @empty, @remote, @rand_addr="3dffb3c257bd6f660aeac5e56a959dfd", [0xff000000, 0xff0000ff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xff, 0xffffff00], [0x0, 0xffffff00, 0xffffffff, 0xffffffff], 0x940, 0x1000}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x80000001, 0x3f, @ipv6=@ipv4={[], [], @remote}, 0x4e22}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [0xffffffff, 0xffffffff, 0xff000000, 0xffffffff], [0xff000000, 0xffffffff, 0x0, 0xffffffff], 'veth1\x00', 'bridge0\x00', {0xff}, {}, 0x0, 0x1, 0x2, 0x8}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x8}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@local, @ipv6=@loopback, 0xb, 0x3e, 0x1000}}}, {{@ipv6={@dev={0xfe, 0x80, [], 0xf}, @loopback, [0xff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffff00, 0xe55e943b0e6e2ed2, 0xff, 0xff000000], 'team0\x00', 'gretap0\x00', {0xff}, {}, 0xdf, 0x81, 0x2, 0x10}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@dst={0x48, 'dst\x00', 0x0, {0x0, 0x2, 0x1, [0xc2e, 0xfffffffffffffffc, 0x7, 0x2, 0x5, 0x2900, 0x81, 0x7, 0xffffffff, 0x45, 0x1, 0x3, 0x2, 0x20, 0xd], 0x8}}, @inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xb}}]}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xc9}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7e0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000000040)={0x7, 0x0, 0x7e}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f000}) ioctl$KVM_RUN(r6, 0xae80, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) 19:22:30 executing program 1: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000080)={0x3}, 0x4) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r1, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1227.559948] ion_mmap: failure mapping buffer to userspace 19:22:30 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0x0, &(0x7f0000000140)) 19:22:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x2, 0x0, 0x6012, r2, 0x2000) 19:22:31 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31}, 0xfe40}}, 0x0) 19:22:31 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = getpgrp(0x0) r2 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xc372, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext={0x6, 0x8f}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, r1, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f00000001c0)={{0x5, 0x5}, 0x1, 0x2, 0x5, {0xfff, 0x2}, 0xffffffffffffffff, 0x597c}) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) io_setup(0x7fffffff, &(0x7f0000000040)=0x0) io_cancel(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x9, 0xffffffffffff2003, r2, &(0x7f0000000080)="fb500e0349880cbfa942ed446492bd31ec684f20bcbe79fec924c0c5153b855d9aa7d5", 0xfffffffffffffff1, 0x5, 0x0, 0x0, 0xffffffffffffff9c}, &(0x7f0000000100)) 19:22:31 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0x0, &(0x7f0000000140)) 19:22:31 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1227.816618] x86/PAT: syz-executor.2:15156 map pfn RAM range req write-combining for [mem 0xa9251000-0xa9251fff], got write-back [ 1227.885745] x86/PAT: syz-executor.2:15168 map pfn RAM range req write-combining for [mem 0xa9251000-0xa9251fff], got write-back 19:22:31 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, 0x0) 19:22:31 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:31 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31}, 0xfe40}}, 0x0) 19:22:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x100000000000019, &(0x7f0000548000)=0x5, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) recvfrom(r2, 0x0, 0x3c2, 0x0, 0x0, 0xffffffffffffffda) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e21}, 0x1c) recvmsg(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x2000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000000040)={0x7, 0x0, 0x7e}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:22:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x2000, 0x0, 0x6012, r2, 0x2000) 19:22:31 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31}, 0xfe40}}, 0x0) 19:22:31 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, 0x0) 19:22:31 executing program 3: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1228.152808] ion_mmap: failure mapping buffer to userspace [ 1228.192562] ion_mmap: failure mapping buffer to userspace 19:22:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x2, 0x0, 0x6012, r2, 0x2000) 19:22:31 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, 0x0) 19:22:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x2300, 0x0, 0x6012, r2, 0x2000) 19:22:31 executing program 3: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:31 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31}, 0xfe40}}, 0x0) [ 1228.329282] x86/PAT: syz-executor.1:15388 map pfn RAM range req write-combining for [mem 0xa9251000-0xa9251fff], got write-back [ 1228.380485] ion_mmap: failure mapping buffer to userspace 19:22:31 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/btrfs-control\x00', 0x400, 0x0) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f00000002c0)={0x1ff, 0x7, 0x2, 0xd6d8, 0xb19, 0x2}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x301000, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x54, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, [], 0x26}}, @in6={0xa, 0x4e24, 0x5, @remote, 0x9}, @in6={0xa, 0x4e23, 0x77b0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8001}]}, &(0x7f0000000200)=0x10) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000240)={r3, 0xfffffffffffffffe, 0x26c}, 0x8) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) socket$inet(0x2, 0x4, 0x6ffc583b) 19:22:31 executing program 3: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1228.427668] ion_mmap: failure mapping buffer to userspace 19:22:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000000040)={0x7, 0x0, 0x7e}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:22:31 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) alarm(0x88f9) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x2b00, 0x0, 0x6012, r2, 0x2000) 19:22:31 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffff9c, &(0x7f0000000280)=[{{&(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/25, 0x19}], 0x1, &(0x7f0000000200)=""/74, 0x4a}, 0x80000001}], 0x1, 0x2040, &(0x7f00000002c0)) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) 19:22:31 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31}, 0xfe40}}, 0x0) 19:22:31 executing program 3: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:32 executing program 0 (fault-call:2 fault-nth:0): r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:32 executing program 3: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1228.734621] ion_mmap: failure mapping buffer to userspace [ 1228.772999] ion_mmap: failure mapping buffer to userspace 19:22:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x2d00, 0x0, 0x6012, r2, 0x2000) 19:22:32 executing program 1 (fault-call:4 fault-nth:0): r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1228.893216] FAULT_INJECTION: forcing a failure. [ 1228.893216] name failslab, interval 1, probability 0, space 0, times 0 [ 1228.917193] CPU: 1 PID: 15578 Comm: syz-executor.0 Not tainted 5.0.0+ #12 [ 1228.924162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1228.928504] ion_mmap: failure mapping buffer to userspace [ 1228.933525] Call Trace: [ 1228.933551] dump_stack+0x172/0x1f0 [ 1228.933577] should_fail.cold+0xa/0x15 [ 1228.949373] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1228.953422] FAULT_INJECTION: forcing a failure. [ 1228.953422] name failslab, interval 1, probability 0, space 0, times 0 [ 1228.954490] ? ___might_sleep+0x163/0x280 [ 1228.954510] __should_failslab+0x121/0x190 [ 1228.974078] should_failslab+0x9/0x14 [ 1228.977894] __kmalloc+0x2dc/0x740 [ 1228.981448] ? drm_ioctl+0x45c/0xa50 [ 1228.985179] drm_ioctl+0x45c/0xa50 [ 1228.987222] ion_mmap: failure mapping buffer to userspace [ 1228.988733] ? drm_connector_property_set_ioctl+0x180/0x180 [ 1228.988756] ? drm_version+0x3d0/0x3d0 [ 1228.988774] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1229.000024] ? ___might_sleep+0x163/0x280 [ 1229.009006] ? drm_version+0x3d0/0x3d0 [ 1229.009026] do_vfs_ioctl+0xd6e/0x1390 [ 1229.009045] ? ioctl_preallocate+0x210/0x210 [ 1229.025353] ? selinux_file_mprotect+0x620/0x620 [ 1229.030140] ? ksys_dup3+0x3e0/0x3e0 [ 1229.033899] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1229.039460] ? tomoyo_file_ioctl+0x23/0x30 [ 1229.043729] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1229.049287] ? security_file_ioctl+0x93/0xc0 [ 1229.053728] ksys_ioctl+0xab/0xd0 [ 1229.057206] __x64_sys_ioctl+0x73/0xb0 [ 1229.061117] do_syscall_64+0x103/0x610 [ 1229.065024] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1229.070230] RIP: 0033:0x457f29 [ 1229.073426] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 19:22:32 executing program 3: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3002, 0x0, 0x6012, r2, 0x2000) [ 1229.092426] RSP: 002b:00007f7e0f635c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1229.100147] RAX: ffffffffffffffda RBX: 00007f7e0f635c90 RCX: 0000000000457f29 [ 1229.100157] RDX: 0000000020000140 RSI: fffffbfffff3ffa7 RDI: 0000000000000003 [ 1229.100167] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1229.100176] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7e0f6366d4 [ 1229.100184] R13: 00000000004bf139 R14: 00000000004d0ac8 R15: 0000000000000004 [ 1229.138762] CPU: 0 PID: 15622 Comm: syz-executor.1 Not tainted 5.0.0+ #12 [ 1229.145704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1229.155078] Call Trace: [ 1229.157677] dump_stack+0x172/0x1f0 [ 1229.161322] should_fail.cold+0xa/0x15 [ 1229.161343] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1229.161363] ? ___might_sleep+0x163/0x280 [ 1229.174501] __should_failslab+0x121/0x190 [ 1229.174522] should_failslab+0x9/0x14 [ 1229.174539] __kmalloc+0x2dc/0x740 [ 1229.182566] ? drm_ioctl+0x45c/0xa50 [ 1229.182585] drm_ioctl+0x45c/0xa50 [ 1229.182604] ? drm_connector_property_set_ioctl+0x180/0x180 [ 1229.189846] ? drm_version+0x3d0/0x3d0 [ 1229.189868] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1229.189901] ? drm_version+0x3d0/0x3d0 [ 1229.189932] do_vfs_ioctl+0xd6e/0x1390 [ 1229.189955] ? ioctl_preallocate+0x210/0x210 [ 1229.189978] ? selinux_file_mprotect+0x620/0x620 [ 1229.190004] ? ksys_dup3+0x3e0/0x3e0 [ 1229.228795] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1229.228816] ? tomoyo_file_ioctl+0x23/0x30 [ 1229.228831] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1229.228844] ? security_file_ioctl+0x93/0xc0 [ 1229.228861] ksys_ioctl+0xab/0xd0 [ 1229.228878] __x64_sys_ioctl+0x73/0xb0 [ 1229.228896] do_syscall_64+0x103/0x610 [ 1229.228917] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1229.244197] RIP: 0033:0x457f29 [ 1229.244214] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1229.244222] RSP: 002b:00007f57b7c93c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 19:22:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000000040)={0x7, 0x0, 0x7e}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x20000, 0x0) ioctl$TUNGETSNDBUF(r3, 0x800454d3, &(0x7f0000000140)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f000}) ioctl$VT_GETMODE(r2, 0x5601, &(0x7f0000000180)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:22:32 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:32 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31}, 0xfe40}}, 0x0) [ 1229.244236] RAX: ffffffffffffffda RBX: 00007f57b7c93c90 RCX: 0000000000457f29 [ 1229.244249] RDX: 0000000020000140 RSI: fffffbfffff3ffa7 RDI: 0000000000000003 [ 1229.309403] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1229.316715] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f57b7c946d4 [ 1229.324003] R13: 00000000004bf139 R14: 00000000004d0ac8 R15: 0000000000000005 [ 1229.344190] ion_mmap: failure mapping buffer to userspace 19:22:32 executing program 0 (fault-call:2 fault-nth:1): r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:32 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1229.403112] ion_mmap: failure mapping buffer to userspace [ 1229.483815] FAULT_INJECTION: forcing a failure. [ 1229.483815] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1229.495657] CPU: 1 PID: 15695 Comm: syz-executor.0 Not tainted 5.0.0+ #12 [ 1229.502606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1229.511969] Call Trace: [ 1229.514577] dump_stack+0x172/0x1f0 [ 1229.518231] should_fail.cold+0xa/0x15 [ 1229.522142] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1229.527278] ? __lock_acquire+0x548/0x3fb0 [ 1229.531540] should_fail_alloc_page+0x50/0x60 [ 1229.536048] __alloc_pages_nodemask+0x1a1/0x7e0 [ 1229.540743] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1229.545777] ? find_held_lock+0x35/0x130 [ 1229.550058] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1229.555274] cache_grow_begin+0x9c/0x860 [ 1229.559352] ? drm_ioctl+0x45c/0xa50 [ 1229.563079] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1229.568632] __kmalloc+0x67f/0x740 [ 1229.572193] ? drm_ioctl+0x45c/0xa50 [ 1229.575939] drm_ioctl+0x45c/0xa50 [ 1229.579491] ? drm_connector_property_set_ioctl+0x180/0x180 [ 1229.585238] ? drm_version+0x3d0/0x3d0 [ 1229.589141] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1229.594287] ? ___might_sleep+0x163/0x280 [ 1229.598555] ? drm_version+0x3d0/0x3d0 [ 1229.602469] do_vfs_ioctl+0xd6e/0x1390 [ 1229.606382] ? ioctl_preallocate+0x210/0x210 [ 1229.610827] ? selinux_file_mprotect+0x620/0x620 [ 1229.615613] ? ksys_dup3+0x3e0/0x3e0 [ 1229.619351] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1229.624914] ? tomoyo_file_ioctl+0x23/0x30 [ 1229.629167] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1229.634729] ? security_file_ioctl+0x93/0xc0 [ 1229.639167] ksys_ioctl+0xab/0xd0 [ 1229.642647] __x64_sys_ioctl+0x73/0xb0 [ 1229.646556] do_syscall_64+0x103/0x610 [ 1229.650466] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1229.655665] RIP: 0033:0x457f29 [ 1229.659057] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 19:22:33 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31}, 0xfe40}}, 0x0) 19:22:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3003, 0x0, 0x6012, r2, 0x2000) [ 1229.677974] RSP: 002b:00007f7e0f635c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1229.685707] RAX: ffffffffffffffda RBX: 00007f7e0f635c90 RCX: 0000000000457f29 [ 1229.692990] RDX: 0000000020000140 RSI: fffffbfffff3ffa7 RDI: 0000000000000003 [ 1229.700269] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1229.707548] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7e0f6366d4 [ 1229.714830] R13: 00000000004bf139 R14: 00000000004d0ac8 R15: 0000000000000004 19:22:33 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1229.820255] ion_mmap: failure mapping buffer to userspace 19:22:33 executing program 0 (fault-call:2 fault-nth:2): r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1229.869427] ion_mmap: failure mapping buffer to userspace 19:22:33 executing program 1 (fault-call:4 fault-nth:1): r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000000040)={0x7, 0x0, 0x7e}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:22:33 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:33 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31}, 0xfe40}}, 0x0) 19:22:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3004, 0x0, 0x6012, r2, 0x2000) [ 1230.056139] ion_mmap: failure mapping buffer to userspace [ 1230.070692] ion_mmap: failure mapping buffer to userspace [ 1230.077388] FAULT_INJECTION: forcing a failure. [ 1230.077388] name failslab, interval 1, probability 0, space 0, times 0 [ 1230.122608] CPU: 1 PID: 15863 Comm: syz-executor.1 Not tainted 5.0.0+ #12 [ 1230.129572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1230.138933] Call Trace: [ 1230.141536] dump_stack+0x172/0x1f0 [ 1230.145191] should_fail.cold+0xa/0x15 [ 1230.149104] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1230.154238] ? ___might_sleep+0x163/0x280 [ 1230.158401] __should_failslab+0x121/0x190 [ 1230.162654] should_failslab+0x9/0x14 [ 1230.166468] kmem_cache_alloc_trace+0x2d1/0x760 [ 1230.171152] ? ___might_sleep+0x163/0x280 [ 1230.175402] drm_mode_create+0x42/0xa0 [ 1230.179301] drm_mode_duplicate+0x20/0x1b0 [ 1230.183549] drm_add_modes_noedid+0x16a/0x1f0 [ 1230.188067] vkms_conn_get_modes+0x22/0x40 [ 1230.192320] drm_helper_probe_single_connector_modes+0x5ea/0x1c10 [ 1230.198567] ? __mutex_lock+0x3cd/0x1310 [ 1230.202637] ? mutex_trylock+0x1e0/0x1e0 [ 1230.206727] ? unwind_get_return_address+0x61/0xa0 [ 1230.211667] ? drm_mode_getconnector+0x60b/0x1337 [ 1230.216541] ? drm_helper_probe_detect+0x1b0/0x1b0 [ 1230.221493] ? __drm_mode_object_find+0xb7/0x210 [ 1230.226270] ? drm_helper_probe_detect+0x1b0/0x1b0 [ 1230.231212] drm_mode_getconnector+0x729/0x1337 [ 1230.235907] ? drm_connector_property_set_ioctl+0x180/0x180 [ 1230.241747] drm_ioctl_kernel+0x23b/0x2e0 [ 1230.245909] ? drm_connector_property_set_ioctl+0x180/0x180 [ 1230.251645] ? drm_setversion+0x8c0/0x8c0 [ 1230.255810] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1230.261360] ? _copy_from_user+0xdd/0x150 [ 1230.265526] drm_ioctl+0x545/0xa50 [ 1230.269079] ? drm_connector_property_set_ioctl+0x180/0x180 [ 1230.274812] ? drm_version+0x3d0/0x3d0 [ 1230.278719] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1230.283850] ? ___might_sleep+0x163/0x280 [ 1230.288018] ? drm_version+0x3d0/0x3d0 [ 1230.291923] do_vfs_ioctl+0xd6e/0x1390 [ 1230.295841] ? ioctl_preallocate+0x210/0x210 [ 1230.300267] ? selinux_file_mprotect+0x620/0x620 [ 1230.305043] ? ksys_dup3+0x3e0/0x3e0 [ 1230.308769] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1230.314319] ? tomoyo_file_ioctl+0x23/0x30 [ 1230.318564] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1230.324119] ? security_file_ioctl+0x93/0xc0 [ 1230.328547] ksys_ioctl+0xab/0xd0 [ 1230.332014] __x64_sys_ioctl+0x73/0xb0 [ 1230.335914] do_syscall_64+0x103/0x610 [ 1230.339818] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1230.345021] RIP: 0033:0x457f29 [ 1230.348237] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 19:22:33 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3005, 0x0, 0x6012, r2, 0x2000) [ 1230.367150] RSP: 002b:00007f57b7c93c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1230.374879] RAX: ffffffffffffffda RBX: 00007f57b7c93c90 RCX: 0000000000457f29 [ 1230.382159] RDX: 0000000020000140 RSI: fffffbfffff3ffa7 RDI: 0000000000000003 [ 1230.389440] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1230.396733] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f57b7c946d4 [ 1230.404033] R13: 00000000004bf139 R14: 00000000004d0ac8 R15: 0000000000000005 19:22:33 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31}, 0xfe40}}, 0x0) 19:22:33 executing program 5 (fault-call:0 fault-nth:0): syz_read_part_table(0x0, 0x0, 0x0) 19:22:33 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1230.527781] ion_mmap: failure mapping buffer to userspace [ 1230.554136] ion_mmap: failure mapping buffer to userspace 19:22:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3006, 0x0, 0x6012, r2, 0x2000) [ 1230.621287] FAULT_INJECTION: forcing a failure. [ 1230.621287] name failslab, interval 1, probability 0, space 0, times 0 [ 1230.662501] CPU: 0 PID: 15979 Comm: syz-executor.5 Not tainted 5.0.0+ #12 [ 1230.669477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1230.678838] Call Trace: [ 1230.681435] dump_stack+0x172/0x1f0 [ 1230.685068] should_fail.cold+0xa/0x15 [ 1230.688965] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1230.694076] ? ___might_sleep+0x163/0x280 [ 1230.698227] __should_failslab+0x121/0x190 [ 1230.702465] should_failslab+0x9/0x14 [ 1230.706263] __kmalloc+0x2dc/0x740 [ 1230.709803] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1230.715351] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1230.720906] ? strnlen_user+0x1f0/0x280 [ 1230.724889] ? __x64_sys_memfd_create+0x13c/0x470 [ 1230.729739] __x64_sys_memfd_create+0x13c/0x470 [ 1230.734410] ? memfd_fcntl+0x1550/0x1550 [ 1230.738471] ? do_syscall_64+0x26/0x610 [ 1230.742444] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1230.747034] ? trace_hardirqs_on+0x67/0x230 [ 1230.751361] do_syscall_64+0x103/0x610 [ 1230.755253] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1230.760931] RIP: 0033:0x457f29 [ 1230.764120] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1230.783021] RSP: 002b:00007fd78db71a18 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1230.790746] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000457f29 [ 1230.798015] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004bcc6b [ 1230.805285] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1230.812550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1230.819817] R13: 00000000004bcc6b R14: 00000000004dc330 R15: 0000000000000003 19:22:34 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:34 executing program 1 (fault-call:4 fault-nth:2): r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1230.871923] ion_mmap: failure mapping buffer to userspace 19:22:34 executing program 5 (fault-call:0 fault-nth:1): syz_read_part_table(0x0, 0x0, 0x0) 19:22:34 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1230.915097] ion_mmap: failure mapping buffer to userspace 19:22:34 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbff00000002, &(0x7f0000000140)) 19:22:34 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31}, 0xfe40}}, 0x0) [ 1230.962577] FAULT_INJECTION: forcing a failure. [ 1230.962577] name failslab, interval 1, probability 0, space 0, times 0 [ 1231.007048] CPU: 1 PID: 16090 Comm: syz-executor.1 Not tainted 5.0.0+ #12 [ 1231.014106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1231.023464] Call Trace: [ 1231.026070] dump_stack+0x172/0x1f0 [ 1231.029726] should_fail.cold+0xa/0x15 [ 1231.033633] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1231.038763] ? ___might_sleep+0x163/0x280 [ 1231.042925] __should_failslab+0x121/0x190 [ 1231.047170] should_failslab+0x9/0x14 [ 1231.050978] kmem_cache_alloc_trace+0x2d1/0x760 [ 1231.055669] drm_mode_create+0x42/0xa0 [ 1231.059587] drm_mode_duplicate+0x20/0x1b0 [ 1231.063840] drm_add_modes_noedid+0x16a/0x1f0 [ 1231.068355] vkms_conn_get_modes+0x22/0x40 [ 1231.072602] drm_helper_probe_single_connector_modes+0x5ea/0x1c10 [ 1231.078932] ? mark_held_locks+0xa4/0xf0 [ 1231.083001] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1231.087765] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1231.092362] ? drm_helper_probe_detect+0x1b0/0x1b0 [ 1231.097320] ? drm_helper_probe_detect+0x1b0/0x1b0 [ 1231.102260] drm_mode_getconnector+0x729/0x1337 [ 1231.106948] ? drm_connector_property_set_ioctl+0x180/0x180 [ 1231.112672] ? retint_kernel+0x2d/0x2d [ 1231.116589] ? drm_ioctl_permit+0x5a/0x230 [ 1231.120835] ? drm_ioctl_permit+0x63/0x230 [ 1231.125077] drm_ioctl_kernel+0x23b/0x2e0 [ 1231.129246] ? drm_connector_property_set_ioctl+0x180/0x180 [ 1231.134963] ? drm_setversion+0x8c0/0x8c0 [ 1231.139119] ? copy_user_enhanced_fast_string+0xe/0x20 [ 1231.144407] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1231.149948] ? _copy_from_user+0xdd/0x150 [ 1231.154112] drm_ioctl+0x545/0xa50 [ 1231.157659] ? drm_connector_property_set_ioctl+0x180/0x180 [ 1231.163380] ? drm_version+0x3d0/0x3d0 [ 1231.167271] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1231.172400] ? drm_version+0x3d0/0x3d0 [ 1231.176295] do_vfs_ioctl+0xd6e/0x1390 [ 1231.180196] ? ioctl_preallocate+0x210/0x210 [ 1231.184620] ? selinux_file_mprotect+0x620/0x620 [ 1231.189386] ? ksys_dup3+0x3e0/0x3e0 [ 1231.193106] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1231.198653] ? tomoyo_file_ioctl+0x23/0x30 [ 1231.202904] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1231.208448] ? security_file_ioctl+0x93/0xc0 [ 1231.212875] ksys_ioctl+0xab/0xd0 [ 1231.216343] __x64_sys_ioctl+0x73/0xb0 [ 1231.220248] do_syscall_64+0x103/0x610 [ 1231.224151] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1231.227367] FAULT_INJECTION: forcing a failure. [ 1231.227367] name failslab, interval 1, probability 0, space 0, times 0 [ 1231.229355] RIP: 0033:0x457f29 19:22:34 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbff00004b47, &(0x7f0000000140)) [ 1231.243748] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1231.262659] RSP: 002b:00007f57b7c93c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1231.270383] RAX: ffffffffffffffda RBX: 00007f57b7c93c90 RCX: 0000000000457f29 [ 1231.277653] RDX: 0000000020000140 RSI: fffffbfffff3ffa7 RDI: 0000000000000003 [ 1231.284923] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1231.292195] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f57b7c946d4 [ 1231.299473] R13: 00000000004bf139 R14: 00000000004d0ac8 R15: 0000000000000005 19:22:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3007, 0x0, 0x6012, r2, 0x2000) [ 1231.313333] CPU: 0 PID: 16096 Comm: syz-executor.5 Not tainted 5.0.0+ #12 [ 1231.320288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1231.329661] Call Trace: [ 1231.332262] dump_stack+0x172/0x1f0 [ 1231.335915] should_fail.cold+0xa/0x15 [ 1231.339819] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1231.344939] ? ___might_sleep+0x163/0x280 [ 1231.349102] __should_failslab+0x121/0x190 [ 1231.353351] ? shmem_destroy_callback+0xc0/0xc0 [ 1231.358032] should_failslab+0x9/0x14 [ 1231.361878] kmem_cache_alloc+0x2b2/0x6f0 [ 1231.361900] ion_mmap: failure mapping buffer to userspace [ 1231.366042] ? __alloc_fd+0x430/0x530 [ 1231.366064] ? shmem_destroy_callback+0xc0/0xc0 [ 1231.366081] shmem_alloc_inode+0x1c/0x50 [ 1231.366094] alloc_inode+0x66/0x190 [ 1231.366110] new_inode_pseudo+0x19/0xf0 [ 1231.381232] ion_mmap: failure mapping buffer to userspace [ 1231.384158] new_inode+0x1f/0x40 [ 1231.384177] shmem_get_inode+0x84/0x780 [ 1231.384201] __shmem_file_setup.part.0+0x7e/0x2b0 [ 1231.384221] shmem_file_setup+0x66/0x90 19:22:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3060, 0x0, 0x6012, r2, 0x2000) [ 1231.413466] __x64_sys_memfd_create+0x2a2/0x470 [ 1231.418141] ? memfd_fcntl+0x1550/0x1550 [ 1231.422215] ? do_syscall_64+0x26/0x610 [ 1231.426204] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1231.430801] ? trace_hardirqs_on+0x67/0x230 [ 1231.435173] do_syscall_64+0x103/0x610 [ 1231.439077] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1231.444270] RIP: 0033:0x457f29 19:22:34 executing program 1 (fault-call:4 fault-nth:3): r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1231.444287] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1231.444295] RSP: 002b:00007fd78db71a18 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1231.444310] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000457f29 [ 1231.444322] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004bcc6b [ 1231.488628] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1231.488638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1231.488647] R13: 00000000004bcc6b R14: 00000000004dc330 R15: 0000000000000003 19:22:34 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbff00004b49, &(0x7f0000000140)) 19:22:34 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1231.542520] ion_mmap: failure mapping buffer to userspace [ 1231.565169] ion_mmap: failure mapping buffer to userspace 19:22:34 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31}, 0xfe40}}, 0x0) 19:22:34 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1231.605080] FAULT_INJECTION: forcing a failure. [ 1231.605080] name failslab, interval 1, probability 0, space 0, times 0 [ 1231.655967] CPU: 0 PID: 16204 Comm: syz-executor.1 Not tainted 5.0.0+ #12 [ 1231.662940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1231.662948] Call Trace: [ 1231.662972] dump_stack+0x172/0x1f0 [ 1231.662996] should_fail.cold+0xa/0x15 [ 1231.663020] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1231.687549] ? ___might_sleep+0x163/0x280 [ 1231.691708] __should_failslab+0x121/0x190 [ 1231.695966] should_failslab+0x9/0x14 [ 1231.699779] kmem_cache_alloc_trace+0x2d1/0x760 [ 1231.704466] drm_mode_create+0x42/0xa0 [ 1231.704483] drm_mode_duplicate+0x20/0x1b0 [ 1231.704502] drm_add_modes_noedid+0x16a/0x1f0 [ 1231.704530] vkms_conn_get_modes+0x22/0x40 [ 1231.721374] drm_helper_probe_single_connector_modes+0x5ea/0x1c10 [ 1231.727618] ? __mutex_lock+0x3cd/0x1310 [ 1231.731690] ? mutex_trylock+0x1e0/0x1e0 [ 1231.735768] ? drm_mode_getconnector+0x60b/0x1337 [ 1231.740628] ? drm_helper_probe_detect+0x1b0/0x1b0 [ 1231.745612] ? __drm_mode_object_find+0xb7/0x210 [ 1231.750389] ? drm_helper_probe_detect+0x1b0/0x1b0 [ 1231.755332] drm_mode_getconnector+0x729/0x1337 [ 1231.760020] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1231.764878] ? retint_kernel+0x2d/0x2d [ 1231.768959] ? drm_connector_property_set_ioctl+0x180/0x180 [ 1231.774695] ? drm_ioctl_kernel+0x218/0x2e0 [ 1231.779063] drm_ioctl_kernel+0x23b/0x2e0 [ 1231.783221] ? drm_connector_property_set_ioctl+0x180/0x180 [ 1231.788951] ? drm_setversion+0x8c0/0x8c0 [ 1231.793152] ? drm_ioctl+0x4fb/0xa50 [ 1231.796880] drm_ioctl+0x545/0xa50 [ 1231.800432] ? drm_connector_property_set_ioctl+0x180/0x180 [ 1231.806164] ? drm_version+0x3d0/0x3d0 [ 1231.810059] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1231.815190] ? ___might_sleep+0x163/0x280 [ 1231.819358] ? drm_version+0x3d0/0x3d0 [ 1231.823258] do_vfs_ioctl+0xd6e/0x1390 [ 1231.827163] ? ioctl_preallocate+0x210/0x210 [ 1231.831583] ? selinux_file_mprotect+0x620/0x620 [ 1231.836367] ? ksys_dup3+0x3e0/0x3e0 [ 1231.840096] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1231.845649] ? tomoyo_file_ioctl+0x23/0x30 [ 1231.849901] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1231.855441] ? security_file_ioctl+0x93/0xc0 [ 1231.859863] ksys_ioctl+0xab/0xd0 [ 1231.863328] __x64_sys_ioctl+0x73/0xb0 [ 1231.867227] do_syscall_64+0x103/0x610 [ 1231.871132] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1231.876338] RIP: 0033:0x457f29 [ 1231.879543] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1231.898449] RSP: 002b:00007f57b7c93c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 19:22:35 executing program 5 (fault-call:0 fault-nth:2): syz_read_part_table(0x0, 0x0, 0x0) 19:22:35 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbff0000541b, &(0x7f0000000140)) 19:22:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3d00, 0x0, 0x6012, r2, 0x2000) 19:22:35 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbff00005421, &(0x7f0000000140)) 19:22:35 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31}, 0xfe40}}, 0x0) [ 1231.906164] RAX: ffffffffffffffda RBX: 00007f57b7c93c90 RCX: 0000000000457f29 [ 1231.913465] RDX: 0000000020000140 RSI: fffffbfffff3ffa7 RDI: 0000000000000003 [ 1231.913475] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1231.913484] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f57b7c946d4 [ 1231.913492] R13: 00000000004bf139 R14: 00000000004d0ac8 R15: 0000000000000005 [ 1232.010078] FAULT_INJECTION: forcing a failure. [ 1232.010078] name failslab, interval 1, probability 0, space 0, times 0 [ 1232.012556] ion_mmap: failure mapping buffer to userspace [ 1232.074627] CPU: 0 PID: 16325 Comm: syz-executor.5 Not tainted 5.0.0+ #12 [ 1232.081622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1232.090983] Call Trace: [ 1232.093585] dump_stack+0x172/0x1f0 [ 1232.097230] should_fail.cold+0xa/0x15 [ 1232.101135] ? find_held_lock+0x35/0x130 [ 1232.105220] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1232.110346] ? ___might_sleep+0x163/0x280 [ 1232.114514] __should_failslab+0x121/0x190 [ 1232.118782] should_failslab+0x9/0x14 [ 1232.122595] kmem_cache_alloc+0x2b2/0x6f0 [ 1232.126769] ? __put_user_ns+0x70/0x70 [ 1232.130667] ? shmem_alloc_inode+0x1c/0x50 [ 1232.134920] ? rcu_read_lock_sched_held+0x110/0x130 [ 1232.139950] security_inode_alloc+0x39/0x160 [ 1232.144369] inode_init_always+0x56e/0xb50 [ 1232.148610] alloc_inode+0x83/0x190 [ 1232.152241] new_inode_pseudo+0x19/0xf0 [ 1232.156225] new_inode+0x1f/0x40 [ 1232.159612] shmem_get_inode+0x84/0x780 [ 1232.163612] __shmem_file_setup.part.0+0x7e/0x2b0 [ 1232.168472] shmem_file_setup+0x66/0x90 [ 1232.172458] __x64_sys_memfd_create+0x2a2/0x470 [ 1232.177133] ? memfd_fcntl+0x1550/0x1550 [ 1232.181204] ? do_syscall_64+0x26/0x610 [ 1232.185191] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1232.189782] ? trace_hardirqs_on+0x67/0x230 [ 1232.189803] do_syscall_64+0x103/0x610 [ 1232.189826] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1232.189837] RIP: 0033:0x457f29 [ 1232.189852] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 19:22:35 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:35 executing program 1 (fault-call:4 fault-nth:4): r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:35 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbff00005450, &(0x7f0000000140)) 19:22:35 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbff00005451, &(0x7f0000000140)) 19:22:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0xe003, 0x0, 0x6012, r2, 0x2000) [ 1232.189861] RSP: 002b:00007fd78db71a18 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1232.189874] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000457f29 [ 1232.189882] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004bcc6b [ 1232.189889] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1232.189898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1232.189906] R13: 00000000004bcc6b R14: 00000000004dc330 R15: 0000000000000003 19:22:35 executing program 5 (fault-call:0 fault-nth:3): syz_read_part_table(0x0, 0x0, 0x0) 19:22:35 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31}, 0xfe40}}, 0x0) 19:22:35 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbff00005452, &(0x7f0000000140)) [ 1232.358056] FAULT_INJECTION: forcing a failure. [ 1232.358056] name failslab, interval 1, probability 0, space 0, times 0 19:22:35 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1232.409393] CPU: 0 PID: 16444 Comm: syz-executor.1 Not tainted 5.0.0+ #12 [ 1232.416359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1232.416367] Call Trace: [ 1232.416390] dump_stack+0x172/0x1f0 [ 1232.416422] should_fail.cold+0xa/0x15 [ 1232.435886] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1232.441009] ? ___might_sleep+0x163/0x280 [ 1232.445167] __should_failslab+0x121/0x190 [ 1232.445188] should_failslab+0x9/0x14 [ 1232.445205] kmem_cache_alloc_trace+0x2d1/0x760 [ 1232.445229] drm_mode_create+0x42/0xa0 [ 1232.461796] drm_mode_duplicate+0x20/0x1b0 [ 1232.466048] drm_add_modes_noedid+0x16a/0x1f0 [ 1232.470573] vkms_conn_get_modes+0x22/0x40 [ 1232.474838] drm_helper_probe_single_connector_modes+0x5ea/0x1c10 [ 1232.481093] ? __mutex_lock+0x3cd/0x1310 [ 1232.485175] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1232.489941] ? drm_mode_getconnector+0x60b/0x1337 [ 1232.494797] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1232.499417] ? drm_helper_probe_detect+0x1b0/0x1b0 [ 1232.504376] ? drm_helper_probe_detect+0x1b0/0x1b0 [ 1232.509322] drm_mode_getconnector+0x729/0x1337 [ 1232.514008] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1232.518779] ? retint_kernel+0x2d/0x2d [ 1232.523121] ? drm_connector_property_set_ioctl+0x180/0x180 [ 1232.528857] ? drm_connector_property_set_ioctl+0x180/0x180 [ 1232.534579] drm_ioctl_kernel+0x23b/0x2e0 [ 1232.538742] ? drm_connector_property_set_ioctl+0x180/0x180 [ 1232.544467] ? drm_setversion+0x8c0/0x8c0 [ 1232.548628] ? copy_user_enhanced_fast_string+0xe/0x20 [ 1232.554178] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 19:22:35 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1232.559747] ? _copy_from_user+0xdd/0x150 [ 1232.563913] drm_ioctl+0x545/0xa50 [ 1232.567826] ? drm_connector_property_set_ioctl+0x180/0x180 [ 1232.573558] ? drm_version+0x3d0/0x3d0 [ 1232.577470] ? retint_kernel+0x2d/0x2d [ 1232.581380] ? drm_version+0x3d0/0x3d0 [ 1232.585279] do_vfs_ioctl+0xd6e/0x1390 [ 1232.589193] ? ioctl_preallocate+0x210/0x210 [ 1232.593617] ? selinux_file_mprotect+0x620/0x620 [ 1232.598402] ? ksys_dup3+0x3e0/0x3e0 [ 1232.602220] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 19:22:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x7fffdfff8000, 0x0, 0x6012, r2, 0x2000) [ 1232.607783] ? tomoyo_file_ioctl+0x23/0x30 [ 1232.612034] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1232.617585] ? security_file_ioctl+0x93/0xc0 [ 1232.617607] ksys_ioctl+0xab/0xd0 [ 1232.617628] __x64_sys_ioctl+0x73/0xb0 [ 1232.617647] do_syscall_64+0x103/0x610 [ 1232.617667] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1232.617679] RIP: 0033:0x457f29 [ 1232.617693] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1232.617701] RSP: 002b:00007f57b7c93c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1232.617715] RAX: ffffffffffffffda RBX: 00007f57b7c93c90 RCX: 0000000000457f29 [ 1232.617731] RDX: 0000000020000140 RSI: fffffbfffff3ffa7 RDI: 0000000000000003 [ 1232.617740] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1232.617749] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f57b7c946d4 [ 1232.617757] R13: 00000000004bf139 R14: 00000000004d0ac8 R15: 0000000000000005 [ 1232.619784] FAULT_INJECTION: forcing a failure. 19:22:36 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31}, 0xfe40}}, 0x0) [ 1232.619784] name failslab, interval 1, probability 0, space 0, times 0 [ 1232.663329] CPU: 0 PID: 16448 Comm: syz-executor.5 Not tainted 5.0.0+ #12 [ 1232.723132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1232.732490] Call Trace: [ 1232.735088] dump_stack+0x172/0x1f0 [ 1232.738742] should_fail.cold+0xa/0x15 [ 1232.742643] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1232.742666] ? ___might_sleep+0x163/0x280 [ 1232.742686] __should_failslab+0x121/0x190 [ 1232.742715] should_failslab+0x9/0x14 [ 1232.742737] kmem_cache_alloc+0x2b2/0x6f0 [ 1232.764604] ? current_time+0x6b/0x140 [ 1232.764622] ? ktime_get_coarse_real_ts64+0xf0/0x2b0 [ 1232.764639] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1232.764655] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1232.764668] ? timespec64_trunc+0xf0/0x180 [ 1232.764687] __d_alloc+0x2e/0x8c0 [ 1232.791456] d_alloc_pseudo+0x1e/0x30 [ 1232.795277] alloc_file_pseudo+0xe2/0x280 [ 1232.799438] ? alloc_file+0x4d0/0x4d0 [ 1232.803246] ? lockdep_annotate_inode_mutex_key+0x5b/0x70 [ 1232.808819] __shmem_file_setup.part.0+0x108/0x2b0 [ 1232.813779] shmem_file_setup+0x66/0x90 [ 1232.817774] __x64_sys_memfd_create+0x2a2/0x470 [ 1232.822460] ? memfd_fcntl+0x1550/0x1550 [ 1232.826543] ? do_syscall_64+0x26/0x610 [ 1232.830541] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1232.835140] ? trace_hardirqs_on+0x67/0x230 [ 1232.839483] do_syscall_64+0x103/0x610 [ 1232.843389] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1232.848595] RIP: 0033:0x457f29 19:22:36 executing program 1 (fault-call:4 fault-nth:5): r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1232.851797] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1232.871137] RSP: 002b:00007fd78db71a18 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1232.878861] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000457f29 [ 1232.886141] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004bcc6b [ 1232.893417] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1232.900702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 19:22:36 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbff00005460, &(0x7f0000000140)) [ 1232.907993] R13: 00000000004bcc6b R14: 00000000004dc330 R15: 0000000000000003 19:22:36 executing program 3: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x7ffffffff000, 0x0, 0x6012, r2, 0x2000) 19:22:36 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbff40049409, &(0x7f0000000140)) [ 1233.013513] FAULT_INJECTION: forcing a failure. [ 1233.013513] name failslab, interval 1, probability 0, space 0, times 0 [ 1233.054249] CPU: 0 PID: 16667 Comm: syz-executor.1 Not tainted 5.0.0+ #12 [ 1233.061220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1233.070584] Call Trace: [ 1233.073194] dump_stack+0x172/0x1f0 [ 1233.076841] should_fail.cold+0xa/0x15 [ 1233.080756] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1233.085890] ? ___might_sleep+0x163/0x280 [ 1233.090057] __should_failslab+0x121/0x190 [ 1233.094334] should_failslab+0x9/0x14 [ 1233.098155] kmem_cache_alloc_trace+0x2d1/0x760 [ 1233.102845] drm_mode_create+0x42/0xa0 [ 1233.106761] drm_mode_duplicate+0x20/0x1b0 [ 1233.111014] drm_add_modes_noedid+0x16a/0x1f0 [ 1233.115531] vkms_conn_get_modes+0x22/0x40 [ 1233.119781] drm_helper_probe_single_connector_modes+0x5ea/0x1c10 [ 1233.126038] ? __mutex_lock+0x3cd/0x1310 [ 1233.130106] ? mutex_trylock+0x1e0/0x1e0 [ 1233.134175] ? unwind_get_return_address+0x61/0xa0 [ 1233.139118] ? drm_mode_getconnector+0x60b/0x1337 [ 1233.143984] ? drm_helper_probe_detect+0x1b0/0x1b0 [ 1233.148968] ? __drm_mode_object_find+0xb7/0x210 [ 1233.153761] ? drm_helper_probe_detect+0x1b0/0x1b0 [ 1233.158702] drm_mode_getconnector+0x729/0x1337 [ 1233.163399] ? drm_connector_property_set_ioctl+0x180/0x180 [ 1233.169148] drm_ioctl_kernel+0x23b/0x2e0 [ 1233.173306] ? drm_connector_property_set_ioctl+0x180/0x180 [ 1233.179466] ? drm_setversion+0x8c0/0x8c0 [ 1233.183628] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1233.189173] ? _copy_from_user+0xdd/0x150 [ 1233.193333] drm_ioctl+0x545/0xa50 [ 1233.196881] ? drm_connector_property_set_ioctl+0x180/0x180 [ 1233.202610] ? drm_version+0x3d0/0x3d0 [ 1233.206543] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1233.211327] ? retint_kernel+0x2d/0x2d [ 1233.215223] ? drm_version+0x3d0/0x3d0 [ 1233.215245] ? drm_version+0x3d0/0x3d0 [ 1233.215265] do_vfs_ioctl+0xd6e/0x1390 [ 1233.215284] ? ioctl_preallocate+0x210/0x210 [ 1233.226964] ? selinux_file_mprotect+0x620/0x620 [ 1233.226990] ? ksys_dup3+0x3e0/0x3e0 [ 1233.227013] ? tomoyo_file_ioctl+0x23/0x30 [ 1233.227029] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1233.227043] ? security_file_ioctl+0x93/0xc0 [ 1233.227062] ksys_ioctl+0xab/0xd0 [ 1233.227081] __x64_sys_ioctl+0x73/0xb0 [ 1233.227096] ? do_syscall_64+0x5b/0x610 [ 1233.227110] do_syscall_64+0x103/0x610 [ 1233.227129] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1233.227142] RIP: 0033:0x457f29 [ 1233.227158] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1233.274606] RSP: 002b:00007f57b7c93c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 19:22:36 executing program 5: syz_read_part_table(0x0, 0x0, 0x0) 19:22:36 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff0f}, 0xfe40}}, 0x0) 19:22:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x2, 0x6012, r2, 0x2000) 19:22:36 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbff40086602, &(0x7f0000000140)) [ 1233.274622] RAX: ffffffffffffffda RBX: 00007f57b7c93c90 RCX: 0000000000457f29 [ 1233.274631] RDX: 0000000020000140 RSI: fffffbfffff3ffa7 RDI: 0000000000000003 [ 1233.274643] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1233.296745] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f57b7c946d4 [ 1233.296754] R13: 00000000004bf139 R14: 00000000004d0ac8 R15: 0000000000000005 19:22:36 executing program 3: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:36 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff44}, 0xfe40}}, 0x0) 19:22:36 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbff40087602, &(0x7f0000000140)) [ 1233.389018] ion_mmap: failure mapping buffer to userspace 19:22:36 executing program 1 (fault-call:4 fault-nth:6): r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1233.434093] ion_mmap: failure mapping buffer to userspace 19:22:36 executing program 3: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x3, 0x6012, r2, 0x2000) 19:22:36 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbff4020940d, &(0x7f0000000140)) [ 1233.527165] FAULT_INJECTION: forcing a failure. [ 1233.527165] name failslab, interval 1, probability 0, space 0, times 0 [ 1233.574003] CPU: 0 PID: 16795 Comm: syz-executor.1 Not tainted 5.0.0+ #12 [ 1233.580995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1233.590351] Call Trace: [ 1233.592955] dump_stack+0x172/0x1f0 [ 1233.596691] should_fail.cold+0xa/0x15 [ 1233.600600] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1233.605729] ? ___might_sleep+0x163/0x280 [ 1233.609888] __should_failslab+0x121/0x190 [ 1233.614131] should_failslab+0x9/0x14 [ 1233.617948] kmem_cache_alloc_trace+0x2d1/0x760 19:22:36 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0x0, &(0x7f0000000140)) [ 1233.622620] ? mutex_unlock+0xd/0x10 [ 1233.626342] ? __drm_mode_object_add+0x15a/0x1a0 [ 1233.631115] drm_mode_create+0x42/0xa0 [ 1233.635016] drm_mode_duplicate+0x20/0x1b0 [ 1233.638518] ion_mmap: failure mapping buffer to userspace [ 1233.639259] drm_add_modes_noedid+0x16a/0x1f0 [ 1233.649292] vkms_conn_get_modes+0x22/0x40 [ 1233.653539] drm_helper_probe_single_connector_modes+0x5ea/0x1c10 [ 1233.658164] ion_mmap: failure mapping buffer to userspace [ 1233.659862] ? mark_held_locks+0xa4/0xf0 [ 1233.659881] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1233.659897] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1233.659912] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1233.659931] ? retint_kernel+0x2d/0x2d [ 1233.687462] ? drm_helper_probe_detect+0x1b0/0x1b0 [ 1233.692420] ? drm_helper_probe_detect+0x1b0/0x1b0 [ 1233.697366] drm_mode_getconnector+0x729/0x1337 [ 1233.702057] ? drm_connector_property_set_ioctl+0x180/0x180 [ 1233.707781] ? retint_kernel+0x2d/0x2d [ 1233.711690] ? drm_ioctl_permit+0x19b/0x230 [ 1233.716041] ? drm_ioctl_permit+0x1aa/0x230 [ 1233.720380] drm_ioctl_kernel+0x23b/0x2e0 [ 1233.724538] ? drm_connector_property_set_ioctl+0x180/0x180 [ 1233.730261] ? drm_setversion+0x8c0/0x8c0 [ 1233.734417] ? copy_user_enhanced_fast_string+0xe/0x20 [ 1233.739704] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1233.745284] ? _copy_from_user+0xdd/0x150 [ 1233.749470] drm_ioctl+0x545/0xa50 [ 1233.753022] ? drm_connector_property_set_ioctl+0x180/0x180 [ 1233.758755] ? drm_version+0x3d0/0x3d0 [ 1233.762652] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1233.767767] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1233.772541] ? ___might_sleep+0x163/0x280 [ 1233.776703] ? drm_version+0x3d0/0x3d0 [ 1233.780610] do_vfs_ioctl+0xd6e/0x1390 [ 1233.784514] ? ioctl_preallocate+0x210/0x210 [ 1233.788936] ? selinux_file_mprotect+0x620/0x620 [ 1233.793758] ? ksys_dup3+0x3e0/0x3e0 [ 1233.797490] ? tomoyo_file_ioctl+0x23/0x30 [ 1233.801751] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1233.807296] ? security_file_ioctl+0x93/0xc0 [ 1233.811725] ksys_ioctl+0xab/0xd0 [ 1233.815193] __x64_sys_ioctl+0x73/0xb0 [ 1233.819087] ? do_syscall_64+0x5b/0x610 [ 1233.823074] do_syscall_64+0x103/0x610 [ 1233.826980] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1233.832175] RIP: 0033:0x457f29 [ 1233.835375] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1233.854289] RSP: 002b:00007f57b7c93c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1233.862007] RAX: ffffffffffffffda RBX: 00007f57b7c93c90 RCX: 0000000000457f29 [ 1233.869286] RDX: 0000000020000140 RSI: fffffbfffff3ffa7 RDI: 0000000000000003 [ 1233.876561] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1233.883842] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f57b7c946d4 [ 1233.891116] R13: 00000000004bf139 R14: 00000000004d0ac8 R15: 0000000000000005 [ 1233.908739] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:22:37 executing program 5: syz_read_part_table(0x2, 0x0, 0x0) 19:22:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x4, 0x6012, r2, 0x2000) 19:22:37 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbff80086601, &(0x7f0000000140)) 19:22:37 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x8}, 0xfe40}}, 0x0) 19:22:37 executing program 1 (fault-call:4 fault-nth:7): r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:37 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0x0, &(0x7f0000000140)) [ 1233.993046] ion_mmap: failure mapping buffer to userspace 19:22:37 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbff80087601, &(0x7f0000000140)) [ 1234.044053] FAULT_INJECTION: forcing a failure. [ 1234.044053] name failslab, interval 1, probability 0, space 0, times 0 [ 1234.060854] ion_mmap: failure mapping buffer to userspace [ 1234.081826] CPU: 1 PID: 16914 Comm: syz-executor.1 Not tainted 5.0.0+ #12 [ 1234.088814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1234.088821] Call Trace: [ 1234.088847] dump_stack+0x172/0x1f0 [ 1234.088874] should_fail.cold+0xa/0x15 [ 1234.108348] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1234.113467] ? ___might_sleep+0x163/0x280 [ 1234.117628] __should_failslab+0x121/0x190 [ 1234.121890] should_failslab+0x9/0x14 [ 1234.125714] kmem_cache_alloc_trace+0x2d1/0x760 [ 1234.130393] ? mutex_unlock+0xd/0x10 [ 1234.134122] ? __drm_mode_object_add+0x15a/0x1a0 [ 1234.138897] drm_mode_create+0x42/0xa0 [ 1234.142794] drm_mode_duplicate+0x20/0x1b0 [ 1234.147044] drm_add_modes_noedid+0x16a/0x1f0 [ 1234.151564] vkms_conn_get_modes+0x22/0x40 [ 1234.155815] drm_helper_probe_single_connector_modes+0x5ea/0x1c10 [ 1234.162057] ? __mutex_lock+0x3cd/0x1310 [ 1234.166122] ? mutex_trylock+0x1e0/0x1e0 [ 1234.170198] ? unwind_get_return_address+0x61/0xa0 [ 1234.175141] ? drm_mode_getconnector+0x60b/0x1337 [ 1234.180009] ? drm_helper_probe_detect+0x1b0/0x1b0 [ 1234.184961] ? __drm_mode_object_find+0xb7/0x210 [ 1234.189740] ? drm_helper_probe_detect+0x1b0/0x1b0 [ 1234.194679] drm_mode_getconnector+0x729/0x1337 [ 1234.199375] ? drm_connector_property_set_ioctl+0x180/0x180 [ 1234.205118] drm_ioctl_kernel+0x23b/0x2e0 [ 1234.209273] ? drm_connector_property_set_ioctl+0x180/0x180 [ 1234.214998] ? drm_setversion+0x8c0/0x8c0 [ 1234.219161] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1234.224716] ? _copy_from_user+0xdd/0x150 [ 1234.228877] drm_ioctl+0x545/0xa50 [ 1234.232423] ? drm_connector_property_set_ioctl+0x180/0x180 [ 1234.238147] ? drm_version+0x3d0/0x3d0 [ 1234.242046] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1234.247170] ? ___might_sleep+0x163/0x280 [ 1234.251333] ? drm_version+0x3d0/0x3d0 [ 1234.255240] do_vfs_ioctl+0xd6e/0x1390 [ 1234.259144] ? ioctl_preallocate+0x210/0x210 [ 1234.263564] ? selinux_file_mprotect+0x620/0x620 [ 1234.268338] ? ksys_dup3+0x3e0/0x3e0 [ 1234.272064] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1234.277624] ? tomoyo_file_ioctl+0x23/0x30 [ 1234.281885] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1234.287441] ? security_file_ioctl+0x93/0xc0 [ 1234.291873] ksys_ioctl+0xab/0xd0 [ 1234.295354] __x64_sys_ioctl+0x73/0xb0 [ 1234.299261] do_syscall_64+0x103/0x610 [ 1234.303169] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1234.308360] RIP: 0033:0x457f29 [ 1234.311561] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1234.330472] RSP: 002b:00007f57b7c93c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1234.338192] RAX: ffffffffffffffda RBX: 00007f57b7c93c90 RCX: 0000000000457f29 19:22:37 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0045878, &(0x7f0000000140)) [ 1234.345484] RDX: 0000000020000140 RSI: fffffbfffff3ffa7 RDI: 0000000000000003 [ 1234.352763] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1234.360059] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f57b7c946d4 [ 1234.367343] R13: 00000000004bf139 R14: 00000000004d0ac8 R15: 0000000000000005 19:22:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x5, 0x6012, r2, 0x2000) 19:22:37 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0xf}, 0xfe40}}, 0x0) [ 1234.438383] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:22:37 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbffc0045878, &(0x7f0000000140)) 19:22:37 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0x0, &(0x7f0000000140)) [ 1234.491277] ion_mmap: failure mapping buffer to userspace [ 1234.510237] ion_mmap: failure mapping buffer to userspace 19:22:37 executing program 5: syz_read_part_table(0x3, 0x0, 0x0) 19:22:37 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbffc0189436, &(0x7f0000000140)) 19:22:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x6, 0x6012, r2, 0x2000) 19:22:37 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, 0x0) [ 1234.637919] __loop_clr_fd: partition scan of loop5 failed (rc=-22) [ 1234.684496] ion_mmap: failure mapping buffer to userspace 19:22:38 executing program 1 (fault-call:4 fault-nth:8): r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:38 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x10}, 0xfe40}}, 0x0) 19:22:38 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbffc020660b, &(0x7f0000000140)) 19:22:38 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, 0x0) [ 1234.731344] ion_mmap: failure mapping buffer to userspace 19:22:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x7, 0x6012, r2, 0x2000) 19:22:38 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffc9, &(0x7f0000000140)) [ 1234.798169] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:22:38 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0xf00}, 0xfe40}}, 0x0) 19:22:38 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, 0x0) 19:22:38 executing program 5: syz_read_part_table(0x4, 0x0, 0x0) 19:22:38 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x644b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xf}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1234.915302] ion_mmap: failure mapping buffer to userspace [ 1234.953476] ion_mmap: failure mapping buffer to userspace 19:22:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x10, 0x6012, r2, 0x2000) [ 1234.997871] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:22:38 executing program 3 (fault-call:2 fault-nth:0): r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1235.082190] ion_mmap: failure mapping buffer to userspace [ 1235.094661] FAULT_INJECTION: forcing a failure. [ 1235.094661] name failslab, interval 1, probability 0, space 0, times 0 [ 1235.120405] ion_mmap: failure mapping buffer to userspace [ 1235.133275] CPU: 0 PID: 17269 Comm: syz-executor.1 Not tainted 5.0.0+ #12 [ 1235.140225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1235.149583] Call Trace: [ 1235.152186] dump_stack+0x172/0x1f0 [ 1235.155834] should_fail.cold+0xa/0x15 [ 1235.159745] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1235.164864] ? ___might_sleep+0x163/0x280 [ 1235.169029] __should_failslab+0x121/0x190 [ 1235.173274] should_failslab+0x9/0x14 [ 1235.177086] kmem_cache_alloc_trace+0x2d1/0x760 [ 1235.181768] ? mutex_unlock+0xd/0x10 [ 1235.185492] ? __drm_mode_object_add+0x15a/0x1a0 [ 1235.190262] drm_mode_create+0x42/0xa0 [ 1235.194157] drm_mode_duplicate+0x20/0x1b0 [ 1235.198407] drm_add_modes_noedid+0x16a/0x1f0 [ 1235.202924] vkms_conn_get_modes+0x22/0x40 [ 1235.207175] drm_helper_probe_single_connector_modes+0x5ea/0x1c10 [ 1235.213419] ? __mutex_lock+0x3cd/0x1310 [ 1235.217486] ? mutex_trylock+0x1e0/0x1e0 [ 1235.221554] ? unwind_get_return_address+0x61/0xa0 [ 1235.226497] ? drm_mode_getconnector+0x60b/0x1337 [ 1235.231363] ? drm_helper_probe_detect+0x1b0/0x1b0 [ 1235.236310] ? __drm_mode_object_find+0xb7/0x210 [ 1235.241078] ? drm_helper_probe_detect+0x1b0/0x1b0 [ 1235.246020] drm_mode_getconnector+0x729/0x1337 [ 1235.250711] ? drm_connector_property_set_ioctl+0x180/0x180 [ 1235.256464] drm_ioctl_kernel+0x23b/0x2e0 [ 1235.260621] ? drm_connector_property_set_ioctl+0x180/0x180 [ 1235.266342] ? drm_setversion+0x8c0/0x8c0 [ 1235.270502] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1235.276046] ? _copy_from_user+0xdd/0x150 [ 1235.280206] drm_ioctl+0x545/0xa50 [ 1235.283758] ? drm_connector_property_set_ioctl+0x180/0x180 [ 1235.289486] ? drm_version+0x3d0/0x3d0 [ 1235.293378] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1235.298586] ? ___might_sleep+0x163/0x280 [ 1235.302753] ? drm_version+0x3d0/0x3d0 [ 1235.306658] do_vfs_ioctl+0xd6e/0x1390 [ 1235.310564] ? ioctl_preallocate+0x210/0x210 [ 1235.314985] ? selinux_file_mprotect+0x620/0x620 [ 1235.319760] ? ksys_dup3+0x3e0/0x3e0 [ 1235.323483] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1235.329031] ? tomoyo_file_ioctl+0x23/0x30 [ 1235.333272] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1235.338819] ? security_file_ioctl+0x93/0xc0 [ 1235.343240] ksys_ioctl+0xab/0xd0 [ 1235.346707] __x64_sys_ioctl+0x73/0xb0 [ 1235.350614] do_syscall_64+0x103/0x610 [ 1235.354524] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1235.359726] RIP: 0033:0x457f29 [ 1235.362926] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1235.381838] RSP: 002b:00007f57b7c93c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1235.389558] RAX: ffffffffffffffda RBX: 00007f57b7c93c90 RCX: 0000000000457f29 [ 1235.396836] RDX: 0000000020000140 RSI: fffffbfffff3ffa7 RDI: 0000000000000003 [ 1235.404116] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1235.411392] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f57b7c946d4 [ 1235.418665] R13: 00000000004bf139 R14: 00000000004d0ac8 R15: 0000000000000004 [ 1235.426763] FAULT_INJECTION: forcing a failure. [ 1235.426763] name failslab, interval 1, probability 0, space 0, times 0 [ 1235.450606] CPU: 0 PID: 17382 Comm: syz-executor.3 Not tainted 5.0.0+ #12 [ 1235.457576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1235.466946] Call Trace: [ 1235.469553] dump_stack+0x172/0x1f0 [ 1235.473210] should_fail.cold+0xa/0x15 [ 1235.477119] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1235.482246] ? ___might_sleep+0x163/0x280 [ 1235.486422] __should_failslab+0x121/0x190 [ 1235.490672] should_failslab+0x9/0x14 [ 1235.494484] __kmalloc+0x2dc/0x740 [ 1235.498038] ? drm_ioctl+0x45c/0xa50 [ 1235.501767] drm_ioctl+0x45c/0xa50 [ 1235.505313] ? drm_connector_property_set_ioctl+0x180/0x180 [ 1235.511043] ? drm_version+0x3d0/0x3d0 [ 1235.514936] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1235.520059] ? ___might_sleep+0x163/0x280 [ 1235.524228] ? drm_version+0x3d0/0x3d0 [ 1235.528131] do_vfs_ioctl+0xd6e/0x1390 19:22:38 executing program 1 (fault-call:4 fault-nth:9): r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:38 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f00000000c0)={0x4, 0x23, &(0x7f0000000080)="5932ca09d3fd916574f148478d2dc763ab49d1c55092bad2df77711ac39a1c17f2437a"}) 19:22:38 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x8000000}, 0xfe40}}, 0x0) 19:22:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x60, 0x6012, r2, 0x2000) [ 1235.532030] ? ioctl_preallocate+0x210/0x210 [ 1235.536446] ? selinux_file_mprotect+0x620/0x620 [ 1235.541212] ? ksys_dup3+0x3e0/0x3e0 [ 1235.544938] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1235.550487] ? tomoyo_file_ioctl+0x23/0x30 [ 1235.554757] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1235.560305] ? security_file_ioctl+0x93/0xc0 [ 1235.564732] ksys_ioctl+0xab/0xd0 [ 1235.568197] __x64_sys_ioctl+0x73/0xb0 [ 1235.572097] do_syscall_64+0x103/0x610 [ 1235.576004] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1235.581197] RIP: 0033:0x457f29 [ 1235.584398] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1235.603313] RSP: 002b:00007f38a952dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1235.611033] RAX: ffffffffffffffda RBX: 00007f38a952dc90 RCX: 0000000000457f29 [ 1235.618309] RDX: 0000000020000140 RSI: fffffbfffff3ffa7 RDI: 0000000000000003 [ 1235.625584] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1235.632860] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f38a952e6d4 [ 1235.640136] R13: 00000000004bf139 R14: 00000000004d0ac8 R15: 0000000000000004 [ 1235.660292] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:22:38 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffff9fffff3ffa7, &(0x7f0000000140)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x4000, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000100)={0x5, 0x8, 0x0, 0x15, 0x9}) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f00000001c0)=""/4096) getsockopt$TIPC_NODE_RECVQ_DEPTH(r1, 0x10f, 0x83, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 19:22:38 executing program 3 (fault-call:2 fault-nth:1): r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1235.696176] ion_mmap: failure mapping buffer to userspace [ 1235.743968] ion_mmap: failure mapping buffer to userspace [ 1235.760786] FAULT_INJECTION: forcing a failure. [ 1235.760786] name failslab, interval 1, probability 0, space 0, times 0 19:22:39 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0xf000000}, 0xfe40}}, 0x0) 19:22:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x300, 0x6012, r2, 0x2000) [ 1235.796800] CPU: 0 PID: 17493 Comm: syz-executor.1 Not tainted 5.0.0+ #12 [ 1235.803767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1235.813126] Call Trace: [ 1235.815741] dump_stack+0x172/0x1f0 [ 1235.819386] should_fail.cold+0xa/0x15 [ 1235.823315] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1235.823340] ? ___might_sleep+0x163/0x280 [ 1235.823367] __should_failslab+0x121/0x190 [ 1235.836854] should_failslab+0x9/0x14 [ 1235.840671] kmem_cache_alloc_trace+0x2d1/0x760 19:22:39 executing program 5: syz_read_part_table(0x5, 0x0, 0x0) [ 1235.845358] ? mutex_unlock+0xd/0x10 [ 1235.849084] ? __drm_mode_object_add+0x15a/0x1a0 [ 1235.853863] drm_mode_create+0x42/0xa0 [ 1235.853881] drm_mode_duplicate+0x20/0x1b0 [ 1235.853900] drm_add_modes_noedid+0x16a/0x1f0 [ 1235.853926] vkms_conn_get_modes+0x22/0x40 [ 1235.871217] drm_helper_probe_single_connector_modes+0x5ea/0x1c10 [ 1235.877465] ? __mutex_lock+0x3cd/0x1310 [ 1235.877480] ? mutex_trylock+0x1e0/0x1e0 [ 1235.877497] ? drm_mode_getconnector+0x60b/0x1337 [ 1235.877525] ? drm_helper_probe_detect+0x1b0/0x1b0 [ 1235.877550] ? __drm_mode_object_find+0xb7/0x210 [ 1235.877570] ? drm_helper_probe_detect+0x1b0/0x1b0 [ 1235.877585] drm_mode_getconnector+0x729/0x1337 [ 1235.877611] ? drm_connector_property_set_ioctl+0x180/0x180 [ 1235.877630] ? retint_kernel+0x2d/0x2d [ 1235.877654] ? __srcu_read_unlock+0x46/0x60 [ 1235.895530] drm_ioctl_kernel+0x23b/0x2e0 [ 1235.895547] ? drm_connector_property_set_ioctl+0x180/0x180 [ 1235.895564] ? drm_setversion+0x8c0/0x8c0 [ 1235.895582] ? copy_user_enhanced_fast_string+0xe/0x20 [ 1235.895600] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1235.911706] ion_mmap: failure mapping buffer to userspace [ 1235.915624] ? _copy_from_user+0xdd/0x150 [ 1235.915646] drm_ioctl+0x545/0xa50 [ 1235.915662] ? drm_connector_property_set_ioctl+0x180/0x180 [ 1235.915684] ? drm_version+0x3d0/0x3d0 [ 1235.915711] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1235.951969] ion_mmap: failure mapping buffer to userspace [ 1235.954196] ? ___might_sleep+0x163/0x280 [ 1235.954222] ? drm_version+0x3d0/0x3d0 [ 1235.954241] do_vfs_ioctl+0xd6e/0x1390 [ 1235.954262] ? ioctl_preallocate+0x210/0x210 [ 1235.954279] ? selinux_file_mprotect+0x620/0x620 [ 1235.954300] ? ksys_dup3+0x3e0/0x3e0 [ 1236.006951] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1236.012506] ? tomoyo_file_ioctl+0x23/0x30 [ 1236.016753] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1236.022297] ? security_file_ioctl+0x93/0xc0 [ 1236.026730] ksys_ioctl+0xab/0xd0 [ 1236.030223] __x64_sys_ioctl+0x73/0xb0 [ 1236.034125] do_syscall_64+0x103/0x610 [ 1236.038027] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1236.043238] RIP: 0033:0x457f29 19:22:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x500, 0x6012, r2, 0x2000) [ 1236.046447] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1236.065381] RSP: 002b:00007f57b7c93c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1236.073106] RAX: ffffffffffffffda RBX: 00007f57b7c93c90 RCX: 0000000000457f29 [ 1236.080403] RDX: 0000000020000140 RSI: fffffbfffff3ffa7 RDI: 0000000000000003 [ 1236.087702] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1236.094993] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f57b7c946d4 [ 1236.102276] R13: 00000000004bf139 R14: 00000000004d0ac8 R15: 0000000000000005 19:22:39 executing program 1 (fault-call:4 fault-nth:10): r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:39 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1236.153028] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:22:39 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) write$tun(r1, &(0x7f00000001c0)={@void, @val={0x2, 0x7, 0x0, 0x7, 0x4, 0x3}, @ipv6={0x101, 0x6, "f90cc7", 0xfd, 0x3b, 0x8, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev={0xfe, 0x80, [], 0x12}, {[@fragment={0x2f, 0x0, 0xfff, 0x49b, 0x0, 0x10000, 0x66}], @udp={0x4e21, 0x4e21, 0xf5, 0x0, [@guehdr={0x1, 0x9, 0x0, 0xffff, 0x100}, @guehdr={0x2, 0x1, 0x46ce, 0x200, 0x100, [0x80]}, @guehdr={0x2, 0x0, 0xdc, 0x9, 0x100, [0x80]}, @guehdr={0x2, 0x9, 0x4, 0x5, 0x100, [0x80]}, @guehdr={0x1, 0xe, 0x800, 0x3e, 0x100}, @guehdr={0x2, 0x7ff, 0x200, 0x8001, 0x100, [0x80]}], "76745b0841ff98dbc6fca68d3fa2d406bea6a053fca451613b201da3f8b7e087cdb891ad9dbfc0557bc9d5ee9f9a3359a64a6acefb3e2e9ee607dc23a89b7d615524cd6343157dd8ddfb6882e08fc2a89d39a70a6878cf31d36c573b1e0c042b17d53b1f949564f76d46e22f59f37462590e5a64f1eddff7b9dbe604bcca8348e4f7b9b683fc534b54dc21478f9c6fde753907d2a5825c6ec52f930993720f2ca3fdea9045c6fb0159b42d803afaf6602fc14adf0e72e0c6ef815551b7759e59f35323cc54"}}}}, 0x12f) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000080)={0x2d4, 0x0, 0x204, 0xdaf, 0x200, 0x9, 0x9, 0x2, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r2, 0x100000000}, &(0x7f0000000300)=0x8) 19:22:39 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbff00000002, &(0x7f0000000140)) [ 1236.228166] ion_mmap: failure mapping buffer to userspace [ 1236.270790] ion_mmap: failure mapping buffer to userspace [ 1236.282309] FAULT_INJECTION: forcing a failure. [ 1236.282309] name failslab, interval 1, probability 0, space 0, times 0 [ 1236.294161] CPU: 1 PID: 17617 Comm: syz-executor.1 Not tainted 5.0.0+ #12 [ 1236.301105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1236.310467] Call Trace: [ 1236.313071] dump_stack+0x172/0x1f0 [ 1236.316716] should_fail.cold+0xa/0x15 [ 1236.320632] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1236.325755] ? ___might_sleep+0x163/0x280 [ 1236.329917] __should_failslab+0x121/0x190 [ 1236.334174] should_failslab+0x9/0x14 [ 1236.337987] kmem_cache_alloc_trace+0x2d1/0x760 [ 1236.342665] ? mutex_unlock+0xd/0x10 [ 1236.346391] ? __drm_mode_object_add+0x15a/0x1a0 [ 1236.351160] drm_mode_create+0x42/0xa0 [ 1236.355054] drm_mode_duplicate+0x20/0x1b0 [ 1236.359298] drm_add_modes_noedid+0x16a/0x1f0 [ 1236.363814] vkms_conn_get_modes+0x22/0x40 [ 1236.368066] drm_helper_probe_single_connector_modes+0x5ea/0x1c10 [ 1236.374307] ? _raw_spin_unlock+0x2d/0x50 [ 1236.378462] ? __mutex_lock+0x3cd/0x1310 [ 1236.382552] ? mutex_trylock+0x1e0/0x1e0 [ 1236.386632] ? drm_mode_getconnector+0x60b/0x1337 [ 1236.391501] ? drm_helper_probe_detect+0x1b0/0x1b0 [ 1236.396455] ? __drm_mode_object_find+0xb7/0x210 [ 1236.401241] ? drm_helper_probe_detect+0x1b0/0x1b0 [ 1236.406196] drm_mode_getconnector+0x729/0x1337 [ 1236.410906] ? drm_connector_property_set_ioctl+0x180/0x180 [ 1236.416657] drm_ioctl_kernel+0x23b/0x2e0 [ 1236.420843] ? drm_connector_property_set_ioctl+0x180/0x180 [ 1236.426567] ? drm_setversion+0x8c0/0x8c0 [ 1236.430725] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1236.436276] ? _copy_from_user+0xdd/0x150 [ 1236.440444] drm_ioctl+0x545/0xa50 [ 1236.443995] ? drm_connector_property_set_ioctl+0x180/0x180 [ 1236.449726] ? drm_version+0x3d0/0x3d0 [ 1236.453627] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1236.458752] ? ___might_sleep+0x163/0x280 [ 1236.462918] ? drm_version+0x3d0/0x3d0 [ 1236.466816] do_vfs_ioctl+0xd6e/0x1390 [ 1236.470722] ? ioctl_preallocate+0x210/0x210 [ 1236.475141] ? selinux_file_mprotect+0x620/0x620 [ 1236.479924] ? ksys_dup3+0x3e0/0x3e0 [ 1236.483653] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1236.489226] ? tomoyo_file_ioctl+0x23/0x30 [ 1236.493556] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1236.499103] ? security_file_ioctl+0x93/0xc0 [ 1236.503523] ksys_ioctl+0xab/0xd0 [ 1236.506989] __x64_sys_ioctl+0x73/0xb0 [ 1236.510888] do_syscall_64+0x103/0x610 [ 1236.514789] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1236.519990] RIP: 0033:0x457f29 [ 1236.523191] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1236.542107] RSP: 002b:00007f57b7c93c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1236.549831] RAX: ffffffffffffffda RBX: 00007f57b7c93c90 RCX: 0000000000457f29 [ 1236.557117] RDX: 0000000020000140 RSI: fffffbfffff3ffa7 RDI: 0000000000000003 [ 1236.564395] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 19:22:39 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x10000000}, 0xfe40}}, 0x0) 19:22:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x600, 0x6012, r2, 0x2000) [ 1236.571672] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f57b7c946d4 [ 1236.578962] R13: 00000000004bf139 R14: 00000000004d0ac8 R15: 0000000000000005 19:22:39 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0x4, &(0x7f0000000140)) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f00000000c0)) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x10000, 0x0) 19:22:39 executing program 1 (fault-call:4 fault-nth:11): r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1236.625284] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:22:40 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbff00004b47, &(0x7f0000000140)) [ 1236.696772] ion_mmap: failure mapping buffer to userspace [ 1236.734926] ion_mmap: failure mapping buffer to userspace 19:22:40 executing program 5: syz_read_part_table(0x6, 0x0, 0x0) [ 1236.790979] FAULT_INJECTION: forcing a failure. [ 1236.790979] name failslab, interval 1, probability 0, space 0, times 0 [ 1236.833030] CPU: 1 PID: 17677 Comm: syz-executor.1 Not tainted 5.0.0+ #12 [ 1236.840002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1236.849385] Call Trace: [ 1236.851992] dump_stack+0x172/0x1f0 [ 1236.855644] should_fail.cold+0xa/0x15 [ 1236.859556] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1236.864681] ? ___might_sleep+0x163/0x280 [ 1236.869406] __should_failslab+0x121/0x190 [ 1236.873658] should_failslab+0x9/0x14 [ 1236.877488] kmem_cache_alloc_trace+0x2d1/0x760 [ 1236.882340] ? mutex_unlock+0xd/0x10 [ 1236.886063] ? __drm_mode_object_add+0x15a/0x1a0 [ 1236.890837] drm_mode_create+0x42/0xa0 [ 1236.894736] drm_mode_duplicate+0x20/0x1b0 [ 1236.898993] drm_add_modes_noedid+0x16a/0x1f0 [ 1236.903518] vkms_conn_get_modes+0x22/0x40 [ 1236.907775] drm_helper_probe_single_connector_modes+0x5ea/0x1c10 [ 1236.914024] ? __mutex_lock+0x3cd/0x1310 [ 1236.918101] ? mutex_trylock+0x1e0/0x1e0 [ 1236.922172] ? unwind_get_return_address+0x61/0xa0 [ 1236.927208] ? drm_mode_getconnector+0x60b/0x1337 [ 1236.932088] ? drm_helper_probe_detect+0x1b0/0x1b0 [ 1236.937042] ? __drm_mode_object_find+0xb7/0x210 [ 1236.941820] ? drm_helper_probe_detect+0x1b0/0x1b0 [ 1236.946769] drm_mode_getconnector+0x729/0x1337 [ 1236.951467] ? drm_connector_property_set_ioctl+0x180/0x180 [ 1236.957212] drm_ioctl_kernel+0x23b/0x2e0 [ 1236.961468] ? drm_connector_property_set_ioctl+0x180/0x180 [ 1236.967190] ? drm_setversion+0x8c0/0x8c0 [ 1236.971357] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1236.976907] ? _copy_from_user+0xdd/0x150 [ 1236.981068] drm_ioctl+0x545/0xa50 [ 1236.984621] ? drm_connector_property_set_ioctl+0x180/0x180 [ 1236.990353] ? drm_version+0x3d0/0x3d0 [ 1236.994258] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1236.999384] ? ___might_sleep+0x163/0x280 [ 1237.003547] ? drm_version+0x3d0/0x3d0 [ 1237.007446] do_vfs_ioctl+0xd6e/0x1390 [ 1237.011350] ? ioctl_preallocate+0x210/0x210 [ 1237.015792] ? selinux_file_mprotect+0x620/0x620 [ 1237.020568] ? ksys_dup3+0x3e0/0x3e0 [ 1237.024291] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1237.029840] ? tomoyo_file_ioctl+0x23/0x30 [ 1237.034110] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1237.039656] ? security_file_ioctl+0x93/0xc0 [ 1237.044079] ksys_ioctl+0xab/0xd0 [ 1237.047556] __x64_sys_ioctl+0x73/0xb0 [ 1237.051456] do_syscall_64+0x103/0x610 [ 1237.055360] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1237.060555] RIP: 0033:0x457f29 [ 1237.063758] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 19:22:40 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbff00004b49, &(0x7f0000000140)) 19:22:40 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) r1 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x100, 0x120) write$P9_RUNLINKAT(r1, &(0x7f0000000200)={0x7, 0x4d, 0x1}, 0x7) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x4000, 0x0) accept4$unix(r2, &(0x7f0000000080), &(0x7f0000000100)=0x6e, 0x800) 19:22:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x700, 0x6012, r2, 0x2000) 19:22:40 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x8dffffff}, 0xfe40}}, 0x0) [ 1237.082676] RSP: 002b:00007f57b7c93c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1237.090398] RAX: ffffffffffffffda RBX: 00007f57b7c93c90 RCX: 0000000000457f29 [ 1237.097678] RDX: 0000000020000140 RSI: fffffbfffff3ffa7 RDI: 0000000000000003 [ 1237.104960] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1237.112246] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f57b7c946d4 [ 1237.119613] R13: 00000000004bf139 R14: 00000000004d0ac8 R15: 0000000000000005 [ 1237.150842] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:22:40 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbff0000541b, &(0x7f0000000140)) 19:22:40 executing program 1 (fault-call:4 fault-nth:12): r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:40 executing program 0: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x7) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e23, @multicast1}}}, &(0x7f0000000100)=0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000001c0)={r1, 0x57}, 0x8) [ 1237.194511] ion_mmap: failure mapping buffer to userspace [ 1237.255272] ion_mmap: failure mapping buffer to userspace [ 1237.309002] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:22:40 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0xf0ffffff}, 0xfe40}}, 0x0) 19:22:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x2000, 0x6012, r2, 0x2000) [ 1237.349603] FAULT_INJECTION: forcing a failure. [ 1237.349603] name failslab, interval 1, probability 0, space 0, times 0 [ 1237.394268] CPU: 1 PID: 17855 Comm: syz-executor.1 Not tainted 5.0.0+ #12 [ 1237.401248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1237.410607] Call Trace: [ 1237.413211] dump_stack+0x172/0x1f0 [ 1237.416869] should_fail.cold+0xa/0x15 [ 1237.420784] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1237.425908] ? ___might_sleep+0x163/0x280 [ 1237.430077] __should_failslab+0x121/0x190 [ 1237.434326] should_failslab+0x9/0x14 [ 1237.438155] kmem_cache_alloc_trace+0x2d1/0x760 [ 1237.442842] ? mutex_unlock+0xd/0x10 [ 1237.446570] ? __drm_mode_object_add+0x15a/0x1a0 [ 1237.451347] drm_mode_create+0x42/0xa0 [ 1237.455250] drm_mode_duplicate+0x20/0x1b0 [ 1237.459499] drm_add_modes_noedid+0x16a/0x1f0 [ 1237.464016] vkms_conn_get_modes+0x22/0x40 [ 1237.468270] drm_helper_probe_single_connector_modes+0x5ea/0x1c10 [ 1237.474513] ? __mutex_lock+0x3cd/0x1310 [ 1237.478583] ? mutex_trylock+0x1e0/0x1e0 [ 1237.482655] ? unwind_get_return_address+0x61/0xa0 [ 1237.487595] ? drm_mode_getconnector+0x60b/0x1337 [ 1237.492458] ? drm_helper_probe_detect+0x1b0/0x1b0 [ 1237.497418] ? __drm_mode_object_find+0xb7/0x210 [ 1237.502191] ? drm_helper_probe_detect+0x1b0/0x1b0 [ 1237.507151] drm_mode_getconnector+0x729/0x1337 [ 1237.511847] ? drm_connector_property_set_ioctl+0x180/0x180 [ 1237.517597] drm_ioctl_kernel+0x23b/0x2e0 [ 1237.521763] ? drm_connector_property_set_ioctl+0x180/0x180 [ 1237.527483] ? drm_setversion+0x8c0/0x8c0 [ 1237.531647] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1237.537190] ? _copy_from_user+0xdd/0x150 [ 1237.541359] drm_ioctl+0x545/0xa50 [ 1237.544909] ? drm_connector_property_set_ioctl+0x180/0x180 [ 1237.550638] ? drm_version+0x3d0/0x3d0 [ 1237.554537] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1237.559667] ? ___might_sleep+0x163/0x280 [ 1237.563844] ? drm_version+0x3d0/0x3d0 [ 1237.567740] do_vfs_ioctl+0xd6e/0x1390 [ 1237.571649] ? ioctl_preallocate+0x210/0x210 [ 1237.576065] ? selinux_file_mprotect+0x620/0x620 [ 1237.580841] ? ksys_dup3+0x3e0/0x3e0 [ 1237.584575] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1237.590133] ? tomoyo_file_ioctl+0x23/0x30 [ 1237.594379] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1237.599933] ? security_file_ioctl+0x93/0xc0 [ 1237.604358] ksys_ioctl+0xab/0xd0 [ 1237.607831] __x64_sys_ioctl+0x73/0xb0 [ 1237.611742] do_syscall_64+0x103/0x610 [ 1237.615669] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1237.620871] RIP: 0033:0x457f29 [ 1237.624074] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 19:22:40 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbff00005421, &(0x7f0000000140)) [ 1237.643000] RSP: 002b:00007f57b7c93c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1237.650725] RAX: ffffffffffffffda RBX: 00007f57b7c93c90 RCX: 0000000000457f29 [ 1237.658001] RDX: 0000000020000140 RSI: fffffbfffff3ffa7 RDI: 0000000000000003 [ 1237.665302] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1237.672580] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f57b7c946d4 [ 1237.679861] R13: 00000000004bf139 R14: 00000000004d0ac8 R15: 0000000000000005 19:22:41 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000080)={0x8001008}) 19:22:41 executing program 5: syz_read_part_table(0x7, 0x0, 0x0) 19:22:41 executing program 1 (fault-call:4 fault-nth:13): r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:41 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0xffffff7f}, 0xfe40}}, 0x0) [ 1237.823027] ion_mmap: failure mapping buffer to userspace [ 1237.834705] FAULT_INJECTION: forcing a failure. [ 1237.834705] name failslab, interval 1, probability 0, space 0, times 0 [ 1237.860469] ion_mmap: failure mapping buffer to userspace [ 1237.867732] __loop_clr_fd: partition scan of loop5 failed (rc=-22) [ 1237.884569] CPU: 1 PID: 17975 Comm: syz-executor.1 Not tainted 5.0.0+ #12 [ 1237.891540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1237.891547] Call Trace: [ 1237.891570] dump_stack+0x172/0x1f0 [ 1237.891596] should_fail.cold+0xa/0x15 [ 1237.911137] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1237.916268] ? ___might_sleep+0x163/0x280 [ 1237.920430] __should_failslab+0x121/0x190 [ 1237.924681] should_failslab+0x9/0x14 [ 1237.924698] kmem_cache_alloc_trace+0x2d1/0x760 [ 1237.924713] ? mutex_unlock+0xd/0x10 [ 1237.924729] ? __drm_mode_object_add+0x15a/0x1a0 [ 1237.924751] drm_mode_create+0x42/0xa0 [ 1237.924766] drm_mode_duplicate+0x20/0x1b0 [ 1237.949858] drm_add_modes_noedid+0x16a/0x1f0 [ 1237.954376] vkms_conn_get_modes+0x22/0x40 [ 1237.958636] drm_helper_probe_single_connector_modes+0x5ea/0x1c10 [ 1237.964891] ? __mutex_lock+0x3cd/0x1310 [ 1237.968966] ? mutex_trylock+0x1e0/0x1e0 [ 1237.973044] ? unwind_get_return_address+0x61/0xa0 [ 1237.977993] ? drm_mode_getconnector+0x60b/0x1337 [ 1237.982862] ? drm_helper_probe_detect+0x1b0/0x1b0 [ 1237.987817] ? __drm_mode_object_find+0xb7/0x210 [ 1237.992590] ? drm_helper_probe_detect+0x1b0/0x1b0 [ 1237.997536] drm_mode_getconnector+0x729/0x1337 [ 1238.002240] ? drm_connector_property_set_ioctl+0x180/0x180 [ 1238.007985] drm_ioctl_kernel+0x23b/0x2e0 [ 1238.012153] ? drm_connector_property_set_ioctl+0x180/0x180 [ 1238.017887] ? drm_setversion+0x8c0/0x8c0 [ 1238.022052] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1238.027598] ? _copy_from_user+0xdd/0x150 [ 1238.031793] drm_ioctl+0x545/0xa50 [ 1238.035369] ? drm_connector_property_set_ioctl+0x180/0x180 [ 1238.041101] ? drm_version+0x3d0/0x3d0 [ 1238.044997] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1238.050124] ? ___might_sleep+0x163/0x280 [ 1238.054290] ? drm_version+0x3d0/0x3d0 [ 1238.058202] do_vfs_ioctl+0xd6e/0x1390 [ 1238.062142] ? ioctl_preallocate+0x210/0x210 [ 1238.066560] ? selinux_file_mprotect+0x620/0x620 [ 1238.071333] ? ksys_dup3+0x3e0/0x3e0 [ 1238.075062] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1238.080619] ? tomoyo_file_ioctl+0x23/0x30 [ 1238.084866] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1238.090411] ? security_file_ioctl+0x93/0xc0 [ 1238.094837] ksys_ioctl+0xab/0xd0 [ 1238.098306] __x64_sys_ioctl+0x73/0xb0 [ 1238.102231] do_syscall_64+0x103/0x610 [ 1238.106159] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1238.111444] RIP: 0033:0x457f29 [ 1238.114669] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1238.133578] RSP: 002b:00007f57b7c93c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1238.141297] RAX: ffffffffffffffda RBX: 00007f57b7c93c90 RCX: 0000000000457f29 [ 1238.148575] RDX: 0000000020000140 RSI: fffffbfffff3ffa7 RDI: 0000000000000003 [ 1238.155854] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1238.163128] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f57b7c946d4 19:22:41 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) r1 = open(&(0x7f0000000340)='./file0\x00', 0x24081, 0x104) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, r2, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) 19:22:41 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbff00005450, &(0x7f0000000140)) 19:22:41 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbff00005451, &(0x7f0000000140)) [ 1238.170404] R13: 00000000004bf139 R14: 00000000004d0ac8 R15: 0000000000000005 19:22:41 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0xffffff8d}, 0xfe40}}, 0x0) 19:22:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x4000, 0x6012, r2, 0x2000) [ 1238.250275] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:22:41 executing program 1 (fault-call:4 fault-nth:14): r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:41 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x200301) syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0xffff, 0x20800) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:41 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbff00005452, &(0x7f0000000140)) [ 1238.366135] ion_mmap: failure mapping buffer to userspace 19:22:41 executing program 5: syz_read_part_table(0x10, 0x0, 0x0) [ 1238.415100] ion_mmap: failure mapping buffer to userspace 19:22:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x6000, 0x6012, r2, 0x2000) 19:22:41 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x7, 0x8000) ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, &(0x7f00000001c0)={0xee, ""/238}) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:41 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbff00005460, &(0x7f0000000140)) 19:22:41 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0xfffffff0}, 0xfe40}}, 0x0) [ 1238.457532] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:22:41 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) r2 = getpgrp(0xffffffffffffffff) fcntl$lock(r1, 0x27, &(0x7f0000000040)={0x2, 0x4, 0x3, 0x380, r2}) [ 1238.523115] ion_mmap: failure mapping buffer to userspace [ 1238.554847] ion_mmap: failure mapping buffer to userspace 19:22:41 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbff40049409, &(0x7f0000000140)) 19:22:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x100000, 0x6012, r2, 0x2000) 19:22:41 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1238.627892] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:22:41 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x800000000000000}, 0xfe40}}, 0x0) 19:22:42 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=[&(0x7f0000000080)='/dev/dri/card#\x00'], &(0x7f00000001c0)=[&(0x7f0000000100)='/dev/dri/card#\x00']) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:42 executing program 5: syz_read_part_table(0x48, 0x0, 0x0) [ 1238.720438] ion_mmap: failure mapping buffer to userspace 19:22:42 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbff40086602, &(0x7f0000000140)) [ 1238.777551] ion_mmap: failure mapping buffer to userspace 19:22:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x400000, 0x6012, r2, 0x2000) 19:22:42 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbff00000002, &(0x7f0000000140)) [ 1238.838509] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:22:42 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0xf00000000000000}, 0xfe40}}, 0x0) 19:22:42 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x10000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000110}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x90, r2, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100000000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x90}, 0x1, 0x0, 0x0, 0x8800}, 0x40000) r3 = perf_event_open(&(0x7f0000000140)={0x0, 0xfffffffffffffdb6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) ioctl$int_in(r3, 0x5473, &(0x7f0000000040)) 19:22:42 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbff40087602, &(0x7f0000000140)) 19:22:42 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbff00004b47, &(0x7f0000000140)) [ 1238.977443] ion_mmap: failure mapping buffer to userspace [ 1238.988008] __loop_clr_fd: partition scan of loop5 failed (rc=-22) [ 1238.999147] ion_mmap: failure mapping buffer to userspace 19:22:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000000, 0x6012, r2, 0x2000) 19:22:42 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbff4020940d, &(0x7f0000000140)) 19:22:42 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{}]}) [ 1239.087603] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:22:42 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x1000000000000000}, 0xfe40}}, 0x0) 19:22:42 executing program 5: syz_read_part_table(0x4c, 0x0, 0x0) [ 1239.158804] ion_mmap: failure mapping buffer to userspace [ 1239.201090] ion_mmap: failure mapping buffer to userspace 19:22:42 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbff80086601, &(0x7f0000000140)) 19:22:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x2000000, 0x6012, r2, 0x2000) 19:22:42 executing program 0: socket$isdn(0x22, 0x3, 0x37) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) r1 = shmget(0x1, 0x4000, 0x210, &(0x7f0000ffa000/0x4000)=nil) shmat(r1, &(0x7f0000ffa000/0x3000)=nil, 0x0) pipe(&(0x7f0000000040)) 19:22:42 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbff00004b49, &(0x7f0000000140)) 19:22:42 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbff80087601, &(0x7f0000000140)) [ 1239.397868] __loop_clr_fd: partition scan of loop5 failed (rc=-22) [ 1239.401404] ion_mmap: failure mapping buffer to userspace 19:22:42 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x8dffffff00000000}, 0xfe40}}, 0x0) 19:22:42 executing program 0: r0 = openat$cgroup_type(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.type\x00', 0x2, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000200)={0x4, 0x0, 0x7, 0x80, 0x2}) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, &(0x7f00000000c0)={0x5, 0x2}) r2 = dup3(r1, 0xffffffffffffffff, 0x80000) ioctl$SG_EMULATED_HOST(r2, 0x2203, &(0x7f0000000340)) ioctl$SG_GET_SCSI_ID(r2, 0x2276, &(0x7f0000000380)) ioctl(r1, 0xfffffbfffff3ffa7, &(0x7f0000000040)="1635299ea02073c6a126066dd0bbdf1287959c68117f637872622bc8f35ef6a7eea9d5fb964e7f726e847ebadebc7301419dadee28f58a09f990204757ebcf842323c968e20be95e024397a321ee560513b53d91ff640031d0348bc96a68e0") r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x200000, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r3, 0x0, 0x483, &(0x7f00000002c0)={0x87, @broadcast, 0x4e21, 0x0, 'wlc\x00', 0x8, 0x10001, 0x18}, 0x2c) fadvise64(r1, 0x9, 0x0, 0x5) openat$userio(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/userio\x00', 0x200000, 0x0) ioctl$VHOST_GET_FEATURES(r3, 0x8008af00, &(0x7f0000000280)) ioctl$SG_GET_VERSION_NUM(r3, 0x2282, &(0x7f0000000300)) syz_execute_func(&(0x7f0000000100)="40f787700000000b000000c441fde65e00c421e573db6e0fe9f9d9c1c4e1c573d500c461f454280f6fd726440f2bb8ffefffffc4a2314744093e") 19:22:42 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbff0000541b, &(0x7f0000000140)) [ 1239.463049] ion_mmap: failure mapping buffer to userspace 19:22:42 executing program 5: syz_read_part_table(0x60, 0x0, 0x0) 19:22:42 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0x8000, 0x46) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000080)={0x36, 0x6, 0x9, 0x5}, 0x6) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r1, 0xfffffbfffff3ffa7, &(0x7f0000000080)) 19:22:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x3000000, 0x6012, r2, 0x2000) 19:22:42 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0045878, &(0x7f0000000140)) [ 1239.642463] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:22:42 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0xf0ffffff00000000}, 0xfe40}}, 0x0) 19:22:43 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbffc0045878, &(0x7f0000000140)) [ 1239.772310] ion_mmap: failure mapping buffer to userspace 19:22:43 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-control\x00', 0x14000, 0x0) ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000200)) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x410000, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000100)={r3, 0x7fffffff}, 0x8) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000040)) 19:22:43 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbff00005421, &(0x7f0000000140)) [ 1239.817806] ion_mmap: failure mapping buffer to userspace [ 1239.857712] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:22:43 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbffc0189436, &(0x7f0000000140)) 19:22:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x4000000, 0x6012, r2, 0x2000) 19:22:43 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) clock_nanosleep(0x7, 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)) 19:22:43 executing program 5: syz_read_part_table(0x68, 0x0, 0x0) 19:22:43 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0xffffff7f00000000}, 0xfe40}}, 0x0) 19:22:43 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbff00005450, &(0x7f0000000140)) 19:22:43 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbffc020660b, &(0x7f0000000140)) [ 1240.064759] ion_mmap: failure mapping buffer to userspace [ 1240.065063] __loop_clr_fd: partition scan of loop5 failed (rc=-22) [ 1240.100215] ion_mmap: failure mapping buffer to userspace 19:22:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x5000000, 0x6012, r2, 0x2000) 19:22:43 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbff00005451, &(0x7f0000000140)) 19:22:43 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffc9, &(0x7f0000000140)) 19:22:43 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x8}, 0xfe40}}, 0x0) [ 1240.249317] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:22:43 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbff00005452, &(0x7f0000000140)) 19:22:43 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f00000001c0)="4cafd08c56114b335a58264a962b4a266ce82a3b55c7f22733767e4a5477a3f6c4d15681039a324fbd661d5fa76042f6bac96a0a67182552638f39a94f34e874044840037cad4d12c65fb7d6574e0fa2a16b492fa998455e9d0f85e99f9b865a75da02dfbcc50855193ddea53668a591b336ed89f2f09147cdbafc56a76eb5a5ddd596c64060961d60b5238559846b5c9f997fca36ab167e03b2fa347b953e61a3f6a54a0198fb6a4ac735d51c6390e31ef447b614dd4b5acc1c4413a2cc986480626d3828f1d0fa390f0de8d36b9587c53841049030a61b823b6274977c92b9a5e8abba7274b0bbb43c88") [ 1240.322696] ion_mmap: failure mapping buffer to userspace [ 1240.347026] ion_mmap: failure mapping buffer to userspace 19:22:43 executing program 5: syz_read_part_table(0x6c, 0x0, 0x0) [ 1240.467632] __loop_clr_fd: partition scan of loop5 failed (rc=-22) [ 1240.547780] __loop_clr_fd: partition scan of loop5 failed (rc=-22) [ 1240.647739] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:22:44 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000000c0)=0xf23) getsockopt$rose(r1, 0x104, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x4) 19:22:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x6000000, 0x6012, r2, 0x2000) 19:22:44 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0xf}, 0xfe40}}, 0x0) 19:22:44 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x80000, 0x0) ioctl$VIDIOC_S_TUNER(r1, 0x4054561e, &(0x7f0000000080)={0x8, "e9d2669c46472353fcfd2f799ce471f0f787bd8d8cdcc8aeacce5599491135b6", 0x0, 0x2ac, 0x6, 0x8, 0x10, 0x3, 0xb08, 0x5}) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:44 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbff00005460, &(0x7f0000000140)) 19:22:44 executing program 5: syz_read_part_table(0x74, 0x0, 0x0) 19:22:44 executing program 3: r0 = syz_open_dev$midi(&(0x7f0000000240)='/dev/midi#\x00', 0xfff, 0xa0200) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000280)={0x1, 0x3131354f, 0xffffffff, 0x5, 0x1, @discrete={0x3, 0x40}}) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r1, 0xfffffbfffff3ffa7, &(0x7f0000000140)) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x400000, 0x0) r3 = gettid() write$FUSE_LK(r2, &(0x7f0000000100)={0x28, 0xfffffffffffffff5, 0x4, {{0x19, 0x2ee, 0x1, r3}}}, 0x28) ioctl$KVM_GET_DEBUGREGS(r2, 0x8080aea1, &(0x7f00000001c0)) r4 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VT_OPENQRY(r4, 0x5600, &(0x7f0000000080)) [ 1240.906779] ion_mmap: failure mapping buffer to userspace 19:22:44 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbff40049409, &(0x7f0000000140)) 19:22:44 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) ioctl$sock_ifreq(r1, 0x891b, &(0x7f0000000080)={'rose0\x00', @ifru_addrs=@can={0x1d, r2}}) socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1240.952699] ion_mmap: failure mapping buffer to userspace [ 1240.987850] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:22:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x7000000, 0x6012, r2, 0x2000) 19:22:44 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x10}, 0xfe40}}, 0x0) 19:22:44 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:44 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbff40086602, &(0x7f0000000140)) [ 1241.092778] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:22:44 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x6, 0x100) ioctl$KDSKBLED(r1, 0x4b65, 0x400) 19:22:44 executing program 5: syz_read_part_table(0x7a, 0x0, 0x0) [ 1241.168137] ion_mmap: failure mapping buffer to userspace [ 1241.178651] ion_mmap: failure mapping buffer to userspace 19:22:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x20000000, 0x6012, r2, 0x2000) 19:22:44 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x80000, 0x0) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000080)) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:44 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x800, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x7) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r1, 0xfffffbfffff3ffa7, &(0x7f0000000040)="e1ef88ac1f43b84259fc64a42812cc76a15308ae63fdc4f2cb66cfb00863873d20897943d6ec68a6e2ea9e0fd41ab0b143222a30535696718fd337899327f005536f683cebe33190a2c05d209306e84d738b1096f0535f4787ecf4") 19:22:44 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbff40087602, &(0x7f0000000140)) 19:22:44 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0xf00}, 0xfe40}}, 0x0) [ 1241.322622] ion_mmap: failure mapping buffer to userspace [ 1241.339680] __loop_clr_fd: partition scan of loop5 failed (rc=-22) [ 1241.367188] ion_mmap: failure mapping buffer to userspace 19:22:44 executing program 0: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x1c0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'nr0\x00', 0x0}) bind$bt_hci(r0, &(0x7f0000000200)={0x1f, r1, 0x3}, 0xc) fanotify_mark(r0, 0x20, 0x1000, r0, &(0x7f0000000240)='./file0\x00') r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x800, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000380)='/dev/snd/pcmC#D#c\x00', 0x0, 0x402800) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000040)={0x3ff}, 0x4) ioperm(0x0, 0xe621, 0x5) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x5112e29ab16cf8d6) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r2, 0x2, &(0x7f0000000100)) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0xfffffffffffffffa) ioctl$TCSBRKP(r2, 0x5425, 0x766) r4 = shmget$private(0x0, 0x3000, 0x412, &(0x7f0000ffc000/0x3000)=nil) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") unshare(0x8020000) lseek(r3, 0x0, 0x3) ioperm(0x0, 0x81, 0x3) ioctl$DRM_IOCTL_GET_STATS(r2, 0x80f86406, &(0x7f0000000280)=""/157) r6 = semget$private(0x0, 0x3, 0x8) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/ipc\x00') semop(r6, &(0x7f0000000080)=[{0x0, 0x7, 0x1800}, {}], 0x2) setns(r2, 0xfffffffffffffff9) socket$bt_hidp(0x1f, 0x3, 0x6) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) shmctl$SHM_INFO(r4, 0xe, &(0x7f0000000340)=""/60) ioctl$SCSI_IOCTL_START_UNIT(r2, 0x5) 19:22:44 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbff4020940d, &(0x7f0000000140)) 19:22:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x40000000, 0x6012, r2, 0x2000) 19:22:44 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) accept$packet(0xffffffffffffff9c, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x1d, r3}, 0x10, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB='\a\x00\x00\x00`\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES64=0x0, @ANYRES64=0x7530, @ANYRES64=0x0, @ANYRES64=0x7530, @ANYBLOB="0000004001000000020000000803000885371849ee411b663ab37d3dbed9d541b5b60d21f7a9ced100202d4c61180164293f9f2448573949341732fd81a8a18a350d3e37d5c793ef469eb4cfa72e1e31c0621806f5fcbce516636b68357bb2e144b372c4ed6e42425a2b04605a387ce3bddfaf2a2a6e1f386a317c39df9c449cbe0d8f065814a89a699e08dcff448274be11d9cbe1cadb04badb5b181c7c12af046722af617c6a6d5a5c58f4cb5d3482f76e0520280ff19f2a7b1cd24ffbba4b6a5ccfcef9c5c320fe7a68beb2b5e761031379d1f5561ed689f4"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x4000) syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x5, 0x10000) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000100)) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$UFFDIO_WAKE(r4, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}) flock(r4, 0x8) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r1) [ 1241.447508] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:22:44 executing program 5: syz_read_part_table(0x300, 0x0, 0x0) [ 1241.549953] ion_mmap: failure mapping buffer to userspace [ 1241.563057] ion_mmap: failure mapping buffer to userspace 19:22:44 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbff80086601, &(0x7f0000000140)) 19:22:44 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x8000000}, 0xfe40}}, 0x0) 19:22:44 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0xa002) get_thread_area(&(0x7f0000000080)={0x0, 0x20001000, 0x3000, 0x8001, 0x45377426, 0x8000, 0x8, 0x95, 0x7, 0x7}) sysfs$3(0x3) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2080004}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r2, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'irlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x80}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x4844) prctl$PR_GET_SECUREBITS(0x1b) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x60000000, 0x6012, r2, 0x2000) [ 1241.627885] Dev loop5: unable to read RDB block 1 [ 1241.645754] loop5: unable to read partition table [ 1241.685560] loop5: partition table beyond EOD, truncated [ 1241.705237] ion_mmap: failure mapping buffer to userspace [ 1241.716210] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) 19:22:45 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000040)) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:45 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbff80087601, &(0x7f0000000140)) 19:22:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x400000000000, 0x6012, r2, 0x2000) [ 1241.754831] ion_mmap: failure mapping buffer to userspace [ 1241.778279] __loop_clr_fd: partition scan of loop5 failed (rc=-22) [ 1241.858311] Dev loop5: unable to read RDB block 1 [ 1241.866122] loop5: unable to read partition table [ 1241.884082] loop5: partition table beyond EOD, truncated [ 1241.900069] ion_mmap: failure mapping buffer to userspace [ 1241.906975] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1241.942498] ion_mmap: failure mapping buffer to userspace [ 1242.047430] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:22:45 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x7fff, 0x3fffffffe) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:45 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0xf000000}, 0xfe40}}, 0x0) 19:22:45 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xc0045878, &(0x7f0000000140)) 19:22:45 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext, 0x0, 0x400, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x2) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000040)=0x0) ptrace$pokeuser(0x6, r2, 0x4, 0x8) 19:22:45 executing program 5: syz_read_part_table(0x500, 0x0, 0x0) 19:22:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x10000000000000, 0x6012, r2, 0x2000) 19:22:45 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbffc0045878, &(0x7f0000000140)) [ 1242.452803] ion_mmap: failure mapping buffer to userspace [ 1242.477905] Dev loop5: unable to read RDB block 2 [ 1242.479230] ion_mmap: failure mapping buffer to userspace [ 1242.483193] loop5: unable to read partition table 19:22:45 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x8a, 0x2040) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0xb534) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x833, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:45 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1242.507156] loop5: partition table beyond EOD, truncated [ 1242.512877] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) 19:22:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x100000000000000, 0x6012, r2, 0x2000) 19:22:45 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x10000000}, 0xfe40}}, 0x0) [ 1242.577667] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:22:45 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbffc0189436, &(0x7f0000000140)) 19:22:45 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x4800) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1242.664678] Dev loop5: unable to read RDB block 2 [ 1242.677030] loop5: unable to read partition table [ 1242.690176] loop5: partition table beyond EOD, truncated [ 1242.707195] ion_mmap: failure mapping buffer to userspace 19:22:46 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x1, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='gre0\x00', 0x10) ioctl(r2, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1242.712921] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1242.742178] ion_mmap: failure mapping buffer to userspace 19:22:46 executing program 5: syz_read_part_table(0x600, 0x0, 0x0) 19:22:46 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbffc020660b, &(0x7f0000000140)) 19:22:46 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x8dffffff}, 0xfe40}}, 0x0) 19:22:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x200000000000000, 0x6012, r2, 0x2000) 19:22:46 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ubi_ctrl\x00', 0x602, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80008040}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, r1, 0xc00, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xbf}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9e}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r2 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="800000000fac6e1f5af4369d3f6e376fbf09cc070b707490e1d11d977e4b5aabc4c3e6f8c11bbd81d462ee6053841774b3510ce5a5e6501c6bbc5b8094d101f9fc8b353aa91ddc48d72141c9828cf6c9894d801d96e6fa95961ea7a1b4368f4e7d386c059da55f29803c816995cf78b1498645da64a0fc8cd883efc0428841d1c6a8cbd0"], &(0x7f0000000000)=0x88) r6 = fcntl$dupfd(r3, 0x406, r3) write$vnet(r6, &(0x7f0000000400)={0x1, {&(0x7f0000000240)=""/184, 0xb8, &(0x7f0000000300)=""/212, 0x2, 0x4}}, 0x68) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f00000001c0)={r5, 0x400}, &(0x7f0000000200)=0x8) ioctl(r2, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1242.868043] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:22:46 executing program 3: r0 = socket$isdn(0x22, 0x3, 0x25) readv(r0, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/134, 0x86}], 0x1) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xafd, 0xa0100) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, &(0x7f0000000080)={0x2, 0x7, 0xed, 0x33, 0x0, 0x71a}) ioctl(r1, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:46 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffc9, &(0x7f0000000140)) [ 1242.920105] ion_mmap: failure mapping buffer to userspace [ 1242.944001] ion_mmap: failure mapping buffer to userspace 19:22:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x300000000000000, 0x6012, r2, 0x2000) 19:22:46 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0xf0ffffff}, 0xfe40}}, 0x0) [ 1242.987508] Dev loop5: unable to read RDB block 3 [ 1242.997513] loop5: unable to read partition table [ 1243.019221] loop5: partition table beyond EOD, truncated 19:22:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x102) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x4, 0x4000) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f00000001c0)=0x2, 0x4) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x204200, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) creat(&(0x7f00000000c0)='./file0\x00', 0x2) 19:22:46 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000040), 0x4) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:46 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000080)) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1243.046685] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1243.086208] ion_mmap: failure mapping buffer to userspace [ 1243.109045] ion_mmap: failure mapping buffer to userspace [ 1243.117700] __loop_clr_fd: partition scan of loop5 failed (rc=-22) [ 1243.188001] Dev loop5: unable to read RDB block 3 [ 1243.192986] loop5: unable to read partition table [ 1243.217744] loop5: partition table beyond EOD, truncated [ 1243.234504] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) 19:22:46 executing program 5: syz_read_part_table(0x700, 0x0, 0x0) 19:22:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x400000000000000, 0x6012, r2, 0x2000) 19:22:46 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:46 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000080)=""/166, 0xa6) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000001c0)=0x1) ioctl(0xffffffffffffffff, 0xfffffbfffff3ffa7, &(0x7f0000000140)) modify_ldt$write2(0x11, &(0x7f0000000040)={0xfff, 0xffffffffffffffff, 0x1000, 0xd9, 0x10000, 0xbf, 0x8, 0x2, 0x2, 0x2}, 0x10) 19:22:46 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) times(&(0x7f0000000040)) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) 19:22:46 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0xffffff7f}, 0xfe40}}, 0x0) [ 1243.357912] ion_mmap: failure mapping buffer to userspace [ 1243.368030] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:22:46 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0xffffff8d}, 0xfe40}}, 0x0) 19:22:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f00000000c0)="8f003c2fb3fea050caf6d2b9c8395cec") [ 1243.412273] ion_mmap: failure mapping buffer to userspace 19:22:46 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000040)) 19:22:46 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x81, 0x4c80) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000080)={0xcf, "eeb06ae2b532585594aec08e169491f7e4e9fccad584abb719a7e8db30b315fd", 0x1, 0x1}) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1243.493589] Dev loop5: unable to read RDB block 3 [ 1243.499984] loop5: unable to read partition table [ 1243.512779] loop5: partition table beyond EOD, truncated 19:22:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x500000000000000, 0x6012, r2, 0x2000) 19:22:46 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x9, 0x4000) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000080)={0x8, 0x4, 0x7ee, 0x3, 0x5, 0x60000000000}) r1 = socket$caif_stream(0x25, 0x1, 0x2) r2 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r2, 0xfffffbfffff3ffa7, &(0x7f0000000140)) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@broadcast}}, &(0x7f00000000c0)=0xe8) bind$can_raw(r1, &(0x7f0000000100)={0x1d, r3}, 0x10) [ 1243.541268] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1243.638910] __loop_clr_fd: partition scan of loop5 failed (rc=-22) [ 1243.659387] ion_mmap: failure mapping buffer to userspace [ 1243.677947] ion_mmap: failure mapping buffer to userspace [ 1243.708404] Dev loop5: unable to read RDB block 3 [ 1243.717143] loop5: unable to read partition table [ 1243.742090] loop5: partition table beyond EOD, truncated [ 1243.776177] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) 19:22:47 executing program 5: syz_read_part_table(0xf1c, 0x0, 0x0) 19:22:47 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x22000, 0x0) setns(r1, 0x20000) 19:22:47 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0xfffffff0}, 0xfe40}}, 0x0) 19:22:47 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x2000) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x880000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, r2, 0x700, 0x70bd2a, 0x25dfdbfc, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4) 19:22:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x600000000000000, 0x6012, r2, 0x2000) 19:22:47 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x40, 0x1, 0x3}, 0x10) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:47 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f00000000c0)={0x800, 0x1}) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000080)) [ 1243.892857] ion_mmap: failure mapping buffer to userspace [ 1243.915316] ion_mmap: failure mapping buffer to userspace [ 1243.921308] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:22:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x700000000000000, 0x6012, r2, 0x2000) 19:22:47 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.events\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x7) write$selinux_access(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="73407374656d5f753a6f626a6563745f723a6661696c6c6f675f743a733020756e636f6e66696e656420303030303030303030303030303030303030303900c7799b2c3753bddf148d19b1dee175080934aac13e0374162219434c9c0e1db845799351c0a96520bb6b153aecf03fc33633d6b7c550982eeb047402af383745772e91d9328d2f70eea5d9796900cf259eb4feba5b8e4763f1e6918591b711"], 0x3f) 19:22:47 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80, 0x1) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000080)=0x3) [ 1244.047630] Dev loop5: unable to read RDB block 7 19:22:47 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x800000000000000}, 0xfe40}}, 0x0) 19:22:47 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) readahead(r0, 0x1554000, 0xe360) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000040)={{0xff, @empty, 0x4e20, 0x0, 'sed\x00', 0x24, 0xfffffffffffffffa, 0x38}, {@broadcast, 0x4e24, 0x2, 0x4, 0x1, 0x4}}, 0x44) [ 1244.069134] ion_mmap: failure mapping buffer to userspace [ 1244.077458] loop5: unable to read partition table [ 1244.090277] loop5: partition table beyond EOD, truncated [ 1244.099482] ion_mmap: failure mapping buffer to userspace [ 1244.109668] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1244.157760] __loop_clr_fd: partition scan of loop5 failed (rc=-22) [ 1244.197802] IPVS: set_ctl: invalid protocol: 255 0.0.0.0:20000 [ 1244.237520] Dev loop5: unable to read RDB block 7 [ 1244.242491] loop5: unable to read partition table [ 1244.253273] loop5: partition table beyond EOD, truncated [ 1244.259206] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) 19:22:47 executing program 5: syz_read_part_table(0x1c0f, 0x0, 0x0) 19:22:47 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) fsync(r1) 19:22:47 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x200) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f00000001c0)={0xb76e, 0x6, 0x1}) ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, &(0x7f0000000200)={0x7f, 0x7, 0x9}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000007f, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score\x00') getsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f0000000080)=0x5, &(0x7f00000000c0)=0x4) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x2000000000000000, 0x6012, r2, 0x2000) 19:22:47 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) io_setup(0x8, &(0x7f0000000080)=0x0) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x400) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dlm_plock\x00', 0x10000, 0x0) r4 = syz_open_dev$mice(&(0x7f00000005c0)='/dev/input/mice\x00', 0x0, 0x2) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x10003, 0x0) io_submit(r1, 0x6, &(0x7f0000000800)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x8, r0, &(0x7f00000001c0)="7c5d6c06f5f0081341708739a1cd0310ec00ea751de2ac99f0050abe4e0bb8ce327d5cbc05d86826b3a07587ec7f3f1f1f4c3c613d71d1eb4358eadb6c02508e7cf03e47c90dafac806f10dd37e57c4f9b061c2b30ed3681ea56fa6c23058ea7bb0f5a54ba02185c3cd82bfa4a008d15d03ba52e2a4b906ba4233ef09b288d75ecad70f2a5b7736f83e7b2cdf4b917857023806d5b9c7ce83db426e586a3cdfe44fa18ff7f66829253f8a065dd4f2f39156781fcf7bc3a31fe8ee0087bc3ec5ed6a90dd7cd32c1f2699444e4ce1c6e1e5afeff53438f661644781326bb", 0xdd, 0x7, 0x0, 0x0, r2}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x42b9f21f65d3567f, 0x1000, r0, &(0x7f00000002c0)="8e2c6660d3c641268b317d62f0396c272b8a2d8b6caa3b04fc3c0d568582e3b2b7dd9276afb4379cd48e3f49c0c859042036db0bffb93257e3626e83c7197cebd0865c8c26af9c3e658bfff209eefe2207475d67f43e", 0x56, 0xffffffffffffffd0, 0x0, 0x0, r3}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x28f, r0, &(0x7f00000003c0)="83b53a9f0d3cdfb8dbbb43e6945c3b933b2f86075f0e4b6cd301ba1e439cde91058bd22034b6587cb315fc91e7f3bfb9486af1f57a70a07a56c85aad5bb9150a3531f0553cc8c257fc96dbacb27560a49d8e0283499b83cc23565bd2ecf2eb494d8649a3b400151c50bdecd47764b92ac008952c9143bf4823eb2af8d8c17ecdbbdf62340998ba41c3f13971efa7b07040060d7417e542a5bd5d7c00d4d563ec6628464d6b6c905843a49aad9833be3634706608866256db662cbfb8e83705351773e1acd94e31cd1ff19f4979f90daca832f931d58d24c854a0a5f7beb4", 0xde, 0x3, 0x0, 0x2}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x1, r0, &(0x7f0000000500)="e2523be4068da7ee81eccaa5ff218fcd01cfc804683ce6e4208dce34fdd0f19cdc7e0ecafc33a61f5397adc90f2b6dcdd16cbef7ec4211985629182d2c0ba7fd5122edd966091068b4ec81667458c445b07c89fcb72ff455f85c462adb70d71e7f87592dfc20d5cb47db02d6904afff528000ff34f0b0928c7a60a71b97007b6fe517dfe5904e3", 0x87, 0xfffffffffffffbff, 0x0, 0x1, r4}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x1de6, r0, &(0x7f0000000640)="e913e44249a6340e51a161cef044814664279a91fbd2a79cbcb8c168bb2961cb82ebf12b4e476ad9dea2c3fd8b9ec492c54df9613fff5064d6729469eeb028a4683c4fbf01f385", 0x47, 0x6}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000700)="996fa7c93ebfe5b294bac544c20f2c1466c77a93ee38aad303226f3dc882fc51fc174cdc6c63da9af1abd0e485de969fd3fe2a90d518ca25eb2a8db2aa5929dd593fd0188c9c377576973bf07a8bb9259a8554bba48e32246e136201e30d3acae01510e55b5f4034e83f", 0x6a, 0x5, 0x0, 0x1, r5}]) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000040)="8162bd392a532004852f8005db12d2a1b96eb28ffc89030000008eb37956fca93992afd7bae9c55614ff4565ce15192d035c") 19:22:47 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0xf00000000000000}, 0xfe40}}, 0x0) 19:22:47 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000040)) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1244.385540] ion_mmap: failure mapping buffer to userspace [ 1244.421267] ion_mmap: failure mapping buffer to userspace [ 1244.427651] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:22:47 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) dup(r0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) socket$inet_sctp(0x2, 0x5, 0x84) 19:22:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x4000000000000000, 0x6012, r2, 0x2000) 19:22:47 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x1000000000000000}, 0xfe40}}, 0x0) [ 1244.548003] Dev loop5: unable to read RDB block 14 [ 1244.553134] loop5: unable to read partition table [ 1244.583001] ion_mmap: failure mapping buffer to userspace [ 1244.589015] loop5: partition table beyond EOD, truncated 19:22:47 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x666c, 0x2000) ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f0000000080)) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:47 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000040)) [ 1244.607153] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1244.636746] ion_mmap: failure mapping buffer to userspace [ 1244.669113] __loop_clr_fd: partition scan of loop5 failed (rc=-22) [ 1244.728134] Dev loop5: unable to read RDB block 14 [ 1244.733240] loop5: unable to read partition table [ 1244.752257] loop5: partition table beyond EOD, truncated [ 1244.763606] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) 19:22:48 executing program 5: syz_read_part_table(0x1f00, 0x0, 0x0) 19:22:48 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000040)) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000080)=""/108) 19:22:48 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x800007, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) r1 = socket$rxrpc(0x21, 0x2, 0xa) shutdown(r1, 0x0) 19:22:48 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0x2, &(0x7f0000000540)="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") 19:22:48 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x6000000000000000, 0x6012, r2, 0x2000) 19:22:48 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x8dffffff00000000}, 0xfe40}}, 0x0) [ 1244.877229] ion_mmap: failure mapping buffer to userspace [ 1244.904484] ion_mmap: failure mapping buffer to userspace 19:22:48 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl$TIOCLINUX3(r0, 0x541c, &(0x7f0000000040)) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:48 executing program 3: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000040)) 19:22:48 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x10000, 0x0) ioctl$KVM_NMI(r1, 0xae9a) [ 1244.927582] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:22:48 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x8000000000000000, 0x6012, r2, 0x2000) 19:22:48 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f00000002c0)="47f9208d328611fce09aed8a3222776d658e3cd55f7cffff33616c529ba6b1258892ee003c6454f4b9b4220d99c08fb7f84e52fc5eea50bb9b4311aa89129ca4170fa55c45539269a5eb431719a90eee1fb1c7439fcfe26cc1f7dfbc27ae4a79764c888941145829543f27efb206090000000000000048c4a7200cfa17ef93e3f7142de866e795f3e65a4d73c0a60b92aa795f806286144468e42220019cef069a82597a0e32c8621b6f4ffe0933f871604d155ea60b44d2ad2f3440d5f0f2efd32e965a00e353c5d8f94437da8be91d955ccc") r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x6, 0x40002) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000080)=0xb395, 0x4) [ 1245.027327] Dev loop5: unable to read RDB block 15 [ 1245.054462] loop5: unable to read partition table [ 1245.061413] ion_mmap: failure mapping buffer to userspace [ 1245.077454] loop5: partition table beyond EOD, truncated [ 1245.097567] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) 19:22:48 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0xf0ffffff00000000}, 0xfe40}}, 0x0) [ 1245.118637] ion_mmap: failure mapping buffer to userspace [ 1245.167883] __loop_clr_fd: partition scan of loop5 failed (rc=-22) [ 1245.241160] Dev loop5: unable to read RDB block 15 [ 1245.246179] loop5: unable to read partition table [ 1245.266960] loop5: partition table beyond EOD, truncated [ 1245.272469] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) 19:22:48 executing program 5: syz_read_part_table(0x2000, 0x0, 0x0) 19:22:48 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) bind(0xffffffffffffff9c, &(0x7f00000002c0)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43, 0x4}, 0x4}}, 0x80) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) pipe(&(0x7f0000000440)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="62c040cc0900000000000000340407fd", @ANYRES16=r2, @ANYBLOB="00002abd7000fcdbdf25010000000000000007410000001800180000000369623a73797a6b616c6c657230000000"], 0x34}, 0x1, 0x0, 0x0, 0x884}, 0x1) write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x2, {{0x0, 0x2}, 0xa68}}, 0x18) 19:22:48 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000100)={0x2, "9586"}, 0x3) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000040), &(0x7f0000000080)=0x8) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r2, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:48 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x603d, r2, 0x2000) 19:22:48 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3cd4df51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0xe, 0xffffffffffffffff, 0xb) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:48 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0xffffff7f00000000}, 0xfe40}}, 0x0) 19:22:48 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6012, r2, 0x2) 19:22:48 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000340)='/dev/dri/card#\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x18010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080)={0x0, 0xc6}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f00000001c0)={r2, @in6={{0xa, 0x4e23, 0xfffffffffffffffc, @local}}, 0x101, 0x80000001, 0x2, 0x8000, 0x80000001}, &(0x7f0000000100)=0x98) 19:22:48 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) fanotify_init(0x3, 0x800) [ 1245.408134] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:22:48 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x240, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:48 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x0, 0x8}, 0xfe40}}, 0x0) [ 1245.508375] loop5: unable to read partition table [ 1245.526288] loop5: partition table beyond EOD, truncated [ 1245.545826] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) 19:22:48 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6012, r2, 0x3) [ 1245.611425] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:22:49 executing program 5: syz_read_part_table(0x3f00, 0x0, 0x0) 19:22:49 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) poll(&(0x7f0000000040)=[{r0, 0x8}, {r0, 0x100}], 0x2, 0x401) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:49 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000080)={'IDLETIMER\x00'}, &(0x7f00000000c0)=0x1e) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:49 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x2, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:49 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6012, r2, 0xa00) [ 1245.678010] loop5: unable to read partition table [ 1245.684161] loop5: partition table beyond EOD, truncated [ 1245.696027] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) 19:22:49 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x0, 0xf}, 0xfe40}}, 0x0) 19:22:49 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=unix,', {[{@aname={'aname', 0x3d, '/dev/dri/card#\x00'}}, {@cache_loose='cache=loose'}], [{@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}]}}) 19:22:49 executing program 1: r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/validatetrans\x00', 0x1, 0x0) ioctl$void(r0, 0x5450) fremovexattr(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="6f73781a2faf81fc61a73222b1614e0235092f6361e842473a0ee711c0117b4111e2f2fbe6e9daaca3501f707a39d7611f4fb15ba28ffaaa686d21563bd074c62b63f0664d231a2a423d3c5e713a2f12d62bcedc51d6a1765bff4f6ccd3fb76097e3818d3c9934bd0f37518e09a0e5bd88183decce383a3e0e0c48d0763b2aae4e53c2406539bf938df963c2c64ffab558484c0a9bf57c2001b7911b7f397858e30ad95ff7b227cd6bff3e88a6a5ee8236e623c7d5731cbd371bac7af0b929e9ed98eebff6a41c1b8bfebeb6b68901672508f71396dd76964da46e32"]) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000080)={{0x62, @empty, 0x4e20, 0x1, 'sh\x00', 0x30, 0x0, 0x44}, {@multicast2, 0x4e20, 0x2003, 0x10000, 0x4, 0x1}}, 0x44) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0x3, 0x121000) getsockopt$packet_int(r3, 0x107, 0x17, &(0x7f0000000240), &(0x7f0000000280)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000007, 0x110, r1, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000440)={0x0, @local, @initdev}, &(0x7f0000000480)=0xc) connect$packet(r2, &(0x7f00000004c0)={0x11, 0xa35af313d3e65ae7, r4, 0x1, 0x0, 0x6, @remote}, 0x3b7) ioctl(r1, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:49 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6012, r2, 0x2002) [ 1245.808499] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:22:49 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6012, r2, 0x2003) 19:22:49 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x0, 0x10}, 0xfe40}}, 0x0) [ 1245.947910] loop5: unable to read partition table [ 1245.952957] loop5: partition table beyond EOD, truncated [ 1245.969423] audit: type=1400 audit(1552072969.233:140): avc: denied { map } for pid=21397 comm="syz-executor.1" path="/dev/dri/card1" dev="devtmpfs" ino=787 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:dri_device_t:s0 tclass=chr_file permissive=1 19:22:49 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0xfffffffffffffffd) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)) r1 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) r2 = gettid() bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffff9c, 0x50, &(0x7f00000000c0)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r2, r1, 0x0, 0x1, &(0x7f0000000000)='\x00', r3}, 0x30) [ 1246.013379] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1246.087603] __loop_clr_fd: partition scan of loop5 failed (rc=-22) [ 1246.148263] loop5: unable to read partition table [ 1246.153308] loop5: partition table beyond EOD, truncated [ 1246.172676] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) 19:22:49 executing program 5: syz_read_part_table(0x4000, 0x0, 0x0) [ 1246.307750] __loop_clr_fd: partition scan of loop5 failed (rc=-22) [ 1246.408005] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:22:49 executing program 1: prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:49 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x0, 0xf00}, 0xfe40}}, 0x0) 19:22:49 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6012, r2, 0x2004) 19:22:49 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$rose(r1, 0x104, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:49 executing program 0: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x10000, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@mcast1, @in6}}, {{@in=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000080)=0xe8) r1 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r1, 0xfffffbfffbf3ffaa, &(0x7f00000001c0)="087e21fe52385e1d5c9f773c5b8c8d7498fafde9b90e5878db236dec5824512fc585e2178a278e302705d2e3cf35b6ea7e8d9a8132bc6cce4afc8d8175a57bcebdd1967f30697b33d04389452e35f93182133302ee9e64700a056c2b4f273b6bc785ea3eb306f37888dd0f7459c29ffdcc549447441cbac2f94c4133082cee460378e79bb4") 19:22:49 executing program 5: syz_read_part_table(0x4800, 0x0, 0x0) [ 1246.618132] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:22:49 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6012, r2, 0x2005) 19:22:49 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xf6, 0x10000) connect$caif(r1, &(0x7f0000000080)=@dgm={0x25, 0x6, 0x3ff}, 0x18) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:49 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0xc8a8776f3708a82) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) r1 = open(&(0x7f0000000040)='./file0\x00', 0x20402, 0x1a) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000100)={r2, 0xfffffffffffff8e8}, &(0x7f00000001c0)=0x8) 19:22:50 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x80, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r2, &(0x7f0000000280)={0x9, 0x108, 0xfa00, {r3, 0xfe, "e3252c", "53abdbb011f51002bafd4fda2d56c74c613766150a78c1c8dd76e90e799e80315844d3b51a8585d2429e3415f271ca01c06839cbee8d34978baa0e2931113af7ef2336ac521b42364e690c3ba4e914dc172121cb81373546e618e99d3bd1d29c8fda297a69ba80bad3fd44cfb6676e6b065f61d311b0bf6f55b19f846744574fa7cb29b842689e39a2116410a0a6e3e2f77721235c6fbcb1fe16bc84d5249b071622f1fc317b51b3d90e6da474a5d21e27bbc07ef55e3cfc6ed4d90da8f3b9b96591a03f72091ad7e21e7a16fb0ba5b33eab41893ca5393cd1757a8bbdd02615ee7a6318332f8c0aaeb48eaf66c97504e03a5e8df0dd755d0313fb02c91432b7"}}, 0x110) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video0\x00', 0x2, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) r6 = perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x9b, 0x2, 0x81, 0x9, 0x0, 0x80000001, 0x0, 0x1, 0x5, 0xd7, 0x2, 0x10000, 0x3, 0x6, 0x77, 0x8, 0x3, 0x7, 0x7, 0x2, 0x3551, 0xd4c1, 0xfffffffeffffffff, 0x0, 0x7ff, 0x9, 0x0, 0x1000, 0x80, 0x84c5, 0x4, 0x800000000000000, 0x7, 0x3, 0x2, 0xd90, 0x0, 0x80000000, 0x4, @perf_config_ext={0x53477304, 0x7fffffff}, 0x400, 0x5, 0x9b, 0xe, 0x100, 0x200, 0xe78}, r5, 0x0, r1, 0x8) r7 = dup3(r6, r4, 0x80000) ioctl$NBD_SET_TIMEOUT(r7, 0xab09, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:50 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x0, 0x8000000}, 0xfe40}}, 0x0) [ 1246.759577] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:22:50 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x2402, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r2, 0x700, 0x70bd2d, 0x25dfdbfc, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @udp='udp:syz2\x00'}}, ["", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000081}, 0x1) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$TUNGETSNDBUF(r3, 0x800454d3, &(0x7f00000002c0)) 19:22:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6012, r2, 0x2006) 19:22:50 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xfffffffffffffffb, 0x4200) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000200)={0x0, 0x3, 0x30}, &(0x7f0000000240)=0xc) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={r2, 0x3, 0x0, 0xfffffffffffffffb}, 0x10) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) r3 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$NBD_DO_IT(r3, 0xab03) ioctl$KVM_DEASSIGN_DEV_IRQ(r3, 0x4040ae75, &(0x7f0000000100)={0x80, 0x4, 0x3, 0x1}) r4 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000080)={0x1f, 0x1, 0xff, 0x8001, 0x2, 0x6, 0x1ff}, 0xc) 19:22:50 executing program 5: syz_read_part_table(0x4c00, 0x0, 0x0) 19:22:50 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) dup3(r2, r1, 0x0) 19:22:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6012, r2, 0x2007) 19:22:50 executing program 0: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x5, 0x400) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000040)) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x30700, 0x0) connect$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, {0x6, 0x4dd54, 0x1ff, 0x9, 0x80000004, 0x2}, 0x9}, 0xa) 19:22:50 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000040)={0x33, 0x8, 0x1000, &(0x7f00000001c0)="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"}) [ 1247.017644] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:22:50 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x0, 0xf000000}, 0xfe40}}, 0x0) 19:22:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6012, r2, 0x2060) 19:22:50 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x10000, 0x0) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1247.158016] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:22:50 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}, 0x10000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x4000, 0x10) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f00000000c0)={0x7, 0x0, 0x2019, 0x2, 0x401, 0x0, 0x6, 0x1}) write$P9_RSETATTR(r1, &(0x7f0000000080)={0x7, 0x1b, 0x2}, 0x7) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:50 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000040)="e6d14c48105a4a73ec33bb64ab3af6247eb7daf77a0227fd76ecf0f60752c6f0a02748073e70c35e22a09c02f6c25946a3e3c9988c2322f9f8207a2128a5f8c9c0a530") ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)={0x5, 0x0, 0x1, 0x9}) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000100)={0x7, r1, 0x10001, 0x1000}) 19:22:50 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x0, 0x10000000}, 0xfe40}}, 0x0) 19:22:50 executing program 5: syz_read_part_table(0x6000, 0x0, 0x0) 19:22:50 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000001900)) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000001800)={&(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000001740)=[{&(0x7f00000000c0)=""/59, 0x3b}, {&(0x7f00000001c0)=""/240, 0xf0}, {&(0x7f00000002c0)=""/113, 0x71}, {&(0x7f0000000340)=""/184, 0xb8}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/148, 0x94}, {&(0x7f00000014c0)=""/199, 0xfffffffffffffed8}, {&(0x7f00000015c0)=""/211, 0xd3}, {&(0x7f00000016c0)=""/86, 0x56}], 0x9, &(0x7f0000000100)=""/3, 0x3}, 0x40000000) ioctl$sock_ax25_SIOCADDRT(r1, 0x890b, &(0x7f0000001840)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r1, 0x6f, &(0x7f00000018c0)) 19:22:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6012, r2, 0x2500) 19:22:50 executing program 0: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) ioctl$VIDIOC_G_AUDIO(r0, 0x80345621, &(0x7f0000000080)) r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r1, 0xfffffbfffff3ffa7, &(0x7f0000000140)) fgetxattr(r1, &(0x7f00000002c0)=@random={'security.', '/selinux/mls\x00'}, &(0x7f00000001c0)=""/193, 0xc1) [ 1247.377490] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:22:50 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa4, &(0x7f0000000140)) 19:22:50 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x8a6, 0x0) socket$kcm(0x2, 0xa, 0x300) socket$kcm(0xa, 0x20000000000003, 0x11) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg(r1, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000100)={0x8, 0x4, 0x3, 0xfff}, 0x10) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x301000, 0x0) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, 0x0) close(r2) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000380)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;<\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xc6\x0f\xd7\x14\x0f\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4N') r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00t\xca\x1bq\x032-x\x00', 0x802}) tee(r4, r4, 0x8, 0x1) ioctl$TUNSETVNETLE(r5, 0x400454dc, &(0x7f00000000c0)=0x1) syz_open_dev$vivid(&(0x7f0000000140)='/dev/video#\x00', 0x1, 0x2) write$cgroup_int(r5, &(0x7f00000002c0), 0x12) socket$kcm(0x2, 0x0, 0x2) ioctl$VIDIOC_DBG_S_REGISTER(r1, 0x4038564f, &(0x7f0000000040)={{0x3, @addr=0xbd73}, 0x8, 0x1, 0x6}) getsockname$packet(r1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000200)={0x3, 0x3, 0x7, 0x3, 0x1}) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6012, r2, 0x3d00) 19:22:50 executing program 0: r0 = inotify_init() close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r1, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:50 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x0, 0x8dffffff}, 0xfe40}}, 0x0) [ 1247.554799] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:22:50 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000300)='./file1\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f00000004c0)={'filter\x00', 0x0, 0x4, 0x7f, [], 0x2, &(0x7f00000002c0)=[{}, {}], &(0x7f0000000440)=""/127}, &(0x7f0000000540)=0x78) syz_mount_image$hfsplus(&(0x7f0000000240)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x6e, 0x0, &(0x7f00000002c0), 0x2000000, &(0x7f00000006c0)=ANY=[@ANYBLOB="72743d3078303030303030303030303030483ee603392c6575696400003e02c5a31e722b04d0d8be9da4ff2555b86b4cffc2e189974e7dc1c6b27fe48c89e9ba4944873fbbe3d9c1fb3277c26ea5cd11ea63bf5f52da7885c55ef49bf552e54901a78ba4384a96a37e41fb067e4ac1cf868273c05d9a3484d267f6c5fbbd986e7c3008a9160f6a61138510f50ad15af512414a46cd12dc263a63bec0c45118e1c76dd582de32b22e145011f58e5612a3ff269a096717f11d3461d1981f0637f79457c2bc2af8fcf9", @ANYRESDEC=r1, @ANYBLOB="2c7375626a5f726f6c653db86d6435feff6d247d2c00"]) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000040)='./file0\x00', r2, r3) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) r4 = accept$inet6(0xffffffffffffffff, &(0x7f0000000580), &(0x7f00000005c0)=0x1c) setsockopt$inet6_opts(r4, 0x29, 0x3f, &(0x7f0000000600)=@srh={0x3d, 0x10, 0x4, 0x8, 0x7, 0x18, 0x9, [@local, @ipv4={[], [], @broadcast}, @loopback, @dev={0xfe, 0x80, [], 0x15}, @remote, @ipv4={[], [], @rand_addr=0x1f}, @dev={0xfe, 0x80, [], 0x1b}, @empty]}, 0x88) 19:22:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6012, r2, 0x6000) 19:22:50 executing program 5: syz_read_part_table(0x6800, 0x0, 0x0) [ 1247.695056] hfsplus: unable to parse mount options 19:22:51 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x220800, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x7aa) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0xfe, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f00000000c0)=0x9, 0x4) [ 1247.748558] __loop_clr_fd: partition scan of loop5 failed (rc=-22) [ 1247.770219] device nr0 entered promiscuous mode 19:22:51 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x0, 0xf0ffffff}, 0xfe40}}, 0x0) 19:22:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6012, r2, 0x2000000) 19:22:51 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000001) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1247.898361] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:22:51 executing program 0: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=@ipv6_deladdr={0x34, 0x15, 0x1, 0x0, 0x0, {}, [@IFA_FLAGS={0x8}, @IFA_LOCAL={0x14, 0x2, @mcast1}]}, 0x34}}, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x20002, 0x0) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f00000003c0)=""/4096) ioctl(r1, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x10000, 0x0) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, &(0x7f0000000140)={0x9, 0x9d2, 0x4}) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f00000001c0)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r4, 0x800, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20008004) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r5, &(0x7f0000000000)={0x9, @remote={[], 0x3}}, 0x12) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6012, r3, 0x2000) 19:22:51 executing program 5: syz_read_part_table(0x6c00, 0x0, 0x0) 19:22:51 executing program 0: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000080)={0x30, 0x5, 0x0, {0x0, 0x0, 0x7f, 0x4}}, 0x30) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x1009}}, 0x20) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r1, 0xfffffbfffff3ffa7, &(0x7f0000000140)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)) 19:22:51 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x29e, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r1, 0x406, r1) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000040)={0x0, 0xffffffff}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x21}}}}, 0x84) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r4) [ 1248.108051] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:22:51 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x0, 0xffffff7f}, 0xfe40}}, 0x0) [ 1248.148808] ion_mmap: failure mapping buffer to userspace 19:22:51 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000080)=""/14, 0xe}, {&(0x7f00000001c0)=""/133, 0x85}, {&(0x7f00000000c0)=""/117, 0x75}, {&(0x7f0000000280)=""/110, 0x6e}], 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x541480, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:51 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa9, &(0x7f0000000140)) 19:22:51 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) getpgrp(0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000100)) openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000340)={0x0}, &(0x7f0000000300)=0x3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r2, r1, 0x0, 0xf, &(0x7f00000000c0)='/dev/dri/card#\x00'}, 0xfffffd72) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffefffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x0, 0x0, 0x20000000, 0x0, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x0) clock_getres(0x7, &(0x7f0000000040)) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x132, 0x40) ioctl$VIDIOC_S_JPEGCOMP(r1, 0x408c563e, &(0x7f0000000140)={0x85ad, 0xe, 0x18, "a458a0dcf80724826a1549a9f0e0e8d99c532d2a78bafef812ea11eec04165f2c284df52edacf555cdbe110fa05edf05e464f91723424178afd18258", 0x3c, "8aa0c60ed45cc465fc51246a76329bac09f30f48f00b4befe251ad3ce2d96c40d4685c715021510c42faf86f2651aea8a0d827d61b7d44f3c8f995eb", 0x20}) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000007000/0x4000)=nil, &(0x7f0000008000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000b000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000009000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000080)="4a7469791cd62456563158fd9c30fc21b3e63077407f8a4b51148458beec5b11c489ce06dc0bd4c2de4b19974f7af556ca45645367ebd4e8937d7d7785f87eb3b4ce27db3df5b225b2d85b2080a5895de8355811ee5dad24e4bd8424", 0x5c, r2}, 0x68) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6012, r3, 0x2000) [ 1248.259532] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:22:51 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x3, 0xfffffffc00000001) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_create1(0x80000) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x400, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r1, &(0x7f0000000500)="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", &(0x7f00000003c0)=""/190}, 0x18) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000480)={r1, &(0x7f0000000200)="4e5ce0888c321fa5c4b3f79472dc5b8532f72923d62fe2889cb18bbebe974c97c76e12853a1c4d67489e89ceba5b7ea93bce289b240ded80dbfe5d57f17b3627c763ca32a791374fffc22951a863113ab9fc0fb096ee834bfbfbca00df82784599f098244fffb590b98788ee10520ee24898b0ca482e127153287e19b7b1e326c210dd01ab1f10feb38a8bca", &(0x7f0000000300)=""/138}, 0x18) bind$inet6(0xffffffffffffffff, &(0x7f00000004c0)={0xa, 0x4e23, 0x44, @mcast1, 0x4}, 0x1c) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x101, 0x1000000009, 0x3, 0xa5d, 0x100000000}, &(0x7f0000000700)=0x98) accept4$unix(r1, &(0x7f0000000080)=@abs, &(0x7f0000000780)=0x6e, 0x80803) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000740)={r2, 0x7fff}, &(0x7f0000000800)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000100)={r3}, &(0x7f00000001c0)=0x8) 19:22:51 executing program 5: syz_read_part_table(0x7400, 0x0, 0x0) 19:22:51 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x0, 0xffffff8d}, 0xfe40}}, 0x0) [ 1248.411384] ion_mmap: failure mapping buffer to userspace 19:22:51 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1248.457703] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:22:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x40000, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000000080)) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6012, r3, 0x2000) 19:22:51 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x4) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x3}) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xff, 0x44000) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:51 executing program 3: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer\x00', 0x40002, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) accept4$inet(r0, 0x0, &(0x7f0000000240), 0x80800) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f00000001c0)={0x4, 0x100000000, 0x101, {r1, r2+10000000}, 0xfffffffffffffc01, 0x1}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(0xffffffffffffffff, 0xfffffbfffff3ffa7, &(0x7f0000000140)) io_setup(0x8001, &(0x7f0000000280)=0x0) io_pgetevents(r4, 0x5, 0x3, &(0x7f00000002c0)=[{}, {}, {}], &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380)={0x8}, 0x8}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x40800, 0x0) connect(r3, &(0x7f0000000000)=@rc={0x1f, {0x13e, 0x2, 0x1, 0x9, 0x0, 0x5}}, 0x80) [ 1248.608044] __loop_clr_fd: partition scan of loop5 failed (rc=-22) [ 1248.618696] ion_mmap: failure mapping buffer to userspace 19:22:51 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x0, 0xfffffff0}, 0xfe40}}, 0x0) [ 1248.664130] ion_mmap: failure mapping buffer to userspace [ 1248.777641] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:22:52 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f00000001c0)=""/4096) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000011c0)={{{@in=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@loopback}}, &(0x7f00000000c0)=0xe8) getresuid(&(0x7f0000000100), &(0x7f00000012c0)=0x0, &(0x7f0000001300)) r4 = geteuid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001340)={{{@in6=@ipv4={[], [], @broadcast}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@remote}}, &(0x7f0000001440)=0xe8) stat(&(0x7f0000001480)='./file0\x00', &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001540)={0x0, 0x0}, &(0x7f0000001580)=0xc) getresgid(&(0x7f00000015c0)=0x0, &(0x7f0000001600), &(0x7f0000001640)) fsetxattr$system_posix_acl(r0, &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000001680)={{}, {0x1, 0x2}, [{0x2, 0x7, r2}, {0x2, 0x4, r3}, {0x2, 0x1, r4}, {0x2, 0x0, r5}, {0x2, 0x3, r6}, {0x2, 0x7, r7}], {}, [{0x8, 0x7, r8}], {0x10, 0x4}, {0x20, 0x4}}, 0x5c, 0x3) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000001700)=0x7) 19:22:52 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x60, 0x2) ioctl$sock_netrom_SIOCDELRT(r1, 0x890c, &(0x7f0000000080)={0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x0, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x100, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000100)="c157d109ed07546ee08124db253c1d4d6331913980339040202030dd9b27762525be29ca2b2612609f53d6fcbe6b97d6a79b20af4b1643231bd9b5eaf7e92266") getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0x401}, &(0x7f0000000200)=0x10) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000240)={r2, 0x1f, 0xffffffff00000001}, 0x8) 19:22:52 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x0, 0x800000000000000}, 0xfe40}}, 0x0) 19:22:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = geteuid() fsetxattr$security_capability(r0, &(0x7f0000000080)='security.capability\x00', &(0x7f0000000140)=@v3={0x3000000, [{0x3ff, 0x800}, {0x92, 0xd}], r2}, 0x18, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") madvise(&(0x7f0000c19000/0x1000)=nil, 0x1000, 0x79) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x1f) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) socket$nl_crypto(0x10, 0x3, 0x15) mmap(&(0x7f0000c19000/0x3000)=nil, 0x3000, 0x2000000, 0x601e, r4, 0x2002) 19:22:52 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xa) r1 = open(&(0x7f0000000040)='./file0\x00', 0x80000, 0x3) r2 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000080)={0x2, 0x0, @multicast1}, &(0x7f00000000c0)=0x10, 0x800) r3 = socket$inet(0x2, 0x800, 0x7f) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000002c0)={r2, r3, 0x2, 0xf6, &(0x7f00000001c0)="3967d180b4b91ad464c1d8533d0c92abdd838f5eb4c9951241d394e6e0f7def59236de4e8031d0c32b93861ac51bb519516ec17a94bf7d3a72822d49938ddcb6791236ea53213879ee642d4c91bea548049cffefebc21fb9a09d12ac7d266ca42fcc6df004f17679b32ebaf82a9a38f24db5bb5af4ec2157f84f54e914e82ec9d7c169322854bbeb9e5e15e43ee0eff5acd3472f2829ec4e195527ddc0bceaad9ad0d3b9d453193f970d02e46abbffbc21e08267516588ada3b40cecbeb731654ecece948c8d06ce5cddae1bc306b9524a397f2b0008d96dbc82f1b21d2fac5020d9082ec82e13ef851ab6d6615ba74e62d837da6277", 0x5, 0x7ff, 0x16a2ca97, 0x5, 0x2b4f5b86, 0x3, 0x800, 'syz0\x00'}) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:52 executing program 5: syz_read_part_table(0x7a00, 0x0, 0x0) 19:22:52 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x40400, 0x0) write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0x9) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6012, r2, 0x2000) ioctl$SIOCAX25NOUID(r1, 0x89e3, &(0x7f0000000000)=0x1) [ 1249.327806] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:22:52 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1249.424522] ion_mmap: failure mapping buffer to userspace [ 1249.432367] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:22:52 executing program 5: syz_read_part_table(0x400000, 0x0, 0x0) 19:22:52 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x0, 0xf00000000000000}, 0xfe40}}, 0x0) 19:22:52 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x311000, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000240)={{{@in=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@mcast2}}, &(0x7f0000000340)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@ipv4={[], [], @remote}, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@local}}, &(0x7f0000000480)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@broadcast, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@local}}, &(0x7f00000005c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'vcan0\x00', 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f0000000680)=""/127, 0x7f}, 0x401}, {{&(0x7f0000000700)=@tipc=@name, 0x80, &(0x7f0000000940)=[{&(0x7f0000000780)=""/208, 0xd0}, {&(0x7f0000000880)=""/37, 0x25}, {&(0x7f00000008c0)=""/94, 0x5e}], 0x3}, 0x2}, {{&(0x7f0000000980)=@caif=@dgm, 0x80, &(0x7f0000001a80)=[{&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/118, 0x76}], 0x2}, 0x7ff}, {{&(0x7f0000001ac0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000001b40)=""/146, 0x92}, {&(0x7f0000001c00)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/153, 0x99}, {&(0x7f0000002cc0)=""/52, 0x34}, {&(0x7f0000002d00)=""/250, 0xfa}], 0x5, &(0x7f0000002e80)=""/51, 0x33}, 0x9}], 0x4, 0x2, &(0x7f0000002fc0)={0x77359400}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003000)={{{@in, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000003100)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000003140)={{{@in=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}}}, &(0x7f0000003240)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000003280)={'nr0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000032c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@dev}}, &(0x7f00000033c0)=0xe8) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000003740)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003700)={&(0x7f0000003400)={0x2f8, r2, 0x100, 0x70bd28, 0x25dfdbfd, {}, [{{0x8, 0x1, r3}, {0xf0, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x401}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x4b}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r7}, {0xe4, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x3efe}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x84a}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x45}}}]}}, {{0x8, 0x1, r9}, {0xac, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x100000000}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r10}, {0x44, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r11}}}]}}]}, 0x2f8}, 0x1, 0x0, 0x0, 0x80}, 0x10) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000080)={0x7, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}]}) [ 1249.492944] ion_mmap: failure mapping buffer to userspace 19:22:52 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x603, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x6) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6012, r2, 0x2000) r3 = dup2(r2, r2) ioctl$RTC_EPOCH_SET(r3, 0x4008700e, 0x40) ioctl$RTC_WIE_OFF(r3, 0x7010) 19:22:52 executing program 0: syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x3, 0x2) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1249.663253] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:22:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x6000, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x100, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000280)='\xc6^`\xb5%\xd3\xe9UB$\xaf\x99\'\x175\xacJ\x9aI\xb4\x95\xac\x80]-\xe9a\xed|\x1e\xdf\x12G\xe2\xe1!\xe6\xddP\xe4+\b\xcb \xbdT\x95\xe4\xb8\xc6\b\xbew\xe0\xc9\xd2\x9b\xb4T2V{\xbe\x93Y\x11\xd3\xc2#\xce\xd5\xfd}\x87B[\xc0\xc3\x9bf\xf4]\x98I\xd9\xd9Z\x1fX', 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000040)="1fc881e057902a428dc7d03f60a02b8d59ca69877b09ebd1d3d8060deccbad0e75e0c8ae2f8bd4286c69bbea28191951039c45fa470b608f55d060", 0x3b, 0x24004000, &(0x7f0000000200)={0xa, 0x4e24, 0x716, @dev={0xfe, 0x80, [], 0x29}, 0x1}, 0x1c) ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f0000000080)) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) getsockopt$inet_dccp_int(r2, 0x21, 0x1b, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 19:22:53 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x0, 0x1000000000000000}, 0xfe40}}, 0x0) 19:22:53 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000000000002, 0x0, 0x0, 0x6, 0x0, 0x0, 0x4, 0x5, 0x0, 0x619, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1249.733671] ion_mmap: failure mapping buffer to userspace [ 1249.760183] ion_mmap: failure mapping buffer to userspace 19:22:53 executing program 0: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x8, 0x200) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps\x00') ioctl$VIDIOC_G_ENC_INDEX(r0, 0x8818564c, &(0x7f0000003b80)) ioctl(r0, 0x10002, &(0x7f0000000300)="8503a50f2e09e8afc139ef00eb9fcb29372df62cf14957c267bbe11cd70d0b87c2ce979445639d8a09c72b4ca7ea394d1ffde94367bad63361e56be09bfcf5c7ee3f2c47814dce0931448978536766492cf82ac4c8ffd0279c06a91f00000000000000000000000000") setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000001c0)=0x8, 0x4) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r1, 0x1, 0x1, 0x5, &(0x7f0000000080)=[0x0, 0x0], 0x2}, 0x20) ioctl$KDSETLED(r1, 0x4b32, 0x7) 19:22:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6012, r2, 0x2000) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x42c140, 0x0) ioctl$CAPI_NCCI_OPENCOUNT(r3, 0x80044326, &(0x7f0000000080)=0xffffffffffffffff) 19:22:53 executing program 5: syz_read_part_table(0x1000000, 0x0, 0x0) 19:22:53 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x9, 0x12, r0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}}, 0x0, 0x1f, 0x0, "0a13b960304335b2c0a40dfb7da58ad09f4e590e2067e9c097d7c0e9e5f0deb865a6183f60c39f50b9c3f1ea0eff0bcaed453382488ae9a9405ddebadbce9f8396a991c31658ad5509e1a37d5fe1b317"}, 0xd8) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) mknodat(r2, &(0x7f00000000c0)='./file0\x00', 0x4, 0x1) fanotify_init(0x20, 0x8002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) ioctl$TIOCCBRK(r1, 0x5428) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@dev}}, &(0x7f0000000080)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@empty, @in6=@dev={0xfe, 0x80, [], 0x26}, 0x4e21, 0x0, 0x4e24, 0x8000, 0xa, 0xa0, 0x20, 0x3a, 0x0, r2}, {0x100000000, 0x4, 0x1, 0x100000001, 0x9, 0x1000, 0x200, 0x96}, {0x9, 0x10000, 0x843, 0x7fffffff}, 0x1000, 0x6e6bb3, 0x3, 0x1, 0x1, 0x1}, {{@in=@multicast2, 0x4d3, 0xff}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x25}, 0x3505, 0x0, 0x0, 0xfffffffeffffffff, 0x0, 0x8000, 0x15}}, 0xe8) [ 1249.898030] __loop_clr_fd: partition scan of loop5 failed (rc=-22) [ 1249.935266] ion_mmap: failure mapping buffer to userspace 19:22:53 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1249.982061] ion_mmap: failure mapping buffer to userspace 19:22:53 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x0, 0x8dffffff00000000}, 0xfe40}}, 0x0) 19:22:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = msgget(0x1, 0x5) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000140)=""/175) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6012, r3, 0x2000) [ 1250.047744] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:22:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x5146, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffff9, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffe, 0xffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)="a9440ae65b3d7056", 0x8, 0x0) r2 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$reject(0x13, r1, 0x0, 0xd8, r2) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) socketpair(0x2, 0x7, 0x2, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e20, 0x2cde, @ipv4={[], [], @local}, 0x7}}, 0xffff, 0xffff, 0x4, 0x2, 0x10}, &(0x7f0000000300)=0x98) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000340)={0x0, 0x29, "819416cf79eb98822013075f31d7370e49cad6280ca2a525379c0af4f42b1858f92e20899dad171e9d"}, &(0x7f0000000380)=0x31) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f00000003c0)={r4, 0x7fffffff, 0x94ac, 0x100000000, 0x9, 0x8, 0x4, 0x1, {r5, @in6={{0xa, 0x4e20, 0x1c5, @dev={0xfe, 0x80, [], 0x25}, 0x4}}, 0x9, 0x4, 0x10001, 0x800, 0x4}}, &(0x7f0000000480)=0xb0) 19:22:53 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0x100000000000000, &(0x7f0000000080)) 19:22:53 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x3, 0x400000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:53 executing program 5: syz_read_part_table(0x2000000, 0x0, 0x0) [ 1250.191019] ion_mmap: failure mapping buffer to userspace [ 1250.229698] ion_mmap: failure mapping buffer to userspace [ 1250.259195] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:22:53 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x480002, 0x0) userfaultfd(0x800) sendmsg$alg(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="008d3071924c2d453eead3ff164d210d426c2b899bdf1f5549842374964b299d62658f10846527ebf41244d5456719eb3578f6ab70239d8d569f01621152b3f54e08deeb29ac00d4bc62ffcde3e695bf70eba3f03a29981c83fdcdf9755124acdc72c1b5ba4d090d9a3b806edd1cf87e7ebffe1e94b1228516f5e5221871a971539a436056507a60e1709ccfe20692ba9a0a1185cadad1b6b143ff14aa13e7d1273ce1cdd04b5d90970db106264aa05ebf36c7485050e62c094af7fee20784ac3ec3d7feb510da824e3c6be4307883926efae88cda9ab91984438ebcbeed11c4d3070f9be96999d8", 0xe8}, {&(0x7f0000000080)="90229f0bfef510a09a8365ffb378c161c9a7e7963fee87fe4ea07c3aa441f27c55", 0x21}, {&(0x7f00000000c0)="8ffec454f427b6731679027ae121612122b46221017f88ea0c1a56939d50c14b99f1eb254c633402a6ba691d1bfa72f935bced6a99fff526439c84a9ea11d3583a936d3f3ffe874966f0976b4ab983b1bef79ee2d0e284715a83", 0x5a}, {&(0x7f00000002c0)="d1c36574b763348f4c4e9375ab2445479a2ac3e3b7cbdffb031192be810cbdb46145b92abe21a374a5e0c8cec848b9c8c80cca5aba6a31ae8c73fa533a4432fdcdb14c96a7dd2525348a2199f19e1ade724651f5d426a04e3c934796594c79ee904a42ec9b8c0d39d8c5485fdd99ed35c5a2e29d98213715dc22f7cc09815a63266d0d36aab01ea0592528b04f75d445580e64076daf613b94c4c3693f6420f7170359631d2b8d703bfa22adea472f707fde2653cf3fae2d177c2e71fc6b32a3c5eb4815d2a79819fa8f4faae4d74dc67eeaea13f2000fae0666e6a18f8319c47694a4ae535e5461923b", 0xea}, {&(0x7f00000003c0)="ed7a55762abb59c7c3ded28b2ccd8850c3968197da90f42b22287daf01dabadfa61d7536fb60c7da4774b9f5733a8788effa8aaeb316f95bae774f1fa19ee85e836e", 0x42}, {&(0x7f0000000440)="3a08339c0ccd20a6b48531c7159caf5dcc3b465d5b", 0x15}, {&(0x7f0000000480)="8f7d50073ea74ff15e29096992e0723e98bcd4710cf8fb6bc4d0b4d24535ff5e185d8c3f", 0x24}], 0x7, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x188, 0x4008000}, 0x663bdfd82b66bd38) 19:22:53 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x2, 0x0) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6012, r3, 0x2000) 19:22:53 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x0, 0xf0ffffff00000000}, 0xfe40}}, 0x0) 19:22:53 executing program 1: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x200, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000080)={0x0, 0x93, "4313dcfc3b7d046b0a2d9b403d07c7e23b8b0d29e78e72d93dba35025515ed12b9ea7737368acf45d9f22d1aa639331b18d0b459bc3777d8e4c90741733316bbc9a6b9a2e1800de13bcc0ff345b9285d6030d65cb9e111446773faa245990402510fd0f2f58d80dbd6bb3ef7f182f1ed588e4672bd527f38db97664a2abd5cbf598d86efaa06f8093a0194c095c3446e99bfb3"}) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r1, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xffffffff, 0x0) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)="93456a2e7be5e5b72fbdac2d5e58624def3bd251641da71d5419424abb556b27b099f1461aabe4b0e53da36ae4c13bd9d99a6bc8bf120387c1b7d895fc63b3f4ab0cd3423e9263fb542e8aba7ae9968a98fd4658e4f922c76d3b1ed861a836575cfc5aa200e50cc8f7e5", 0x6a, 0xfffffffffffffffc) utimes(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}}) keyctl$update(0x2, r1, &(0x7f00000001c0)="269d6bd2c18fd0937be9fbf37d09b475f30a173906152d18d085463dcaf5e0626ba1b883c7ed21f3621073118f5336a21b8762b814c45006dac86c3a1ee6de61d542066819eb0b4bf75f048dc94575c93a36f2d94fa2c2a5fa8a46189184", 0x5e) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:53 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x8, 0x404000) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1250.408848] __loop_clr_fd: partition scan of loop5 failed (rc=-22) [ 1250.427239] ion_mmap: failure mapping buffer to userspace [ 1250.446486] ion_mmap: failure mapping buffer to userspace 19:22:53 executing program 2: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x80002, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a0, &(0x7f0000000040)='%d') r1 = gettid() perf_event_open(0x0, r1, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8db, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000000c0)=@pppol2tpv3in6={0x2, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x9140625323d3980e, &(0x7f00000005c0), 0x0, &(0x7f0000000780), 0xfffffff8}, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000300)='}/).usertrusted@security\x00') perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0xea3, 0xfffffffffffffffc, 0x10000, 0x2, 0x0, 0x7, 0x92802, 0x2, 0x2, 0x0, 0x100, 0x6, 0xaeb, 0x4, 0xe00000000, 0x7, 0x8, 0x4, 0x0, 0x9, 0x3, 0xffff, 0x6, 0x7f, 0x0, 0x1, 0xfff, 0x800000010001, 0x3, 0x80000000, 0x101, 0x7f, 0x9, 0xa4, 0xfffffffffffffff7, 0x0, 0x0, 0x100000001, 0x2, @perf_bp={&(0x7f0000000000), 0x8}, 0x2000, 0x4, 0x7, 0x2, 0x8, 0x6, 0x401}, r1, 0x9, r2, 0x8) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) socket$kcm(0x2, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000380)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;<\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xc6\x0f\xd7\x14\x0f\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4N') openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00', 0x801}) ioctl$TUNGETVNETHDRSZ(r5, 0x800454d7, &(0x7f0000000140)) write$cgroup_type(r5, &(0x7f0000001900)='th\x88daded\x00', 0xfdef) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x1000088911, &(0x7f0000000400)="000000000000000000000087c3afed5450ee840c543432d8448daf05ef1f4845083eb843de75c45f7c24940a8c46c7173347a91af9bcc02599a7857794c9e666d275adeecf011b711393f1839c20c8122109a70cc10ee6d7cc7d1da584fbb7ee6a9a16f5eb33c16919c2414f52b73e8bb983260e00d814d90c0d1fd5aca82375073803efaddded76f05afac1444f3fda388ffdde67548b") r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6012, r8, 0x2000) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x100, 0x0) 19:22:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x5, &(0x7f0000000040)=0x0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) io_submit(r1, 0x2, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x100000000, r0, &(0x7f0000000080), 0x0, 0x5, 0x0, 0x2, r2}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0xe58d, r0, &(0x7f00000001c0)="56df8d3a7ab575ec7a00ad1eebee27e5ce407c44e2ba9cad4cfbba6c442f40cbdfc0f571deb16a56cbe74b3496153507e53b3d5f394c26de31876343465071fc7256d6e5912126dd5a377d9ef1265614126aa5b923f54fbc2f17e9331ad4711b6189affe087d97ad9043", 0x6a, 0x9, 0x0, 0x2, 0xffffffffffffff9c}]) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:53 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x6f8, 0x101000) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:53 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x9, 0x800000000) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000000)) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x2a080, 0x0) r2 = dup3(r1, r0, 0x80000) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x35, "8b8edc3004a892203fe76cb8bcb56517d633485ace687a687d280d6a0262a6f5ac9409a9ab784cbf14d1feb2dca9a01e2f40f1d8e6"}, &(0x7f0000000040)=0x3d) write$eventfd(r2, &(0x7f0000000200)=0x7, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000080)={r3, 0x4, 0x200}, &(0x7f0000000100)=0x8) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) 19:22:53 executing program 5: syz_read_part_table(0x3000000, 0x0, 0x0) [ 1250.639039] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:22:54 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x0, 0xffffff7f00000000}, 0xfe40}}, 0x0) 19:22:54 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) prctl$PR_GET_KEEPCAPS(0x7) 19:22:54 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) ioctl$KVM_TRANSLATE(r1, 0xc018ae85, &(0x7f0000000040)={0x103000, 0x1000, 0x3, 0x10001, 0xfffffffffffffeff}) [ 1250.798278] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:22:54 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000200)=0xab22) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pread64(r2, &(0x7f0000000040)=""/235, 0xeb, 0x0) ioctl(r1, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1250.838494] ion_mmap: failure mapping buffer to userspace 19:22:54 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000040)={0x0, 0xffffffff, 0x0, 0x4, 0x1}, &(0x7f0000000080)=0x18) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r2, 0x101}, 0x8) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:54 executing program 5: syz_read_part_table(0x4000000, 0x0, 0x0) 19:22:54 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x0, 0x0, {{0x2}}}, 0xfe40}}, 0x0) [ 1251.007821] __loop_clr_fd: partition scan of loop5 failed (rc=-22) [ 1251.174004] ion_mmap: failure mapping buffer to userspace [ 1251.181504] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:22:54 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000140)={0xffffffffffffffff, 0x1, 0x80000000, 0x0, 0x6ac8}) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000080)=0x200000000) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6012, r3, 0x2000) fdatasync(r3) 19:22:54 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x58e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:54 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0xe89) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:54 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:54 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x0, 0x0, {{0x8}}}, 0xfe40}}, 0x0) 19:22:54 executing program 5: syz_read_part_table(0x5000000, 0x0, 0x0) [ 1251.357666] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:22:54 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0xc0000, 0x0) ioctl$KDSETMODE(r1, 0x4b3a, 0x40) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000240)=@assoc_id=0x0, &(0x7f0000000340)=0xffffffffffffffc9) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={r2, 0x8, 0x7, 0xfffffffffffffff8}, 0x10) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) r3 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r3) ioctl$LOOP_CLR_FD(r1, 0x4c01) 19:22:54 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x4) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) unlinkat(r2, &(0x7f0000000600)='./file0\x00', 0x200) recvmsg(0xffffffffffffff9c, &(0x7f0000000480)={&(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/202, 0xca}, {&(0x7f0000000340)=""/113, 0x71}, {&(0x7f0000000100)=""/13, 0xd}], 0x3, &(0x7f0000000400)=""/101, 0x65}, 0x3) ioctl$CAPI_CLR_FLAGS(r2, 0x80044325, &(0x7f0000000700)) recvfrom$rose(r3, &(0x7f00000004c0)=""/48, 0x30, 0x2022, 0x0, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x20040, 0x0) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/dlm_plock\x00', 0x2000, 0x0) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/qat_adf_ctl\x00', 0x400000, 0x0) ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000580)={r6, 0x0, 0x1010000, 0xfffffffffffff000}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000006c0)={r1, r5, 0x0, 0xf, &(0x7f0000000680)='/dev/dlm_plock\x00', 0xffffffffffffffff}, 0x30) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x9, 0x7fff, 0x0, 0x7ff, 0x400, 0x1, 0x7ff, 0x80000000, 0x9, 0xa1e, 0x4, 0x80000000, 0x7fffffff, 0x5, 0x5, 0x6, 0x4, 0x8000, 0xf78, 0x20, 0x3b1, 0x8, 0x7, 0xa22, 0x8000, 0x1, 0x91, 0x3, 0x6, 0x0, 0x8, 0x7, 0x2, 0x0, 0x0, 0x7fff, 0x7, @perf_config_ext={0x5, 0x5}, 0x1000, 0xfffffff000000000, 0x3, 0x9, 0x7fff, 0x400, 0x51}, r1, 0xb, 0xffffffffffffffff, 0x1) 19:22:54 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x80000, 0x0) ioctl$KVM_SET_FPU(r1, 0x41a0ae8d, &(0x7f0000000080)={[], 0x5ed8884e, 0x2, 0x9, 0x0, 0xd9c00000, 0x104000, 0x0, [], 0x5}) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x5ac) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1251.427592] ion_mmap: failure mapping buffer to userspace [ 1251.456590] ion_mmap: failure mapping buffer to userspace 19:22:54 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x8000, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001240)='/dev/vga_arbiter\x00', 0x210000, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x10, &(0x7f00000000c0)={&(0x7f00000001c0)=""/4096, 0x1000, 0xffffffffffffffff}}, 0x10) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f00000014c0)={0x401, 0x6, 0x401, 0xae, &(0x7f0000001280)=""/174, 0x8e, &(0x7f0000001340)=""/142, 0xb7, &(0x7f0000001400)=""/183}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001200)={r1, 0x10, &(0x7f00000011c0)={&(0x7f0000000080)=""/34, 0x22, r2}}, 0x10) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1251.494674] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:22:54 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x0, 0x0, {{0xf}}}, 0xfe40}}, 0x0) 19:22:54 executing program 2: add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)="f45f02ad44e7b0a06e055d7420337721b4b2a48ff7df7974b4475e592c", 0x1d, 0xfffffffffffffffb) keyctl$invalidate(0x15, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x12, r0, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f00000000c0)='m', 0x1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x12, 0x6012, r1, 0x2000) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000280)=0x10000) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x101000, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f0000000180)=""/253) 19:22:54 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) shutdown(r1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x10000, 0x0) write$apparmor_current(r2, &(0x7f00000000c0)=@hat={'changehat ', 0x0, 0x5e, ['lo##vmnet1)selinux,trustedposix_acl_accessmd5sum\x00', '\x00', '/dev/sequencer\x00', 'selinux-&*%.%cpuset\x00']}, 0x72) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x8000, 0x0) 19:22:54 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7234, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x2000, 0x0) setsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f0000000080)=0x8, 0x4) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) write$P9_RRENAME(r1, &(0x7f00000000c0)={0x7, 0x15, 0x2}, 0x7) [ 1251.578032] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:22:54 executing program 5: syz_read_part_table(0x6000000, 0x0, 0x0) 19:22:54 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={&(0x7f0000000040), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x80000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100), 0x2, 0xb}}, 0x20) prctl$PR_SVE_SET_VL(0x32, 0x36ec4) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x3, 0x40040) getsockname$inet(r1, &(0x7f00000001c0), &(0x7f0000000200)=0x10) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000240)=0x7f) 19:22:55 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x4, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[{0x526, 0x8, 0x9, 0x1f, 0x5, 0x4, 0xffffffff, 0x3, 0x7f, 0x8, 0x1, 0x9b73, 0x5}, {0x20, 0x2, 0x2, 0x0, 0x895, 0x8, 0xb7, 0x4c7, 0x3, 0x2, 0x80}, {0x64b, 0x4, 0x4, 0x6, 0x5, 0xd, 0x1, 0x8d, 0x1d, 0x4, 0x0, 0x400, 0x3}], 0x7fff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:55 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x9, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000100)={'veth0\x00', {0x2, 0x4e24, @multicast2}}) r1 = syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x1, 0x3fffe) r2 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x8000, 0x400000000400000) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x17}}], 0x10) getsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f00000002c0), 0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r3, 0x40405515, &(0x7f0000000080)={0x7, 0x0, 0x40, 0xd36, 'syz1\x00', 0x2}) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000380)={0x4, 0x0, [{0x80000000, 0x7, 0x0, 0x0, @irqchip={0x4, 0x7f}}, {0x4, 0x2, 0x0, 0x0, @irqchip={0x81, 0x5}}, {0x7, 0x7, 0x0, 0x0, @adapter={0x8, 0x578, 0xffffffff, 0x34d255c2, 0x3}}, {0x8, 0x0, 0x0, 0x0, @msi={0x0, 0x80000, 0x7}}]}) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000340)=0x10000) ioctl(r1, 0xfffffbfffff3ffa7, &(0x7f00000001c0)="0f86ce0c4e683ca1c2450000000045e481973dfe5adb3694cd421d81930d8625e5e7eee04a2ce2894747675fb66c72cb64baf4e00c097553d7ef4955498139726c76dca013c7fcd17d2ed92283fff40db84d32c96c185728d0947eab3daab7ab742f4dab973937b8980ed3df79688b3751205eead7feaa7915298295897ad552ff5b51e7705c06c8e58d") setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000300)=0x6, 0x4) [ 1251.744889] audit: type=1400 audit(1552072975.003:141): avc: denied { map } for pid=23714 comm="syz-executor.2" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=354440 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:hugetlbfs_t:s0 tclass=file permissive=1 19:22:55 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x80, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x80000, 0x0) connect$rds(r1, &(0x7f00000001c0)={0x2, 0x4e20, @multicast2}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x9, 0x200000) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r3, 0x800442d3, &(0x7f0000000200)={0x6, 0xfffffffffffffffa, 0x1, @local, 'bridge_slave_0\x00'}) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000140)) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f00000000c0)) ioctl$IMGETCOUNT(r3, 0x80044943, &(0x7f00000002c0)) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000000)={0x4, 0xa}, 0x133) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000340)={{{@in=@remote, @in6=@loopback}}, {{@in6=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000000280)=0xe8) ioctl$SG_EMULATED_HOST(r3, 0x2203, &(0x7f0000000240)) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6012, r5, 0x2000) socket(0x400000000011, 0xa, 0x4) write$binfmt_misc(r0, &(0x7f0000000440)={'syz0', "3aef3e8c2b36d4db9a439ed795d1477d91ceba9a953d85633cff15a7d09bd41e2be9310e2a13024e2ebf3b70456095f388a0f63936b81a6b1fa6dd818817d182a573445616e2cceefb5d1d7b6c20a0b20cd2913f7447273c3b9fdf369edbf97c686f8cfd3dce7dacf7afba2c1a1379eca901ba5fd67b33209e6b"}, 0x7e) [ 1251.818160] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:22:55 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) r2 = inotify_add_watch(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x23000000) inotify_rm_watch(r1, r2) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="3400006479cd4bf931305a2ffa7ee2eb5ba1d2d7b199801e56b6601a80131fdf980fd06f8beeee9366e04c20684204359ee5b3836b65b14b"], &(0x7f0000000100)=0x3c) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e23, @rand_addr=0x6}}, 0x8, 0xb94}, 0x90) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1251.868260] audit: type=1400 audit(1552072975.043:142): avc: denied { map } for pid=23714 comm="syz-executor.2" path="socket:[354439]" dev="sockfs" ino=354439 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=rawip_socket permissive=1 19:22:55 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x0, 0x0, {{0x10}}}, 0xfe40}}, 0x0) 19:22:55 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000280)="386ee8ab4de0fa1b2913ba1f95e831a2541effb88910ed9aec1e9b124f3a093048c0745964ea15f97569eb7056ce9e219d02ac4ac9a50d8dd51f1146b69a4c73f082ae19607413c065254298885ef605d7fcaa104b60677b31ccccb4ec26e4") r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x20400, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x3d, 0x5, 0x1}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000200)={0x100, 0x0, 0x8000, 0x4, 0xc8e2, 0x7, 0x8, 0x149a, r2}, &(0x7f0000000240)=0x20) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000, r1}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f00000000c0)={r3}) 19:22:55 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2000, 0x0) ioperm(0x1, 0xeb, 0x126e) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f0000000080)={0x5, 0x800000000, 0x5}) [ 1251.969632] audit: type=1400 audit(1552072975.053:143): avc: denied { map } for pid=23714 comm="syz-executor.2" path="socket:[354225]" dev="sockfs" ino=354225 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=rawip_socket permissive=1 [ 1252.052800] ion_mmap: failure mapping buffer to userspace 19:22:55 executing program 5: syz_read_part_table(0x7000000, 0x0, 0x0) 19:22:55 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x10002, 0x0) write$P9_RSETATTR(r0, &(0x7f0000000080)={0x7, 0x1b, 0x1}, 0x7) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x200000) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r1, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1252.270890] ion_mmap: failure mapping buffer to userspace 19:22:55 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x75, 0x80004000) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:55 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x4, 0x0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r1, 0x800442d4, &(0x7f00000000c0)=0x2) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='rdma.current\x00', 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x80000001, 0x3b, 0x0, r2}) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000000c0)={0x1ff, 0x30, 0x1, r3}) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000140)={0x56ab, 0xd, 0x1, r4}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6012, r5, 0x2000) 19:22:55 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x0, 0x0, {{0x1, 0x8}}}, 0xfe40}}, 0x0) 19:22:56 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = shmget(0x3, 0x1000, 0x480, &(0x7f0000fff000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x3000) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:56 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x2) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0x3, &(0x7f00000001c0)="c67ecfd6a8532bdb51668f5b2bd4f173878cf885f837d990b2c17a6549c8609f3755efc3276c701359b430434343fb62f7ae8f373b1bf3360a0d86405ce0287bd1d3297f7aaf8f13f0e091382b7ff9493f21e5f931c5e47b4f046c4160dd2b9f182dd221f7e7eee0ff5a438cfed224a49d3bf288628d1e3e031ccff08483a773b64a4c0610948f011b0fb3aa2b0e6b869e5845bb0d87b0c6b23073d2596c2b7e818cae439012d4dae4c1fd4486eb26df10b4a034f2eb6f51f103569a38930c8159e54697719578ec2db6ce67e3141d9cf6625e322be6724915df54980600db0656571abb832c547fbfc6934ab048d13529a47984c3d010bd1b18f95b3206e374e444") r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) write$binfmt_misc(r1, &(0x7f0000000040)={'syz0', "cb17099c9ef1f3dca5982a564007945ec11107829ce511f883579e9da8d99fe291ff02a17ecce2eecd9a5ac86b9f00aaae6f49f284746402fe9aeee834e8394994f3a0b814a0aaca0b26dc783f4b8d"}, 0x53) [ 1252.857959] __loop_clr_fd: partition scan of loop5 failed (rc=-22) [ 1252.883385] ion_mmap: failure mapping buffer to userspace 19:22:56 executing program 5: syz_read_part_table(0x10000000, 0x0, 0x0) 19:22:56 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f00000001c0)={0xa12, 0x5, 0x3, {0x7, @sliced={0x7, [0x8, 0x1, 0x8, 0x2, 0x0, 0x7fffffff, 0x4, 0x4, 0xe78, 0x4, 0x4, 0x8, 0x7fff, 0x8000, 0xffffffffffffffff, 0x0, 0x30, 0x1e7, 0x0, 0x6, 0x3ff, 0x800, 0xffff, 0x5, 0xffff, 0x3, 0x0, 0x3384000, 0xdd, 0x8, 0x1f, 0x843, 0x6, 0x9, 0x6, 0x48, 0x0, 0x8, 0xffffffff, 0x8000, 0x2, 0x800, 0x6, 0xffffffffffffffe7, 0x3, 0x0, 0x1, 0x949], 0x4}}}) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) r4 = dup2(r0, r1) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xc0, r5, 0x603, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x60, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x2}}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffffffffffe1}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000100)={r3}) [ 1253.227871] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:22:56 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x4, 0xfffffffffffffffd) r1 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000)={r1, 0x0, 0x401, 0x80000000, 0x9}) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x3000, 0x1}) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000100)="0cfdded5e969ade72e55bf14b05db9245312be3f430ffa7d1f1e60bf718691252b00000000c90a") 19:22:56 executing program 0: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000080)={0x0, 0xf529, 0x7, 0x3ff, 0x0, 0x39a8}) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000000)="240000001a0025f0001b000400edfc0e1c0b0020e80000001009ffeb0800010010000300", 0x24) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r1, 0xfffffbfffff3ffa7, &(0x7f0000000140)) syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x222840) 19:22:56 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x0, 0x0, {{0x1, 0xf}}}, 0xfe40}}, 0x0) [ 1253.758137] __loop_clr_fd: partition scan of loop5 failed (rc=-22) [ 1253.996666] audit: type=1400 audit(1552072977.253:144): avc: denied { create } for pid=24082 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 19:22:57 executing program 5: syz_read_part_table(0x1c0f0000, 0x0, 0x0) 19:22:57 executing program 0: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1f, 0x80) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:22:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) r1 = dup3(r0, r0, 0x80000) write$P9_ROPEN(r1, &(0x7f0000000040)={0x18, 0x71, 0x2, {{0x10, 0x2, 0x1}, 0x7ff}}, 0x18) [ 1254.171285] audit: type=1400 audit(1552072977.353:145): avc: denied { write } for pid=24082 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1254.292388] audit: type=1400 audit(1552072977.473:146): avc: denied { read } for pid=24082 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1254.367550] __loop_clr_fd: partition scan of loop5 failed (rc=-22) [ 1254.409334] audit: type=1400 audit(1552072977.673:147): avc: denied { create } for pid=24082 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1254.543669] audit: type=1400 audit(1552072977.773:148): avc: denied { write } for pid=24082 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1254.930845] __loop_clr_fd: partition scan of loop5 failed (rc=-22) [ 1255.233395] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:23:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x4600, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f00000000c0)={0x0, 0x80000000, 0x5a508b56, &(0x7f0000000080)=0x6}) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6012, r3, 0x2000) 19:23:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000040)={0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0xe8000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, &(0x7f00000000c0)={0x4, 0xffffffffffff958d, 0x100000000}) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:23:01 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x0, 0x0, {{0x1, 0x10}}}, 0xfe40}}, 0x0) 19:23:01 executing program 5: syz_read_part_table(0x1f000000, 0x0, 0x0) 19:23:01 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x800, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000080)={'bcsh0\x00', {0x2, 0x4e20, @remote}}) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r1, 0xfffffbfffff3ffa7, &(0x7f0000000140)) pwrite64(r2, &(0x7f00000001c0)="99bc1ba72b72c8d7c7d4e1629121ed8ecdf12e5404ebce26f1aac6d5ba559a90502530cc76051ecff6395e229ad12948dd3f0c5b1d1a1d0dc90ef0c2f5037aa96e0cd5e4b39ed5801c398721a02cc5258f9b9c22cd00bec93a871ec91f4da38a41f876ab2efbfa2c7ea0e3d07e7df95d39d82aa0aaae4d8212f593d70d0363d1377b3a362d708fd05d82f183c923d4fa02632f538c395fa1c327e530f99f04fcb9d7ce95bb924c7d94ee2575fb5a1239a6f5ea266babe7a06809947b2aac60634fb80f379a50", 0xc6, 0x0) 19:23:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x100, 0x0) 19:23:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x80, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=0x0) setsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f00000003c0)=0xffffffffffffff24, 0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f00000001c0)={{0x5, 0x4, 0x6, 0x5, 'syz0\x00', 0xdfde}, 0x2, 0x101, 0xffffffffffff1c7a, r2, 0x1, 0x8, 'syz1\x00', &(0x7f0000000100)=['/dev/dri/card#\x00'], 0xf, [], [0x3, 0x100000000, 0x80000001, 0xeb]}) ioctl(r0, 0x1, &(0x7f0000000140)) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000300)=""/149) 19:23:01 executing program 0: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x200000) r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0x8001, &(0x7f0000000040)="c37c2077c93f0a0f07d2dff01f7c16b8a8e77b741554c1b30be4703c8240a795f8547c903e80d148c88c97f74f7fd7f05e4650cd87bd07f398af8b23bac65997914d8143725ebc94a5611f9500000000000000000000b01c0000") [ 1258.238014] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:23:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1) r2 = perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, 0x0) sendfile(r2, r1, &(0x7f0000000040), 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f00000001c0)="6b5c8810626921c63bb4706eca52cbd95b557f676a135d0c7f9bb445b0b56bca965dac91bdbe2b289f0ba218c76810d0880a6bc840538a17dae5538e8804e1ea3bc0b7e7c2a292441d36995909704f5393e6447760c1d3dbd1b5a28ba3bef05937f8962d4ee05dcbe5a00fc7f367385c4c80ffbf289cb88eb879e2771cb91bcca9f88ec7671f2e24ac57e4") 19:23:01 executing program 5: syz_read_part_table(0x20000000, 0x0, 0x0) [ 1258.594952] ion_mmap: failure mapping buffer to userspace 19:23:01 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x0, 0x0, {{0x1, 0xf00}}}, 0xfe40}}, 0x0) [ 1258.667620] __loop_clr_fd: partition scan of loop5 failed (rc=-22) [ 1258.676579] ion_mmap: failure mapping buffer to userspace 19:23:02 executing program 2: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f122b12a41d88b070") r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0xa, 0x40800) ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0xc028564e, &(0x7f0000000080)={0x2, 0x1, [0x7, 0x6, 0x6, 0xffffffff, 0x2, 0x7, 0x0, 0x3]}) openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6012, 0xffffffffffffffff, 0x2000) [ 1258.794410] Unknown ioctl -1055894255 [ 1258.848393] Unknown ioctl -2146941692 19:23:02 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x204001, 0x0) r3 = shmget(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@mcast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000100)=0xe8) getgroups(0x3, &(0x7f00000002c0)=[0xffffffffffffffff, 0x0, 0x0]) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) getresgid(&(0x7f0000000380)=0x0, &(0x7f00000003c0), &(0x7f0000000400)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r1, 0x0, 0x9, &(0x7f0000000440)='/dev/dsp\x00', 0xffffffffffffffff}, 0x30) r9 = getpgrp(0x0) shmctl$IPC_SET(r3, 0x1, &(0x7f00000004c0)={{0xff, r4, r5, r6, r7, 0x80, 0xfffffffffffff000}, 0x8, 0x0, 0x6, 0x6, r8, r9, 0x1}) ioctl$sock_ax25_SIOCDELRT(r2, 0x890c, &(0x7f0000000080)={@bcast, @default, 0x2, [@null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) [ 1258.905946] Unknown ioctl -1055894255 [ 1258.953389] Unknown ioctl -2146941692 19:23:02 executing program 1: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0xa00, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)={0x0, 0x100}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000100)={r1, 0xd2}, 0x8) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r2, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:23:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000080)) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1259.138045] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:23:02 executing program 5: syz_read_part_table(0x3f000000, 0x0, 0x0) 19:23:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x21, &(0x7f0000000340)="0adc1f263c12a417b3fa38f2c5f169ab42640d88b070c6c8bdee991306fbb1ecd06d7b78eccb85bb22973b7d7c5e498e8b99a8837ac031536a311a232860a2174a1e2f86506a02edbbda858a046fb49b51c394db5b140375aeeaa5c1399639fd2c94d35c2a27e0bc59457bda16da98d715e51f56c2a4409a13dc3214a0016526fa9b20a9fcfa463366ee66d881f8cc8540f63daa0d17d3c60dc1ef5563c6c5c6f157dd9202d747769c1e6e600b2866a92c7d9d9b5c66b465659f408734b4045042a6de82bd1d8a57d6d52efa872a86bc9a") r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0xa02, 0x0) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000040)) ioctl$PPPIOCGUNIT(r1, 0x80047456, &(0x7f0000000080)) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6012, r3, 0x2000) 19:23:02 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r0, r1) write$selinux_access(r2, &(0x7f0000000040)={'system_u:object_r:devicekit_power_exec_t:s0', 0x20, '/usr/sbin/cups-browsed', 0x20, 0x2}, 0x58) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:23:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) fchdir(r1) [ 1259.618829] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:23:03 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x0, 0x0, {{0x1, 0x8000000}}}, 0xfe40}}, 0x0) 19:23:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:23:03 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x800, 0x0) syz_open_dev$amidi(&(0x7f0000000200)='/dev/amidi#\x00', 0x440, 0x43) r1 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000080)) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0xfffffbfffff3ffa7, &(0x7f0000000140)) ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x5381) getuid() [ 1259.971132] ion_mmap: failure mapping buffer to userspace 19:23:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x20) ioctl$CAPI_NCCI_OPENCOUNT(r2, 0x80044326, &(0x7f00000000c0)=0x1ff) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x7ff, 0x20000) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6012, r3, 0x2000) 19:23:03 executing program 3: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$search(0xa, r0, &(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x0}, r1) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r2, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1260.168182] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:23:03 executing program 5: syz_read_part_table(0x40000000, 0x0, 0x0) 19:23:03 executing program 1: syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x4101) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0x5, &(0x7f00000001c0)="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") r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x20000, 0x0) ioctl$IMGETCOUNT(r1, 0x80044943, &(0x7f0000000100)) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x40000, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000040)=0x2, 0x4) [ 1260.567513] __loop_clr_fd: partition scan of loop5 failed (rc=-22) [ 1260.662648] ion_mmap: failure mapping buffer to userspace 19:23:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer\x00', 0xa0500, 0x0) write$P9_RMKDIR(r2, &(0x7f0000000400)={0x14, 0x49, 0x2, {0x8, 0x4, 0x2}}, 0x14) getresuid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)=0x0) mount$9p_rdma(&(0x7f0000000040)='127.0.0.1\x00', &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0xa880, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e23,timeout=0x0000000000000006,timeout=0x000000007fffffff,dfltuid=', @ANYRESHEX=r1, @ANYBLOB=',sq=0x0000000000008b23,fowner>', @ANYRESDEC=r3, @ANYBLOB="2e00e24a05bbb254a178c1bc107fdbbc378931db7179adced34e4e7ab89a3fa57d0aac4171f90ae9216da2e8d71287cd50d056644375cdc92dc5e9513623a88d3e1485b65edb81881fedae3d746b15f6b0415389e717a2bc1ea3d4ad42e9a406c70e4dd2cd07a78646"]) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:23:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f00000001c0)=""/103) r3 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERYSTD(r3, 0x8008563f, &(0x7f0000000080)=0x0) ioctl$VIDIOC_S_STD(r3, 0x40085618, &(0x7f00000000c0)=r4) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) 19:23:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000140)={0x56aa, 0xd, 0x0, r1}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x2000004, 0x6012, r0, 0x1ffc) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x465f, 0x400000) ioctl$KVM_PPC_GET_PVINFO(r2, 0x4080aea1, &(0x7f0000000080)=""/128) 19:23:04 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x0, 0x0, {{0x1, 0xf000000}}}, 0xfe40}}, 0x0) [ 1261.288204] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:23:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x7, 0x1018c0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) fcntl$dupfd(r1, 0x0, r1) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:23:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f00000003c0)='/dev/dmmidi#\x00', 0x9, 0x2) write$P9_RUNLINKAT(r1, &(0x7f0000000400)={0x7, 0x4d, 0x1}, 0x7) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/policy\x00', 0x0, 0x0) ioctl$RTC_VL_CLR(r2, 0x7014) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000380)) r3 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = accept(r3, 0x0, &(0x7f0000000040)) getsockopt$bt_hci(r2, 0x0, 0x3, &(0x7f0000000280)=""/157, &(0x7f0000000340)=0x9d) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000080)={'irlan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000200)={0x1d, r5}, 0x10) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) r6 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x3, 0x2) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000580), 0x4) ioctl$RTC_WKALM_RD(r6, 0x80287010, &(0x7f00000001c0)) ioctl(r4, 0xdd0, &(0x7f0000000440)="9ff88d17aad46f343b8e6650981faf1f76c2609731f7bea05055fdf8d640c0197f674039038b051e00cb3d0b7e9d508ad6330d71ad74fd15ec4276401a3b674fc917bc2ef0410f3a9253cc1668d7d8137bb9d950840974a7907ff5996282f03954bffe78d282a03d150125b05022ca3a9c92fc18279d1adff2ab14e79652936d4fd09715210d1240fc7d44eb62298b293d949c4c00898eec7cdc9e50563f58b308000000b20c093071c80dde051ecdd2d974cc4dec1d46f51738e52e455cffeebfe1e488801d758bbe943b944df3884b1f1da43355a9dd17d8096da0b4fdb8a00f713731cdd18f26ed3a6dcbd92dc5f80d6f7139a92ad94160b3aeab09822a86cd7fe3c1be6d5a7fce01d30a2c57caea54") 19:23:04 executing program 2: msgsnd(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="01000073"], 0x1, 0x0) msgrcv(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x1, 0xdb307f373c43832b, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x4800) ioctl$TCXONC(r1, 0x540a, 0x1) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0xa8081, 0x0) getsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f00000001c0), 0x2) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6012, r3, 0x2000) r5 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x40000) getsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f0000000080), 0x2) 19:23:04 executing program 5: syz_read_part_table(0x48000000, 0x0, 0x0) 19:23:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0106418, &(0x7f0000000040)={0x1f, 0x9d8a, 0x1, 0x2, 0xa, 0x3}) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1261.678515] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:23:05 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) getsockopt$inet6_dccp_int(r0, 0x21, 0x11, &(0x7f0000000100), &(0x7f0000000640)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x401}) r3 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x100000000000000, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)={r2, 0x80000, r0}) ioctl$SG_IO(r3, 0x2285, &(0x7f00000005c0)={0x53, 0xffffffffffffffff, 0x8c, 0x2, @scatter={0x3, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/230, 0xe6}, {&(0x7f00000002c0)=""/195, 0xc3}, {&(0x7f0000000100)}]}, &(0x7f0000000400)="69b8cc7c340bbf05db9784bf687f597bb25c658678f1d0b158f7a24a5f224b2cd24d877c39b338def9771d3d227551768280bc3a77e270385ed02a92824e5f98d6b263eb224a651abcf3985d8be3b8cd3e3abaf0463dd8b2e261db56741ba57af6382a42e8bc766ba5f825193a8c53b427146ab962941459e120a6f399c4b4edac04b63df17ac3c3ba4e5d1f", &(0x7f00000004c0)=""/153, 0x0, 0x24, 0x2, &(0x7f0000000580)}) ioctl(r1, 0xfffffbfffff3ffa7, &(0x7f00000006c0)="75bd0f0f15a8053aaab83e294932c8e01dcf088f476c2619200158ecbe59dd33d0ed5f045b772fd1e1e08385e5941d342d8cb21ceb4ad0bfc1ca045e44ad57") 19:23:05 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x0, 0x0, {{0x1, 0x10000000}}}, 0xfe40}}, 0x0) [ 1262.144795] ion_mmap: failure mapping buffer to userspace [ 1262.156006] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:23:05 executing program 0: syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x5, 0x200) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x101000, 0x0) 19:23:05 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x220402, 0x0) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f00000000c0)={r1, 0x0, 0x1010000, 0xfffffffffffff000}) accept4$nfc_llcp(r1, &(0x7f0000000480), &(0x7f0000000500)=0x60, 0x800) connect$nfc_llcp(r1, &(0x7f0000000200)={0x27, 0x0, 0x2, 0x6, 0x4, 0x4, "01068d892300b094d22bfee175d88485e61314531c6c9c0540e82428325de90cab824e812ee5d38aa6f71ab14387eeecdc274df860aee37f378e1a9173ca6a", 0x35}, 0x60) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000340), 0x4) ioctl$sock_proto_private(r1, 0x89e7, &(0x7f0000000380)="7031f1e4ca36a9dee02e9726b4522884c5b69e1829a68d020100e32bef5b202c791e01894ba5087ac5727738a43211416503d451a38c0ea4f64cfeb97ec30ab8d30fa9259eba24df955d4c73c356de9039ccb78c8658a7f41158e86487cfff4caecc8d24e3a93891ae412c89face276bff7bbbcd0d46b50d4d21bbc5152b2a9a18f95195a0a64404d2e8c4da8ce5b7046a0222e520f6") r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0x0) getpeername$llc(r1, &(0x7f00000002c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000300)=0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000280)={0xffffffff, 0x1, 0x6, 0x9, 0xfffffffffffffffe}, 0x14) ioctl(r2, 0xfffffbfffff3ffa7, &(0x7f0000000140)) ioctl$FIGETBSZ(r2, 0x2, &(0x7f00000001c0)) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) 19:23:05 executing program 5: syz_read_part_table(0x4c000000, 0x0, 0x0) [ 1262.310461] ion_mmap: failure mapping buffer to userspace 19:23:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6012, r2, 0x2000) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x86081, 0x0) [ 1262.528394] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:23:06 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x3, 0x12) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev\x00') ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:23:06 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x522, 0x101002) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1262.937475] ion_mmap: failure mapping buffer to userspace 19:23:06 executing program 3: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vfio/vfio\x00', 0x400, 0x0) preadv(r0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/107, 0x6b}, {&(0x7f0000000380)=""/59, 0x3b}, {&(0x7f00000004c0)=""/22, 0x16}, {&(0x7f0000000500)=""/23, 0x17}, {&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/16, 0x10}, {&(0x7f0000000680)=""/20, 0x14}, {&(0x7f00000006c0)=""/77, 0x4d}, {&(0x7f0000000740)=""/160, 0xa0}, {&(0x7f0000000800)=""/89, 0x59}], 0xa, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f00000003c0)=ANY=[@ANYBLOB="020000009e0000003cd3b778dcdaaa7a943574af70453e2186c02fe169a27e06a18786fc66195aee79d465b904e86a803943895a91b933e6c69592bd62a9d4a2b7c0cd9dbf623fa41770f490952b11ba5b904c697c80a767d92a19a030b7b4f3d968297481e42ebba29fc4393e2dd0833505e0d0070b8550e6ca818c353ec3f1e533865fe26514d3f6cb5eec85b2c79e01a697d0f800d24a90489cdbd94f90a17d4a6daa032b1ded94c4bd8e819c6d6cbbc8109e1b0a40403bf36c946b3f5c0b10e888e88e11affe7dac0b60c1700ca477365ab09faab50a73564bd54c5554f0fb45a145076a918056e32869339e7f"]) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x13f, 0x100f}}, 0x20) r2 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x1000000000000000) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f00000002c0)) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000a40)={&(0x7f0000000a00)=[0x2, 0xffffffffffffff92, 0xfffffffffffffffd, 0xeb347ed], 0x4, 0x20, 0x7, 0x4100, 0xff, 0x6, {0x100, 0x3, 0x5d, 0x5, 0x100000001, 0x8, 0x3f, 0xffffffffffffff7f, 0xc42, 0x8, 0x3ff, 0x10000, 0x1, 0x101, "7b7cb3a4aca51bc0c82ea9347baea690e0e7f73697a0f750fc73312a7dea6645"}}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000980)={&(0x7f0000000940)=[0xffffffffffffff01, 0x1, 0x401, 0x76b8, 0x2], 0x5, 0x3, 0xe2, 0x5, 0x2, 0x8, {0x8, 0x40, 0x8, 0x81, 0x3, 0x4, 0x1, 0x5, 0x5, 0xc0, 0x80, 0x4, 0x3, 0x8, "8e08594e12ad93e24f0704ceea2c5d30dd5a9498960c5d62e5ba434cfd47761a"}}) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r2, 0xfffffbfffff3ffa7, &(0x7f00000001c0)="705acfabf72a015ca059ae13807988156da66dab50064a3bb32f439b1631253b379566cb00ac9c75e1e699478201f49ef2cba20300237beb7111b96819e41cdc3943050a856cbbda266b08c4a5f05be7e05667a0a25cbd262cdb434cc3c9af020bc1530a854cd7cad9d1217b81f857abb38624965d724f85b7106e7e15efb9f7908e2d3b263f421dfe3e12fe50606fe11356f0ee2c3f32ce4177b00ac4856ee625de5df13a4f4bd25cbef4f8b5ace80c651cbc9e24df9daa75f99a3fb2e88d355416e954dc17f218d06eccd0b1") [ 1262.987780] __loop_clr_fd: partition scan of loop5 failed (rc=-22) [ 1263.025047] ion_mmap: failure mapping buffer to userspace 19:23:06 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x80, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f0000000080)={0x80000000}) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6012, r3, 0x2000) 19:23:06 executing program 5: syz_read_part_table(0x60000000, 0x0, 0x0) 19:23:06 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x0, 0x0, {{0x1, 0x8dffffff}}}, 0xfe40}}, 0x0) 19:23:06 executing program 0: socketpair(0x9, 0x8080f, 0x3ff, &(0x7f00000006c0)={0xffffffffffffffff}) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000700)=0x1, 0x4) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r1, 0xfffffbfffff3ffa7, &(0x7f00000001c0)="3c76c95950ce8551a20f656e58d264193ec51b0000000058260376267097eb19e5d10ff938749337370937d7f2631e34ad25959095dcfab8e1bf580ff3e93303b1cd4252546a4b8e2334bc402f1bebf6463e3866390881c33b94f442c86550d3fc25c3ee8913e6627fab0bfeafe179d5190d2e3dfea45eb50b28af9db6ef5758f0a44b3fbc627e980f3e9ff163757f37632ad9b987ed40e8d7c803d23c7390c0df2693c1fc6e27325ee33c8007eb720e315301f7f7cbc29b212ac3d79f6b14a1d1c8fbad565b370106626cb990565c1dee957017abb4b4f7d10d1c0a8fba5357dc8e94eb5818e8b8c314f4f37b41b07f9876b71831b30d") getresgid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0xc) socketpair(0x7, 0xa, 0x3f, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$can_raw(r6, &(0x7f00000005c0)={&(0x7f0000000580), 0x10, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x80}, 0x20000000) lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x5, &(0x7f0000000500)=[r2, r3, r4, r5, r7]) r8 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000600)='/dev/dlm_plock\x00', 0x400001, 0x0) ioctl$GIO_UNISCRNMAP(r8, 0x4b69, &(0x7f0000000640)=""/122) [ 1263.367812] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:23:07 executing program 3: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1ff, 0x6000) accept4$netrom(r0, &(0x7f00000001c0)={{0x3, @rose}, [@null, @netrom, @rose, @default, @remote, @default, @bcast, @null]}, &(0x7f0000000100)=0x48, 0x800) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x8, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000080)={0x2, 0x2, 0x5, 0xffffffff, 0x14, 0x22, 0x6, 0x6, 0xffffffffffff834e, 0x5000000, 0x1, 0x9}) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x20, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r1, 0xfffffbfffff3ffa7, &(0x7f0000000140)) ioctl$SG_GET_SG_TABLESIZE(r2, 0x227f, &(0x7f0000000240)) [ 1263.747293] ion_mmap: failure mapping buffer to userspace [ 1263.886990] ion_mmap: failure mapping buffer to userspace 19:23:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ion\x00', 0xfffffffffffffffd, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6012, r2, 0x2000) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400000, 0x0) bind$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10) 19:23:07 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1264.105041] audit: type=1400 audit(1552072987.363:149): avc: denied { map } for pid=24893 comm="modprobe" path="/bin/kmod" dev="sda1" ino=1440 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1264.129906] __loop_clr_fd: partition scan of loop5 failed (rc=-22) [ 1264.211089] audit: type=1400 audit(1552072987.413:150): avc: denied { map } for pid=24893 comm="modprobe" path="/bin/kmod" dev="sda1" ino=1440 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 19:23:07 executing program 5: syz_read_part_table(0x68000000, 0x0, 0x0) [ 1264.340991] audit: type=1400 audit(1552072987.413:151): avc: denied { map } for pid=24893 comm="modprobe" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1264.403482] audit: type=1400 audit(1552072987.413:152): avc: denied { map } for pid=24893 comm="modprobe" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 19:23:07 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x0, 0x0, {{0x1, 0xf0ffffff}}}, 0xfe40}}, 0x0) 19:23:07 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xec4aaa9, 0x2) socket$inet6(0xa, 0x5, 0x6) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ff87, &(0x7f0000000140)) [ 1264.562303] audit: type=1400 audit(1552072987.453:153): avc: denied { map } for pid=24893 comm="modprobe" path="/etc/ld.so.cache" dev="sda1" ino=2503 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1264.597641] __loop_clr_fd: partition scan of loop5 failed (rc=-22) [ 1264.662457] audit: type=1400 audit(1552072987.483:154): avc: denied { map } for pid=24893 comm="modprobe" path="/lib/x86_64-linux-gnu/libkmod.so.2.1.3" dev="sda1" ino=2811 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1264.785607] audit: type=1400 audit(1552072987.483:155): avc: denied { map } for pid=24893 comm="modprobe" path="/lib/x86_64-linux-gnu/libkmod.so.2.1.3" dev="sda1" ino=2811 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 19:23:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, &(0x7f0000000000)=0x7f, 0x2) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6012, r2, 0x2000) 19:23:08 executing program 3: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000340)='/dev/full\x00', 0x400000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002940)={{{@in6=@initdev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@dev}}, &(0x7f0000002a40)=0xe8) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000002a80)={@mcast2, r1}, 0x14) r2 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r2, 0xfffffbfffff3ffa7, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000003c0)=@sack_info={0x0, 0x1, 0x7}, &(0x7f0000000100)=0x89) fsetxattr$security_ima(r4, &(0x7f0000000200)='security.ima\x00', &(0x7f0000000240)=@v2={0x5, 0x3, 0x10, 0x6, 0xf6, "479ee414342d1f51661bbe9829bb2e929059fb75202457dbde808765661633ad79f434dcd30351c550590554b8235763ae6b320d977822237b45255754563bf9a1bacb9322c72135e9d868152ea1b9979d4b1d8f451a8e0ac085a965d230c68b0ff8a19ab8885003681edcc2b3c00e75410d0dc8fc893211b91286b8712c30b3b0cbd560114f6cdf96fd3a2c34f6ba194eea6ee1d01fa00f13dbd031ecee664f3a82eaeb435efc056343a56a9e3fd2f93fe2252f7f929bd2ae84d345cdd32ab07b4dc101b1d1a9592db602219c3e7ab5e519b862c30136e03f222b694ef33f7d7ec4234dca70acd132ae9da6cce9d78400911cd5e19b"}, 0x100, 0x1) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f00000001c0)={r5, 0x800}, 0x8) [ 1264.926959] audit: type=1400 audit(1552072987.483:156): avc: denied { map } for pid=24893 comm="modprobe" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1265.001493] audit: type=1400 audit(1552072987.503:157): avc: denied { map } for pid=24893 comm="modprobe" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 19:23:08 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000040)='[ppp0self'}, 0x30) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000000c0)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x28100, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r0, &(0x7f0000000200)={0x40000010}) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f00000001c0)={r3, r0, 0x8001}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1265.054257] audit: type=1400 audit(1552072987.653:158): avc: denied { map } for pid=24953 comm="modprobe" path="/bin/kmod" dev="sda1" ino=1440 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1265.227980] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:23:08 executing program 5: syz_read_part_table(0x6c000000, 0x0, 0x0) 19:23:08 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x0, 0x0, {{0x1, 0xffffff7f}}}, 0xfe40}}, 0x0) [ 1265.590014] ion_mmap: failure mapping buffer to userspace [ 1265.608792] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:23:09 executing program 0: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1265.748836] ion_mmap: failure mapping buffer to userspace 19:23:09 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) r1 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000200)={0xb, @capture={0x1000, 0x1, {0x100000001, 0x80}, 0x6, 0x81}}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) pread64(r1, &(0x7f0000000300)=""/148, 0x94, 0x0) sendto$rxrpc(r3, &(0x7f00000000c0)="064f1e184709c423adf5875be2fa953a9d39b97fe8bac8fe9a69e5451ad4665f2afc729b01643582a71e2ddbfb5ae3affad6d5fc4b2a6552c167e0e4356afb618736b794f442aa2ff465c0465a2b959621bf088954874ebfb4fc02a8667536225b76ae79e7311df88b93c0e87dc1721db32956ffcb9c92", 0x77, 0x0, 0x0, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:23:09 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f00000000c0), 0x2) 19:23:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0xfffffffffffffffd, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0xfffffffffffffffc, 0x6012, r2, 0x2000) [ 1266.298012] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:23:09 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) write$P9_RREADDIR(r1, &(0x7f00000001c0)={0x103, 0x29, 0x1, {0x22, [{{0x12, 0x4, 0x7}, 0x8001, 0xa8d4, 0x7, './file0'}, {{0x0, 0x1, 0x6}, 0x200, 0x8000, 0x7, './file0'}, {{0x4, 0x4, 0x6}, 0x101, 0x7f, 0x7, './file0'}, {{0x80, 0x3, 0x3}, 0xfff, 0x401, 0x7, './file0'}, {{0xd0, 0x2, 0x7}, 0x7fffffff, 0x5, 0x7, './file0'}, {{0x10, 0x4, 0x8}, 0x8, 0x7, 0x7, './file0'}, {{0x0, 0x0, 0x7}, 0x40, 0x80, 0x7, './file0'}, {{0x80, 0x4, 0x7}, 0x400, 0x1, 0x7, './file0'}]}}, 0x103) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1266.484465] ion_mmap: failure mapping buffer to userspace 19:23:09 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:23:09 executing program 5: syz_read_part_table(0x74000000, 0x0, 0x0) [ 1266.599719] ion_mmap: failure mapping buffer to userspace 19:23:09 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x4, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x80000000, 0x40400) accept$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:23:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6012, r2, 0x2000) 19:23:10 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x0, 0x0, {{0x1, 0xffffff8d}}}, 0xfe40}}, 0x0) [ 1266.797844] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:23:10 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x44000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000080), r3, r1}}, 0x18) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:23:10 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) write$P9_RREADDIR(r1, &(0x7f00000001c0)={0xe4, 0x29, 0x2, {0x6, [{{0x20, 0x2, 0x4}, 0x0, 0x9, 0x7, './file0'}, {{0x0, 0x3, 0x7}, 0x33a7, 0x3, 0x7, './file0'}, {{0x0, 0x1, 0x7}, 0x7, 0x3000000000000000, 0x7, './file0'}, {{0x80, 0x3, 0x2}, 0x1, 0x7, 0x7, './file0'}, {{0x40, 0x3}, 0x4, 0x7, 0x7, './file0'}, {{0x11, 0x3, 0x1}, 0xc7, 0x800, 0x7, './file0'}, {{0xa8, 0x4}, 0x400, 0x4, 0x7, './file0'}]}}, 0xe4) [ 1267.148810] ion_mmap: failure mapping buffer to userspace 19:23:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x1fd, 0x2, 0xf001, 0x2000, &(0x7f0000006000/0x2000)=nil}) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000140)={0x0, 0x8d, "434d7c1649573e558a72024c91404dad0f84d1df12fde5e8cfb43c0b1e7c583ad83d5007aff89222e27dcc42b84946444c5fe52219223e7ca0ef2b5683309bb0fa10a50e0338f12b72027e3139d49284a77ede7f7501f8eba8de3b713b8bdadaa5e2251f9d11c3b429e71900dea91f974ba4e2d972afc5c78a49c44b707ff6d702dc93b87294e6eb03566cef37"}, &(0x7f00000000c0)=0x95) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000200)={r4, 0xfff, 0x2, [0x200, 0x10001]}, 0xc) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6012, r3, 0x2000) 19:23:10 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x2c0d, 0x80000) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000200)={{0x10000, 0x9, 0xf2, 0x5}, 'syz0\x00', 0x1b}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r1, 0x50, &(0x7f00000002c0)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380)=r3, 0x4) getsockopt$sock_int(r2, 0x1, 0x2f, &(0x7f0000000080), &(0x7f00000000c0)=0x4) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$SIOCX25CALLACCPTAPPRV(r4, 0x89e8) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000040)={@local, @empty}, 0x8) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000280)=@generic={0x3}) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1267.368408] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:23:10 executing program 5: syz_read_part_table(0x7a000000, 0x0, 0x0) [ 1267.727632] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:23:11 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x0, 0x0, {{0x1, 0xfffffff0}}}, 0xfe40}}, 0x0) 19:23:11 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x20, 0x20000) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r1, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:23:11 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xffffffffffffff0f, 0x2) ioctl$KVM_ASSIGN_SET_INTX_MASK(r1, 0x4040aea4, &(0x7f00000001c0)={0x8, 0x4, 0x0, 0x2, 0xffffffffffff0000}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000080)={0xd55, 0x1, 'client1\x00', 0x4, "8ffef08b2ce4bf8b", "78614c90bb563254cd2956a1b0cb6061c16512aebce634df8c64b47d614bd0aa", 0x101, 0x8}) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1267.949142] ion_mmap: failure mapping buffer to userspace [ 1268.068140] ion_mmap: failure mapping buffer to userspace [ 1268.118116] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:23:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200000000000000a, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6012, r2, 0x2000) 19:23:11 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x902, 0x0) ioctl$KDENABIO(r2, 0x4b36) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) statx(r3, &(0x7f0000000040)='./file0\x00', 0x1100, 0x69b2406d2144e25a, &(0x7f00000001c0)) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x2) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:23:11 executing program 5: syz_read_part_table(0xf6ffffff, 0x0, 0x0) [ 1268.497593] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:23:11 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x10000, 0x0, 0x3, 0x6b}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000080)={0x11, r1}) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:23:11 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x40000000005, 0x1) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x40000, 0x0) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000180)) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000140), 0x2) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x7fff, 0x0, 0x1, 0xcb7}) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000080)={r2, 0xfff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xd1f1, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:23:11 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x0, 0x0, {{0x1, 0x800000000000000}}}, 0xfe40}}, 0x0) [ 1268.736442] ion_mmap: failure mapping buffer to userspace [ 1268.816927] ion_mmap: failure mapping buffer to userspace 19:23:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6012, r0, 0x0) r2 = socket(0x4, 0x6, 0x6) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{0x100, 0x9, 0xa1d, 0x10001}, {0x0, 0x2, 0xffff, 0xa131}, {0x9, 0x1, 0x1, 0x5}, {0xfffffffffffff2e7, 0xf4, 0x2, 0x81}]}, 0x10) 19:23:12 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x2, 0x8000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1269.078339] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:23:12 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x6, 0x8100) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000100)) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:23:12 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0) 19:23:12 executing program 5: syz_read_part_table(0xfcfdffff, 0x0, 0x0) [ 1269.485177] kauditd_printk_skb: 44 callbacks suppressed [ 1269.485203] audit: type=1400 audit(1552072992.743:203): avc: denied { map } for pid=25532 comm="syz-executor.2" path="socket:[355654]" dev="sockfs" ino=355654 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=rawip_socket permissive=1 19:23:12 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x0, 0x0, {{0x1, 0xf00000000000000}}}, 0xfe40}}, 0x0) [ 1269.587594] __loop_clr_fd: partition scan of loop5 failed (rc=-22) [ 1269.650490] audit: type=1400 audit(1552072992.843:204): avc: denied { map } for pid=25605 comm="modprobe" path="/bin/kmod" dev="sda1" ino=1440 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1269.759692] audit: type=1400 audit(1552072992.863:205): avc: denied { map } for pid=25605 comm="modprobe" path="/bin/kmod" dev="sda1" ino=1440 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 19:23:13 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12d, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000100), &(0x7f00000000c0)=0x14) [ 1269.872110] audit: type=1400 audit(1552072992.883:206): avc: denied { map } for pid=25605 comm="modprobe" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 19:23:13 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000040)=0x3) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1270.000767] audit: type=1400 audit(1552072992.893:207): avc: denied { map } for pid=25605 comm="modprobe" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 19:23:13 executing program 2: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x63, 0x10200) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x1) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0xfffffffffffffffc, 0x6012, r2, 0x2000) 19:23:13 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x301a02, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r3, &(0x7f00000003c0)={&(0x7f0000000100), 0xc, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="78010000", @ANYRES16=r4, @ANYBLOB="000027bd7000fbdbdf250200000014010100380004001400010002004e23e00000010000000000000000200002000a004e2400000004fe8800000000000000000000000001010100000044000400200001000a004e2400000002fe8000000000000000000000000000aa04000000200002000a004e2300000005ff010000000000000000000000000001ff7f000038000400200001000a00000000000002fe880000000000000000000000000001018000001400020002004e207f0000010000000000000000080003005245000038000400200001000a004e230000040100000000000000000000000000000001ff0f00001400020002004e2000000020000000000000000014000200080002000900000008000400040000000800030007000000300005002c00020008000200030000000800040001000000080001000f000000080004000a030000080004000100010020000500080001007564700014000200080002000000008008000200ff010000"], 0x178}, 0x1, 0x0, 0x0, 0x80}, 0x8000) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) r5 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x7bce, 0x80) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000040)=0x2, 0x4) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1270.124638] audit: type=1400 audit(1552072992.943:208): avc: denied { map } for pid=25605 comm="modprobe" path="/etc/ld.so.cache" dev="sda1" ino=2503 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1270.276368] audit: type=1400 audit(1552072992.973:209): avc: denied { map } for pid=25605 comm="modprobe" path="/lib/x86_64-linux-gnu/libkmod.so.2.1.3" dev="sda1" ino=2811 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1270.303243] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:23:13 executing program 5: syz_read_part_table(0xfdfdffff, 0x0, 0x0) [ 1270.432213] audit: type=1400 audit(1552072992.983:210): avc: denied { map } for pid=25605 comm="modprobe" path="/lib/x86_64-linux-gnu/libkmod.so.2.1.3" dev="sda1" ino=2811 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1270.570910] audit: type=1400 audit(1552072993.023:211): avc: denied { map } for pid=25605 comm="modprobe" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 19:23:14 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setfsgid(r1) r2 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f0000000100)={'irlan0\x00', {0x2, 0x4e20, @multicast2}}) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x8004) [ 1270.682426] ion_mmap: failure mapping buffer to userspace [ 1270.698585] __loop_clr_fd: partition scan of loop5 failed (rc=-22) [ 1270.706536] audit: type=1400 audit(1552072993.053:212): avc: denied { map } for pid=25605 comm="modprobe" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 19:23:14 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x0, 0x0, {{0x1, 0x1000000000000000}}}, 0xfe40}}, 0x0) 19:23:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x800000100000890f, &(0x7f0000000180)) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x200000, 0x0) setsockopt$inet6_dccp_int(r1, 0x21, 0x16, &(0x7f0000000080)=0x9, 0x4) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0), &(0x7f0000000140)=0xb) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6012, r3, 0x2000) 19:23:14 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) add_key(&(0x7f00000001c0)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)="0852e941c7849b183e7808f458324f2e09c87b4beae9d2ac177e9367a4e2aeed3a029fcc3d0566bc51f29b127d3e727e1b05a1b833dfdd24b29e056c7fbd2d505ce0b2c77f501288ab36040cb0178faa5a8b0edd97460546e5e20fd0305b4f1392e34991ce5bf91d585039ab76c3bd7e864b42f6116216f0adef04809be4c4c62dd6ff2cb2b4ad71bdfbe9dab9d66549304d2716379760c3c13a8ca2119c2a7ce75a8884b5d1790cf350f77e215c9e449dcbb3067992db0a36f1ccc9f79c0cda5a8787a5404874f984eb", 0xca, 0xfffffffffffffffc) select(0x40, &(0x7f0000000340)={0x701, 0x9, 0x8, 0x4, 0x3a, 0xffff, 0x6, 0x1f}, &(0x7f0000000380)={0x100000001, 0x400, 0x42, 0x3, 0x1, 0xff, 0x9, 0x10001}, &(0x7f00000003c0)={0xa57, 0x1000, 0x5, 0x8, 0x5, 0x61, 0x3, 0x6}, &(0x7f0000000400)={0x0, 0x7530}) getsockopt$llc_int(r1, 0x10c, 0x6, &(0x7f00000000c0), &(0x7f0000000100)=0x4) write$FUSE_IOCTL(r1, &(0x7f0000000080)={0x20, 0x0, 0x6, {0x7, 0x0, 0x100000000, 0x4e52}}, 0x20) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000480)={0x1, 0x2, 0xcad7, 0x1}) connect$bt_sco(r1, &(0x7f0000000440)={0x1f, {0x3, 0x3f, 0x9, 0xfffffffffffffff9, 0x1, 0xa9}}, 0x8) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000004c0)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000500)={r2, 0x1}) ioctl$NBD_SET_SOCK(r1, 0xab00, r1) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000540)) 19:23:14 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) signalfd4(r0, &(0x7f0000000080)={0x1000}, 0x8, 0x80000) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x1, 0x0) fanotify_init(0xc, 0x1000) ioctl(r1, 0x20, &(0x7f00000000c0)="b4fa285405df718072f98733a9182e52ba81c4026250eca713eab7f9022b8284b1f8d7d1953773ae0b8f8702a2e2c87ce7b6e5eb62dcbddc76a7ffde07f91687a30ba4dc28026c230bf1166d99a4da05b438109e0bb875e398fb3b0abb45694c32974d") [ 1271.328546] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:23:14 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x8, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1271.403418] ion_mmap: failure mapping buffer to userspace 19:23:14 executing program 0: openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x200, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000080)="5105dd939012ef73554f856e984520439a55733d901438ba6f1e8bc11bcc4faf627935a640a2d185fb3b3d7120a85c129e91e6f5ebff19bb687cf77aa297160359be0a392c8bdab2f41b05d0d1970fb412a6beab7630b99e76ce28852146a1e77be66fff418e23b54aee4262") 19:23:14 executing program 5: syz_read_part_table(0xfffffdfc, 0x0, 0x0) [ 1271.552829] ion_mmap: failure mapping buffer to userspace 19:23:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x280200, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000310}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0xa00, 0x70bd29, 0x25dfdbff, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x7}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6012, r4, 0x2000) [ 1271.657565] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:23:15 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x0, 0x0, {{0x1, 0x8dffffff00000000}}}, 0xfe40}}, 0x0) 19:23:15 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:23:15 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffffffff502, 0x10000) ioctl(r0, 0x30a, &(0x7f0000000140)) r1 = syz_open_dev$vbi(&(0x7f0000000280)='/dev/vbi#\x00', 0x0, 0x2) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x20000, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x8, 0x8, 0xff, 0x7fffffff, 0x1, 0x5, 0x5, {0x0, @in6={{0xa, 0x4e21, 0x3, @mcast2, 0x1}}, 0x80, 0x4e, 0x8001, 0x1000, 0x1}}, &(0x7f00000001c0)=0xb0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000002c0)={r3, @in={{0x2, 0x4e21, @local}}, 0x6, 0x1}, 0x90) ioctl$SG_GET_KEEP_ORPHAN(r2, 0x2288, &(0x7f0000000200)) connect$tipc(r1, &(0x7f0000000040)=@id={0x1e, 0x3, 0x1, {0x4e20}}, 0x10) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000000c0)=r2) [ 1272.092402] ion_mmap: failure mapping buffer to userspace [ 1272.112115] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:23:15 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000080)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0x4e24, @loopback}, {0x2, 0x4e21, @multicast2}, 0x1, 0x0, 0x0, 0x0, 0x400, &(0x7f0000000040)='bcsf0\x00', 0x1, 0x1, 0x6}) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r1, 0xfffffbfffff3ffa7, &(0x7f0000000140)) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f00000001c0)={0x12, 0x1d, 0x9, 0x8, 0xa, 0x5, 0x2, 0x121, 0xffffffffffffffff}) 19:23:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6012, r2, 0x2000) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x6) ioctl$SIOCAX25DELFWD(r3, 0x89eb, &(0x7f0000000080)={@default, @default}) 19:23:15 executing program 5: syz_read_part_table(0xfffffdfd, 0x0, 0x0) 19:23:15 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1272.587626] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:23:16 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000040)={0x80000000}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x800, 0x0) ioctl$KDGETKEYCODE(r2, 0x4b4c, &(0x7f0000000100)) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f00000000c0)) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f0000000480)={0x410, 0x0, 0x3f}) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x100, 0x8, 0x8, 0x7, 0xcf5, 0x7ff, 0x8, {0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}}, 0xffffffff7fffffff, 0x0, 0x40, 0x8, 0x48d}}, &(0x7f0000000340)=0xb0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000380)={r3, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x27}}}, 0x0, 0x3f}, &(0x7f0000000440)=0x90) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f00000001c0)="002d33d0deb3c4d51b2f736b539cd9e6bf818126404df72cb84705e4e3a960d6e9a3d35602d9c293271500b1472fef0e4df325f837a66ff75a3ed5ae66ed006c59828492d10872785ca58062cb95b37a9fbd725585135bfecd08fc6ac99b76262473bb79233a961f0fdc7b37ec9986a8c9281b3c47289969862180dba9ef7fff734cdd472143fc3475aef09fd110e3cde33e08caf5258df907") [ 1272.809794] ion_mmap: failure mapping buffer to userspace 19:23:16 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) r1 = syz_open_dev$adsp(&(0x7f00000014c0)='/dev/adsp#\x00', 0xb63, 0x80000) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000001500)=0xfffffffffffffffc, 0x4) 19:23:16 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x0, 0x0, {{0x1, 0xf0ffffff00000000}}}, 0xfe40}}, 0x0) [ 1272.926973] ion_mmap: failure mapping buffer to userspace 19:23:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r0, &(0x7f0000005100)=[{{&(0x7f0000000140)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000001200)=[{&(0x7f00000001c0)=""/48, 0x30}, {&(0x7f0000000200)=""/4096, 0x1000}], 0x2}}, {{&(0x7f0000001240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000002500)=[{&(0x7f00000012c0)=""/134, 0x86}, {&(0x7f0000001380)=""/11, 0xb}, {&(0x7f00000013c0)=""/250, 0xfa}, {&(0x7f00000014c0)=""/2, 0x2}, {&(0x7f0000001500)=""/4096, 0x1000}], 0x5, &(0x7f0000002580)=""/57, 0x39}, 0x3f}, {{&(0x7f00000025c0)=@nfc, 0x80, &(0x7f0000002900)=[{&(0x7f0000002640)=""/221, 0xdd}, {&(0x7f0000002740)=""/75, 0x4b}, {&(0x7f00000027c0)=""/228, 0xe4}, {&(0x7f00000028c0)=""/61, 0x3d}], 0x4, &(0x7f0000002940)=""/27, 0x1b}, 0x1}, {{0x0, 0x0, &(0x7f0000003d80)=[{&(0x7f0000002980)=""/4096, 0x1000}, {&(0x7f0000003980)=""/106, 0x6a}, {&(0x7f0000003a00)=""/91, 0x5b}, {&(0x7f0000003a80)=""/190, 0xbe}, {&(0x7f0000003b40)=""/172, 0xac}, {&(0x7f0000003c00)=""/87, 0x57}, {&(0x7f0000003c80)=""/113, 0x71}, {&(0x7f0000003d00)=""/106, 0x6a}], 0x8, &(0x7f0000003e00)=""/154, 0x9a}, 0x100}, {{&(0x7f0000003ec0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f00000050c0)=[{&(0x7f0000003f40)=""/4096, 0x1000}, {&(0x7f0000004f40)=""/246, 0xf6}, {&(0x7f0000005040)=""/63, 0x3f}, {&(0x7f0000005080)=""/53, 0x35}], 0x4}, 0xe1}], 0x5, 0x10020, &(0x7f0000005240)={0x0, 0x989680}) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000005300), &(0x7f00000052c0)=0x4) ioctl(r0, 0x45, &(0x7f00000000c0)="0adc1f123c12a41d88b070") r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x56aa, 0xd, 0x1, 0xffffffffffffffff}) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$KDSETLED(r4, 0x4b32, 0x9) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x800000000000, 0x4000000006012, r3, 0x4001ffd) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, &(0x7f0000000000)={0x0, 0x3, 0x1, 0x10001, 0x1, 0x3ff}) ioctl$VT_ACTIVATE(r4, 0x5606, 0x1000000000000000) [ 1273.218255] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:23:16 executing program 5: syz_read_part_table(0xfffffff6, 0x0, 0x0) 19:23:16 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:23:16 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r1, 0x858, &(0x7f00000001c0)="d162e8d359266651d9110df69141f954a12feb00b34ca3af83175e87dfcc15697bfb797e6db2b44d3194055001b3d5df232d716e3fe6bb3b0684389565774e02346563776039252b4ce2155ad1409534e413647b027b2a54f2ae853dc09d8b285770876c8f54f336d852dd723ab1cb4c696f147130eaaea985258a7e0134f69f7c95bd12357637acba8d9cbc10d51dc3df631229d12eb0e2fc26c00666a8c9fab9cf2ec5d0934efc64fdf23bd6a5e1ccb7c5b2d6ccfdce0a8f5b54f30ff26b62eb7924b4a788dda480547569135b97d0f5a59d8933daece38799c1518a658f5f0c9b59fa81d0ac2f905fc905ac0e4e9ff6a8ab5ca8ca5ff9b5b13ab9af7da2cf42c52d8535e530b3fa960ef0cc2742c363c8bd26a8078c5380456a907b231302c61a8c918115183963feb71cfa355228c47ac8817bd87c4fc457b9790b7bd60f7632291b4232295b5b1560b4cd5110d5aafd8e7eb4a862bf94d20495367b301534586041c223bf2689675d75dd91ae6ff63aaf9037847a802fdfb3a5d92e3a81a5401600c44ec0d28f7f7653fa8472cb921ef7458bf99acbd9db7846f9ad1d794063df3b7a9b9c85b5cc10ec12673e98473a8a77664fb545ef04d42c3e3c8df87943700c7fd422f93ecf6a5f4d783bbc23460843a7d685f8cda608a5fce0b2baf83ecc08c155a4bb5e77ead266f3061f3dab9062688fef93f201fb13aa7e2e83fdf33f1c0e322c51fff9ce148def835cfb885e00e998bab867cf1ea1892b1fae381716db6990183014a39d0041286bd9409128f1ea14cc9143e7299f294d34cd1bda1daffdca2d56a0da33e01800fb0714e6675e04c73cb21c58bc90beea45e23892d0e7a41afa3cd1a2c996d630cfd2442058148e66d3423ee7ef3d42f2fb2a6a6fb81d42ebd1ab15352fb558ae0e5eaf17af56e7808ac657c815dbcb4886a631f596587fb124e6aeee364a868ee2028da4dee2b6a5ef8e343b09d18a9d909509cfa71acb5a858d98cc760edd0989f7678eb4a0f72d7da71fc84e6c944318b852e0593dbade8340866a63197b1aa4921e0a679d377138a0e21e7e517a30edbfee6c7160f5b68c5491e43cd1b98c4be549afc90b19dd3cbcad54edde07f9526ed61f3d0589c73c3a0ddc3832fc20fc1453d6a04ab65674a0cad5f52865d08778759a8caac197435cf00cedd6ae77ed2b75c737c5795cc3e207db94e35ebacf3ecd426b9d43357b37482b4988b700ada8abf5b979ee316e7a823c3344baea3296ecd1b1d929a69f3641f504e972941ac0a432f134f6bf3a9602ceae3b312fbd8490d933f18810dce5dbb77ce22cdc1e31a3bf734a00e170b9b9b3846cc5b7a3165bede6a10576cc78f591b1e663390c86d0b960de9e45dbb56d4b724f3d178b2f387e8e79efb7000d27951c48f1070faad64925e43654aa5d1cffb05cc69893e4f6fe45e239d3f7ee6df30b90b8b9c934f979e4d7b0abfb7b5865107a0e4684c429b9bc49e03cd67b8c17b43a5643b575b5de63e4dc0fc009e116823512afdbf45220de61a05a12d318b4a85b1b6bf0c52306fcf439b02b355dec1f9855dcfbea1eb4e346f8a6aec3dcd5ef21d2e117cbc62b425535feede20667ccd2b4d6aee6bfc1d1230a0761821e1f3c746c26c4732815c29cedf638e21e6b942d36a661369ac1e2eefe2315db7036afc73c2d37d26af83738b9c5c2f83d97483acc72bf56c474a61864fa1d425b82495a9c9589e836b3027408d8b80a60e5cef3d95e6377f588d7a2ca70f0f0eb9c01cbfe4b763b47e7d476fa7a7e57d53d70e79177ad409f6ca1a4965b3b594b524937eaa99b2088d5e0fc8729612b2976c5952e484fd204a193af3236399348cf73ed84973deb53de5ab3765de4f543da84487d6efb08560e1c1dc35f4f4674452ffd4fb642f9ffb9be15d3d8fbf5f19606238b082bde329566f2aac605bc1a9abed824a0c24499e8c0fd2335625b17c9b4f61a2550edeb0431cc1d7139fbbf3f99c9f3b0eb02bd600b87797fa82b571347a245f49e390db5c08334315328ef0b4243a523d2d7fed2875b4ac2061cb605190d810c6b0414d6957b6d34fc0b248720ff3b791a6a4c7eee9549d2759f7e8fc70345cf2c76b9e88d2b1aa80ffaff65ce4187f41e08aae6bdcd620506f3bf9ad832fabbd007157ad95c86d65f590f521f9dc4afa951ff13b6a2860714f50ccfbe0fee8ec0f60e6e77e57253a257bcda5d28ce3acf1f8c648032f50deba6dfbb1eb00510c6766ae2584a6b776b0b8a5f2375508d18d1517bf353726ebd6b4624a1f696e39b38f7459cf7e9cac668e8fd27bedc543d2458166d179da6425d212a15cd1fa965ebfe5531a03af9b0ef73cb030a39d09b05cc4fe80ddcdd7b1b114174ac78cea53e229bc1ace18b52c0e0006f620d35bac23f0aa9fa345f67b1150ea4981fa10df08ce1188002f986e3f2a526ecef98d73230572bca795b170373f159d4d6ea60d92b1da1f89dab5494bfba0334290942548c7b857b22528a2d65949205e8e92ab9c98cd5bbf177e077296f61145f318e3bff4cb2922249cf9df1578dec0f83066ec6a62b1b9da3497077552a5aa47876f6aa10e37fbd2b5d033c8bce378632b2c5a863074aa2e6fed743e1871dfc7c4c0e5d3e5852c4e9ce4148fb47b4edfdceb83df32089aeaec708bd8f5b8c9f3103240dd74223204af5f0dfae9255072b2741c6ebc69f4dd63a8a2c95189a645d95b8ca5809a7fe1eeff4c9f714817934d8f113e96dac6d2b24ef60403fc463bac8a4f8e0b19584dd814457e623fa6b3914ed57a6fc54c0391b814bd4e7c838e2e6a7d84ddf3bb565549dada69c41113f86c3366124483cb357d7420cba4d85c2ec1d3a37a41a7845d7aca7065c4829c84350094cffb9ad757b7a39a8d73829bac0288b51e8207ef893967c437ce220cb36a21194c720c71e55f3241157c8652aed52ecb43b75ed1343c7ff3f596f2ad0ee2fdf383cfe27cc265d680bcc552ba53a5cac6530694fa9d9be711b1382d8cd836188369bde282343dd9368990b64974fcdcbf496a690c3a3d3d87c9e4a1a5f27129384bdb577c3a2b2cb3dd66190d64bb3a5461dbbad397d1a464b461daa2bd3ff9a22a2751e6a2a7a53ec6d640f92062a6d073ce01a2a966b140237d5a7fef3bfe994d89a5f4b466a417ea5ff4fa85d6c04c4bd9afa02973dab60a106729ecee4fc09ed19356654c769b1b1d512ac4453121f6f0026b7ce6819b7b9331b2a000fb9fbe386a6ca06b7ad16696a7ee48a835ab346331914269188dd40f7d937ab4c0aa3d1ea1904db853ba32f6c7bf8fd66f93d5f417cde22c8e47ee62eb2c603196f8dadd92142a70381037383786d257aab65b35e50b2fa8cf1fb11b43e565e04e8812121e02f21032dd32f73b3670882ae3bc9bd28f7c034342054a88e6b051574f70f334ad9341b2903d743c29156d12276047be0d5c6df3d99745d94429cf316ac90c0a1ac10c0fbcd684299f739313df274665fedab72769ba15a62dd4a441d8d90eb8ee13354fa708ed706aa2201972bb7f9e5553c2618d3d3ac2b77e92357ca630b70358dc4d2c4fa05640756983d06b1ec37255a1ebe7e332a0aeb9d583c80cbdd2b4ba72ea9587b1cede3cef8f06a906863270e5d9ed011d5a392d1e1295707066d3596716570a679d9c0de8399eadf87506da2892cd8e541ab01bb34c81d859bf4d3b565d59fcb6bf09fe33d5114a8251ff8ef4f0ade4c9d4bbcbd2ec6aa1f61d4cc2c3434c8333b6eff7ee956d0a29f1a73c59d46aab6503fea091a17765c90dc7debe5458ce9bad27cbef2cab06cfc478ea1345b83730113b1c036095f742c4807322eea0aee9f02cf9e48584715df6a7b6a82db0f4f410f1d58c267d9d19c8aa2ca3edb0fa606f2b1ab1538b43421af32b50cd099baa9372ebcb58555e02fbc87070763ee356383762a8f6a75851144ee4fd31018e1a5313706f1bbdf7bd056619fae0b2ce342bd10150b5f7960e607c2b6bb30e02d221ae1a3b88cc805f0b4aa914fdb43d0617d01ffd5a6e7f10209047242d206761817a7a4db8d870315eda4340b3addadf8edf054ce53381eac52c33bce1c8ed2e795f1af9d39349a4ff025af9c667348ca81d53f18e10dde3876fa5eb51175bf0d721a4c898c28bbbba3f6f90141751731483c51035776b7d86efe46cf632cba9c80d6952e7f78898d3fee912337cf06ec6e382c6c9bbdbec5de42932429fcbf2df560d387ca7969f50f8b7e98550b8203a8189f06fd3196fa944bd7ff5f2fb73571f7c71f0d47e77ffbe44edf0fa7dc7d3a8e00df2b8ad0c104826745a0d84bcaa51f6a413bfa3627bd54ae4aa1795b7b9c6b6844e42f46dabd02d41549ad87451f07543399f065eec83b17b12bbfb834cd3ce23be344c1eb45f0d0a923aef0fcd86725579f09f2613796c94506cc0cda206e3fe1e23f743b3a48c3f38a6d08b8e38b49914e1f154af8faf1e52698aac0ca64e99f08ca9dfe77fe824d6d7848ec5d52b7696fe9144b6d0c6cc425b8ee99cd519ee6746caf0b29457f25d927b6c23204701a20dd12acac24631c6f2f97aa3c6414e642289ea8852e3e9b01846c52a82c67f316bb1f92920a76c7ec5d372d2d74492a586c188369d529c4430b5bc2eeb232b77d5ac173787f301d8b48ea8ab22fe992cf7a442e0e9c18a96282a9f02ffbc40a3fa0b618c837b1524f8f784e994468c28851daa0a227d78a59f1bb6b98f42dd01eb6ccd17d8841b024f0b379f7ca1d8de7cd1215217e47e74ae669ef638af26890c4747e724cf734985912737303f68fcc251b364f866ad95de8713e12275ffbc15d10cb9dd9f6ce206db0c5c9f996a90bae051d0caeb522c654bbc5a16e1d76680dba51a8094d5e913dd9c6ed5c285d5060eb1d50e04e3ecb9cd10540722d2b6e77819db05e51ba02871fa4b287d2c4523f8a656fe8f280aa41162d9beb024e1bdc788ecd35cba40f4a4eed28e7444900f4f3958cf0c0883cac6aaa487afed6521427bc7962d66b395a3da3fe3fb58a2e34323072be4f944946e46a61475d690b5808841da0c05078686e17295b6760c8fd65955b5c5bda4e0ebd6eae6dcc323cf147e92b20c02c95dcf5648338fb2b01b5b0611c5488a0dfdc252571bfe92ad5cf4d0df96f5d578f2764a47d646a1ef261867801da91970ce423b893dd453289024dd88bfed00c52b9630ea97b6b442a0838cdcd72ef3f7ba7b3cfcd1e2d3099709dce59235fe1e27e89880183a901ba2af8004178b3710d813ab22e13b4c86743c222b41925540ad877f17380540f6be3b3bbe57352db270a400230fc1921e36889825f61cd19185501e192858a0a19b9daef8d5083381c5837ac40df50b432143f61a1f8b4e5412b4638fbe6607243021f5101f988b092f01d6fa76f5ad66740e1de54d5dabec4e1f020cf762ea092a9008db35b3cc1d4e4ba1643914e7e1be78ff79fd2234838853ceae3f897249e5575b0be55e50438f09ee316b6f07886c32829e04d7114e9ca67d7545b52b8a419fe5caa1118bfda3817939f426fa9bea97a4fb0b22ce1268532bcfcfba0cd8364a3f00062882afe0d25fc02d74b8afaf7d9b6560f2213302f21ab9aeaab14fdab85be4ca00baac84b6ded13f4eb3ac52fa86b4c38ad4bca1ff5adb624a280ee827a12a81ff2823c7c168918d37b156d7bae5195dc427249d7d009fbc7a524cfe88696301583936ed31aa24faffbf317d30a82f8daaf1476f61f2509683da1141d329041ef367f81123086aa2811cf") ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:23:16 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) acct(&(0x7f0000000300)='./file0\x00') perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) getsockopt$nfc_llcp(r1, 0x118, 0x3, &(0x7f0000000080)=""/169, 0xa9) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000280)={&(0x7f0000000240)=[0x2, 0x100000001], 0x2, 0x5, 0xfffffffffffff800, 0x93, 0xcfe4, 0x5, {0x3, 0x7ff, 0x5, 0xffffffffffffff80, 0xff, 0x10000000000000, 0x7, 0x0, 0x8, 0x2, 0x2, 0x6, 0x8, 0x78, "9a8ae991784e94efb9ca7ebb972696ad3eea8041375bc8b5cee3a92613a89f21"}}) fchmodat(r1, &(0x7f0000000200)='./file0\x00', 0x28) ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f00000001c0)={0x3, 0x1}) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) 19:23:17 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x0, 0x0, {{0x1, 0xffffff7f00000000}}}, 0xfe40}}, 0x0) 19:23:17 executing program 1: syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x4, 0x280000) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x5, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1274.047909] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:23:17 executing program 0: 19:23:17 executing program 5: syz_read_part_table(0x1000000000, 0x0, 0x0) 19:23:17 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x5, 0x4093e) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:23:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x400, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0xfffffffffffffffd, 0x10, r2, 0x2000) r3 = dup(r0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r3, 0xc1105518, &(0x7f0000000180)={{0x2, 0x1, 0x3ff80000, 0x7fff, 'syz0\x00', 0x9}, 0x6, 0x20000000, 0x4, r4, 0x2, 0x10001, 'syz0\x00', &(0x7f0000000140)=['/dev/full\x00', '/dev/full\x00'], 0x14, [], [0x9, 0xece, 0x1f, 0xffffffff]}) ioctl$SIOCRSSL2CALL(r3, 0x89e2, &(0x7f0000000000)=@bcast) [ 1274.417838] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:23:17 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) write(r0, &(0x7f0000000040)="2af711bba67211acfe87709730dc176d0517024b47c8a952eea262d5a0404d5087eba7bbfcbe04f7dfcc150b0c453382b6e39f59f7d3a082c484e70632b1a698699f1d7f285fde6c76f96c8ac99291bca82210867317d231d96db2f8fd1996e81dc1d2aa2bbb5b3c30f9da37343f16d77f24a8843ae157ec5eb4db6691404822b568edd0ce06ad791bb65872996bc20e4cdcf9e3e10889dd2e332156e969", 0x9e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:23:18 executing program 0: [ 1274.924356] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:23:18 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x80, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000000c0)={0xffffffff, 0x80000000}) 19:23:18 executing program 5: syz_read_part_table(0x40000000000000, 0x0, 0x0) 19:23:18 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x0, 0x0, {{0x1, 0x0, 0x8}}}, 0xfe40}}, 0x0) 19:23:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x40c0, 0x0) ioctl$KVM_X86_SET_MCE(r1, 0x4040ae9e, &(0x7f0000000080)={0x7900000000000000, 0x100000, 0xfffffffffffffffb, 0x1, 0x10}) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6012, r3, 0x2000) 19:23:18 executing program 0: [ 1275.345484] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:23:18 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80000, 0x10) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0x2008}) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:23:18 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r1, 0x406, r1) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000040)=""/6, &(0x7f0000000080)=0x6) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1275.723707] ion_mmap: failure mapping buffer to userspace 19:23:19 executing program 0: [ 1275.842624] ion_mmap: failure mapping buffer to userspace [ 1275.888148] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:23:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6012, r2, 0x2000) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x10000, 0x40000) ioctl$VIDIOC_S_MODULATOR(r3, 0x40445637, &(0x7f0000000080)={0xec, "044ac4e58b7228d7edc289a770c9c28941466c206d48e63fea4cb95c744825c1", 0x100, 0x7f, 0x0, 0x8, 0x1}) socket$rds(0x15, 0x5, 0x0) 19:23:19 executing program 5: syz_read_part_table(0x100000000000000, 0x0, 0x0) 19:23:19 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x0, 0x0, {{0x1, 0x0, 0xf}}}, 0xfe40}}, 0x0) [ 1276.258575] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:23:19 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = semget$private(0x0, 0x0, 0x10) semctl$GETNCNT(r1, 0x4, 0xe, &(0x7f0000000040)=""/32) r2 = perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x1) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:23:19 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1f, 0x3ffe) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x80) write$P9_RLOCK(r1, &(0x7f0000000080)={0x8, 0x35, 0x2}, 0x8) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0x4, &(0x7f0000000140)) 19:23:19 executing program 0: [ 1276.559315] ion_mmap: failure mapping buffer to userspace [ 1276.638898] ion_mmap: failure mapping buffer to userspace [ 1276.668308] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:23:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x113200, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6012, r2, 0x2000) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x2, 0x4000) 19:23:20 executing program 0: 19:23:20 executing program 5: syz_read_part_table(0x200000000000000, 0x0, 0x0) 19:23:20 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x40041) fcntl$setsig(r0, 0xa, 0x7) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r1, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:23:20 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r1, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000040)="40e55369c051a25e03584a819243698a729e9fc82a756072167a95439473bdc11197e22642a35b9292f3235f9ae05065fd2d16a3ab28d47610b30a15e5d1ab29bd12692650d417ad1f232391e2a047c70d5e9757bfb06ab765db6bda6505c8fac880e253395433d9aeefef72b1cf298a3e9255e4") 19:23:20 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x0, 0x0, {{0x1, 0x0, 0x10}}}, 0xfe40}}, 0x0) [ 1277.280024] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:23:20 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80000, 0x10) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0x2008}) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1277.352625] ion_mmap: failure mapping buffer to userspace [ 1277.423300] ion_mmap: failure mapping buffer to userspace 19:23:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x80) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8008000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r2, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x10) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x7000)=nil, 0x7000, 0x0, 0x6012, r4, 0x2000) 19:23:20 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000040)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1277.778416] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:23:21 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) sendmsg(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="79dd80de83e12a694b13ff708e67a966558dc2315cb1a49390f7463071260fb287b1381c3eb6a5d9e6e99d08a48b8d3f9dcc1a0ddedbcf304f1d98cde27446f2405d85c7ba670c2c055ec9fe2b2b7f0ec3ee28b7c5c6092a1461e6b1fdbd3a7fa595318921b56a8523903816bffc55e99ae4b6198ef77507d8e9d264fa5e0cf1494767efc5cd2d548432", 0x8a}, {&(0x7f00000001c0)="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", 0x1000}, {&(0x7f00000011c0)="d19c8af6145fc549b3664978be43a74806f180d96efe480d1f68eada7976d5917e1df55df036ab08520b4117dd18383659feb946a102c21e9971306d68c7cc227c8d430cb40aef168d0e6eb0ff33dbe7514fb90a8549d9744b3b3509e66d5f40434953149a16216a4109d3cc3ae0325005cd4ade84eabf02a4bfe73be2063fec3da97d1bc995f671a382fe8a0f201210ec29f4540211813fdeaa3607991a7993e05cc65d12494f1c26ae3bbaf822", 0xae}], 0x3, &(0x7f0000001280)=[{0x88, 0x11f, 0x2008000000, "a774185196cc8093996b6e15858d21ee925a65e019e0bb70a3bcfff51722ffe56dc1214c29575da9e74828c024bedea4df36aacb47ebbe2a78e02aaf7dc75a6dd3df3b71be770dd3b8ea3ed741ad4720574b97e411825cb24fce0a019a32d739363da4e448ec09c6707da2f4052fb180acb3a1b0fb8b"}, {0xe8, 0x110, 0x0, "0499454c3b8e68facf479410abdbda2e0b3e61c64b899c3a3336829374e2de73d1e4e321cf5c0679201afdd46df2c8048370479c653d0301945a1febab071f57693329f08054e88a74c347571eb2feec58b635202f7ed347e3ff8798c830a281f1d774ff7853caf499e0b187dc82b3defd42dcfe684c5d97ab0c7b4c00950539093092582ddcbb16ea6c1fa0404945d2affed89a687d7486e392f49b236f5f7aa5b214a9bfea0484f51028e6c7f1f4bbd2c9bb11cfdbb5f3703d0abd77f18c308e2c819f30727384204e57582236f17e7f6c1cd6be53"}], 0x170}, 0x2400c804) 19:23:21 executing program 5: syz_read_part_table(0x300000000000000, 0x0, 0x0) 19:23:21 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) write(r0, &(0x7f0000000040)="2af711bba67211acfe87709730dc176d0517024b47c8a952eea262d5a0404d5087eba7bbfcbe04f7dfcc150b0c453382b6e39f59f7d3a082c484e70632b1a698699f1d7f285fde6c76f96c8ac99291bca82210867317d231d96db2f8fd1996e81dc1d2aa2bbb5b3c30f9da37343f16d77f24a8843ae157ec5eb4db6691404822b568edd0ce06ad791bb65872996bc20e4cdcf9e3e10889dd2e332156e969", 0x9e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:23:21 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x0, 0x0, {{0x1, 0x0, 0xf00}}}, 0xfe40}}, 0x0) [ 1278.051889] kauditd_printk_skb: 13 callbacks suppressed [ 1278.051905] audit: type=1400 audit(1552073001.313:226): avc: denied { create } for pid=26576 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1278.184011] audit: type=1400 audit(1552073001.393:227): avc: denied { write } for pid=26576 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1278.217670] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:23:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) munmap(&(0x7f0000007000/0x3000)=nil, 0x3000) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6012, r2, 0x2000) [ 1278.317213] audit: type=1400 audit(1552073001.393:228): avc: denied { read } for pid=26576 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 19:23:21 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x102, 0x0) r1 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) inotify_rm_watch(r0, r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000001200)={'nat\x00', 0x0, 0x4, 0x1000, [], 0x4, &(0x7f00000001c0)=[{}, {}, {}, {}], &(0x7f0000000200)=""/4096}, &(0x7f0000001280)=0x78) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) rt_sigprocmask(0x3, &(0x7f0000000040)={0x1f}, &(0x7f0000000080), 0x8) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) [ 1278.443456] audit: type=1400 audit(1552073001.433:229): avc: denied { create } for pid=26576 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1278.570763] audit: type=1400 audit(1552073001.433:230): avc: denied { write } for pid=26576 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 19:23:22 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x19) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x10) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000080)=[{r0, 0x4}], 0x1, 0x2) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r1, 0xc0305615, &(0x7f0000000240)={0x0, {0x1, 0x4}}) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000280)=0x3ff, 0x1) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000001c0)={0x1, [0x8]}, &(0x7f0000000200)=0x6) 19:23:22 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1278.778603] __loop_clr_fd: partition scan of loop5 failed (rc=-22) [ 1278.825416] ion_mmap: failure mapping buffer to userspace 19:23:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x101000, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x1, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6012, r2, 0x2000) 19:23:22 executing program 5: syz_read_part_table(0x400000000000000, 0x0, 0x0) 19:23:22 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r1) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f00000001c0)={0x17, 0x8c, &(0x7f0000000080)="ac526bd3bbfcd048363d9e1fec50aad6019a4553728e6083513f5276ca1dd9a47a3a1ce21c4ef91256f57fb62895966b97a6b351b7b73d59342d7145ed93913c069ac33312572f47bd1f4eae8eee4a5636d46991c87b341d6f74f5333bc5f4f48dd32a59384a4dac19987cf48ec3f85102682780358a0dde94cdf51b4bc5148953190c130bb23a515f9bf033"}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000200)=0x1, 0x4) 19:23:22 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x0, 0x0, {{0x1, 0x0, 0x8000000}}}, 0xfe40}}, 0x0) [ 1279.238001] __loop_clr_fd: partition scan of loop5 failed (rc=-22) [ 1279.251896] ion_mmap: failure mapping buffer to userspace [ 1279.322055] ion_mmap: failure mapping buffer to userspace 19:23:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) r4 = fcntl$getown(r0, 0x9) sendmsg$nl_generic(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x20, 0x600, 0x70bd2c, 0x25dfdbfc, {0x12}, [@typed={0x8, 0x47, @pid=r3}, @typed={0x8, 0x16, @pid=r4}, @generic="5d92e8362137fe651c6310916aa226553b7f5a2bdc749368235599"]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000680)={@dev, 0x0}, &(0x7f00000006c0)=0x14) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000700)={r5, 0x1, 0x6, @dev={[], 0xc}}, 0x10) r6 = semget$private(0x0, 0x2, 0x40) semctl$GETVAL(r6, 0x3, 0xc, &(0x7f0000000280)=""/124) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000000ddebece500000000000000000000"]) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6012, r7, 0x2000) 19:23:22 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) write$P9_RREADDIR(r1, &(0x7f00000001c0)={0xe4, 0x29, 0x2, {0x6, [{{0x20, 0x2, 0x4}, 0x0, 0x9, 0x7, './file0'}, {{0x0, 0x3, 0x7}, 0x33a7, 0x3, 0x7, './file0'}, {{0x0, 0x1, 0x7}, 0x7, 0x3000000000000000, 0x7, './file0'}, {{0x80, 0x3, 0x2}, 0x1, 0x7, 0x7, './file0'}, {{0x40, 0x3}, 0x4, 0x7, 0x7, './file0'}, {{0x11, 0x3, 0x1}, 0xc7, 0x800, 0x7, './file0'}, {{0xa8, 0x4}, 0x400, 0x4, 0x7, './file0'}]}}, 0xe4) 19:23:22 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x800000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:23:22 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x4800, 0x0) ioctl$NBD_DO_IT(r1, 0xab03) [ 1279.717794] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:23:23 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1279.872156] ion_mmap: failure mapping buffer to userspace 19:23:23 executing program 5: syz_read_part_table(0x500000000000000, 0x0, 0x0) 19:23:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6012, r2, 0x2000) 19:23:23 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x0, 0x0, {{0x1, 0x0, 0xf000000}}}, 0xfe40}}, 0x0) [ 1280.221160] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:23:23 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) getsockopt$netlink(r1, 0x10e, 0x1, &(0x7f0000000080)=""/54, &(0x7f00000000c0)=0x36) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:23:23 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x2, 0x200000) r2 = accept4$ax25(0xffffffffffffff9c, &(0x7f0000000080)={{}, [@rose, @netrom, @rose, @netrom, @netrom, @rose, @remote, @default]}, &(0x7f0000000100)=0x48, 0x80000) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f00000001c0)={r2, 0xff, 0x80, "2158272324ee3b3814c10574dfd703a905b52fb39b0e574792c0d5cb7df3ec120ef344e955a364b1d684e19e8472a04a206f780d720c55c0471b4e02c4d43591d4f104c35a2ac763b143bafe5906e6d044d5a4f0f04c488538c2d52d380f49bb07eec88a6246bc31f669102b996b7aa918d24f5ca200ff2b6730480f7d12efcd9ebf636c588912268868747d8b1b2a603099892b47cc9b1a3bbc19577edcf355c5f1b020"}) [ 1280.475932] ion_mmap: failure mapping buffer to userspace [ 1280.560020] ion_mmap: failure mapping buffer to userspace 19:23:23 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:23:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0xfffffffffffffffe, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6012, r2, 0x2000) [ 1280.778115] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:23:24 executing program 5: syz_read_part_table(0x600000000000000, 0x0, 0x0) 19:23:24 executing program 3: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000340)=0xfffffffffffffd55) preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0xfb) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000240)="1eba9c2179c6f5df7598b21adeb167aa", 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x800000c0045005, &(0x7f00000004c0)=0x3cb6) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc2c45513, &(0x7f0000000500)={{0x0, 0x0, 0xc29, 0x7de64ffc, 'syz0\x00'}, 0x0, [0x6, 0x7, 0x3, 0x3, 0x3, 0x0, 0x1, 0x3, 0x0, 0x5, 0x3f, 0x0, 0x8, 0x3ec, 0x0, 0x5, 0x1, 0x1800000, 0x5, 0xffffffffffffffff, 0x9, 0x0, 0x1200000, 0x5, 0x6, 0x47d90f0e, 0x0, 0x4, 0x28c0000000000000, 0x9, 0xc2, 0x0, 0x57, 0x0, 0x1, 0x0, 0x6cd, 0x5, 0x2, 0x9, 0x0, 0x886, 0xfff, 0x80, 0x3ff, 0x0, 0x9, 0xd75, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0xffffffffffff8000, 0x20, 0x0, 0x405, 0x814, 0x9, 0x6, 0x100, 0x8, 0x9, 0x0, 0x1, 0x101, 0x101, 0x100000000, 0x8, 0x0, 0x2ee7, 0x401, 0x0, 0x6000000000000000, 0x0, 0x0, 0x0, 0x6, 0x9, 0x0, 0x3, 0x1, 0x0, 0xec, 0x8, 0x0, 0x3, 0x0, 0x6, 0x9, 0xdc75, 0x0, 0xfffffffffffffffe, 0x9f, 0x0, 0x0, 0x0, 0x0, 0xf6a5, 0xf049, 0x200, 0x0, 0xea32, 0x6e6a, 0x0, 0xff, 0x0, 0x20, 0x7164, 0x5, 0x6, 0x0, 0x3ff, 0x7057f9d, 0x0, 0x2, 0x4, 0x4, 0xcd6, 0x0, 0x0, 0x6, 0x0, 0x6], {0x0, 0x989680}}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bond0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'bond0\x00', 0x800000000008a03}) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}, {}, {}, {}], 0x4, 0x4, &(0x7f0000000080)={0x7}, 0x8) ioctl(r1, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1281.188745] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:23:24 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x101, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, 0x0) r3 = accept4(r1, 0x0, &(0x7f00000003c0), 0x80000) ioctl(r0, 0x5, &(0x7f0000000440)) r4 = accept4$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs, &(0x7f0000000000)=0x6e, 0x80800) fstat(r2, &(0x7f0000000340)) r5 = getpgrp(0xffffffffffffffff) splice(r3, &(0x7f0000000440), r4, &(0x7f0000000480), 0xa3e, 0x2) syz_open_procfs$namespace(r5, &(0x7f0000000400)='ns/mnt\x00') getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000680), &(0x7f00000006c0)=0x4) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0)) r8 = dup(r4) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r8, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xc0, r9, 0x300, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3f}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xb258}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40094}, 0x24000001) ioctl$BLKRRPART(r8, 0x125f, 0x0) setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000300)={r5, r6, r7}, 0xc) 19:23:24 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x0, 0x0, {{0x1, 0x0, 0x10000000}}}, 0xfe40}}, 0x0) 19:23:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6012, r2, 0x2000) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x86081, 0x0) 19:23:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x80000001, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000008000/0x4000)=nil, &(0x7f000000a000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000000a000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f0000000140)="99556d0cb35e726f157991d54601003b2654d5f7b5b094f0cc56e0da31e47c31d6e9f25d", 0x24, r1}, 0x68) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f00000000c0)={0x9, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6012, r3, 0x2000) [ 1281.777798] __loop_clr_fd: partition scan of loop5 failed (rc=-22) [ 1281.860844] audit: type=1400 audit(1552073005.123:231): avc: denied { create } for pid=27009 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1281.888296] ion_mmap: failure mapping buffer to userspace [ 1281.943592] audit: type=1400 audit(1552073005.173:232): avc: denied { write } for pid=27009 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 19:23:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x80000001, 0x3b, 0x0, r2}) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000000c0)={0x1ff, 0x30, 0x1, r3}) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000140)={0x56ab, 0xd, 0x1, r4}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6012, r5, 0x2000) [ 1282.046993] ion_mmap: failure mapping buffer to userspace [ 1282.053430] audit: type=1400 audit(1552073005.173:233): avc: denied { read } for pid=27009 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 19:23:25 executing program 5: syz_read_part_table(0x700000000000000, 0x0, 0x0) 19:23:25 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040)=0x0) ptrace$getenv(0x4201, r2, 0xb4fa, &(0x7f0000000080)) [ 1282.184300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1282.195119] audit: type=1400 audit(1552073005.293:234): avc: denied { create } for pid=27009 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 19:23:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008915, &(0x7f0000000000)="544ea3feff3f00ffffffff") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6012, r2, 0x2000) r3 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x10, 0x200000) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r1) fcntl$dupfd(r0, 0x0, r2) sendto$inet6(r3, &(0x7f0000000080)="9e70390ac37cf2a4c2f847362a8b168c502216b11d933e74ad4ab481bcfcdf687a77179fb71e47b0055e5ede2dddd6fb566602ad6252b0f80de08bae03cc1d11077114356897984e5391b0de1720fc660331277d695211adec855486f482113bd39f1fa696033e90ffb8d4f34983", 0x6e, 0x14, &(0x7f0000000140)={0xa, 0x4e24, 0x2, @mcast1, 0x5}, 0x1c) [ 1282.298778] audit: type=1400 audit(1552073005.303:235): avc: denied { write } for pid=27009 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 19:23:25 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpeername(0xffffffffffffff9c, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f00000000c0)=0x80) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000100)=0x3, 0x4) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:23:25 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x0, 0x0, {{0x1, 0x0, 0x8dffffff}}}, 0xfe40}}, 0x0) [ 1282.368630] __loop_clr_fd: partition scan of loop5 failed (rc=-22) [ 1282.752925] ion_mmap: failure mapping buffer to userspace 19:23:26 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x401, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x164, r2, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x38, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NET={0x24, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}, @TIPC_NLA_NODE={0x34, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x100000000}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x88, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdaf6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa1c}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}, @TIPC_NLA_LINK={0x1c, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x4000}, 0x0) [ 1282.869247] ion_mmap: failure mapping buffer to userspace [ 1282.888614] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:23:26 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:23:26 executing program 5: syz_read_part_table(0x1c0f000000000000, 0x0, 0x0) [ 1283.075874] kauditd_printk_skb: 8 callbacks suppressed [ 1283.075889] audit: type=1400 audit(1552073006.333:244): avc: denied { map } for pid=27143 comm="modprobe" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1283.239186] audit: type=1400 audit(1552073006.353:245): avc: denied { map } for pid=27143 comm="modprobe" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 19:23:26 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x0, 0x0, {{0x1, 0x0, 0xf0ffffff}}}, 0xfe40}}, 0x0) [ 1283.341618] audit: type=1400 audit(1552073006.563:246): avc: denied { map } for pid=27231 comm="modprobe" path="/bin/kmod" dev="sda1" ino=1440 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1283.368256] __loop_clr_fd: partition scan of loop5 failed (rc=-22) [ 1283.458175] audit: type=1400 audit(1552073006.573:247): avc: denied { map } for pid=27231 comm="modprobe" path="/bin/kmod" dev="sda1" ino=1440 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1283.583094] audit: type=1400 audit(1552073006.583:248): avc: denied { map } for pid=27231 comm="modprobe" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1283.658398] ion_mmap: failure mapping buffer to userspace 19:23:26 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/arp\x00') r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x101000, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r2, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1283.756960] audit: type=1400 audit(1552073006.583:249): avc: denied { map } for pid=27231 comm="modprobe" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 19:23:27 executing program 2: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f00000000c0)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x4, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6012, r2, 0x2000) getsockopt$inet_buf(r0, 0x0, 0x2f, &(0x7f0000000000)=""/26, &(0x7f0000000080)=0x1a) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000140)="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") [ 1283.908427] audit: type=1400 audit(1552073006.663:250): avc: denied { map } for pid=27231 comm="modprobe" path="/etc/ld.so.cache" dev="sda1" ino=2503 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1284.068425] audit: type=1400 audit(1552073006.703:251): avc: denied { map } for pid=27231 comm="modprobe" path="/lib/x86_64-linux-gnu/libkmod.so.2.1.3" dev="sda1" ino=2811 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1284.128051] __loop_clr_fd: partition scan of loop5 failed (rc=-22) [ 1284.227980] audit: type=1400 audit(1552073006.723:252): avc: denied { map } for pid=27231 comm="modprobe" path="/lib/x86_64-linux-gnu/libkmod.so.2.1.3" dev="sda1" ino=2811 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1284.330410] audit: type=1400 audit(1552073006.773:253): avc: denied { map } for pid=27231 comm="modprobe" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1284.638773] ion_mmap: failure mapping buffer to userspace 19:23:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x80000001, 0x3b, 0x0, r2}) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000000c0)={0x1ff, 0x30, 0x1, r3}) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000140)={0x56ab, 0xd, 0x1, r4}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6012, r5, 0x2000) 19:23:28 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0xf, &(0x7f0000000080)=""/93, &(0x7f0000000100)=0x5d) 19:23:28 executing program 5: syz_read_part_table(0x1f00000000000000, 0x0, 0x0) 19:23:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x7, 0x4) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x80000, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r2 = request_key(&(0x7f0000000140)='cifs.idmap\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='/dev/vfio/vfio\x00', 0xfffffffffffffffc) keyctl$set_timeout(0xf, r2, 0x400) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) fcntl$getown(r0, 0x9) ioctl$IMDELTIMER(r1, 0x80044941, &(0x7f00000000c0)) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6012, r4, 0x2000) 19:23:28 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x0, 0x0, {{0x1, 0x0, 0xffffff7f}}}, 0xfe40}}, 0x0) 19:23:28 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x4000000000000006, 0xfffffffffffffffd) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1285.896703] ion_mmap: failure mapping buffer to userspace 19:23:29 executing program 3: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x10800, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000100), &(0x7f00000001c0)=0x4) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000200)=0x4) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r1, 0xfffffbfffff3ffa7, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000240)={0x2, 0x204, 0x5, 0x10000, 0x0}, &(0x7f0000000280)=0x10) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000002c0)={r2, 0x3, 0xb81a, 0x1}, 0x10) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x400000, 0x0) ioctl$SG_GET_VERSION_NUM(r3, 0x2282, &(0x7f0000000300)) [ 1286.028021] __loop_clr_fd: partition scan of loop5 failed (rc=-22) [ 1286.031630] ion_mmap: failure mapping buffer to userspace 19:23:29 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) prctl$PR_SET_FPEMU(0xa, 0x3) r1 = dup(r0) write$cgroup_int(r1, &(0x7f0000000040)=0x81, 0x12) 19:23:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6012, r2, 0x2000) ioctl$FICLONE(r1, 0x40049409, r0) 19:23:29 executing program 5: syz_read_part_table(0x2000000000000000, 0x0, 0x0) 19:23:29 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x0, 0x0, {{0x1, 0x0, 0xffffff8d}}}, 0xfe40}}, 0x0) [ 1286.437401] ion_mmap: failure mapping buffer to userspace [ 1286.557645] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:23:29 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) r1 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0xff, 0x20000) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1286.836396] ion_mmap: failure mapping buffer to userspace [ 1286.921396] ion_mmap: failure mapping buffer to userspace [ 1287.098068] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:23:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x80000001, 0x3b, 0x0, r2}) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000000c0)={0x1ff, 0x30, 0x1, r3}) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000140)={0x56ab, 0xd, 0x1, r4}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6012, r5, 0x2000) 19:23:31 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x7fffffff, 0x101000) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x3, 0x20000000}, 0xc) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000080), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) r3 = dup3(r2, r0, 0x356436d9ff791b10) ioctl$RTC_UIE_ON(r3, 0x7003) 19:23:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1, &(0x7f00000002c0)="0adc1f123c12a41d88b070b0a95ad7d106667a3045053d93937f2ffd741f1fbb35c44dfaf2707ffa71101f3b9bb8d12ae41c4d7f30ea406573eba55f7cd3ba95ceee41823557e651cbd864cf7417a00648799e3b421f5b36be00f4f25f80d9346681960143d4ae32a1365fc0e4b5532f83e93f3c5ec32973934d4502") prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000040)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@remote, @in=@initdev}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f0000000000)=0xe8) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x56aa, 0x80d, 0x1, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1, 0x6010, r2, 0x2000) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x42ac0, 0x0) getsockopt$netrom_NETROM_IDLE(r3, 0x103, 0x7, &(0x7f0000000340)=0xfffffffffffffffc, &(0x7f0000000280)=0x4) 19:23:31 executing program 5: syz_read_part_table(0x3f00000000000000, 0x0, 0x0) 19:23:31 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x0, 0x0, {{0x1, 0x0, 0xfffffff0}}}, 0xfe40}}, 0x0) 19:23:31 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xd8, 0x2) [ 1288.428425] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:23:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x100) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6012, r2, 0x2000) 19:23:31 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x4) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:23:31 executing program 5: syz_read_part_table(0x4000000000000000, 0x0, 0x0) 19:23:31 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:23:32 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x0, 0x0, {{0x1, 0x0, 0x800000000000000}}}, 0xfe40}}, 0x0) [ 1288.877650] ion_mmap: failure mapping buffer to userspace 19:23:32 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x72, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1289.170631] ion_mmap: failure mapping buffer to userspace [ 1289.457839] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:23:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x80000001, 0x3b, 0x0, r2}) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000000c0)={0x1ff, 0x30, 0x1, r3}) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000140)={0x56ab, 0xd, 0x1, r4}) 19:23:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSCTTY(r2, 0x540e, 0xea) r3 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x7fff, 0x0) setsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f00000000c0)=0x800, 0x4) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000002c0)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x10, r4, 0x1ffd) setsockopt$inet_buf(r0, 0x0, 0x2b, &(0x7f0000000400)="cd3ebf3cccebf0f2f819081e4f0cff621df15bb5f7e256fb077e3bf5a90e5fca07dee4784efca01012b2454cb149b376ea361469b0491b99a2c17eabc172d109c922cd3e29bde22f43bcf53bc6842b9bbd5ab656de83070163691880b6214ee24b00b0c29bcd323a45e4ea7053b46d286858c23d76a48b5efc696466249660178dde61cbae9e2717bcd993879156c47c347f1911e78cd587e7f5354cee6b6b43dc4670897db81db7b5f3a979501be465cfc3f2e1dbf806de724a49570b70cf1cdb95362c3f9044661063a9f526c4ae01a3a36fbaad554d1f", 0xffffffffffffffa5) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x2, 0x9, 0x1, r4}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000380)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0], 0x7, 0x9, 0x5, 0x1}) ioctl$TCFLSH(r5, 0x540b, 0x80000001) getsockopt$IP_VS_SO_GET_INFO(r3, 0x0, 0x481, &(0x7f0000000100), &(0x7f0000000140)=0xc) 19:23:33 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x5, &(0x7f0000000040)) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:23:33 executing program 5: syz_read_part_table(0x4800000000000000, 0x0, 0x0) 19:23:33 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x0, 0x0, {{0x1, 0x0, 0xf00000000000000}}}, 0xfe40}}, 0x0) 19:23:33 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = dup2(r0, r0) pipe(&(0x7f0000001700)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001740)=r2, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1290.649799] QAT: Invalid ioctl [ 1290.698122] QAT: Invalid ioctl 19:23:34 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x20000000) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x3, 0x181000) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x4000, 0x1}) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x2000)=nil, 0x2000}, 0x3}) 19:23:34 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1290.768546] QAT: Invalid ioctl [ 1290.805201] QAT: Invalid ioctl 19:23:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xe29, 0x2000) ioctl$KVM_PPC_GET_SMMU_INFO(r1, 0x8250aea6, &(0x7f0000000140)=""/165) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6012, r3, 0x2000) ioctl$VIDIOC_G_FBUF(r1, 0x8030560a, &(0x7f00000000c0)={0x40, 0x0, &(0x7f0000000080)="7d82260045fc8c580e3d9c091be7f90c162bc7d46cc0bf0d65cb2c802efaa1c0583cfd81bf2e5b0ec42a2c8cfe9b44b0a8dad4e0e68a62e1", {0x7, 0xffffffffffffffff, 0x77777f5f, 0x2, 0x8, 0x3, 0x7, 0x90d}}) [ 1290.858215] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:23:34 executing program 5: syz_read_part_table(0x4c00000000000000, 0x0, 0x0) 19:23:34 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x0, 0x0, {{0x1, 0x0, 0x1000000000000000}}}, 0xfe40}}, 0x0) [ 1291.338030] ion_mmap: failure mapping buffer to userspace 19:23:34 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x7fffffff, 0x101000) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x3, 0x20000000}, 0xc) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000080), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) r3 = dup3(r2, r0, 0x356436d9ff791b10) ioctl$RTC_UIE_ON(r3, 0x7003) [ 1291.461597] ion_mmap: failure mapping buffer to userspace [ 1291.708073] __loop_clr_fd: partition scan of loop5 failed (rc=-22) [ 1292.088986] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:23:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x80000001, 0x3b, 0x0, r2}) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000000c0)={0x1ff, 0x30, 0x1, r3}) 19:23:36 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r1, 0x406, 0xffffffffffffff9c) getsockname$ax25(r2, &(0x7f0000000280)={{0x3, @bcast}, [@remote, @default, @rose, @rose, @rose, @bcast, @netrom, @default]}, &(0x7f0000000240)=0xffffffffffffff9f) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/context\x00', 0x2, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:23:36 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:23:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r2, 0x6000000}}, 0x10) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6012, r4, 0x2000) 19:23:36 executing program 5: syz_read_part_table(0x6000000000000000, 0x0, 0x0) 19:23:36 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x0, 0x0, {{0x1, 0x0, 0x8dffffff00000000}}}, 0xfe40}}, 0x0) [ 1293.005798] ion_mmap: failure mapping buffer to userspace 19:23:36 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000040)) 19:23:36 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/arp\x00') r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x101000, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r2, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:23:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x1, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x4400, 0x6) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, r2}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6012, r3, 0x2000) [ 1293.127789] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:23:36 executing program 5: syz_read_part_table(0x6800000000000000, 0x0, 0x0) 19:23:36 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x0, 0x0, {{0x1, 0x0, 0xf0ffffff00000000}}}, 0xfe40}}, 0x0) [ 1293.607917] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:23:37 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x2000, 0x0) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080)) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x5ec9, @ipv4={[], [], @local}}, 0x1c) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1293.802577] ion_mmap: failure mapping buffer to userspace [ 1293.913458] ion_mmap: failure mapping buffer to userspace [ 1294.057576] __loop_clr_fd: partition scan of loop5 failed (rc=-22) [ 1294.507941] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:23:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x80000001, 0x3b, 0x0, r2}) 19:23:38 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) syz_init_net_socket$ax25(0x3, 0x2, 0x0) 19:23:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x0, 0x6010, r2, 0x0) 19:23:38 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x401, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x164, r2, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x38, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NET={0x24, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}, @TIPC_NLA_NODE={0x34, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x100000000}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x88, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdaf6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa1c}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}, @TIPC_NLA_LINK={0x1c, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 19:23:38 executing program 5: syz_read_part_table(0x6c00000000000000, 0x0, 0x0) 19:23:38 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x0, 0x0, {{0x1, 0x0, 0xffffff7f00000000}}}, 0xfe40}}, 0x0) [ 1295.708792] kauditd_printk_skb: 25 callbacks suppressed [ 1295.708808] audit: type=1400 audit(1552073018.973:279): avc: denied { create } for pid=28331 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 19:23:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x400000)=nil, 0x400000, 0x1, 0x6012, r2, 0x2800) [ 1295.792125] audit: type=1400 audit(1552073019.013:280): avc: denied { write } for pid=28331 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1295.860391] audit: type=1400 audit(1552073019.013:281): avc: denied { read } for pid=28331 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1295.927799] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:23:39 executing program 3: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000340)=0xfffffffffffffd55) preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0xfb) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000240)="1eba9c2179c6f5df7598b21adeb167aa", 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x800000c0045005, &(0x7f00000004c0)=0x3cb6) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc2c45513, &(0x7f0000000500)={{0x0, 0x0, 0xc29, 0x7de64ffc, 'syz0\x00'}, 0x0, [0x6, 0x7, 0x3, 0x3, 0x3, 0x0, 0x1, 0x3, 0x0, 0x5, 0x3f, 0x0, 0x8, 0x3ec, 0x0, 0x5, 0x1, 0x1800000, 0x5, 0xffffffffffffffff, 0x9, 0x0, 0x1200000, 0x5, 0x6, 0x47d90f0e, 0x0, 0x4, 0x28c0000000000000, 0x9, 0xc2, 0x0, 0x57, 0x0, 0x1, 0x0, 0x6cd, 0x5, 0x2, 0x9, 0x0, 0x886, 0xfff, 0x80, 0x3ff, 0x0, 0x9, 0xd75, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0xffffffffffff8000, 0x20, 0x0, 0x405, 0x814, 0x9, 0x6, 0x100, 0x8, 0x9, 0x0, 0x1, 0x101, 0x101, 0x100000000, 0x8, 0x0, 0x2ee7, 0x401, 0x0, 0x6000000000000000, 0x0, 0x0, 0x0, 0x6, 0x9, 0x0, 0x3, 0x1, 0x0, 0xec, 0x8, 0x0, 0x3, 0x0, 0x6, 0x9, 0xdc75, 0x0, 0xfffffffffffffffe, 0x9f, 0x0, 0x0, 0x0, 0x0, 0xf6a5, 0xf049, 0x200, 0x0, 0xea32, 0x6e6a, 0x0, 0xff, 0x0, 0x20, 0x7164, 0x5, 0x6, 0x0, 0x3ff, 0x7057f9d, 0x0, 0x2, 0x4, 0x4, 0xcd6, 0x0, 0x0, 0x6, 0x0, 0x6], {0x0, 0x989680}}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bond0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'bond0\x00', 0x800000000008a03}) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}, {}, {}, {}], 0x4, 0x4, &(0x7f0000000080)={0x7}, 0x8) ioctl(r1, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:23:39 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x401, 0x34080) write$smack_current(r1, &(0x7f0000000080)='/dev/dri/card#\x00', 0xf) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:23:39 executing program 5: syz_read_part_table(0x7400000000000000, 0x0, 0x0) 19:23:39 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x0, 0x0, {{}, 0x8}}, 0xfe40}}, 0x0) [ 1296.318553] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:23:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f00000000c0)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000080)=0x104310, 0x4) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6012, r3, 0x2000) [ 1296.879928] __loop_clr_fd: partition scan of loop5 failed (rc=-22) [ 1296.910513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1297.090059] ion_mmap: failure mapping buffer to userspace [ 1297.211400] ion_mmap: failure mapping buffer to userspace [ 1297.278105] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:23:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x80000001, 0x3b}) 19:23:41 executing program 5: syz_read_part_table(0x7a00000000000000, 0x0, 0x0) 19:23:41 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x9c400, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000001c0)=""/60, &(0x7f0000000200)=0x3c) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000240)={0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000002c0)={r2, 0x0, 0x7}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)={0x0, 0x80000, r0}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f00000000c0)={r3, r4, 0x9}) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) socket$inet(0x2, 0xf, 0x1) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:23:41 executing program 3: syz_read_part_table(0x7400000000000000, 0x0, 0x0) 19:23:41 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x0, 0x0, {{}, 0xf}}, 0xfe40}}, 0x0) 19:23:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000500)={0x0, 0x5c, "0590c3aec35fb1d71289da1f7b401e317e6744bcb27533700c2b9a1a6580602679c343503a71351f4a3663f0630e55415771a76d0ea7ed2912aa7357961c53a691ced70ced527a72afc12d5ad55e361866188eaab04ff1ef4c9dd03d"}, &(0x7f0000000580)=0x64) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000005c0)={r3, @in6={{0xa, 0x4e20, 0x200, @remote, 0x1}}, 0x5, 0x1000, 0x10000, 0x400000000, 0xd6}, 0x98) [ 1298.708163] __loop_clr_fd: partition scan of loop3 failed (rc=-22) 19:23:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6012, r2, 0x2000) r3 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xfffffffffffffffb, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffff9c, 0xc010640b, &(0x7f0000000080)={0x0, 0x0, 0x8000}) ioctl$DRM_IOCTL_GEM_CLOSE(r3, 0x40086409, &(0x7f00000000c0)={r4}) 19:23:42 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1298.768293] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:23:42 executing program 5: syz_read_part_table(0xf6ffffff00000000, 0x0, 0x0) 19:23:42 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x603, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x6) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:23:42 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x0, 0x0, {{}, 0x10}}, 0xfe40}}, 0x0) [ 1299.476559] ion_mmap: failure mapping buffer to userspace [ 1299.555490] ion_mmap: failure mapping buffer to userspace [ 1299.619896] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:23:42 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20ncci\x00', 0x8680, 0x0) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0xa080, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000080)={0x4, 0x1, 0x6, 'queue0\x00', 0x3}) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1300.097710] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:23:44 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:23:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x80000001, 0x3b}) 19:23:44 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x80001, 0x0) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000080)={'nr0\x00', {0x2, 0x4e22, @rand_addr=0x40}}) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) inotify_init() ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:23:44 executing program 5: syz_read_part_table(0xfcfdffff00000000, 0x0, 0x0) 19:23:44 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x0, 0x0, {{}, 0xf00}}, 0xfe40}}, 0x0) 19:23:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6012, r2, 0x2000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x40100, 0x0) getsockname$ax25(r3, &(0x7f0000000080)={{0x3, @netrom}, [@bcast, @null, @remote, @default, @remote, @null, @null, @default]}, &(0x7f0000000140)=0x48) [ 1301.346348] ion_mmap: failure mapping buffer to userspace [ 1301.449310] ion_mmap: failure mapping buffer to userspace 19:23:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SET_DUMPABLE(0x4, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6012, r2, 0x2000) 19:23:44 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1301.709298] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:23:45 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x8000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000001200)='/dev/full\x00', 0x101000, 0x0) modify_ldt$read(0x0, &(0x7f00000012c0)=""/207, 0xcf) sendto(r1, &(0x7f00000001c0)="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", 0x1000, 0x80, &(0x7f0000000080)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @local}}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) write$P9_RWSTAT(r1, &(0x7f00000011c0)={0x7, 0x7f, 0x2}, 0x7) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) sysfs$1(0x1, &(0x7f0000000040)='/dev/dri/card#\x00') accept4$rose(r1, &(0x7f0000001240)=@full={0xb, @dev, @remote, 0x0, [@netrom, @null, @netrom, @default, @rose, @null]}, &(0x7f0000001280)=0x40, 0x80800) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:23:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x80000001, 0x3b}) 19:23:45 executing program 5: syz_read_part_table(0xfdfdffff00000000, 0x0, 0x0) 19:23:45 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x0, 0x0, {{}, 0x8000000}}, 0xfe40}}, 0x0) 19:23:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x80000001, 0x3b}) [ 1302.107874] __loop_clr_fd: partition scan of loop5 failed (rc=-22) [ 1302.221591] ion_mmap: failure mapping buffer to userspace 19:23:45 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:23:45 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000300)='/dev/snd/pcmC#D#p\x00', 0x6, 0x80) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000340)={0x0, 0xc3, "fad06dae66aca6d063b9c5ec02bbf06899eae7a31c6c3bb85b4adfd8c77622aaaa938b91e28e085c61cf51b6ff2a21b4bdb5dcac5ba1056cedda035a2e99b06e1bc138c3fac55a866665dbec836cc53faf38cda17b4f4fe84eb1093863ad76ced3004c9594ba817df17bbfef63e46daf998893503a2ddd3a8d96478eabcfb527c023802fe8cd811470fe15f23210f2b0bd0c51b17e0eded77fa0cb6bff6dc44235a59a767422d04bc3a490255b6ce3f821dcc155478297c078d3399debd62b021dbcd6"}, &(0x7f0000000440)=0xcb) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000480)={r1, 0x6d, "a8fb4047a8bff91d5b8c8e969972baf030df99893b2ec6973391978a38ae0f373d75ef3b09cc4c8d5c61f01d998f249362d5e4218694ec8a2999e694d44b795a8fa2044857d4cb5573995dda1c27fd415aa489b921c192b4293c0454e81884fa42afdae6e0126682310c2b85fc"}, &(0x7f0000000500)=0x75) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/enforce\x00', 0x40000, 0x0) write$ppp(r3, &(0x7f0000000200)="67abf5ad868026f06499cf8b174b72b010a117a51cdc838e1ef519a2505b4b352741299d9f91250f4e7a0b2a5e296eb96ee9def95633fe5a591acc57a1b04ed5bd801042c3b6bef0feb4a0782bee5f7b5368ef46cb6ffd7397d0df5b5d3e7d9bdb7a8b49eb6c273ef42578dc80e543245eaf811d199663fce47f423d99d36869fe2f1ffff4e4df64745983cddf2b7c7b04b7e0baf953a8dac25b5c58353803395e8f87d59e151f91c48b9a356bc42fc555395c244360d60bd5ba5b945503e36c", 0xc0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000002c0)={0x56aa, 0x4, 0x0, r3}) getsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000140), &(0x7f0000000180)=0x10) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r6, 0x84, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6012, r5, 0x2000) 19:23:45 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x5, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f00000001c0)={0xb0, &(0x7f0000000080)=""/176}) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r1, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1302.767982] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:23:46 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000001, 0x3b}) 19:23:46 executing program 5: syz_read_part_table(0xffffffff00000000, 0x0, 0x0) 19:23:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f00000001c0)=""/4096) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000011c0)={{{@in=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@loopback}}, &(0x7f00000000c0)=0xe8) getresuid(&(0x7f0000000100), &(0x7f00000012c0)=0x0, &(0x7f0000001300)) r4 = geteuid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001340)={{{@in6=@ipv4={[], [], @broadcast}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@remote}}, &(0x7f0000001440)=0xe8) stat(&(0x7f0000001480)='./file0\x00', &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001540)={0x0, 0x0}, &(0x7f0000001580)=0xc) getresgid(&(0x7f00000015c0)=0x0, &(0x7f0000001600), &(0x7f0000001640)) fsetxattr$system_posix_acl(r0, &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000001680)={{}, {0x1, 0x2}, [{0x2, 0x7, r2}, {0x2, 0x4, r3}, {0x2, 0x1, r4}, {0x2, 0x0, r5}, {0x2, 0x3, r6}, {0x2, 0x7, r7}], {}, [{0x8, 0x7, r8}], {0x10, 0x4}, {0x20, 0x4}}, 0x5c, 0x3) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000001700)=0x7) 19:23:46 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x0, 0x0, {{}, 0xf000000}}, 0xfe40}}, 0x0) 19:23:46 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x301000, 0x0) setsockopt$packet_buf(r0, 0x107, 0x1, &(0x7f0000000180)="c9209fe5f0309421eedf63699bbbc11728f63ac840379e789dcfd2cc832ca0122dc363b3abe760e135ea14ab863f5f3c2b280236b72ef4f894c992b9e515befefe94b193765f0e128fef8ec930901ec9fd6529a4c295652a7c2817f93177f576e5112e21f6eec9ace90ea79e9ef0780f1d12305fab777cc9a32ce08822a60c56a97ba9f64fd8a552d0f17250ba9e03783a", 0x91) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000300)={0x56aa, 0x3d, 0x0, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'syzkaller1\x00', &(0x7f0000000080)=@ethtool_test={0x1a, 0x2, 0x9a3c, 0x7, [0x2, 0x9, 0xffffffffffffff80, 0x0, 0x9, 0x400, 0x1f]}}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6012, r3, 0x2000) ioctl$KDGKBENT(r2, 0x4b46, &(0x7f0000000240)={0x0, 0x10001}) [ 1303.177750] __loop_clr_fd: partition scan of loop5 failed (rc=-22) 19:23:46 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x4000000000000000, 0x0, 0x7, 0x200000, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f0000000080)=0x9) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:23:47 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000001) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1303.698058] __loop_clr_fd: partition scan of loop5 failed (rc=-22) [ 1303.709266] ion_mmap: failure mapping buffer to userspace [ 1303.742176] audit: type=1400 audit(1552073026.993:282): avc: denied { map } for pid=29082 comm="modprobe" path="/bin/kmod" dev="sda1" ino=1440 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1303.844776] audit: type=1400 audit(1552073027.043:283): avc: denied { map } for pid=29082 comm="modprobe" path="/bin/kmod" dev="sda1" ino=1440 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 19:23:47 executing program 5: syz_read_part_table(0xffffffffffffffff, 0x0, 0x0) [ 1303.971262] audit: type=1400 audit(1552073027.083:284): avc: denied { map } for pid=29082 comm="modprobe" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1304.091382] audit: type=1400 audit(1552073027.093:285): avc: denied { map } for pid=29082 comm="modprobe" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 19:23:47 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x0, 0x0, {{}, 0x10000000}}, 0xfe40}}, 0x0) [ 1304.287785] __loop_clr_fd: partition scan of loop5 failed (rc=-22) [ 1304.309720] audit: type=1400 audit(1552073027.103:286): avc: denied { map } for pid=29082 comm="modprobe" path="/etc/ld.so.cache" dev="sda1" ino=2503 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 19:23:47 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x8a6, 0x0) socket$kcm(0x2, 0xa, 0x300) socket$kcm(0xa, 0x20000000000003, 0x11) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg(r1, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000100)={0x8, 0x4, 0x3, 0xfff}, 0x10) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x301000, 0x0) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, 0x0) close(r2) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000380)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;<\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xc6\x0f\xd7\x14\x0f\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4N') r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00\x00\x00t\xca\x1bq\x032-x\x00', 0x802}) tee(r4, r4, 0x8, 0x1) ioctl$TUNSETVNETLE(r5, 0x400454dc, &(0x7f00000000c0)=0x1) syz_open_dev$vivid(&(0x7f0000000140)='/dev/video#\x00', 0x1, 0x2) write$cgroup_int(r5, &(0x7f00000002c0), 0x12) socket$kcm(0x2, 0x0, 0x2) ioctl$VIDIOC_DBG_S_REGISTER(r1, 0x4038564f, &(0x7f0000000040)={{0x3, @addr=0xbd73}, 0x8, 0x1, 0x6}) getsockname$packet(r1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000200)={0x3, 0x3, 0x7, 0x3, 0x1}) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:23:47 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000080), &(0x7f00000000c0)=0x30) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1304.497105] audit: type=1400 audit(1552073027.163:287): avc: denied { map } for pid=29082 comm="modprobe" path="/lib/x86_64-linux-gnu/libkmod.so.2.1.3" dev="sda1" ino=2811 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1304.524614] ion_mmap: failure mapping buffer to userspace 19:23:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x2000, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000080)={0x1, 0xffffffffffff0001, 0x1, 0xd3}, 0x8) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6012, r3, 0x2000) [ 1304.680397] audit: type=1400 audit(1552073027.173:288): avc: denied { map } for pid=29082 comm="modprobe" path="/lib/x86_64-linux-gnu/libkmod.so.2.1.3" dev="sda1" ino=2811 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1304.876918] audit: type=1400 audit(1552073027.223:289): avc: denied { map } for pid=29082 comm="modprobe" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1305.013539] audit: type=1400 audit(1552073027.263:290): avc: denied { map } for pid=29082 comm="modprobe" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1305.153844] audit: type=1400 audit(1552073027.483:291): avc: denied { map } for pid=29179 comm="modprobe" path="/bin/kmod" dev="sda1" ino=1440 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1305.187767] __loop_clr_fd: partition scan of loop5 failed (rc=-22) [ 1305.646619] __loop_clr_fd: partition scan of loop5 failed (rc=-22) [ 1305.777997] ion_mmap: failure mapping buffer to userspace [ 1305.865130] ion_mmap: failure mapping buffer to userspace 19:23:50 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000001, 0x3b}) 19:23:50 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) dup3(r2, r1, 0x0) 19:23:50 executing program 5: syz_read_part_table(0x0, 0x2, 0x0) 19:23:50 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x2, 0x100) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000100)=0x304e) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x0, 0x2000) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x101ff, 0x2, 0x100004, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) 19:23:50 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x0, 0x0, {{}, 0x8dffffff}}, 0xfe40}}, 0x0) 19:23:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008913, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x1, 0xffffffffffffffff}) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000080)={0x0, 0x80000}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f00000000c0)={r5, 0x80000, r1}) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x6012, r3, 0x2000) 19:23:50 executing program 5: syz_read_part_table(0x0, 0x3, 0x0) 19:23:50 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000001, 0x3b}) 19:23:50 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200400, 0x0) write$capi20(r0, &(0x7f0000000080)={0x10, 0xc52b, 0x87, 0x81, 0x0, 0x6}, 0x10) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, 0x0) ioctl(r2, 0xfffffbfffff1ffa7, &(0x7f0000000140)) 19:23:50 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x0, 0x0, {{}, 0xf0ffffff}}, 0xfe40}}, 0x0) 19:23:51 executing program 5: syz_read_part_table(0x0, 0x4, 0x0) 19:23:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1, &(0x7f0000000340)="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") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x2000000000001, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x4, 0x810, r2, 0x2000) r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x100, 0xc00) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000040)={0x2, [0x0, 0x0]}, &(0x7f00000000c0)=0xc) [ 1308.971664] syz-executor.0: page allocation failure: order:4, mode:0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 1308.978091] syz-executor.3: page allocation failure: order:4, mode:0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 1309.034114] CPU: 1 PID: 29385 Comm: syz-executor.0 Not tainted 5.0.0+ #12 [ 1309.041088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1309.050449] Call Trace: [ 1309.053055] dump_stack+0x172/0x1f0 [ 1309.056701] warn_alloc.cold+0x87/0x17f [ 1309.060686] ? zone_watermark_ok_safe+0x260/0x260 [ 1309.065555] ? get_page_from_freelist+0x4170/0x4170 [ 1309.070584] ? __isolate_free_page+0x4c0/0x4c0 [ 1309.075202] ? mutex_unlock+0xd/0x10 [ 1309.078935] ? drain_all_pages+0x408/0x590 [ 1309.083205] __alloc_pages_slowpath+0x231d/0x28b0 [ 1309.088183] ? warn_alloc+0x110/0x110 [ 1309.091996] ? find_held_lock+0x35/0x130 [ 1309.096079] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1309.101632] ? should_fail+0x1de/0x852 [ 1309.105545] ? __isolate_free_page+0x4c0/0x4c0 [ 1309.110145] ? ___might_sleep+0x163/0x280 [ 1309.114321] __alloc_pages_nodemask+0x57e/0x7e0 [ 1309.119013] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1309.124058] ? wait_for_completion+0x440/0x440 [ 1309.128660] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1309.134217] alloc_pages_current+0x107/0x210 [ 1309.138727] ion_page_pool_alloc+0x137/0x1d0 [ 1309.143166] ion_system_heap_allocate+0x165/0xaa0 [ 1309.148032] ? ion_system_heap_free+0x250/0x250 [ 1309.152724] ? ion_ioctl+0xa3c/0xf70 [ 1309.156456] ion_ioctl+0x3d8/0xf70 [ 1309.160024] ? _ion_buffer_destroy+0x110/0x110 [ 1309.164626] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1309.169760] ? ___might_sleep+0x163/0x280 [ 1309.173939] ? _ion_buffer_destroy+0x110/0x110 [ 1309.178539] do_vfs_ioctl+0xd6e/0x1390 [ 1309.182445] ? ioctl_preallocate+0x210/0x210 [ 1309.186860] ? selinux_file_mprotect+0x620/0x620 [ 1309.191639] ? ksys_dup3+0x3e0/0x3e0 [ 1309.195454] ? nsecs_to_jiffies+0x30/0x30 [ 1309.199619] ? tomoyo_file_ioctl+0x23/0x30 [ 1309.203866] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1309.209413] ? security_file_ioctl+0x93/0xc0 [ 1309.213831] ksys_ioctl+0xab/0xd0 [ 1309.217298] __x64_sys_ioctl+0x73/0xb0 [ 1309.221204] do_syscall_64+0x103/0x610 [ 1309.225103] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1309.230322] RIP: 0033:0x457f29 [ 1309.233523] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1309.252461] RSP: 002b:00007f7e0f635c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1309.260191] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457f29 [ 1309.267475] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1309.274754] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1309.282030] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7e0f6366d4 [ 1309.289304] R13: 00000000004c078b R14: 00000000004d24c0 R15: 00000000ffffffff [ 1309.306941] CPU: 0 PID: 29429 Comm: syz-executor.3 Not tainted 5.0.0+ #12 [ 1309.313913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1309.322667] Mem-Info: [ 1309.323292] Call Trace: [ 1309.323315] dump_stack+0x172/0x1f0 [ 1309.323336] warn_alloc.cold+0x87/0x17f [ 1309.325882] active_anon:150695 inactive_anon:190 isolated_anon:19 [ 1309.325882] active_file:4220 inactive_file:3797 isolated_file:0 [ 1309.325882] unevictable:0 dirty:74 writeback:0 unstable:0 [ 1309.325882] slab_reclaimable:20206 slab_unreclaimable:100455 [ 1309.325882] mapped:58867 shmem:246 pagetables:2391 bounce:0 [ 1309.325882] free:146919 free_pcp:228 free_cma:0 [ 1309.328325] ? zone_watermark_ok_safe+0x260/0x260 [ 1309.328350] ? get_page_from_freelist+0x4170/0x4170 [ 1309.328366] ? __isolate_free_page+0x4c0/0x4c0 [ 1309.328380] ? mutex_unlock+0xd/0x10 [ 1309.328394] ? drain_all_pages+0x408/0x590 [ 1309.328415] __alloc_pages_slowpath+0x231d/0x28b0 [ 1309.328447] ? warn_alloc+0x110/0x110 [ 1309.328460] ? find_held_lock+0x35/0x130 [ 1309.328480] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1309.328494] ? should_fail+0x1de/0x852 [ 1309.328512] ? __isolate_free_page+0x4c0/0x4c0 [ 1309.328526] ? ___might_sleep+0x163/0x280 [ 1309.328549] __alloc_pages_nodemask+0x57e/0x7e0 [ 1309.328569] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1309.328592] ? wait_for_completion+0x440/0x440 [ 1309.328608] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1309.341988] Node 0 active_anon:602780kB inactive_anon:760kB active_file:16744kB inactive_file:15164kB unevictable:0kB isolated(anon):76kB isolated(file):0kB mapped:235468kB dirty:296kB writeback:0kB shmem:984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 296960kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1309.369904] alloc_pages_current+0x107/0x210 [ 1309.369928] ion_page_pool_alloc+0x137/0x1d0 [ 1309.369944] ion_system_heap_allocate+0x165/0xaa0 [ 1309.369964] ? ion_system_heap_free+0x250/0x250 [ 1309.369981] ? ion_ioctl+0xa3c/0xf70 [ 1309.369999] ion_ioctl+0x3d8/0xf70 [ 1309.370022] ? _ion_buffer_destroy+0x110/0x110 [ 1309.370044] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1309.370077] ? _ion_buffer_destroy+0x110/0x110 [ 1309.370095] do_vfs_ioctl+0xd6e/0x1390 [ 1309.370114] ? ioctl_preallocate+0x210/0x210 [ 1309.370129] ? selinux_file_mprotect+0x620/0x620 [ 1309.370149] ? ksys_dup3+0x3e0/0x3e0 [ 1309.381348] Node 1 active_anon:0kB inactive_anon:0kB active_file:136kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1309.384593] ? nsecs_to_jiffies+0x30/0x30 [ 1309.384616] ? tomoyo_file_ioctl+0x23/0x30 [ 1309.384644] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1309.389832] Node 0 DMA free:10496kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1309.392575] ? security_file_ioctl+0x93/0xc0 [ 1309.392596] ksys_ioctl+0xab/0xd0 [ 1309.392615] __x64_sys_ioctl+0x73/0xb0 [ 1309.392643] do_syscall_64+0x103/0x610 [ 1309.402598] lowmem_reserve[]: 0 2553 2555 2555 [ 1309.405330] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1309.405343] RIP: 0033:0x457f29 [ 1309.405358] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1309.405370] RSP: 002b:00007f38a954ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1309.412535] Node 0 DMA32 free:377224kB min:97672kB low:106728kB high:115784kB active_anon:602748kB inactive_anon:760kB active_file:16744kB inactive_file:15164kB unevictable:0kB writepending:296kB present:3129332kB managed:2617984kB mlocked:0kB kernel_stack:8896kB pagetables:9564kB bounce:0kB free_pcp:1144kB local_pcp:896kB free_cma:0kB [ 1309.414779] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457f29 [ 1309.414789] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1309.414798] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1309.414807] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f38a954f6d4 [ 1309.414816] R13: 00000000004c078b R14: 00000000004d24c0 R15: 00000000ffffffff [ 1309.717420] lowmem_reserve[]: 0 0 2 2 [ 1309.721242] Node 0 Normal free:12kB min:28kB low:32kB high:36kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2204kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1309.747280] lowmem_reserve[]: 0 0 0 0 [ 1309.751109] Node 1 Normal free:580116kB min:53624kB low:67028kB high:80432kB active_anon:0kB inactive_anon:0kB active_file:136kB inactive_file:24kB unevictable:0kB writepending:0kB present:3932160kB managed:3870184kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1309.789026] lowmem_reserve[]: 0 0 0 0 [ 1309.792887] Node 0 DMA: 2*4kB (UE) 1*8kB (E) 1*16kB (E) 1*32kB (E) 1*64kB (E) 3*128kB (UE) 3*256kB (UE) 2*512kB (UE) 3*1024kB (UE) 2*2048kB (ME) 1*4096kB (U) = 13568kB [ 1309.831588] Node 0 DMA32: 2012*4kB (ME) 773*8kB (MEH) 1525*16kB (UMEH) 1923*32kB (UMEH) 187*64kB (UMH) 24*128kB (UMH) 14*256kB (UMH) 7*512kB (UMH) 163*1024kB (UM) 31*2048kB (U) 10*4096kB (U) = 393736kB [ 1309.871072] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1309.896908] Node 1 Normal: 69*4kB (UME) 150*8kB (UM) 249*16kB (UME) 68*32kB (UME) 6*64kB (UM) 6*128kB (UME) 2*256kB (UM) 4*512kB (UME) 225*1024kB (UME) 41*2048kB (U) 78*4096kB (UM) = 645204kB [ 1309.936761] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1309.956893] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1309.976939] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1309.985831] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1310.002280] 8271 total pagecache pages [ 1310.006213] 0 pages in swap cache [ 1310.022210] Swap cache stats: add 0, delete 0, find 0/0 [ 1310.042261] Free swap = 0kB [ 1310.045400] Total swap = 0kB [ 1310.053579] 1965979 pages RAM [ 1310.056786] 0 pages HighMem/MovableOnly [ 1310.083153] 339409 pages reserved [ 1310.086730] 0 pages cma reserved [ 1312.452773] syz-fuzzer invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1312.481699] CPU: 0 PID: 8158 Comm: syz-fuzzer Not tainted 5.0.0+ #12 [ 1312.488231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1312.497586] Call Trace: [ 1312.500185] dump_stack+0x172/0x1f0 [ 1312.503826] dump_header+0x10f/0xb6c [ 1312.507551] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1312.512673] ? ___ratelimit+0x60/0x595 [ 1312.516571] ? do_raw_spin_unlock+0x57/0x270 [ 1312.520991] oom_kill_process.cold+0x10/0x15 [ 1312.525421] out_of_memory+0x79a/0x1280 [ 1312.529417] ? oom_killer_disable+0x280/0x280 [ 1312.533926] ? mutex_trylock+0x18e/0x1e0 [ 1312.538001] ? __alloc_pages_slowpath+0xcd9/0x28b0 [ 1312.542945] __alloc_pages_slowpath+0x2199/0x28b0 [ 1312.547824] ? warn_alloc+0x110/0x110 [ 1312.551634] ? find_held_lock+0x35/0x130 [ 1312.555708] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1312.561256] ? should_fail+0x1de/0x852 [ 1312.565161] __alloc_pages_nodemask+0x57e/0x7e0 [ 1312.569843] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1312.574866] ? find_held_lock+0x35/0x130 [ 1312.578933] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1312.584478] alloc_pages_current+0x107/0x210 [ 1312.588899] __page_cache_alloc+0x2bd/0x460 [ 1312.593219] ? kasan_check_read+0x11/0x20 [ 1312.597373] filemap_fault+0xff7/0x2400 [ 1312.601347] ? xas_load+0x67/0x150 [ 1312.604901] ? __lock_page_or_retry+0x1020/0x1020 [ 1312.609751] ? lock_acquire+0x16f/0x3f0 [ 1312.613728] ? ext4_filemap_fault+0x7b/0xaf [ 1312.618060] ext4_filemap_fault+0x83/0xaf [ 1312.622209] __do_fault+0x116/0x4e0 [ 1312.625839] __handle_mm_fault+0x2c5e/0x3eb0 [ 1312.630273] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1312.635115] ? find_held_lock+0x35/0x130 [ 1312.639175] ? handle_mm_fault+0x322/0xb30 [ 1312.643433] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1312.648976] ? kasan_check_read+0x11/0x20 [ 1312.653132] handle_mm_fault+0x43f/0xb30 [ 1312.657206] __do_page_fault+0x5da/0xd60 [ 1312.661293] do_page_fault+0x71/0x581 [ 1312.665095] ? page_fault+0x8/0x30 [ 1312.668644] page_fault+0x1e/0x30 [ 1312.672102] RIP: 0033:0x4375fe [ 1312.675302] Code: Bad RIP value. [ 1312.678667] RSP: 002b:000000c420035f38 EFLAGS: 00010297 [ 1312.684034] RAX: 0000000000002710 RBX: 0000000000000008 RCX: 000000000000004e [ 1312.691316] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1312.698583] RBP: 000000c420035fb0 R08: 000000c420035f18 R09: 0000000000000000 [ 1312.705869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000430120 [ 1312.713138] R13: 00000000000000f1 R14: 0000000000000011 R15: 0000000000000000 [ 1312.731200] Mem-Info: [ 1312.733707] active_anon:150687 inactive_anon:190 isolated_anon:0 [ 1312.733707] active_file:19 inactive_file:10 isolated_file:0 [ 1312.733707] unevictable:0 dirty:3 writeback:0 unstable:0 [ 1312.733707] slab_reclaimable:20160 slab_unreclaimable:98235 [ 1312.733707] mapped:52216 shmem:246 pagetables:2355 bounce:0 [ 1312.733707] free:24956 free_pcp:134 free_cma:0 [ 1312.777126] Node 0 active_anon:602740kB inactive_anon:760kB active_file:28kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:0kB writeback:0kB shmem:984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 296960kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1312.834782] Node 1 active_anon:8kB inactive_anon:0kB active_file:16kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1312.896126] Node 0 DMA free:10412kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1312.947378] lowmem_reserve[]: 0 2553 2555 2555 [ 1312.952025] Node 0 DMA32 free:35824kB min:36232kB low:45288kB high:54344kB active_anon:602740kB inactive_anon:760kB active_file:28kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2617984kB mlocked:0kB kernel_stack:8800kB pagetables:9420kB bounce:0kB free_pcp:340kB local_pcp:300kB free_cma:0kB [ 1312.993384] lowmem_reserve[]: 0 0 2 2 [ 1313.026750] Node 0 Normal free:12kB min:28kB low:32kB high:36kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2204kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1313.070681] lowmem_reserve[]: 0 0 0 0 [ 1313.074539] Node 1 Normal free:53576kB min:53624kB low:67028kB high:80432kB active_anon:8kB inactive_anon:0kB active_file:16kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870184kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 1313.133664] lowmem_reserve[]: 0 0 0 0 [ 1313.137708] Node 0 DMA: 1*4kB (E) 1*8kB (E) 2*16kB (UE) 2*32kB (UE) 1*64kB (E) 2*128kB (UE) 1*256kB (E) 1*512kB (E) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 10412kB [ 1313.182183] Node 0 DMA32: 2450*4kB (UME) 912*8kB (UMEH) 358*16kB (UMEH) 242*32kB (UMEH) 65*64kB (UMH) 1*128kB (H) 1*256kB (H) 2*512kB (H) 0*1024kB 0*2048kB 0*4096kB = 36136kB [ 1313.266464] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1313.297247] Node 1 Normal: 6*4kB (UME) 2*8kB (M) 4*16kB (ME) 5*32kB (UME) 3*64kB (M) 3*128kB (ME) 2*256kB (M) 2*512kB (ME) 4*1024kB (UME) 1*2048kB (U) 11*4096kB (UM) = 53576kB [ 1313.324653] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1313.352585] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1313.361371] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1313.384710] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1313.395279] 262 total pagecache pages [ 1313.399315] 0 pages in swap cache [ 1313.402773] Swap cache stats: add 0, delete 0, find 0/0 [ 1313.443233] Free swap = 0kB [ 1313.446535] Total swap = 0kB [ 1313.466409] 1965979 pages RAM [ 1313.481646] 0 pages HighMem/MovableOnly [ 1313.486052] 339409 pages reserved [ 1313.504483] 0 pages cma reserved [ 1313.539057] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/syz2,task=syz-executor.2,pid=12961,uid=0 [ 1313.581112] Out of memory: Killed process 12961 (syz-executor.2) total-vm:72828kB, anon-rss:4256kB, file-rss:34816kB, shmem-rss:0kB [ 1313.683067] oom_reaper: reaped process 29385 (syz-executor.0), now anon-rss:0kB, file-rss:34688kB, shmem-rss:0kB [ 1313.730712] binder: undelivered TRANSACTION_ERROR: 29189 [ 1313.803527] init invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1313.824889] CPU: 0 PID: 1 Comm: init Not tainted 5.0.0+ #12 [ 1313.830661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1313.840025] Call Trace: [ 1313.842647] dump_stack+0x172/0x1f0 [ 1313.846298] dump_header+0x10f/0xb6c [ 1313.850556] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1313.855677] ? ___ratelimit+0x60/0x595 [ 1313.859574] ? do_raw_spin_unlock+0x57/0x270 [ 1313.863997] oom_kill_process.cold+0x10/0x15 [ 1313.868420] out_of_memory+0x79a/0x1280 [ 1313.872411] ? oom_killer_disable+0x280/0x280 [ 1313.876927] ? mutex_trylock+0x18e/0x1e0 [ 1313.881001] ? __alloc_pages_slowpath+0xcd9/0x28b0 [ 1313.885943] __alloc_pages_slowpath+0x2199/0x28b0 [ 1313.890814] ? warn_alloc+0x110/0x110 [ 1313.894622] ? find_held_lock+0x35/0x130 [ 1313.898712] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1313.904259] ? should_fail+0x1de/0x852 [ 1313.908175] __alloc_pages_nodemask+0x57e/0x7e0 [ 1313.912857] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1313.917883] ? find_held_lock+0x35/0x130 [ 1313.921956] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1313.927507] alloc_pages_current+0x107/0x210 [ 1313.931934] __page_cache_alloc+0x2bd/0x460 [ 1313.936262] ? kasan_check_read+0x11/0x20 [ 1313.940426] filemap_fault+0xff7/0x2400 [ 1313.944412] ? xas_load+0x67/0x150 [ 1313.947974] ? __lock_page_or_retry+0x1020/0x1020 [ 1313.952831] ? lock_acquire+0x16f/0x3f0 [ 1313.957666] ? ext4_filemap_fault+0x7b/0xaf [ 1313.962014] ext4_filemap_fault+0x83/0xaf [ 1313.966173] __do_fault+0x116/0x4e0 [ 1313.969813] __handle_mm_fault+0x2c5e/0x3eb0 [ 1313.974242] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1313.979094] ? find_held_lock+0x35/0x130 [ 1313.983161] ? handle_mm_fault+0x322/0xb30 [ 1313.987419] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1313.992996] ? kasan_check_read+0x11/0x20 [ 1313.997158] handle_mm_fault+0x43f/0xb30 [ 1314.001237] __do_page_fault+0x5da/0xd60 [ 1314.005319] do_page_fault+0x71/0x581 [ 1314.009144] ? page_fault+0x8/0x30 [ 1314.012711] page_fault+0x1e/0x30 [ 1314.016173] RIP: 0033:0x7fd959e6ffe0 [ 1314.019904] Code: Bad RIP value. [ 1314.023270] RSP: 002b:00007ffe213a56e8 EFLAGS: 00010206 [ 1314.026974] syz-executor.0: page allocation failure: order:0, mode:0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 1314.028636] RAX: 0000000000000000 RBX: 00007ffe213a5810 RCX: 00007fd959ea8dd3 [ 1314.050158] RDX: 0000000000000000 RSI: 00007ffe213a5620 RDI: 00007ffe213a5810 [ 1314.057439] RBP: 0000000000000000 R08: 00007ffe213a56a0 R09: 0000000000000001 [ 1314.064706] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1314.071977] R13: 00007ffe213a5a00 R14: 0000000000000000 R15: 0000000000000000 [ 1314.083053] CPU: 1 PID: 29385 Comm: syz-executor.0 Not tainted 5.0.0+ #12 [ 1314.090005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1314.099361] Call Trace: [ 1314.101958] dump_stack+0x172/0x1f0 [ 1314.105256] Mem-Info: [ 1314.105596] warn_alloc.cold+0x87/0x17f [ 1314.108052] active_anon:149103 inactive_anon:190 isolated_anon:0 [ 1314.108052] active_file:47 inactive_file:4 isolated_file:0 [ 1314.108052] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1314.108052] slab_reclaimable:20148 slab_unreclaimable:98174 [ 1314.108052] mapped:52276 shmem:246 pagetables:2355 bounce:0 [ 1314.108052] free:14545 free_pcp:149 free_cma:0 [ 1314.111971] ? zone_watermark_ok_safe+0x260/0x260 [ 1314.144914] Node 0 active_anon:596404kB inactive_anon:760kB active_file:112kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:209004kB dirty:0kB writeback:0kB shmem:984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 296960kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1314.149722] ? mark_held_locks+0xa4/0xf0 [ 1314.149760] __alloc_pages_slowpath+0x231d/0x28b0 [ 1314.177233] Node 1 active_anon:8kB inactive_anon:0kB active_file:76kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:100kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1314.181262] ? warn_alloc+0x110/0x110 [ 1314.186059] Node 0 DMA free:10328kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1314.212111] ? find_held_lock+0x35/0x130 [ 1314.212132] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1314.212146] ? should_fail+0x1de/0x852 [ 1314.212183] __alloc_pages_nodemask+0x57e/0x7e0 [ 1314.215958] lowmem_reserve[]: 0 2553 2555 2555 [ 1314.242089] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1314.242112] ? wait_for_completion+0x440/0x440 [ 1314.242131] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1314.246185] Node 0 DMA32 free:21296kB min:44424kB low:53480kB high:62536kB active_anon:596404kB inactive_anon:760kB active_file:64kB inactive_file:68kB unevictable:0kB writepending:0kB present:3129332kB managed:2617984kB mlocked:0kB kernel_stack:8800kB pagetables:9420kB bounce:0kB free_pcp:348kB local_pcp:0kB free_cma:0kB [ 1314.251735] alloc_pages_current+0x107/0x210 [ 1314.251758] ion_page_pool_alloc+0x137/0x1d0 [ 1314.251775] ion_system_heap_allocate+0x165/0xaa0 [ 1314.255665] lowmem_reserve[]: 0 0 2 2 [ 1314.260374] ? ion_system_heap_free+0x250/0x250 [ 1314.260392] ? ion_ioctl+0xa3c/0xf70 [ 1314.260410] ion_ioctl+0x3d8/0xf70 [ 1314.264998] Node 0 Normal free:12kB min:28kB low:32kB high:36kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2204kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1314.270031] ? _ion_buffer_destroy+0x110/0x110 [ 1314.270058] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1314.274620] lowmem_reserve[]: 0 0 0 0 [ 1314.280177] ? ___might_sleep+0x163/0x280 [ 1314.280200] ? _ion_buffer_destroy+0x110/0x110 [ 1314.308861] Node 1 Normal free:26544kB min:53624kB low:67028kB high:80432kB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870184kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 1314.313239] do_vfs_ioctl+0xd6e/0x1390 [ 1314.317668] lowmem_reserve[]: 0 0 0 0 [ 1314.322476] ? ioctl_preallocate+0x210/0x210 [ 1314.326253] Node 0 DMA: 2*4kB (UE) 2*8kB (UE) 2*16kB (UE) 1*32kB (E) 2*64kB (UE) 1*128kB (E) 1*256kB (E) 1*512kB (E) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 10328kB [ 1314.330924] ? selinux_file_mprotect+0x620/0x620 [ 1314.330946] ? ksys_dup3+0x3e0/0x3e0 [ 1314.330965] ? nsecs_to_jiffies+0x30/0x30 [ 1314.334668] Node 0 DMA32: 1895*4kB (UME) 545*8kB (MEH) 194*16kB (UME) 139*32kB (UMH) 4*64kB (H) 1*128kB (H) 1*256kB (H) 2*512kB (H) 0*1024kB 0*2048kB 0*4096kB = 21156kB [ 1314.338222] ? tomoyo_file_ioctl+0x23/0x30 [ 1314.338239] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1314.338256] ? security_file_ioctl+0x93/0xc0 [ 1314.364163] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1314.368726] ksys_ioctl+0xab/0xd0 [ 1314.368746] __x64_sys_ioctl+0x73/0xb0 [ 1314.373833] Node 1 Normal: 6*4kB (UME) 2*8kB (M) 5*16kB (UME) 5*32kB (UME) 3*64kB (M) 4*128kB (UME) 2*256kB (M) 3*512kB (UME) 3*1024kB (ME) 0*2048kB 5*4096kB (M) = 26584kB [ 1314.377639] do_syscall_64+0x103/0x610 [ 1314.377661] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1314.377673] RIP: 0033:0x457f29 [ 1314.377699] Code: Bad RIP value. [ 1314.381831] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1314.386400] RSP: 002b:00007f7e0f635c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1314.413882] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1314.417718] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457f29 [ 1314.417728] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1314.417736] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1314.417745] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7e0f6366d4 [ 1314.417757] R13: 00000000004c078b R14: 00000000004d24c0 R15: 00000000ffffffff [ 1314.421554] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1314.451642] warn_alloc_show_mem: 1 callbacks suppressed [ 1314.451648] Mem-Info: [ 1314.544765] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1314.583418] active_anon:149099 inactive_anon:190 isolated_anon:0 [ 1314.583418] active_file:14 inactive_file:12 isolated_file:0 [ 1314.583418] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1314.583418] slab_reclaimable:20065 slab_unreclaimable:98061 [ 1314.583418] mapped:52226 shmem:246 pagetables:2327 bounce:0 [ 1314.583418] free:14669 free_pcp:81 free_cma:0 [ 1314.637291] 272 total pagecache pages [ 1314.677659] 0 pages in swap cache [ 1314.681157] Swap cache stats: add 0, delete 0, find 0/0 [ 1314.686516] Free swap = 0kB [ 1314.697032] Node 0 active_anon:596388kB inactive_anon:760kB active_file:52kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:0kB writeback:0kB shmem:984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 292864kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1314.707057] Total swap = 0kB [ 1314.734013] 1965979 pages RAM [ 1314.739293] 0 pages HighMem/MovableOnly [ 1314.743306] 339409 pages reserved [ 1314.746214] Node 1 active_anon:8kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1314.746760] 0 pages cma reserved [ 1314.799832] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/syz0,task=syz-executor.0,pid=25754,uid=0 [ 1314.812048] Node 0 DMA free:10328kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1314.832885] Out of memory: Killed process 25754 (syz-executor.0) total-vm:72840kB, anon-rss:2224kB, file-rss:34816kB, shmem-rss:0kB [ 1314.896808] lowmem_reserve[]: 0 2553 2555 2555 [ 1314.934754] rsyslogd invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1314.961948] CPU: 1 PID: 8010 Comm: rsyslogd Not tainted 5.0.0+ #12 [ 1314.968313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1314.977673] Call Trace: [ 1314.980276] dump_stack+0x172/0x1f0 [ 1314.983920] dump_header+0x10f/0xb6c [ 1314.987656] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1314.989446] Node 0 DMA32 free:24208kB min:36232kB low:45288kB high:54344kB active_anon:594268kB inactive_anon:760kB active_file:52kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2617984kB mlocked:0kB kernel_stack:8768kB pagetables:9308kB bounce:0kB free_pcp:500kB local_pcp:0kB free_cma:0kB [ 1314.992790] ? ___ratelimit+0x60/0x595 [ 1315.025325] ? do_raw_spin_unlock+0x57/0x270 [ 1315.029752] oom_kill_process.cold+0x10/0x15 [ 1315.034188] out_of_memory+0x79a/0x1280 [ 1315.038189] ? oom_killer_disable+0x280/0x280 [ 1315.038216] lowmem_reserve[]: 0 0 2 2 [ 1315.042698] ? mutex_trylock+0x18e/0x1e0 [ 1315.046491] Node 0 Normal free:12kB min:28kB low:32kB high:36kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2204kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1315.050551] ? __alloc_pages_slowpath+0xcd9/0x28b0 [ 1315.050568] __alloc_pages_slowpath+0x2199/0x28b0 [ 1315.050613] ? warn_alloc+0x110/0x110 [ 1315.050640] ? find_held_lock+0x35/0x130 [ 1315.076543] lowmem_reserve[]: 0 0 0 0 [ 1315.081455] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1315.081469] ? should_fail+0x1de/0x852 [ 1315.081499] __alloc_pages_nodemask+0x57e/0x7e0 [ 1315.086342] Node 1 Normal free:26832kB min:53624kB low:67028kB high:80432kB active_anon:8kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870184kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1315.090155] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1315.090175] ? find_held_lock+0x35/0x130 [ 1315.090194] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1315.094275] lowmem_reserve[]: 0 0 0 0 [ 1315.098082] alloc_pages_current+0x107/0x210 [ 1315.098102] __page_cache_alloc+0x2bd/0x460 [ 1315.098117] ? kasan_check_read+0x11/0x20 [ 1315.098135] filemap_fault+0xff7/0x2400 [ 1315.103665] Node 0 DMA: 2*4kB (UE) 2*8kB (UE) 2*16kB (UE) 1*32kB (E) 2*64kB (UE) 1*128kB (E) 1*256kB (E) 1*512kB (E) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 10328kB [ 1315.107548] ? xas_load+0x67/0x150 [ 1315.107582] ? __lock_page_or_retry+0x1020/0x1020 [ 1315.112231] Node 0 DMA32: 1968*4kB (ME) 584*8kB (UMEH) 201*16kB (UME) 149*32kB (UMH) 4*64kB (H) 1*128kB (H) 1*256kB (H) 2*512kB (H) 0*1024kB 1*2048kB (M) 0*4096kB = 24240kB [ 1315.139503] ? lock_acquire+0x16f/0x3f0 [ 1315.139518] ? ext4_filemap_fault+0x7b/0xaf [ 1315.139541] ext4_filemap_fault+0x83/0xaf [ 1315.139559] __do_fault+0x116/0x4e0 [ 1315.144580] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1315.148650] __handle_mm_fault+0x2c5e/0x3eb0 [ 1315.148671] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1315.148687] ? find_held_lock+0x35/0x130 [ 1315.154213] Node 1 Normal: 6*4kB (UME) 3*8kB (UM) 4*16kB (ME) 5*32kB (UME) 3*64kB (M) 4*128kB (UME) 3*256kB (UM) 3*512kB (UME) 3*1024kB (ME) 0*2048kB 5*4096kB (M) = 26832kB [ 1315.158009] ? handle_mm_fault+0x322/0xb30 [ 1315.158034] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1315.158052] ? kasan_check_read+0x11/0x20 [ 1315.162461] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1315.166794] handle_mm_fault+0x43f/0xb30 [ 1315.171002] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1315.174930] __do_page_fault+0x5da/0xd60 [ 1315.189970] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1315.193469] do_page_fault+0x71/0x581 [ 1315.198323] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1315.213814] ? page_fault+0x8/0x30 [ 1315.213830] page_fault+0x1e/0x30 [ 1315.213841] RIP: 0033:0x7fba45094a54 [ 1315.213866] Code: Bad RIP value. [ 1315.217854] 272 total pagecache pages [ 1315.222141] RSP: 002b:00007fba42cc5d68 EFLAGS: 00010202 [ 1315.226282] 0 pages in swap cache [ 1315.229889] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000001 [ 1315.229898] RDX: 00007fba444fa5a0 RSI: 000000000000003c RDI: 00007fba442f8621 [ 1315.229906] RBP: 000000000000003c R08: 00007fba442f8620 R09: 0000000000000000 [ 1315.229913] R10: 30205d3033373638 R11: 0000000000000000 R12: 00000000000003e7 [ 1315.229921] R13: 0000000000000000 R14: 00007fba444fa5a0 R15: 00007fba444fb5a0 [ 1315.245893] Mem-Info: [ 1315.338739] Swap cache stats: add 0, delete 0, find 0/0 [ 1315.355660] active_anon:148569 inactive_anon:190 isolated_anon:0 [ 1315.355660] active_file:7 inactive_file:12 isolated_file:0 [ 1315.355660] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1315.355660] slab_reclaimable:20065 slab_unreclaimable:98035 [ 1315.355660] mapped:52226 shmem:246 pagetables:2327 bounce:0 [ 1315.355660] free:15345 free_pcp:125 free_cma:0 [ 1315.379636] Free swap = 0kB [ 1315.401627] Node 0 active_anon:594268kB inactive_anon:760kB active_file:24kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:0kB writeback:0kB shmem:984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 292864kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1315.474836] Total swap = 0kB [ 1315.478097] 1965979 pages RAM [ 1315.481205] 0 pages HighMem/MovableOnly [ 1315.485179] 339409 pages reserved [ 1315.520345] Node 1 active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1315.539926] 0 pages cma reserved [ 1315.568202] Node 0 DMA free:10328kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1315.676893] lowmem_reserve[]: 0 2553 2555 2555 [ 1315.681571] Node 0 DMA32 free:30392kB min:36232kB low:45288kB high:54344kB active_anon:594228kB inactive_anon:760kB active_file:52kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2617984kB mlocked:0kB kernel_stack:8736kB pagetables:9200kB bounce:0kB free_pcp:528kB local_pcp:28kB free_cma:0kB [ 1315.800039] lowmem_reserve[]: 0 0 2 2 [ 1315.803924] Node 0 Normal free:12kB min:28kB low:32kB high:36kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2204kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1315.913064] lowmem_reserve[]: 0 0 0 0 [ 1315.917028] Node 1 Normal free:875372kB min:53624kB low:67028kB high:80432kB active_anon:8kB inactive_anon:0kB active_file:200kB inactive_file:1864kB unevictable:0kB writepending:0kB present:3932160kB managed:3870184kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:568kB local_pcp:400kB free_cma:0kB [ 1316.002955] lowmem_reserve[]: 0 0 0 0 [ 1316.030737] Node 0 DMA: 3*4kB (UE) 2*8kB (UE) 2*16kB (UE) 2*32kB (UE) 4*64kB (UE) 1*128kB (E) 4*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 1*4096kB (U) = 13308kB [ 1316.054128] Node 0 DMA32: 2061*4kB (UME) 764*8kB (UMEH) 355*16kB (UME) 304*32kB (UMH) 294*64kB (UMH) 488*128kB (UH) 115*256kB (UH) 60*512kB (UH) 26*1024kB (U) 7*2048kB (UM) 1*4096kB (U) = 216260kB [ 1316.144884] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1316.216911] Node 1 Normal: 687*4kB (UME) 369*8kB (UM) 494*16kB (UME) 416*32kB (UME) 783*64kB (UM) 403*128kB (UME) 55*256kB (U) 36*512kB (UE) 157*1024kB (UME) 127*2048kB (U) 120*4096kB (UM) = 1073508kB [ 1316.290938] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1316.317583] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1316.345457] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1316.405931] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1316.428877] 2565 total pagecache pages [ 1316.432834] 0 pages in swap cache [ 1316.451032] Swap cache stats: add 0, delete 0, find 0/0 [ 1316.456452] Free swap = 0kB [ 1316.470883] Total swap = 0kB [ 1316.473961] 1965979 pages RAM [ 1316.490886] 0 pages HighMem/MovableOnly [ 1316.494922] 339409 pages reserved [ 1316.498451] 0 pages cma reserved [ 1316.501821] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/syz2,task=syz-executor.2,pid=22849,uid=0 [ 1316.550302] Out of memory: Killed process 22849 (syz-executor.2) total-vm:72708kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB [ 1317.007247] oom_reaper: reaped process 29429 (syz-executor.3), now anon-rss:0kB, file-rss:34688kB, shmem-rss:0kB [ 1317.035725] syz-executor.0: page allocation failure: order:4, mode:0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 1317.086988] CPU: 1 PID: 29385 Comm: syz-executor.0 Not tainted 5.0.0+ #12 [ 1317.093957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1317.103343] Call Trace: [ 1317.105954] dump_stack+0x172/0x1f0 [ 1317.109600] warn_alloc.cold+0x87/0x17f [ 1317.113598] ? zone_watermark_ok_safe+0x260/0x260 [ 1317.118476] ? get_page_from_freelist+0x4170/0x4170 [ 1317.123678] ? __isolate_free_page+0x4c0/0x4c0 [ 1317.128270] ? drain_all_pages+0x4d/0x590 [ 1317.132435] __alloc_pages_slowpath+0x231d/0x28b0 [ 1317.137310] ? warn_alloc+0x110/0x110 [ 1317.141118] ? find_held_lock+0x35/0x130 [ 1317.145202] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1317.150753] ? should_fail+0x1de/0x852 [ 1317.154660] ? __isolate_free_page+0x4c0/0x4c0 [ 1317.159250] ? ___might_sleep+0x163/0x280 [ 1317.163419] __alloc_pages_nodemask+0x57e/0x7e0 [ 1317.168100] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1317.173129] ? retint_kernel+0x2d/0x2d [ 1317.177031] ? wait_for_completion+0x440/0x440 [ 1317.181631] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1317.187191] alloc_pages_current+0x107/0x210 [ 1317.191618] ion_page_pool_alloc+0x137/0x1d0 [ 1317.196045] ion_system_heap_allocate+0x165/0xaa0 [ 1317.200911] ? ion_system_heap_free+0x250/0x250 [ 1317.205600] ion_ioctl+0xa0a/0xf70 [ 1317.209179] ? _ion_buffer_destroy+0x110/0x110 [ 1317.213808] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1317.218931] ? ___might_sleep+0x163/0x280 [ 1317.223109] ? _ion_buffer_destroy+0x110/0x110 [ 1317.227702] do_vfs_ioctl+0xd6e/0x1390 [ 1317.231605] ? ioctl_preallocate+0x210/0x210 [ 1317.236029] ? selinux_file_mprotect+0x620/0x620 [ 1317.240804] ? ksys_dup3+0x3e0/0x3e0 [ 1317.244528] ? nsecs_to_jiffies+0x30/0x30 [ 1317.248721] ? tomoyo_file_ioctl+0x23/0x30 [ 1317.252973] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1317.258516] ? security_file_ioctl+0x93/0xc0 [ 1317.262935] ksys_ioctl+0xab/0xd0 [ 1317.266411] __x64_sys_ioctl+0x73/0xb0 [ 1317.270339] do_syscall_64+0x103/0x610 [ 1317.274240] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1317.279431] RIP: 0033:0x457f29 [ 1317.282637] Code: Bad RIP value. [ 1317.286005] RSP: 002b:00007f7e0f635c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1317.293728] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457f29 [ 1317.301007] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1317.308285] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1317.315571] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7e0f6366d4 [ 1317.322855] R13: 00000000004c078b R14: 00000000004d24c0 R15: 00000000ffffffff [ 1317.331039] Mem-Info: [ 1317.333501] active_anon:148047 inactive_anon:190 isolated_anon:0 [ 1317.333501] active_file:127 inactive_file:118 isolated_file:20 [ 1317.333501] unevictable:0 dirty:25 writeback:0 unstable:0 [ 1317.333501] slab_reclaimable:20060 slab_unreclaimable:97726 [ 1317.333501] mapped:52399 shmem:246 pagetables:2263 bounce:0 [ 1317.333501] free:15896 free_pcp:334 free_cma:0 [ 1317.372786] Node 0 active_anon:592180kB inactive_anon:760kB active_file:48kB inactive_file:192kB unevictable:0kB isolated(anon):0kB isolated(file):80kB mapped:209048kB dirty:100kB writeback:0kB shmem:984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 290816kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1317.411641] Node 1 active_anon:8kB inactive_anon:0kB active_file:116kB inactive_file:152kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:148kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1317.442356] Node 0 DMA free:10332kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1317.485928] lowmem_reserve[]: 0 2553 2555 2555 [ 1317.495270] Node 0 DMA32 free:27048kB min:36232kB low:45288kB high:54344kB active_anon:592084kB inactive_anon:760kB active_file:56kB inactive_file:92kB unevictable:0kB writepending:44kB present:3129332kB managed:2617984kB mlocked:0kB kernel_stack:8704kB pagetables:9096kB bounce:0kB free_pcp:324kB local_pcp:324kB free_cma:0kB [ 1317.529097] lowmem_reserve[]: 0 0 2 2 [ 1317.533100] Node 0 Normal free:8kB min:28kB low:32kB high:36kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2204kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1317.533685] rs:main Q:Reg invoked oom-killer: gfp_mask=0x101cca(GFP_HIGHUSER_MOVABLE|__GFP_WRITE), order=0, oom_score_adj=0 [ 1317.559167] lowmem_reserve[]: 0 0 0 0 [ 1317.559193] Node 1 Normal free:26620kB min:53624kB low:67028kB high:80432kB active_anon:8kB inactive_anon:0kB active_file:44kB inactive_file:88kB unevictable:0kB writepending:0kB present:3932160kB managed:3870184kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1317.559231] lowmem_reserve[]: 0 0 0 0 [ 1317.559249] Node 0 DMA: 3*4kB (UE) 2*8kB (UE) 2*16kB (UE) 3*32kB (UE) 3*64kB (UE) 2*128kB (UE) 4*256kB (UE) 3*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10332kB [ 1317.559329] Node 0 DMA32: 2131*4kB (UME) 710*8kB (UMEH) 281*16kB (UME) 187*32kB (UMEH) 23*64kB (UMH) 1*128kB (H) 1*256kB (H) 2*512kB (H) 0*1024kB 0*2048kB 0*4096kB = 27564kB [ 1317.591327] CPU: 1 PID: 8008 Comm: rs:main Q:Reg Not tainted 5.0.0+ #12 [ 1317.643744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1317.647968] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1317.653118] Call Trace: [ 1317.664189] Node 1 Normal: 119*4kB (UM) 15*8kB (UM) 15*16kB (UM) 15*32kB (UM) 5*64kB (UM) 0*128kB 6*256kB (UM) 46*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 26724kB [ 1317.666738] dump_stack+0x172/0x1f0 [ 1317.681347] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1317.684927] dump_header+0x10f/0xb6c [ 1317.693789] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1317.697466] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1317.697484] ? ___ratelimit+0x60/0x595 [ 1317.697502] ? do_raw_spin_unlock+0x57/0x270 [ 1317.706166] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1317.711298] oom_kill_process.cold+0x10/0x15 [ 1317.711315] out_of_memory+0x79a/0x1280 [ 1317.711339] ? oom_killer_disable+0x280/0x280 [ 1317.715226] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1317.719635] ? mutex_trylock+0x18e/0x1e0 [ 1317.719650] ? __alloc_pages_slowpath+0xcd9/0x28b0 [ 1317.719667] __alloc_pages_slowpath+0x2199/0x28b0 [ 1317.719682] ? node_dirty_ok+0x255/0x2e0 [ 1317.719712] ? warn_alloc+0x110/0x110 [ 1317.728574] 292 total pagecache pages [ 1317.732954] ? find_held_lock+0x35/0x130 [ 1317.736954] 0 pages in swap cache [ 1317.741413] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1317.750044] Swap cache stats: add 0, delete 0, find 0/0 [ 1317.754039] ? should_fail+0x1de/0x852 [ 1317.758985] Free swap = 0kB [ 1317.763810] __alloc_pages_nodemask+0x57e/0x7e0 [ 1317.767879] Total swap = 0kB [ 1317.771641] ? lock_downgrade+0x880/0x880 [ 1317.771664] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1317.775450] 1965979 pages RAM [ 1317.779512] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1317.779531] ? find_get_entry+0x535/0x880 [ 1317.779543] ? find_held_lock+0x35/0x130 [ 1317.779562] ? __mark_inode_dirty+0x23c/0x1290 [ 1317.782994] 0 pages HighMem/MovableOnly [ 1317.783002] 339409 pages reserved [ 1317.788539] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1317.788558] alloc_pages_current+0x107/0x210 [ 1317.788579] __page_cache_alloc+0x2bd/0x460 [ 1317.788594] ? find_held_lock+0x35/0x130 [ 1317.793950] 0 pages cma reserved [ 1317.797841] pagecache_get_page+0x22e/0x860 [ 1317.797865] grab_cache_page_write_begin+0x75/0xb0 [ 1317.797883] ext4_da_write_begin+0x2d7/0xec0 [ 1317.881734] ? balance_dirty_pages_ratelimited+0x168/0x1f60 [ 1317.887451] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1317.892990] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1317.898533] ? ext4_write_begin+0x1470/0x1470 [ 1317.903030] ? csum_and_copy_to_iter+0x15c0/0x15c0 [ 1317.907974] generic_perform_write+0x231/0x530 [ 1317.912595] ? page_endio+0x780/0x780 [ 1317.916427] ? current_time+0x140/0x140 [ 1317.920406] ? generic_write_check_limits+0x2a0/0x2a0 [ 1317.925593] ? lock_acquire+0x16f/0x3f0 [ 1317.929580] ? ext4_file_write_iter+0x250/0x1160 [ 1317.934339] __generic_file_write_iter+0x25e/0x630 [ 1317.939279] ext4_file_write_iter+0x33f/0x1160 [ 1317.943873] ? ext4_file_mmap+0x410/0x410 [ 1317.948032] ? __lock_acquire+0x548/0x3fb0 [ 1317.952278] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1317.957816] ? iov_iter_init+0xea/0x220 [ 1317.961795] __vfs_write+0x613/0x8e0 [ 1317.965519] ? kernel_read+0x120/0x120 [ 1317.969429] ? rcu_read_lock_sched_held+0x110/0x130 [ 1317.974450] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 1317.979209] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1317.984747] ? __sb_start_write+0x1ac/0x360 [ 1317.989089] vfs_write+0x20c/0x580 [ 1317.992646] ksys_write+0xea/0x1f0 [ 1317.996189] ? __ia32_sys_read+0xb0/0xb0 [ 1318.000251] ? do_syscall_64+0x26/0x610 [ 1318.004227] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1318.009588] ? do_syscall_64+0x26/0x610 [ 1318.013572] __x64_sys_write+0x73/0xb0 [ 1318.017477] do_syscall_64+0x103/0x610 [ 1318.021375] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1318.026560] RIP: 0033:0x7fba4572619d [ 1318.030286] Code: Bad RIP value. [ 1318.033649] RSP: 002b:00007fba43cc7000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1318.041380] RAX: ffffffffffffffda RBX: 0000000000000159 RCX: 00007fba4572619d [ 1318.048652] RDX: 0000000000000159 RSI: 0000000001ba9a90 RDI: 0000000000000001 [ 1318.055950] RBP: 0000000001ba9a90 R08: 656c6c616b7a7973 R09: 6c656e72656b2072 [ 1318.063228] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1318.070610] R13: 00007fba43cc7480 R14: 0000000000000002 R15: 0000000001ba9890 [ 1318.087363] syz-executor.0: page allocation failure: order:0, mode:0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 1318.101797] syz-executor.3: page allocation failure: order:0, mode:0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 1318.156841] CPU: 1 PID: 29429 Comm: syz-executor.3 Not tainted 5.0.0+ #12 [ 1318.163801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1318.173175] Call Trace: [ 1318.175799] dump_stack+0x172/0x1f0 [ 1318.179464] warn_alloc.cold+0x87/0x17f [ 1318.183456] ? zone_watermark_ok_safe+0x260/0x260 [ 1318.188312] ? mark_held_locks+0xa4/0xf0 [ 1318.192399] __alloc_pages_slowpath+0x231d/0x28b0 [ 1318.197262] ? warn_alloc+0x110/0x110 [ 1318.201064] ? find_held_lock+0x35/0x130 [ 1318.205130] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1318.210675] ? should_fail+0x1de/0x852 [ 1318.214583] __alloc_pages_nodemask+0x57e/0x7e0 [ 1318.219263] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1318.224287] ? write_comp_data+0x9/0x70 [ 1318.228263] ? wait_for_completion+0x440/0x440 [ 1318.232849] ? retint_kernel+0x2d/0x2d [ 1318.236738] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1318.242300] alloc_pages_current+0x107/0x210 [ 1318.246728] ion_page_pool_alloc+0x137/0x1d0 [ 1318.251145] ion_system_heap_allocate+0x165/0xaa0 [ 1318.256007] ? ion_system_heap_free+0x250/0x250 [ 1318.260690] ? ion_ioctl+0xa3c/0xf70 [ 1318.264431] ion_ioctl+0x3d8/0xf70 [ 1318.267987] ? _ion_buffer_destroy+0x110/0x110 [ 1318.272575] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1318.277701] ? _ion_buffer_destroy+0x110/0x110 [ 1318.282289] do_vfs_ioctl+0xd6e/0x1390 [ 1318.286189] ? ioctl_preallocate+0x210/0x210 [ 1318.290596] ? selinux_file_mprotect+0x620/0x620 [ 1318.295359] ? ksys_dup3+0x3e0/0x3e0 [ 1318.299075] ? nsecs_to_jiffies+0x30/0x30 [ 1318.303229] ? tomoyo_file_ioctl+0x23/0x30 [ 1318.307466] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1318.313007] ? security_file_ioctl+0x93/0xc0 [ 1318.317426] ksys_ioctl+0xab/0xd0 [ 1318.320883] __x64_sys_ioctl+0x73/0xb0 [ 1318.324774] do_syscall_64+0x103/0x610 [ 1318.328668] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1318.333859] RIP: 0033:0x457f29 [ 1318.337060] Code: Bad RIP value. [ 1318.340420] RSP: 002b:00007f38a954ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1318.348129] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457f29 [ 1318.355418] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1318.362691] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1318.369964] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f38a954f6d4 [ 1318.377238] R13: 00000000004c078b R14: 00000000004d24c0 R15: 00000000ffffffff [ 1318.384778] CPU: 1 PID: 29385 Comm: syz-executor.0 Not tainted 5.0.0+ #12 [ 1318.391722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1318.401082] Call Trace: [ 1318.403682] dump_stack+0x172/0x1f0 [ 1318.407341] warn_alloc.cold+0x87/0x17f [ 1318.411330] ? zone_watermark_ok_safe+0x260/0x260 [ 1318.416198] ? mark_held_locks+0xa4/0xf0 [ 1318.416885] Mem-Info: [ 1318.420293] __alloc_pages_slowpath+0x231d/0x28b0 [ 1318.422702] active_anon:148023 inactive_anon:190 isolated_anon:0 [ 1318.422702] active_file:51 inactive_file:19 isolated_file:0 [ 1318.422702] unevictable:0 dirty:11 writeback:0 unstable:0 [ 1318.422702] slab_reclaimable:20056 slab_unreclaimable:97694 [ 1318.422702] mapped:52243 shmem:246 pagetables:2274 bounce:0 [ 1318.422702] free:15307 free_pcp:68 free_cma:0 [ 1318.427537] ? warn_alloc+0x110/0x110 [ 1318.427552] ? find_held_lock+0x35/0x130 [ 1318.427572] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1318.460637] Node 0 active_anon:592084kB inactive_anon:760kB active_file:160kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:44kB writeback:0kB shmem:984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 288768kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1318.464370] ? should_fail+0x1de/0x852 [ 1318.468464] Node 1 active_anon:8kB inactive_anon:0kB active_file:44kB inactive_file:88kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:68kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1318.473984] __alloc_pages_nodemask+0x57e/0x7e0 [ 1318.501513] Node 0 DMA free:10332kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1318.505366] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1318.531266] lowmem_reserve[]: 0 2553 2555 2555 [ 1318.535902] ? retint_kernel+0x2d/0x2d [ 1318.562047] Node 0 DMA32 free:24268kB min:36232kB low:45288kB high:54344kB active_anon:592084kB inactive_anon:760kB active_file:56kB inactive_file:92kB unevictable:0kB writepending:44kB present:3129332kB managed:2617984kB mlocked:0kB kernel_stack:8704kB pagetables:9096kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 1318.567128] ? wait_for_completion+0x440/0x440 [ 1318.567145] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1318.567171] alloc_pages_current+0x107/0x210 [ 1318.571744] lowmem_reserve[]: 0 0 2 2 [ 1318.575637] ion_page_pool_alloc+0x137/0x1d0 [ 1318.604594] Node 0 Normal free:8kB min:28kB low:32kB high:36kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2204kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1318.609138] ion_system_heap_allocate+0x165/0xaa0 [ 1318.609168] ? ion_system_heap_free+0x250/0x250 [ 1318.614705] lowmem_reserve[]: 0 0 0 0 [ 1318.619122] ion_ioctl+0xa0a/0xf70 [ 1318.619162] ? _ion_buffer_destroy+0x110/0x110 [ 1318.622947] Node 1 Normal free:26620kB min:53624kB low:67028kB high:80432kB active_anon:8kB inactive_anon:0kB active_file:44kB inactive_file:88kB unevictable:0kB writepending:0kB present:3932160kB managed:3870184kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:24kB local_pcp:24kB free_cma:0kB [ 1318.627356] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1318.627385] ? ___might_sleep+0x163/0x280 [ 1318.653186] lowmem_reserve[]: 0 0 0 0 [ 1318.658003] ? _ion_buffer_destroy+0x110/0x110 [ 1318.658022] do_vfs_ioctl+0xd6e/0x1390 [ 1318.662680] Node 0 DMA: 3*4kB (UE) 2*8kB (UE) 2*16kB (UE) 3*32kB (UE) 3*64kB (UE) 2*128kB (UE) 4*256kB (UE) 3*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10332kB [ 1318.666485] ? ioctl_preallocate+0x210/0x210 [ 1318.670034] Node 0 DMA32: 1956*4kB (ME) 610*8kB (MEH) 256*16kB (ME) 174*32kB (UMH) 4*64kB (H) 1*128kB (H) 1*256kB (H) 2*512kB (H) 0*1024kB 0*2048kB 0*4096kB = 24032kB [ 1318.674608] ? selinux_file_mprotect+0x620/0x620 [ 1318.702257] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1318.707322] ? ksys_dup3+0x3e0/0x3e0 [ 1318.707341] ? nsecs_to_jiffies+0x30/0x30 [ 1318.711476] Node 1 Normal: 119*4kB (UM) 15*8kB (UM) 15*16kB (UM) 15*32kB (UM) 5*64kB (UM) 0*128kB 6*256kB (UM) 46*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 26724kB [ 1318.715292] ? tomoyo_file_ioctl+0x23/0x30 [ 1318.719900] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1318.723755] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1318.738909] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1318.743294] ? security_file_ioctl+0x93/0xc0 [ 1318.758342] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1318.763328] ksys_ioctl+0xab/0xd0 [ 1318.774370] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1318.778041] __x64_sys_ioctl+0x73/0xb0 [ 1318.778064] do_syscall_64+0x103/0x610 [ 1318.782195] 292 total pagecache pages [ 1318.796765] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1318.796778] RIP: 0033:0x457f29 [ 1318.796801] Code: Bad RIP value. [ 1318.801067] 0 pages in swap cache [ 1318.809843] RSP: 002b:00007f7e0f635c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1318.809858] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457f29 [ 1318.809867] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1318.809876] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1318.809888] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7e0f6366d4 [ 1318.815511] Swap cache stats: add 0, delete 0, find 0/0 [ 1318.824083] R13: 00000000004c078b R14: 00000000004d24c0 R15: 00000000ffffffff [ 1318.887121] Mem-Info: [ 1318.931179] active_anon:148023 inactive_anon:190 isolated_anon:0 [ 1318.931179] active_file:10 inactive_file:25 isolated_file:0 [ 1318.931179] unevictable:0 dirty:8 writeback:0 unstable:0 [ 1318.931179] slab_reclaimable:19999 slab_unreclaimable:97571 [ 1318.931179] mapped:52226 shmem:246 pagetables:2274 bounce:0 [ 1318.931179] free:57878 free_pcp:204 free_cma:0 [ 1318.966325] Node 0 active_anon:592084kB inactive_anon:760kB active_file:36kB inactive_file:300kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:32kB writeback:0kB shmem:984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 288768kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1318.995399] Node 1 active_anon:8kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1319.023631] Free swap = 0kB [ 1319.027679] Total swap = 0kB [ 1319.031410] 1965979 pages RAM [ 1319.035769] Node 0 DMA free:10332kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1319.074014] 0 pages HighMem/MovableOnly [ 1319.096965] 339409 pages reserved [ 1319.100449] 0 pages cma reserved [ 1319.103815] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/syz0,task=syz-executor.0,pid=5552,uid=0 [ 1319.132320] lowmem_reserve[]: 0 2553 2555 2555 [ 1319.137085] Node 0 DMA32 free:539064kB min:36232kB low:45288kB high:54344kB active_anon:592084kB inactive_anon:760kB active_file:136kB inactive_file:3256kB unevictable:0kB writepending:32kB present:3129332kB managed:2617984kB mlocked:0kB kernel_stack:8704kB pagetables:9096kB bounce:0kB free_pcp:732kB local_pcp:248kB free_cma:0kB [ 1319.149761] Out of memory: Killed process 5552 (syz-executor.0) total-vm:72708kB, anon-rss:2208kB, file-rss:34816kB, shmem-rss:0kB [ 1319.215976] oom_reaper: reaped process 5552 (syz-executor.0), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1319.233670] lowmem_reserve[]: 0 0 2 2 [ 1319.243061] Node 0 Normal free:8kB min:28kB low:32kB high:36kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:786432kB managed:2204kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1319.283359] lowmem_reserve[]: 0 0 0 0 [ 1319.295226] Node 1 Normal free:351332kB min:53624kB low:67028kB high:80432kB active_anon:8kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870184kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:24kB local_pcp:0kB free_cma:0kB [ 1319.331522] lowmem_reserve[]: 0 0 0 0 [ 1319.364443] Node 0 DMA: 3*4kB (UE) 2*8kB (UE) 2*16kB (UE) 3*32kB (UE) 3*64kB (UE) 2*128kB (UE) 4*256kB (UE) 3*512kB (UE) 1*1024kB (E) 4*2048kB (UME) 0*4096kB = 12380kB [ 1319.413853] Node 0 DMA32: 1384*4kB (ME) 298*8kB (UEH) 130*16kB (UME) 180*32kB (UMH) 4*64kB (H) 1*128kB (H) 1*256kB (H) 2*512kB (H) 149*1024kB (U) 28*2048kB (UM) 75*4096kB (U) = 534544kB [ 1319.456940] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1319.487753] Node 1 Normal: 119*4kB (UM) 15*8kB (UM) 15*16kB (UM) 15*32kB (UM) 5*64kB (UM) 0*128kB 6*256kB (UM) 46*512kB (UM) 118*1024kB (U) 24*2048kB (U) 83*4096kB (U) = 536676kB [ 1319.536934] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1319.545839] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1319.567779] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1319.576663] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1319.590961] 2612 total pagecache pages [ 1319.594886] 0 pages in swap cache [ 1319.604089] Swap cache stats: add 0, delete 0, find 0/0 [ 1319.609577] Free swap = 0kB [ 1319.612600] Total swap = 0kB [ 1319.615621] 1965979 pages RAM [ 1319.620676] 0 pages HighMem/MovableOnly [ 1319.624665] 339409 pages reserved [ 1319.628187] 0 pages cma reserved 19:24:02 executing program 5: syz_read_part_table(0x0, 0x5, 0x0) 19:24:02 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000001, 0x3b}) 19:24:03 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) splice(r2, 0x0, r0, 0x0, 0x100000000401, 0x0) 19:24:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x80001, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$kcm(r1, &(0x7f00000003c0)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e22, @multicast1}, 0x3, 0x0, 0x0, 0x4}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)="7d40add48040eb1204b573056d9160045adc2f3e3432d23a134286", 0x1b}], 0x1, &(0x7f0000000200)=[{0x38, 0x19f, 0x12, "2a12d1e82e423f07cd0db9da1d375c0a4e0aa2164821959e839b088646ef74b153"}, {0xa8, 0x119, 0x1000, "f741a100addc6b2361a0748f6b9513759b9c134b25b322a0f526a8239da1d968f339930542a3a195781915b508892c01811802d0e6997aff02ca4cf323a1342749bb7483542c7e237555ccb5b298a8a6bf018db6ad8c6a9695e763c9ca29f9267ec8d0b996231c9eb99d1e60ee7c3c468677a43609ff5196132a27ea9cb9127aeab3cfd1edd58f8fed402ec6ccf1998de2306ed6e249ac"}, {0xc8, 0x10e, 0xfff, "5beb64eabab72d8fb4f9ddd3fdee454ef66ed638aa5f47cb23c85d135c4a67c722f5d461463e1756236a4433c3c00d3ecfae82092a55771cc112e22a8bd2305ffa486a2d48cc0b355a2a462c4cc6b32354c6989971c0815528666cd426e63b6f206f5aabc2395dd0b6af3e764ffaff78d92a51f914b03c91e802a1da3b973ccf5e153ee63751de7ce2b5570cd2d949808acc2406b8f3b75912b84774413e6b7eb2642ade855046ac9b30db492266767149e9"}], 0x1a8}, 0x41) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000440)={&(0x7f0000000400)=""/40, 0x0, 0x1800, 0x7}, 0x18) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:24:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r2 = accept(r0, &(0x7f0000000080)=@hci, &(0x7f0000000000)=0x80) accept4$bt_l2cap(r2, &(0x7f0000000140), &(0x7f0000000180)=0xe, 0x80000) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0x100000000000d, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6012, r3, 0x2000) 19:24:03 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x0, 0x0, {{}, 0xffffff7f}}, 0xfe40}}, 0x0) 19:24:03 executing program 5: syz_read_part_table(0x0, 0x6, 0x0) [ 1320.052708] ion_mmap: failure mapping buffer to userspace [ 1320.154438] ion_mmap: failure mapping buffer to userspace 19:24:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001400)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000200)={0x800, 0xdec, 0x1}) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x8000, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000140)={r3, 0x2}, 0x8) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r4 = msgget$private(0x0, 0x0) msgctl$IPC_STAT(r4, 0x2, &(0x7f0000000340)=""/4096) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6012, r6, 0x2000) write$binfmt_misc(r5, &(0x7f0000000180)={'syz1', "4e63f1a1ecd06193a940b4df0161c333e79457b07e29272107af04c33c7aae8134639b1ba7141d374b05fc446d8f"}, 0x32) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000001340)=0xc) sched_getparam(r7, &(0x7f0000001380)) uname(&(0x7f0000000240)=""/155) 19:24:03 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x880, 0x48) connect$unix(r0, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000080)={0x2, 0x1, 0xf3e8, 0x9, 0x1}, 0xc) ioctl(r1, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1320.417631] kauditd_printk_skb: 101 callbacks suppressed [ 1320.417646] audit: type=1400 audit(1552073043.673:393): avc: denied { map } for pid=29598 comm="modprobe" path="/bin/kmod" dev="sda1" ino=1440 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1320.541860] audit: type=1400 audit(1552073043.713:394): avc: denied { map } for pid=29598 comm="modprobe" path="/bin/kmod" dev="sda1" ino=1440 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 19:24:03 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x0, 0x0, {{}, 0xffffff8d}}, 0xfe40}}, 0x0) [ 1320.653607] audit: type=1400 audit(1552073043.733:395): avc: denied { map } for pid=29598 comm="modprobe" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 19:24:04 executing program 5: syz_read_part_table(0x0, 0x7, 0x0) [ 1320.786970] audit: type=1400 audit(1552073043.733:396): avc: denied { map } for pid=29598 comm="modprobe" path="/lib/x86_64-linux-gnu/ld-2.13.so" dev="sda1" ino=2668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1320.857417] ion_mmap: failure mapping buffer to userspace [ 1320.920472] audit: type=1400 audit(1552073043.783:397): avc: denied { map } for pid=29598 comm="modprobe" path="/etc/ld.so.cache" dev="sda1" ino=2503 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1320.994868] ion_mmap: failure mapping buffer to userspace [ 1321.050021] audit: type=1400 audit(1552073043.843:398): avc: denied { map } for pid=29598 comm="modprobe" path="/lib/x86_64-linux-gnu/libkmod.so.2.1.3" dev="sda1" ino=2811 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 19:24:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x80, 0x100) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000140)={0x0, 0xfffffffffffffff7, 0x1ff, 0x4, 0x9, 0x2, 0x6, 0x7, {0x0, @in={{0x2, 0x4e21, @rand_addr=0x1000}}, 0x7, 0x7ff, 0x45f, 0x8000, 0x5}}, &(0x7f0000000080)=0xb0) write(r1, &(0x7f0000000200)="b2798aeec8a4e5d44eb1ba67e2e1c19219e5e0f3cdbc2286ae1d48daa7ff", 0x1e) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000000c0)={r2, 0x4a, 0x9c, 0xffffffff, 0x3, 0x1}, 0x14) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000300)={0x56a8, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6012, r4, 0x2000) [ 1321.284672] audit: type=1400 audit(1552073043.853:399): avc: denied { map } for pid=29598 comm="modprobe" path="/lib/x86_64-linux-gnu/libkmod.so.2.1.3" dev="sda1" ino=2811 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1321.424895] audit: type=1400 audit(1552073043.913:400): avc: denied { map } for pid=29598 comm="modprobe" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 1321.578575] audit: type=1400 audit(1552073043.953:401): avc: denied { map } for pid=29598 comm="modprobe" path="/lib/x86_64-linux-gnu/libc-2.13.so" dev="sda1" ino=2784 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 19:24:04 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000001, 0x3b}) 19:24:04 executing program 3: 19:24:04 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x8000c, 0x6, 0x4, 0x1}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9bb, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x800000000002, 0x0) recvmsg$kcm(r0, &(0x7f0000002c00)={&(0x7f00000017c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000002b80)=[{&(0x7f0000001900)=""/210, 0xd2}], 0x1}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(r0, &(0x7f0000000400)={&(0x7f0000000680)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000080), 0x100000000000001b, &(0x7f0000001280)=""/243, 0xf3}, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="160000001a0081aee4050c00000f00fe078bc36f1600", 0x16}], 0x1}, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x100, 0x0, 0x6, 0x0, 0x100000000, 0x0, 0x0, 0x1f, 0x0, 0x2, 0x6, 0x5, 0x0, 0x75, 0x0, 0xba7c, 0x0, 0x0, 0x4, 0x0, 0x6e, 0x3, 0x7, 0x0, 0xae54, 0x0, 0x8, 0x0, 0x40000, 0x4, 0x1f, 0x0, 0x2, 0x1000, 0x0, 0x0, 0x20000000d, 0x7, @perf_bp={&(0x7f0000000280)}, 0x1, 0x0, 0x0, 0x6, 0x5, 0x2fd, 0x40}, 0x0, 0x3, 0xffffffffffffffff, 0xf) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='memory.current\x00', 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x8) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000300)={r0}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000640)='cc\xd3R\x02\xe2c\x00\x00\x00\x00\x00\x00\x00\x1epus\x00', 0x2761, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r1, 0x11b, 0x2, &(0x7f0000000200), 0xd14cc5addfad2f5d) r4 = perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe64b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeef, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfffffffffffffc00}, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x13c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) socket$kcm(0x29, 0x1fffc, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socket$kcm(0x10, 0x7, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000480)={'team0\x00', 0x4110}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000800)}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x184) socketpair(0x1, 0x5, 0x1, &(0x7f0000000500)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') getpid() 19:24:04 executing program 5: syz_read_part_table(0x0, 0x10, 0x0) [ 1321.686596] audit: type=1400 audit(1552073044.263:402): avc: denied { map } for pid=29672 comm="modprobe" path="/bin/kmod" dev="sda1" ino=1440 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 19:24:05 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x0, 0x0, {{}, 0xfffffff0}}, 0xfe40}}, 0x0) [ 1321.955507] ion_mmap: failure mapping buffer to userspace 19:24:05 executing program 3: [ 1322.023073] ion_mmap: failure mapping buffer to userspace 19:24:05 executing program 5: syz_read_part_table(0x0, 0x48, 0x0) 19:24:05 executing program 2: openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/access\x00', 0x2, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6012, r2, 0x2000) 19:24:05 executing program 5: syz_read_part_table(0x0, 0x4c, 0x0) [ 1322.648259] ion_mmap: failure mapping buffer to userspace 19:24:06 executing program 2: socketpair(0x2, 0x80005, 0x8, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000340)={0x3fc, r1, 0x98b9c7b36db1f783, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x44, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0x160, 0x4, [@TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x221}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2ccf8000000}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffff001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb59}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x143e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x32}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffff7}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_MEDIA={0xd4, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffc}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc144}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffffb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2832}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe7bb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200000000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x78}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0x3c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1cf}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffffffff8000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_LINK={0x54, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffffa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}]}, @TIPC_NLA_LINK={0x90, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}]}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_NET={0x44, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2bbc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff800000000}]}]}, 0x3fc}, 0x1, 0x0, 0x0, 0x80}, 0x80) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6012, r4, 0x2000) ioctl(r4, 0x80000000000004, &(0x7f0000001340)="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") 19:24:06 executing program 3: 19:24:06 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x2000) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup3(r1, r0, 0x80000) ioctl$ASHMEM_GET_SIZE(r2, 0x7704, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1323.465550] ion_mmap: failure mapping buffer to userspace [ 1323.856009] ion_mmap: failure mapping buffer to userspace [ 1324.144210] syz-executor.0: page allocation failure: order:4, mode:0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 1324.176996] CPU: 1 PID: 29801 Comm: syz-executor.0 Not tainted 5.0.0+ #12 [ 1324.183967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1324.193329] Call Trace: [ 1324.195930] dump_stack+0x172/0x1f0 [ 1324.199579] warn_alloc.cold+0x87/0x17f [ 1324.203570] ? zone_watermark_ok_safe+0x260/0x260 [ 1324.208434] ? get_page_from_freelist+0x4170/0x4170 [ 1324.213460] ? __isolate_free_page+0x4c0/0x4c0 [ 1324.218052] ? mutex_unlock+0xd/0x10 [ 1324.221772] ? drain_all_pages+0x408/0x590 [ 1324.226045] __alloc_pages_slowpath+0x231d/0x28b0 [ 1324.230915] ? warn_alloc+0x110/0x110 [ 1324.234725] ? find_held_lock+0x35/0x130 [ 1324.238800] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1324.244345] ? should_fail+0x1de/0x852 [ 1324.248250] ? __isolate_free_page+0x4c0/0x4c0 [ 1324.252836] ? ___might_sleep+0x163/0x280 [ 1324.257008] __alloc_pages_nodemask+0x57e/0x7e0 [ 1324.261693] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1324.266733] ? retint_kernel+0x2d/0x2d [ 1324.270644] ? wait_for_completion+0x440/0x440 [ 1324.275241] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1324.280809] alloc_pages_current+0x107/0x210 [ 1324.285234] ion_page_pool_alloc+0x137/0x1d0 [ 1324.289658] ion_system_heap_allocate+0x165/0xaa0 [ 1324.294516] ? ion_system_heap_free+0x250/0x250 [ 1324.299197] ? ion_ioctl+0xa3c/0xf70 [ 1324.302922] ion_ioctl+0x3d8/0xf70 [ 1324.306480] ? _ion_buffer_destroy+0x110/0x110 [ 1324.311073] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1324.316203] ? _ion_buffer_destroy+0x110/0x110 [ 1324.320798] do_vfs_ioctl+0xd6e/0x1390 [ 1324.324700] ? ioctl_preallocate+0x210/0x210 [ 1324.329115] ? selinux_file_mprotect+0x620/0x620 [ 1324.333905] ? ksys_dup3+0x3e0/0x3e0 [ 1324.337634] ? nsecs_to_jiffies+0x30/0x30 [ 1324.341802] ? tomoyo_file_ioctl+0x23/0x30 [ 1324.346041] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1324.351595] ? security_file_ioctl+0x93/0xc0 [ 1324.356025] ksys_ioctl+0xab/0xd0 [ 1324.359487] __x64_sys_ioctl+0x73/0xb0 [ 1324.363384] do_syscall_64+0x103/0x610 [ 1324.367287] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1324.372483] RIP: 0033:0x457f29 [ 1324.375682] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1324.394591] RSP: 002b:00007f7e0f635c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1324.402326] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457f29 [ 1324.409603] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1324.416883] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1324.424186] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7e0f6366d4 [ 1324.431458] R13: 00000000004c078b R14: 00000000004d24c0 R15: 00000000ffffffff [ 1324.442105] warn_alloc_show_mem: 1 callbacks suppressed [ 1324.442110] Mem-Info: [ 1324.450729] active_anon:148035 inactive_anon:190 isolated_anon:0 [ 1324.450729] active_file:1194 inactive_file:3393 isolated_file:0 [ 1324.450729] unevictable:0 dirty:141 writeback:0 unstable:0 [ 1324.450729] slab_reclaimable:20052 slab_unreclaimable:98104 [ 1324.450729] mapped:55173 shmem:246 pagetables:2212 bounce:0 [ 1324.450729] free:87569 free_pcp:1077 free_cma:0 [ 1324.484979] Node 0 active_anon:592132kB inactive_anon:760kB active_file:4772kB inactive_file:13572kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:220692kB dirty:564kB writeback:0kB shmem:984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 288768kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1324.513762] Node 1 active_anon:8kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1324.539914] Node 0 DMA free:10624kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1324.590692] lowmem_reserve[]: 0 2553 2555 2555 [ 1324.595379] Node 0 DMA32 free:263620kB min:36232kB low:45288kB high:54344kB active_anon:592052kB inactive_anon:760kB active_file:4840kB inactive_file:13500kB unevictable:0kB writepending:560kB present:3129332kB managed:2617984kB mlocked:0kB kernel_stack:8704kB pagetables:8888kB bounce:0kB free_pcp:2936kB local_pcp:1444kB free_cma:0kB [ 1324.651926] lowmem_reserve[]: 0 0 2 2 [ 1324.655789] Node 0 Normal free:8kB min:28kB low:32kB high:36kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:4kB present:786432kB managed:2204kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1324.688234] lowmem_reserve[]: 0 0 0 0 [ 1324.692179] Node 1 Normal free:116480kB min:53624kB low:67028kB high:80432kB active_anon:8kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870184kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1324.726345] lowmem_reserve[]: 0 0 0 0 [ 1324.730675] Node 0 DMA: 4*4kB (UE) 2*8kB (UE) 2*16kB (UE) 2*32kB (UE) 2*64kB (UE) 3*128kB (UE) 1*256kB (E) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10624kB [ 1324.754666] Node 0 DMA32: 6211*4kB (UE) 2275*8kB (UMEH) 1712*16kB (UMEH) 1857*32kB (UM) 258*64kB (UMH) 168*128kB (UH) 26*256kB (UH) 20*512kB (UH) 73*1024kB (U) 2*2048kB (U) 0*4096kB = 263620kB [ 1324.779065] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1324.794571] Node 1 Normal: 235*4kB (UM) 248*8kB (UM) 228*16kB (UM) 127*32kB (UM) 87*64kB (UM) 295*128kB (UM) 41*256kB (UM) 36*512kB (UM) 33*1024kB (U) 0*2048kB 0*4096kB = 116684kB [ 1324.817236] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1324.826215] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1324.841456] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1324.851787] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1324.865754] 4837 total pagecache pages [ 1324.871609] 0 pages in swap cache [ 1324.875194] Swap cache stats: add 0, delete 0, find 0/0 [ 1324.885903] Free swap = 0kB [ 1324.890319] Total swap = 0kB [ 1324.893430] 1965979 pages RAM [ 1324.896609] 0 pages HighMem/MovableOnly [ 1324.905998] 339409 pages reserved [ 1324.910945] 0 pages cma reserved 19:24:08 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000001, 0x3b}) 19:24:08 executing program 3: 19:24:08 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x0, 0x0, {{}, 0x800000000000000}}, 0xfe40}}, 0x0) 19:24:08 executing program 5: syz_read_part_table(0x0, 0x60, 0x0) 19:24:08 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8e2, 0x80000) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x8}, &(0x7f00000000c0)=0x8) syz_open_dev$usbmon(&(0x7f0000000440)='/dev/usbmon#\x00', 0x0, 0x40800) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000400)) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f00000002c0)={r3, 0x5}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e24, @broadcast}}, 0x6, 0x2}, &(0x7f0000000100)=0x90) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r2, 0x4008af13, &(0x7f0000000280)={0x1, 0xffffffff}) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000300)="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") 19:24:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6012, r2, 0x2000) 19:24:08 executing program 5: syz_read_part_table(0x0, 0x68, 0x0) [ 1325.189051] ion_mmap: failure mapping buffer to userspace 19:24:08 executing program 3: [ 1325.254237] ion_mmap: failure mapping buffer to userspace 19:24:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6012, r2, 0x2000) r3 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x101, 0x401) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0xcc, r4, 0x70c, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x38, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x80, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x4, @remote, 0x8001}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'hsr0\x00'}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4010}, 0x4c000) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) mq_timedreceive(r0, &(0x7f0000000140)=""/137, 0x89, 0x7, &(0x7f0000000080)={r5, r6+30000000}) 19:24:08 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x6, 0x20200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0x1000, &(0x7f00000001c0)="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") 19:24:08 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x0, 0x0, {{}, 0xf00000000000000}}, 0xfe40}}, 0x0) 19:24:09 executing program 5: syz_read_part_table(0x0, 0x6c, 0x0) [ 1326.123737] ion_mmap: failure mapping buffer to userspace [ 1326.155675] kauditd_printk_skb: 87 callbacks suppressed [ 1326.155689] audit: type=1400 audit(1552073049.413:490): avc: denied { create } for pid=30053 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1326.270326] ion_mmap: failure mapping buffer to userspace [ 1326.279484] audit: type=1400 audit(1552073049.463:491): avc: denied { write } for pid=30053 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1326.375382] audit: type=1400 audit(1552073049.493:492): avc: denied { read } for pid=30053 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1326.474057] audit: type=1400 audit(1552073049.603:493): avc: denied { create } for pid=30053 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1326.599173] audit: type=1400 audit(1552073049.683:494): avc: denied { write } for pid=30053 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 19:24:10 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 19:24:10 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000001, 0x3b}) 19:24:10 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x0, 0x0, {{}, 0x1000000000000000}}, 0xfe40}}, 0x0) 19:24:10 executing program 5: syz_read_part_table(0x0, 0x74, 0x0) 19:24:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x4c482, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10281004}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x80, r3, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x40, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x200}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xef}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x77}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd}) 19:24:10 executing program 3: 19:24:11 executing program 5: syz_read_part_table(0x0, 0x7a, 0x0) 19:24:11 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0xa0083) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:24:11 executing program 3: waitid(0x0, 0x0, &(0x7f0000001ff0), 0x0, 0x0) [ 1327.913841] audit: type=1400 audit(1552073051.173:495): avc: denied { create } for pid=30167 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1328.045423] audit: type=1400 audit(1552073051.173:496): avc: denied { write } for pid=30167 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 19:24:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x802, 0x0) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfc, 0xa0000000}, 0xc) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6012, r3, 0x2000) [ 1328.178168] audit: type=1400 audit(1552073051.173:497): avc: denied { read } for pid=30167 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 19:24:11 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x0, 0x0, {{}, 0x8dffffff00000000}}, 0xfe40}}, 0x0) [ 1328.278641] audit: type=1400 audit(1552073051.273:498): avc: denied { create } for pid=30167 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1328.346610] audit: type=1400 audit(1552073051.343:499): avc: denied { write } for pid=30167 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 19:24:11 executing program 5: syz_read_part_table(0x0, 0x300, 0x0) 19:24:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000100)={{{@in=@empty, @in6}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000040)=0xe8) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000001d000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1471aa0c67c384ae, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x8601000000000000) [ 1328.785357] ion_mmap: failure mapping buffer to userspace [ 1328.895746] ion_mmap: failure mapping buffer to userspace 19:24:13 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000001, 0x3b}) 19:24:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20}, 0x1b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x11}}}}}}}, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f00000001c0), &(0x7f0000000000)=0x68) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x6012, r5, 0x0) getsockopt$bt_hci(r2, 0x0, 0x3, &(0x7f00000000c0), &(0x7f0000000240)) 19:24:13 executing program 1: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x4, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0xa000, 0x0) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000380)={r1, 0x1, 0x4000, 0x10000}) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x100000, 0x0) r2 = shmget(0x2, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmctl$SHM_INFO(r2, 0xe, &(0x7f00000002c0)=""/156) mount(0x0, &(0x7f00000000c0)='.', 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='mountinfo\x00\xe0\xd6\f\xcb\x87\xa6\xda\x13I\xf9\xa1\xecy\x8b\x91r\x16%\xde\x9a\x92H\xea\xf8\xb3\x86kqnQ\xbc\xe6\x99\xd2\xf8\xbf\xffa[\xdf\xe5j\xa8\xb3\xcar9W\xb4o\x8f\xf6\xc0\'\x8e\xf2W5\xf5\xab\xea\xa0\x12m?)]\xd1\xee4\xe2\x19\x8a\xb1\xb2C\xedNFo\xf4\xd2\xe2&\xdf_\xae\xa7\xeeJ\xbb-s\xb4\xd3\x94x\xa7\xa1v\x7f?\xb9o\xe7(:\x05Oh\x1f)\xf1\x85\xf4\x11\xcd\x11\t\x85\xb1\xa0@\r\"9\xeb\x82\xd7\xdf\x8b\x89FU|4(\xf3\x97\xeb\x95\x80nv\xe0\xe9\xa7\xa6t\x0e\xe7\x1an\xdaD\x8d~\x8d\x88\x9a\t\xeb\xf1\xcc#.\x0e\xed9\xd828\xadOL\xde]Y\x93\xf0\n') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, 0x0) r5 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) fsetxattr$security_ima(r5, &(0x7f0000000240)='security.ima\x00', &(0x7f0000000280)=@sha1={0x1, "b5e173cacba475d2a665bf8d56d0697024a232c8"}, 0x15, 0x2) r6 = dup(r5) ioctl$KVM_GET_ONE_REG(r6, 0x4010aeab, &(0x7f0000000000)={0x0, 0x2000000013}) syz_genetlink_get_family_id$team(0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000067c0)={'veth0_to_bond\x00'}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) preadv(r3, 0x0, 0x0, 0x0) 19:24:13 executing program 5: syz_read_part_table(0x0, 0x500, 0x0) 19:24:13 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x0, 0x0, {{}, 0xf0ffffff00000000}}, 0xfe40}}, 0x0) 19:24:13 executing program 3: r0 = socket$inet6(0xa, 0x2100000400000002, 0x0) prctl$PR_GET_SECUREBITS(0x1b) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x4}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x40000, 0x2b}, 0x0, @in, 0x0, 0x0, 0x0, 0xfe12}}, 0xe8) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) recvfrom(r0, &(0x7f0000000080)=""/91, 0x5b, 0x40002000, &(0x7f0000000180)=@tipc=@name={0x1e, 0x2, 0x2, {{}, 0x1}}, 0x80) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) 19:24:13 executing program 5: syz_read_part_table(0x0, 0x600, 0x0) [ 1330.721715] ion_mmap: failure mapping buffer to userspace 19:24:14 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$P9_RGETATTR(r2, &(0x7f00000001c0)={0xa0}, 0xa0) [ 1330.860108] ion_mmap: failure mapping buffer to userspace [ 1330.918809] syz-executor.2 (30405) used greatest stack depth: 22808 bytes left 19:24:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_S_AUDIO(r2, 0x40345622, &(0x7f0000000080)={0x9, "4fdcdf11012ff08c1e3dc2bb3f47925c4f0aceaaaa9c0fd2fc088916965150f0", 0x1, 0x1}) socket$rds(0x15, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000000c0), &(0x7f0000000140)=0x4) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, r0}) write$binfmt_script(r3, &(0x7f00000001c0)={'#! ', './file0', [{0x20, '/dev/vbi#\x00'}, {0x20, '/dev/vbi#\x00'}, {0x20, '/dev/ion\x00'}, {0x20, '/dev/vbi#\x00'}, {0x20, '^'}], 0xa, "6a7364edafc7206abc79010e741e1ca901f785c738ed18261d1f72859e9ddcbdbd6da3553c0c225e1feaaadb8c9ace18a71f71d47fb5d8ae70ea8fd4841514c62d5ca606ed6f2785742d37a6869c4d07923fdc2d2542e6eb60d7e54c918d6e21ac8b2b4140c6107321f7436384f1e151193ea9723684d5001f8e87f395e8ad65cee64fb5e1a4ba83737bd4af5ec8933841c13b4b988bd4fccc6dc2d77486b278807907409e912185f3312272400fdd010108e85f7c348a265d1da342e34b56abc9f977a05bbe5385f4fa59ad535ca67149a00432049e096397"}, 0x111) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6012, r3, 0x2000) times(&(0x7f0000000180)) 19:24:14 executing program 5: syz_read_part_table(0x0, 0x700, 0x0) 19:24:14 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x0, 0x0, {{}, 0xffffff7f00000000}}, 0xfe40}}, 0x0) [ 1331.196531] kauditd_printk_skb: 12 callbacks suppressed [ 1331.196546] audit: type=1400 audit(1552073054.453:512): avc: denied { read } for pid=30397 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1331.521269] audit: type=1400 audit(1552073054.773:513): avc: denied { create } for pid=30397 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1331.594240] ion_mmap: failure mapping buffer to userspace 19:24:14 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x2000) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup3(r1, r0, 0x80000) ioctl$ASHMEM_GET_SIZE(r2, 0x7704, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1331.665439] ion_mmap: failure mapping buffer to userspace 19:24:16 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x80, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r2, &(0x7f0000000280)={0x9, 0x108, 0xfa00, {r3, 0xfe, "e3252c", "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"}}, 0x110) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video0\x00', 0x2, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) r6 = perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x9b, 0x2, 0x81, 0x9, 0x0, 0x80000001, 0x0, 0x1, 0x5, 0xd7, 0x2, 0x10000, 0x3, 0x6, 0x77, 0x8, 0x3, 0x7, 0x7, 0x2, 0x3551, 0xd4c1, 0xfffffffeffffffff, 0x0, 0x7ff, 0x9, 0x0, 0x1000, 0x80, 0x84c5, 0x4, 0x800000000000000, 0x7, 0x3, 0x2, 0xd90, 0x0, 0x80000000, 0x4, @perf_config_ext={0x53477304, 0x7fffffff}, 0x400, 0x5, 0x9b, 0xe, 0x100, 0x200, 0xe78}, r5, 0x0, r1, 0x8) r7 = dup3(r6, r4, 0x80000) ioctl$NBD_SET_TIMEOUT(r7, 0xab09, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:24:16 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000001, 0x3b}) 19:24:16 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:24:16 executing program 5: syz_read_part_table(0x0, 0xf1c, 0x0) 19:24:16 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x400f}}, 0xfe40}}, 0x0) 19:24:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000080)={0xc, 0x8, 0xfa00, {&(0x7f0000000140)}}, 0x10) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6012, r3, 0x2000) 19:24:16 executing program 5: syz_read_part_table(0x0, 0x1c0f, 0x0) [ 1333.468689] ion_mmap: failure mapping buffer to userspace 19:24:16 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000001, 0x3b}) [ 1333.618169] ion_mmap: failure mapping buffer to userspace 19:24:17 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffff9fffff3ffa7, &(0x7f0000000140)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x4000, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000100)={0x5, 0x8, 0x0, 0x15, 0x9}) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f00000001c0)=""/4096) getsockopt$TIPC_NODE_RECVQ_DEPTH(r1, 0x10f, 0x83, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 19:24:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x1, 0x0) write$UHID_SET_REPORT_REPLY(r2, &(0x7f0000000140)={0xe, 0x3, 0x400, 0xaf1, 0xcb, "4eb243104e329038804a802af3653eda48f562d65f30d64ef21709c29d7476e183b8497ce8fe08bbf05e207f444012dc7f2ff48824649ab3358cdc243c7822d8ac3ac682c98d4cc44e1a39aec704f614798610463889fcb039ab696f8dc678c2d08ee8fcd7cd21d95315d719039177129b984fe32151c46b13bb741048a4b5d6909b808903d927b5c6ae341c5b2d6616b727715a9ce4b178967605346d70399cceea5447ff5267b5691d6876ab134635eb96caed6cbc87f852f64317f2e9ef45ec989795b2711b44361f11"}, 0xd7) 19:24:17 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x4010}}, 0xfe40}}, 0x0) 19:24:17 executing program 5: syz_read_part_table(0x0, 0x1f00, 0x0) 19:24:17 executing program 3 (fault-call:3 fault-nth:0): r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1334.930530] syz-executor.0: page allocation failure: order:4, mode:0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 1334.996993] CPU: 0 PID: 30676 Comm: syz-executor.0 Not tainted 5.0.0+ #12 [ 1335.003966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1335.013326] Call Trace: [ 1335.015926] dump_stack+0x172/0x1f0 [ 1335.019572] warn_alloc.cold+0x87/0x17f [ 1335.023572] ? zone_watermark_ok_safe+0x260/0x260 [ 1335.028439] ? get_page_from_freelist+0x4170/0x4170 [ 1335.033470] ? __isolate_free_page+0x4c0/0x4c0 [ 1335.038063] ? drain_all_pages+0x4d/0x590 [ 1335.042234] __alloc_pages_slowpath+0x231d/0x28b0 [ 1335.047118] ? warn_alloc+0x110/0x110 [ 1335.050935] ? find_held_lock+0x35/0x130 [ 1335.055023] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1335.060585] ? should_fail+0x1de/0x852 [ 1335.064501] ? __isolate_free_page+0x4c0/0x4c0 [ 1335.069100] ? ___might_sleep+0x163/0x280 [ 1335.073275] __alloc_pages_nodemask+0x57e/0x7e0 [ 1335.077958] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1335.082991] ? wait_for_completion+0x440/0x440 [ 1335.087585] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1335.093138] alloc_pages_current+0x107/0x210 [ 1335.098266] ion_page_pool_alloc+0x137/0x1d0 [ 1335.102694] ion_system_heap_allocate+0x165/0xaa0 [ 1335.107561] ? ion_system_heap_free+0x250/0x250 [ 1335.112241] ? ion_ioctl+0xa3c/0xf70 [ 1335.115966] ion_ioctl+0x3d8/0xf70 [ 1335.119548] ? _ion_buffer_destroy+0x110/0x110 [ 1335.124182] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1335.129321] ? _ion_buffer_destroy+0x110/0x110 [ 1335.133955] do_vfs_ioctl+0xd6e/0x1390 [ 1335.137863] ? ioctl_preallocate+0x210/0x210 [ 1335.142463] ? selinux_file_mprotect+0x620/0x620 [ 1335.147239] ? ksys_dup3+0x3e0/0x3e0 [ 1335.150962] ? nsecs_to_jiffies+0x30/0x30 [ 1335.155127] ? tomoyo_file_ioctl+0x23/0x30 [ 1335.159375] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1335.164952] ? security_file_ioctl+0x93/0xc0 [ 1335.169375] ksys_ioctl+0xab/0xd0 [ 1335.172843] __x64_sys_ioctl+0x73/0xb0 [ 1335.176745] do_syscall_64+0x103/0x610 [ 1335.180673] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1335.185867] RIP: 0033:0x457f29 [ 1335.189093] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1335.208006] RSP: 002b:00007f7e0f635c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1335.215755] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457f29 [ 1335.223032] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1335.230326] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1335.237614] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7e0f6366d4 [ 1335.244898] R13: 00000000004c078b R14: 00000000004d24c0 R15: 00000000ffffffff [ 1335.390489] FAULT_INJECTION: forcing a failure. [ 1335.390489] name failslab, interval 1, probability 0, space 0, times 0 [ 1335.417043] CPU: 0 PID: 30865 Comm: syz-executor.3 Not tainted 5.0.0+ #12 [ 1335.424110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1335.433484] Call Trace: [ 1335.436097] dump_stack+0x172/0x1f0 [ 1335.439749] should_fail.cold+0xa/0x15 [ 1335.443674] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1335.448803] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1335.453582] __should_failslab+0x121/0x190 [ 1335.457856] should_failslab+0x9/0x14 [ 1335.461674] kmem_cache_alloc+0x47/0x6f0 [ 1335.465764] avc_alloc_node+0x2a/0x630 [ 1335.469926] avc_compute_av+0x22d/0x870 [ 1335.473928] avc_has_extended_perms+0x815/0x1100 [ 1335.478696] ? find_held_lock+0x35/0x130 [ 1335.482775] ? avc_ss_reset+0x190/0x190 [ 1335.486761] ? refcount_dec_not_one+0x1f0/0x1f0 [ 1335.491447] ? kasan_check_read+0x11/0x20 [ 1335.495627] ? __lock_acquire+0x548/0x3fb0 [ 1335.499887] ? refcount_dec_and_test_checked+0x1b/0x20 [ 1335.505212] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1335.510770] ? proc_fail_nth_write+0x9d/0x1d0 [ 1335.515275] ? proc_cwd_link+0x1c0/0x1c0 [ 1335.519366] ? __might_sleep+0x95/0x190 [ 1335.523356] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1335.528135] selinux_file_ioctl+0x49a/0x610 [ 1335.532489] ? verify_cpu+0x1f/0x100 [ 1335.536244] ? selinux_file_mprotect+0x620/0x620 [ 1335.541038] ? retint_kernel+0x2d/0x2d [ 1335.544951] ? selinux_file_mprotect+0x620/0x620 [ 1335.549739] security_file_ioctl+0x7d/0xc0 [ 1335.553990] ? security_file_ioctl+0x7d/0xc0 [ 1335.558419] ksys_ioctl+0x57/0xd0 [ 1335.561911] __x64_sys_ioctl+0x73/0xb0 [ 1335.565813] ? do_syscall_64+0x5b/0x610 [ 1335.569798] do_syscall_64+0x103/0x610 [ 1335.573708] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1335.578911] RIP: 0033:0x457f29 [ 1335.582113] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1335.601034] RSP: 002b:00007f38a954ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1335.608762] RAX: ffffffffffffffda RBX: 00007f38a954ec90 RCX: 0000000000457f29 [ 1335.616046] RDX: 0000000020000140 RSI: fffffbfffff3ffa7 RDI: 0000000000000003 [ 1335.623332] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1335.630622] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f38a954f6d4 [ 1335.637913] R13: 00000000004bf139 R14: 00000000004d0ac8 R15: 0000000000000005 [ 1335.648259] Mem-Info: [ 1335.650811] active_anon:148044 inactive_anon:190 isolated_anon:12 [ 1335.650811] active_file:1509 inactive_file:3082 isolated_file:0 [ 1335.650811] unevictable:0 dirty:193 writeback:0 unstable:0 [ 1335.650811] slab_reclaimable:20060 slab_unreclaimable:97763 [ 1335.650811] mapped:55292 shmem:246 pagetables:2251 bounce:0 [ 1335.650811] free:90391 free_pcp:845 free_cma:0 [ 1335.846968] Node 0 active_anon:592172kB inactive_anon:760kB active_file:6036kB inactive_file:12348kB unevictable:0kB isolated(anon):12kB isolated(file):0kB mapped:221116kB dirty:808kB writeback:0kB shmem:984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 288768kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1335.933981] Node 1 active_anon:8kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1336.003146] Node 0 DMA free:10496kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1336.072925] lowmem_reserve[]: 0 2553 2555 2555 [ 1336.090642] Node 0 DMA32 free:162008kB min:117748kB low:126804kB high:135860kB active_anon:588800kB inactive_anon:760kB active_file:6032kB inactive_file:12348kB unevictable:0kB writepending:804kB present:3129332kB managed:2617984kB mlocked:0kB kernel_stack:8800kB pagetables:9092kB bounce:0kB free_pcp:724kB local_pcp:68kB free_cma:0kB [ 1336.198667] lowmem_reserve[]: 0 0 2 2 [ 1336.211718] Node 0 Normal free:8kB min:28kB low:32kB high:36kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:4kB present:786432kB managed:2204kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1336.322903] lowmem_reserve[]: 0 0 0 0 [ 1336.332602] Node 1 Normal free:92160kB min:53624kB low:67028kB high:80432kB active_anon:8kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870184kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:1344kB local_pcp:1344kB free_cma:0kB [ 1336.439687] syz-executor.1: page allocation failure: order:4, mode:0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 1336.466948] lowmem_reserve[]: 0 0 0 0 [ 1336.467994] CPU: 0 PID: 30755 Comm: syz-executor.1 Not tainted 5.0.0+ #12 [ 1336.477744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1336.483017] Node 0 DMA: 2*4kB (UE) 3*8kB (UE) 4*16kB (UE) 3*32kB (UE) 1*64kB (E) 2*128kB (UE) 1*256kB (E) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10496kB [ 1336.487117] Call Trace: [ 1336.487140] dump_stack+0x172/0x1f0 [ 1336.487162] warn_alloc.cold+0x87/0x17f [ 1336.487179] ? zone_watermark_ok_safe+0x260/0x260 [ 1336.487202] ? get_page_from_freelist+0x4170/0x4170 [ 1336.487219] ? __isolate_free_page+0x4c0/0x4c0 [ 1336.527298] ? mutex_unlock+0xd/0x10 [ 1336.531027] ? drain_all_pages+0x408/0x590 [ 1336.532735] Node 0 DMA32: 7085*4kB (UME) 3525*8kB (UMEH) 2089*16kB (UMEH) 2151*32kB (UM) 13*64kB (UMH) 5*128kB (UMH) 1*256kB (H) 2*512kB (H) 0*1024kB 0*2048kB 0*4096kB = 161548kB [ 1336.535279] __alloc_pages_slowpath+0x231d/0x28b0 [ 1336.535312] ? warn_alloc+0x110/0x110 [ 1336.560254] ? find_held_lock+0x35/0x130 [ 1336.564340] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1336.570154] ? should_fail+0x1de/0x852 [ 1336.574065] ? __isolate_free_page+0x4c0/0x4c0 [ 1336.574466] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1336.578660] ? ___might_sleep+0x163/0x280 [ 1336.578687] __alloc_pages_nodemask+0x57e/0x7e0 [ 1336.578707] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1336.578731] ? wait_for_completion+0x440/0x440 [ 1336.608142] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1336.609797] Node 1 Normal: 68*4kB (UM) 150*8kB (UM) 248*16kB (UM) 70*32kB (UM) 3*64kB (UM) 11*128kB (UM) 2*256kB (UM) 4*512kB (UM) 1*1024kB (U) 0*2048kB 10*4096kB (U) = 53824kB [ 1336.613694] alloc_pages_current+0x107/0x210 [ 1336.613720] ion_page_pool_alloc+0x137/0x1d0 [ 1336.638498] ion_system_heap_allocate+0x165/0xaa0 [ 1336.643366] ? ion_system_heap_free+0x250/0x250 [ 1336.648050] ? ion_ioctl+0xa3c/0xf70 [ 1336.651778] ion_ioctl+0x3d8/0xf70 [ 1336.653057] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1336.655336] ? _ion_buffer_destroy+0x110/0x110 [ 1336.655360] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1336.673898] ? _ion_buffer_destroy+0x110/0x110 [ 1336.677599] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1336.678493] do_vfs_ioctl+0xd6e/0x1390 [ 1336.690962] ? ioctl_preallocate+0x210/0x210 [ 1336.695382] ? selinux_file_mprotect+0x620/0x620 [ 1336.698266] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1336.700169] ? ksys_dup3+0x3e0/0x3e0 [ 1336.700187] ? nsecs_to_jiffies+0x30/0x30 [ 1336.716879] ? tomoyo_file_ioctl+0x23/0x30 [ 1336.721163] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1336.722504] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1336.726729] ? security_file_ioctl+0x93/0xc0 [ 1336.726749] ksys_ioctl+0xab/0xd0 [ 1336.726768] __x64_sys_ioctl+0x73/0xb0 [ 1336.747110] do_syscall_64+0x103/0x610 [ 1336.750965] 4721 total pagecache pages [ 1336.751013] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1336.759532] 0 pages in swap cache [ 1336.760584] RIP: 0033:0x457f29 [ 1336.760600] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1336.767205] Swap cache stats: add 0, delete 0, find 0/0 [ 1336.767271] RSP: 002b:00007f57b7c93c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1336.799245] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457f29 [ 1336.806532] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1336.808028] Free swap = 0kB [ 1336.813816] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1336.813825] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f57b7c946d4 [ 1336.813833] R13: 00000000004c078b R14: 00000000004d24c0 R15: 00000000ffffffff [ 1336.824537] Mem-Info: [ 1336.841745] active_anon:147453 inactive_anon:190 isolated_anon:75 [ 1336.841745] active_file:1761 inactive_file:2675 isolated_file:5 [ 1336.841745] unevictable:0 dirty:202 writeback:0 unstable:0 [ 1336.841745] slab_reclaimable:20047 slab_unreclaimable:97593 [ 1336.841745] mapped:55266 shmem:246 pagetables:2247 bounce:0 [ 1336.841745] free:56207 free_pcp:503 free_cma:0 [ 1336.867248] Total swap = 0kB [ 1336.876329] Node 0 active_anon:589804kB inactive_anon:760kB active_file:7040kB inactive_file:10700kB unevictable:0kB isolated(anon):300kB isolated(file):20kB mapped:221064kB dirty:808kB writeback:0kB shmem:984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 286720kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1336.885182] 1965979 pages RAM [ 1336.916806] 0 pages HighMem/MovableOnly [ 1336.920877] 339409 pages reserved [ 1336.924534] 0 pages cma reserved [ 1336.940008] Node 1 active_anon:8kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1336.972910] Node 0 DMA free:10496kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1337.063311] lowmem_reserve[]: 0 2553 2555 2555 [ 1337.068048] Node 0 DMA32 free:103620kB min:36232kB low:45288kB high:54344kB active_anon:589704kB inactive_anon:760kB active_file:7036kB inactive_file:10600kB unevictable:0kB writepending:804kB present:3129332kB managed:2617984kB mlocked:0kB kernel_stack:8768kB pagetables:8988kB bounce:0kB free_pcp:648kB local_pcp:400kB free_cma:0kB [ 1337.104057] lowmem_reserve[]: 0 0 2 2 [ 1337.107999] Node 0 Normal free:8kB min:28kB low:32kB high:36kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:4kB present:786432kB managed:2204kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1337.140367] lowmem_reserve[]: 0 0 0 0 [ 1337.144377] Node 1 Normal free:53680kB min:53624kB low:67028kB high:80432kB active_anon:8kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870184kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1337.178223] lowmem_reserve[]: 0 0 0 0 [ 1337.182221] Node 0 DMA: 2*4kB (UE) 3*8kB (UE) 4*16kB (UE) 3*32kB (UE) 1*64kB (E) 2*128kB (UE) 1*256kB (E) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10496kB [ 1337.203220] Node 0 DMA32: 1441*4kB (UME) 314*8kB (UEH) 35*16kB (UEH) 1222*32kB (UM) 9*64kB (UH) 5*128kB (UH) 2*256kB (UH) 3*512kB (UH) 0*1024kB 0*2048kB 0*4096kB = 51204kB [ 1337.225045] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1337.236246] Node 1 Normal: 68*4kB (UM) 150*8kB (UM) 248*16kB (UM) 70*32kB (UM) 3*64kB (UM) 11*128kB (UM) 2*256kB (UM) 4*512kB (UM) 1*1024kB (U) 0*2048kB 10*4096kB (U) = 53824kB [ 1337.261110] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1337.271424] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1337.285365] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1337.295627] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1337.314733] 3290 total pagecache pages [ 1337.331987] 0 pages in swap cache [ 1337.335684] Swap cache stats: add 0, delete 0, find 0/0 [ 1337.352183] Free swap = 0kB [ 1337.355229] Total swap = 0kB [ 1337.366411] 1965979 pages RAM [ 1337.384937] 0 pages HighMem/MovableOnly [ 1337.394268] 339409 pages reserved [ 1337.412114] 0 pages cma reserved [ 1337.628889] oom_reaper: reaped process 30676 (syz-executor.0), now anon-rss:0kB, file-rss:34688kB, shmem-rss:0kB [ 1337.799979] oom_reaper: reaped process 30755 (syz-executor.1), now anon-rss:0kB, file-rss:34688kB, shmem-rss:0kB [ 1337.843483] rsyslogd invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1337.854192] CPU: 0 PID: 8010 Comm: rsyslogd Not tainted 5.0.0+ #12 [ 1337.860536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1337.869894] Call Trace: [ 1337.872489] dump_stack+0x172/0x1f0 [ 1337.876129] dump_header+0x10f/0xb6c [ 1337.879849] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1337.884958] ? ___ratelimit+0x60/0x595 [ 1337.888866] ? do_raw_spin_unlock+0x57/0x270 [ 1337.893281] oom_kill_process.cold+0x10/0x15 [ 1337.897699] out_of_memory+0x79a/0x1280 [ 1337.901685] ? oom_killer_disable+0x280/0x280 [ 1337.906184] ? mutex_trylock+0x18e/0x1e0 [ 1337.910245] ? __alloc_pages_slowpath+0xcd9/0x28b0 [ 1337.915177] __alloc_pages_slowpath+0x2199/0x28b0 [ 1337.920042] ? warn_alloc+0x110/0x110 [ 1337.923843] ? find_held_lock+0x35/0x130 [ 1337.927914] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1337.933480] ? should_fail+0x1de/0x852 [ 1337.937392] __alloc_pages_nodemask+0x57e/0x7e0 [ 1337.942090] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1337.947130] ? find_held_lock+0x35/0x130 [ 1337.951194] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1337.956736] alloc_pages_current+0x107/0x210 [ 1337.961155] __page_cache_alloc+0x2bd/0x460 [ 1337.965487] ? kasan_check_read+0x11/0x20 [ 1337.969652] filemap_fault+0xff7/0x2400 [ 1337.973638] ? xas_load+0x67/0x150 [ 1337.977192] ? __lock_page_or_retry+0x1020/0x1020 [ 1337.982066] ? lock_acquire+0x16f/0x3f0 [ 1337.986047] ? ext4_filemap_fault+0x7b/0xaf [ 1337.990382] ext4_filemap_fault+0x83/0xaf [ 1337.994532] __do_fault+0x116/0x4e0 [ 1337.998167] __handle_mm_fault+0x2c5e/0x3eb0 [ 1338.002582] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1338.007422] ? find_held_lock+0x35/0x130 [ 1338.011487] ? handle_mm_fault+0x322/0xb30 [ 1338.015736] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1338.021280] ? kasan_check_read+0x11/0x20 [ 1338.025432] handle_mm_fault+0x43f/0xb30 [ 1338.029506] __do_page_fault+0x5da/0xd60 [ 1338.033577] do_page_fault+0x71/0x581 [ 1338.037379] ? page_fault+0x8/0x30 [ 1338.040919] page_fault+0x1e/0x30 [ 1338.044368] RIP: 0033:0x7fba457261fd [ 1338.048089] Code: Bad RIP value. [ 1338.051450] RSP: 002b:00007fba42cc5e30 EFLAGS: 00010293 [ 1338.056811] RAX: 0000000000000077 RBX: 0000000001bca4b0 RCX: 00007fba457261fd [ 1338.064101] RDX: 0000000000000fff RSI: 00007fba444fa5a0 RDI: 0000000000000004 [ 1338.071371] RBP: 0000000000000000 R08: 0000000001bb5260 R09: 0000000004000001 [ 1338.078643] R10: 0000000000000001 R11: 0000000000000293 R12: 000000000065e420 [ 1338.085912] R13: 00007fba42cc69c0 R14: 00007fba45d6b040 R15: 0000000000000003 [ 1338.127485] Mem-Info: [ 1338.130001] active_anon:147490 inactive_anon:190 isolated_anon:12 [ 1338.130001] active_file:44 inactive_file:28 isolated_file:0 [ 1338.130001] unevictable:0 dirty:91 writeback:1 unstable:0 [ 1338.130001] slab_reclaimable:20045 slab_unreclaimable:97587 [ 1338.130001] mapped:52231 shmem:246 pagetables:2247 bounce:0 [ 1338.130001] free:14074 free_pcp:0 free_cma:0 [ 1338.163209] Node 0 active_anon:589952kB inactive_anon:760kB active_file:172kB inactive_file:112kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:208924kB dirty:364kB writeback:4kB shmem:984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 286720kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1338.193558] Node 1 active_anon:8kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1338.221605] Node 0 DMA free:10308kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1338.290832] lowmem_reserve[]: 0 2553 2555 2555 [ 1338.295509] Node 0 DMA32 free:19172kB min:36232kB low:45288kB high:54344kB active_anon:590052kB inactive_anon:760kB active_file:856kB inactive_file:160kB unevictable:0kB writepending:668kB present:3129332kB managed:2617984kB mlocked:0kB kernel_stack:8736kB pagetables:8988kB bounce:0kB free_pcp:496kB local_pcp:248kB free_cma:0kB [ 1338.338193] lowmem_reserve[]: 0 0 2 2 [ 1338.342045] Node 0 Normal free:12kB min:28kB low:32kB high:36kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2204kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1338.379091] lowmem_reserve[]: 0 0 0 0 [ 1338.386356] Node 1 Normal free:26804kB min:53624kB low:67028kB high:80432kB active_anon:8kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870184kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1338.454220] lowmem_reserve[]: 0 0 0 0 [ 1338.458161] Node 0 DMA: 1*4kB (E) 2*8kB (UE) 1*16kB (E) 1*32kB (E) 2*64kB (UE) 1*128kB (E) 1*256kB (E) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10308kB [ 1338.494993] Node 0 DMA32: 1910*4kB (ME) 527*8kB (UMEH) 146*16kB (MEH) 65*32kB (M) 3*64kB (H) 1*128kB (H) 1*256kB (H) 2*512kB (H) 0*1024kB 0*2048kB 0*4096kB = 17872kB [ 1338.527026] Node 0 Normal: 0*4kB 1*8kB (E) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1338.539673] Node 1 Normal: 2*4kB (M) 2*8kB (UM) 1*16kB (M) 2*32kB (M) 2*64kB (UM) 2*128kB (UM) 1*256kB (M) 3*512kB (UM) 0*1024kB 0*2048kB 6*4096kB (U) = 26856kB [ 1338.554354] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1338.574203] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1338.585714] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1338.594696] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1338.618297] 321 total pagecache pages [ 1338.622186] 0 pages in swap cache [ 1338.625670] Swap cache stats: add 0, delete 0, find 0/0 [ 1338.631107] Free swap = 0kB [ 1338.634145] Total swap = 0kB [ 1338.637542] 1965979 pages RAM [ 1338.640651] 0 pages HighMem/MovableOnly [ 1338.644689] 339409 pages reserved [ 1338.648216] 0 pages cma reserved [ 1338.651641] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/syz0,task=syz-executor.0,pid=11249,uid=0 [ 1338.666481] Out of memory: Killed process 11249 (syz-executor.0) total-vm:72708kB, anon-rss:2208kB, file-rss:34816kB, shmem-rss:0kB [ 1338.679707] oom_reaper: reaped process 11249 (syz-executor.0), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1338.715167] rsyslogd invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1338.740181] CPU: 1 PID: 8010 Comm: rsyslogd Not tainted 5.0.0+ #12 [ 1338.746552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1338.755919] Call Trace: [ 1338.758527] dump_stack+0x172/0x1f0 [ 1338.762475] dump_header+0x10f/0xb6c [ 1338.766213] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1338.771424] ? ___ratelimit+0x60/0x595 [ 1338.775322] ? do_raw_spin_unlock+0x57/0x270 [ 1338.779750] oom_kill_process.cold+0x10/0x15 [ 1338.784175] out_of_memory+0x79a/0x1280 [ 1338.788183] ? oom_killer_disable+0x280/0x280 [ 1338.792694] ? mutex_trylock+0x18e/0x1e0 [ 1338.796787] ? __alloc_pages_slowpath+0xcd9/0x28b0 [ 1338.801841] __alloc_pages_slowpath+0x2199/0x28b0 [ 1338.806728] ? warn_alloc+0x110/0x110 [ 1338.810532] ? find_held_lock+0x35/0x130 [ 1338.814603] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1338.820178] ? should_fail+0x1de/0x852 [ 1338.824092] __alloc_pages_nodemask+0x57e/0x7e0 [ 1338.828780] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1338.833838] ? find_held_lock+0x35/0x130 [ 1338.837912] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1338.843465] alloc_pages_current+0x107/0x210 [ 1338.847887] __page_cache_alloc+0x2bd/0x460 [ 1338.852229] ? kasan_check_read+0x11/0x20 [ 1338.856389] filemap_fault+0xff7/0x2400 [ 1338.860370] ? xas_load+0x67/0x150 [ 1338.863929] ? __lock_page_or_retry+0x1020/0x1020 [ 1338.869309] ? lock_acquire+0x16f/0x3f0 [ 1338.873288] ? ext4_filemap_fault+0x7b/0xaf [ 1338.877626] ext4_filemap_fault+0x83/0xaf [ 1338.881786] __do_fault+0x116/0x4e0 [ 1338.885418] __handle_mm_fault+0x2c5e/0x3eb0 [ 1338.889838] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1338.894694] ? find_held_lock+0x35/0x130 [ 1338.898759] ? handle_mm_fault+0x322/0xb30 [ 1338.903011] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1338.908553] ? kasan_check_read+0x11/0x20 [ 1338.912718] handle_mm_fault+0x43f/0xb30 [ 1338.916790] __do_page_fault+0x5da/0xd60 [ 1338.920863] do_page_fault+0x71/0x581 [ 1338.924667] ? page_fault+0x8/0x30 [ 1338.928212] page_fault+0x1e/0x30 [ 1338.931662] RIP: 0033:0x7fba457261fd [ 1338.935389] Code: Bad RIP value. [ 1338.938753] RSP: 002b:00007fba42cc5e30 EFLAGS: 00010293 [ 1338.944120] RAX: 0000000000000077 RBX: 0000000001bca4b0 RCX: 00007fba457261fd [ 1338.951415] RDX: 0000000000000fff RSI: 00007fba444fa5a0 RDI: 0000000000000004 [ 1338.958684] RBP: 0000000000000000 R08: 0000000001bb5260 R09: 0000000004000001 [ 1338.965958] R10: 0000000000000001 R11: 0000000000000293 R12: 000000000065e420 [ 1338.973231] R13: 00007fba42cc69c0 R14: 00007fba45d6b040 R15: 0000000000000003 [ 1339.009062] syz-executor.1: page allocation failure: order:0, mode:0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 1339.014127] Mem-Info: [ 1339.029759] active_anon:146948 inactive_anon:190 isolated_anon:0 [ 1339.029759] active_file:69 inactive_file:22 isolated_file:0 [ 1339.029759] unevictable:0 dirty:68 writeback:0 unstable:0 [ 1339.029759] slab_reclaimable:20043 slab_unreclaimable:97584 [ 1339.029759] mapped:52226 shmem:246 pagetables:2247 bounce:0 [ 1339.029759] free:13706 free_pcp:257 free_cma:0 [ 1339.037618] CPU: 1 PID: 30755 Comm: syz-executor.1 Not tainted 5.0.0+ #12 [ 1339.069771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1339.070303] Node 0 active_anon:587788kB inactive_anon:760kB active_file:276kB inactive_file:84kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:272kB writeback:0kB shmem:984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 286720kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1339.079125] Call Trace: [ 1339.079156] dump_stack+0x172/0x1f0 [ 1339.079178] warn_alloc.cold+0x87/0x17f [ 1339.079196] ? zone_watermark_ok_safe+0x260/0x260 [ 1339.122169] ? mark_held_locks+0xa4/0xf0 [ 1339.123436] Node 1 active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1339.126346] ? batadv_send_skb_to_orig+0x248/0x260 [ 1339.156893] __alloc_pages_slowpath+0x231d/0x28b0 [ 1339.161776] ? warn_alloc+0x110/0x110 [ 1339.165595] ? find_held_lock+0x35/0x130 [ 1339.168235] Node 0 DMA free:10308kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1339.169681] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1339.201346] ? should_fail+0x1de/0x852 [ 1339.205277] __alloc_pages_nodemask+0x57e/0x7e0 [ 1339.210006] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1339.215153] ? wait_for_completion+0x440/0x440 [ 1339.216920] lowmem_reserve[]: 0 2553 2555 2555 [ 1339.219933] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1339.224513] Node 0 DMA32 free:17904kB min:36232kB low:45288kB high:54344kB active_anon:587788kB inactive_anon:760kB active_file:224kB inactive_file:92kB unevictable:0kB writepending:272kB present:3129332kB managed:2617984kB mlocked:0kB kernel_stack:8736kB pagetables:8988kB bounce:0kB free_pcp:780kB local_pcp:380kB free_cma:0kB [ 1339.230062] alloc_pages_current+0x107/0x210 [ 1339.230084] ion_page_pool_alloc+0x137/0x1d0 [ 1339.230100] ion_system_heap_allocate+0x165/0xaa0 [ 1339.230122] ? ion_system_heap_free+0x250/0x250 [ 1339.230146] ? ion_ioctl+0xa3c/0xf70 [ 1339.264363] lowmem_reserve[]: 0 0 2 2 [ 1339.268041] ion_ioctl+0x3d8/0xf70 [ 1339.268068] ? _ion_buffer_destroy+0x110/0x110 [ 1339.268088] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1339.268136] ? _ion_buffer_destroy+0x110/0x110 [ 1339.275686] Node 0 Normal free:8kB min:28kB low:32kB high:36kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2204kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1339.277639] do_vfs_ioctl+0xd6e/0x1390 [ 1339.277661] ? ioctl_preallocate+0x210/0x210 [ 1339.277684] ? selinux_file_mprotect+0x620/0x620 [ 1339.277707] ? ksys_dup3+0x3e0/0x3e0 [ 1339.277723] ? nsecs_to_jiffies+0x30/0x30 [ 1339.277745] ? tomoyo_file_ioctl+0x23/0x30 [ 1339.277763] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1339.300033] lowmem_reserve[]: 0 0 0 0 [ 1339.303061] ? security_file_ioctl+0x93/0xc0 [ 1339.367882] ksys_ioctl+0xab/0xd0 [ 1339.371362] __x64_sys_ioctl+0x73/0xb0 [ 1339.375305] do_syscall_64+0x103/0x610 [ 1339.379218] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1339.380505] Node 1 Normal free:26604kB min:53624kB low:67028kB high:80432kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870184kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 1339.384414] RIP: 0033:0x457f29 [ 1339.415312] Code: Bad RIP value. [ 1339.418696] RSP: 002b:00007f57b7c93c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1339.426417] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457f29 [ 1339.430984] lowmem_reserve[]: 0 0 0 0 [ 1339.433690] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1339.433702] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1339.439972] Node 0 DMA: 1*4kB (E) 2*8kB (UE) 1*16kB (E) 1*32kB (E) 2*64kB (UE) 1*128kB (E) 1*256kB (E) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10308kB [ 1339.444815] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f57b7c946d4 [ 1339.444828] R13: 00000000004c078b R14: 00000000004d24c0 R15: 00000000ffffffff [ 1339.452163] Node 0 DMA32: 1910*4kB (ME) 521*8kB (UMEH) 147*16kB (UMEH) 65*32kB (M) 4*64kB (UH) 1*128kB (H) 1*256kB (H) 2*512kB (H) 0*1024kB 0*2048kB 0*4096kB = 17904kB [ 1339.478642] Mem-Info: [ 1339.500059] active_anon:146939 inactive_anon:190 isolated_anon:0 [ 1339.500059] active_file:63 inactive_file:28 isolated_file:0 [ 1339.500059] unevictable:0 dirty:68 writeback:0 unstable:0 [ 1339.500059] slab_reclaimable:20040 slab_unreclaimable:97566 [ 1339.500059] mapped:52226 shmem:246 pagetables:2246 bounce:0 [ 1339.500059] free:13706 free_pcp:257 free_cma:0 [ 1339.551806] Node 0 active_anon:587752kB inactive_anon:760kB active_file:148kB inactive_file:76kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:272kB writeback:0kB shmem:984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 284672kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1339.561221] Node 0 Normal: 0*4kB 1*8kB (E) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1339.585412] Node 1 active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1339.612017] Node 1 Normal: 3*4kB (UM) 2*8kB (UM) 1*16kB (M) 2*32kB (M) 2*64kB (UM) 2*128kB (UM) 2*256kB (UM) 2*512kB (M) 0*1024kB 0*2048kB 6*4096kB (U) = 26604kB [ 1339.635450] Node 0 DMA free:10308kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1339.646952] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1339.667418] lowmem_reserve[]: 0 2553 2555 2555 [ 1339.675352] Node 0 DMA32 free:18008kB min:36232kB low:45288kB high:54344kB active_anon:587752kB inactive_anon:760kB active_file:140kB inactive_file:76kB unevictable:0kB writepending:272kB present:3129332kB managed:2617984kB mlocked:0kB kernel_stack:8736kB pagetables:8880kB bounce:0kB free_pcp:808kB local_pcp:400kB free_cma:0kB [ 1339.698308] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1339.725384] lowmem_reserve[]: 0 0 2 2 [ 1339.729299] Node 0 Normal free:8kB min:28kB low:32kB high:36kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2204kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1339.730659] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1339.765865] lowmem_reserve[]: 0 0 0 0 [ 1339.766644] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1339.782187] Node 1 Normal free:26604kB min:53624kB low:67028kB high:80432kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870184kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 1339.784946] 321 total pagecache pages [ 1339.836900] lowmem_reserve[]: 0 0 0 0 [ 1339.840757] Node 0 DMA: 1*4kB (E) 2*8kB (UE) 1*16kB (E) 1*32kB (E) 2*64kB (UE) 1*128kB (E) 1*256kB (E) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10308kB [ 1339.851383] 0 pages in swap cache [ 1339.859109] Swap cache stats: add 0, delete 0, find 0/0 [ 1339.864472] Free swap = 0kB [ 1339.865652] Node 0 DMA32: 1910*4kB (ME) 526*8kB (UMEH) 147*16kB (UMEH) 67*32kB (UM) 4*64kB (UH) 1*128kB (H) 1*256kB (H) 2*512kB (H) 0*1024kB 0*2048kB 0*4096kB = 18008kB [ 1339.875571] Total swap = 0kB [ 1339.888730] 1965979 pages RAM [ 1339.891850] 0 pages HighMem/MovableOnly [ 1339.895820] 339409 pages reserved [ 1339.898958] Node 0 Normal: 0*4kB 1*8kB (E) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1339.916944] 0 pages cma reserved [ 1339.920344] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/syz3,task=syz-executor.3,pid=18873,uid=0 [ 1339.924033] Node 1 Normal: 3*4kB (UM) 2*8kB (UM) 1*16kB (M) 2*32kB (M) 2*64kB (UM) 2*128kB (UM) 2*256kB (UM) 2*512kB (M) 0*1024kB 0*2048kB 6*4096kB (U) = 26604kB [ 1339.938388] Out of memory: Killed process 18873 (syz-executor.3) total-vm:72708kB, anon-rss:2208kB, file-rss:34816kB, shmem-rss:0kB [ 1339.989836] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1340.004558] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1340.014895] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1340.017513] kworker/u4:3 invoked oom-killer: gfp_mask=0x40cd0(GFP_KERNEL|__GFP_COMP|__GFP_RECLAIMABLE), order=0, oom_score_adj=0 [ 1340.028318] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1340.051212] 321 total pagecache pages [ 1340.055050] 0 pages in swap cache [ 1340.059766] Swap cache stats: add 0, delete 0, find 0/0 [ 1340.065145] Free swap = 0kB [ 1340.073308] Total swap = 0kB [ 1340.076351] 1965979 pages RAM [ 1340.080827] 0 pages HighMem/MovableOnly [ 1340.084813] 339409 pages reserved [ 1340.088249] CPU: 0 PID: 270 Comm: kworker/u4:3 Not tainted 5.0.0+ #12 [ 1340.093649] 0 pages cma reserved [ 1340.094843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1340.094860] Workqueue: writeback wb_workfn (flush-8:0) [ 1340.112850] Call Trace: [ 1340.115441] dump_stack+0x172/0x1f0 [ 1340.119074] dump_header+0x10f/0xb6c [ 1340.122797] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1340.127909] ? ___ratelimit+0x60/0x595 [ 1340.131802] ? do_raw_spin_unlock+0x57/0x270 [ 1340.136217] oom_kill_process.cold+0x10/0x15 [ 1340.140644] out_of_memory+0x79a/0x1280 [ 1340.144633] ? oom_killer_disable+0x280/0x280 [ 1340.149136] ? mutex_trylock+0x18e/0x1e0 [ 1340.153200] ? __alloc_pages_slowpath+0xcd9/0x28b0 [ 1340.158143] __alloc_pages_slowpath+0x2199/0x28b0 [ 1340.163014] ? warn_alloc+0x110/0x110 [ 1340.166832] ? find_held_lock+0x35/0x130 [ 1340.170906] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1340.176450] ? should_fail+0x1de/0x852 [ 1340.180364] __alloc_pages_nodemask+0x57e/0x7e0 [ 1340.185049] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1340.188281] syz-executor.1: page allocation failure: order:4, mode:0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 1340.190075] ? cache_grow_begin+0x594/0x860 [ 1340.208639] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1340.213234] ? trace_hardirqs_on+0x67/0x230 [ 1340.217574] cache_grow_begin+0x9c/0x860 [ 1340.221649] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1340.227192] ? __cpuset_node_allowed+0x136/0x540 [ 1340.231958] fallback_alloc+0x1fd/0x2d0 [ 1340.235946] ____cache_alloc_node+0x1be/0x1e0 [ 1340.240447] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1340.245992] kmem_cache_alloc+0x1e8/0x6f0 [ 1340.250153] ext4_init_io_end+0x29/0x120 [ 1340.254223] ext4_writepages+0x10a0/0x3540 [ 1340.258468] ? clear_page_dirty_for_io+0xfd0/0xff0 [ 1340.263419] ? ext4_mark_inode_dirty+0x940/0x940 [ 1340.268176] ? __lock_acquire+0x548/0x3fb0 [ 1340.272472] ? blk_finish_plug+0x44/0xa2 [ 1340.276553] ? mark_held_locks+0xf0/0xf0 [ 1340.280622] ? __lock_acquire+0x548/0x3fb0 [ 1340.284878] ? ext4_mark_inode_dirty+0x940/0x940 [ 1340.289647] do_writepages+0xfc/0x2a0 [ 1340.293458] ? ext4_mark_inode_dirty+0x940/0x940 [ 1340.298222] ? do_writepages+0xfc/0x2a0 [ 1340.302212] ? page_writeback_cpu_online+0x20/0x20 [ 1340.307145] ? find_held_lock+0x60/0x130 [ 1340.311234] __writeback_single_inode+0x11d/0x12f0 [ 1340.316179] ? _raw_spin_unlock+0x2d/0x50 [ 1340.320334] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1340.325878] ? wbc_attach_and_unlock_inode+0x5c4/0x930 [ 1340.331162] writeback_sb_inodes+0x596/0xed0 [ 1340.335588] ? wbc_detach_inode+0x840/0x840 [ 1340.339916] ? lock_acquire+0x16f/0x3f0 [ 1340.343913] ? down_read_trylock+0x5d/0xa0 [ 1340.348588] ? trylock_super+0x22/0x110 [ 1340.352568] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1340.358111] __writeback_inodes_wb+0xc3/0x260 [ 1340.362618] wb_writeback+0x87f/0xd00 [ 1340.366426] ? wb_workfn+0x37e/0x1190 [ 1340.370244] ? find_held_lock+0x35/0x130 [ 1340.374316] ? writeback_inodes_wb.constprop.0+0x1a0/0x1a0 [ 1340.379949] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1340.384976] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1340.389998] ? get_nr_dirty_inodes+0xe2/0x140 [ 1340.394497] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1340.399520] wb_workfn+0xae5/0x1190 [ 1340.403159] ? mark_held_locks+0xf0/0xf0 [ 1340.407282] ? process_one_work+0x890/0x1790 [ 1340.411708] ? inode_wait_for_writeback+0x40/0x40 [ 1340.416577] process_one_work+0x98e/0x1790 [ 1340.420846] ? pwq_dec_nr_in_flight+0x320/0x320 [ 1340.425520] ? lock_acquire+0x16f/0x3f0 [ 1340.429522] worker_thread+0x98/0xe40 [ 1340.433368] kthread+0x357/0x430 [ 1340.436740] ? process_one_work+0x1790/0x1790 [ 1340.441247] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 1340.447490] ret_from_fork+0x3a/0x50 [ 1340.451241] CPU: 1 PID: 30755 Comm: syz-executor.1 Not tainted 5.0.0+ #12 [ 1340.458412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1340.467778] Call Trace: [ 1340.470398] dump_stack+0x172/0x1f0 [ 1340.474051] warn_alloc.cold+0x87/0x17f [ 1340.477264] Mem-Info: [ 1340.478036] ? zone_watermark_ok_safe+0x260/0x260 [ 1340.480455] active_anon:146401 inactive_anon:190 isolated_anon:0 [ 1340.480455] active_file:75 inactive_file:15 isolated_file:0 [ 1340.480455] unevictable:0 dirty:68 writeback:0 unstable:0 [ 1340.480455] slab_reclaimable:20040 slab_unreclaimable:97539 [ 1340.480455] mapped:52226 shmem:246 pagetables:2183 bounce:0 [ 1340.480455] free:13893 free_pcp:496 free_cma:0 [ 1340.485283] ? _raw_spin_unlock_irq+0x28/0x90 [ 1340.522845] ? psi_memstall_leave+0x12e/0x180 [ 1340.527364] ? get_page_from_freelist+0x4170/0x4170 [ 1340.532406] __alloc_pages_slowpath+0x231d/0x28b0 [ 1340.537282] ? warn_alloc+0x110/0x110 [ 1340.539317] Node 0 active_anon:585600kB inactive_anon:760kB active_file:220kB inactive_file:76kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:272kB writeback:0kB shmem:984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 284672kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1340.541095] ? find_held_lock+0x35/0x130 [ 1340.541116] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1340.576997] Node 1 active_anon:4kB inactive_anon:0kB active_file:24kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1340.578404] ? should_fail+0x1de/0x852 [ 1340.605884] syz-executor.0: page allocation failure: order:0, mode:0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 1340.608825] ? __isolate_free_page+0x4c0/0x4c0 [ 1340.608841] ? ___might_sleep+0x163/0x280 [ 1340.608865] __alloc_pages_nodemask+0x57e/0x7e0 [ 1340.636468] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1340.636994] Node 0 DMA free:10308kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1340.641500] ? wait_for_completion+0x440/0x440 [ 1340.672640] ? kasan_check_write+0x14/0x20 [ 1340.676892] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1340.682449] alloc_pages_current+0x107/0x210 [ 1340.686873] ion_page_pool_alloc+0x137/0x1d0 [ 1340.691302] ion_system_heap_allocate+0x165/0xaa0 [ 1340.696178] ? ion_system_heap_free+0x250/0x250 [ 1340.696908] lowmem_reserve[]: 0 2553 2555 2555 [ 1340.700860] ion_ioctl+0xa0a/0xf70 [ 1340.705426] Node 0 DMA32 free:18400kB min:38280kB low:47336kB high:56392kB active_anon:585600kB inactive_anon:760kB active_file:244kB inactive_file:104kB unevictable:0kB writepending:272kB present:3129332kB managed:2617984kB mlocked:0kB kernel_stack:8704kB pagetables:8732kB bounce:0kB free_pcp:1736kB local_pcp:256kB free_cma:0kB [ 1340.708984] ? _ion_buffer_destroy+0x110/0x110 [ 1340.709005] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1340.709036] ? _ion_buffer_destroy+0x110/0x110 [ 1340.709053] do_vfs_ioctl+0xd6e/0x1390 [ 1340.709071] ? ioctl_preallocate+0x210/0x210 [ 1340.709087] ? selinux_file_mprotect+0x620/0x620 [ 1340.709109] ? ksys_dup3+0x3e0/0x3e0 [ 1340.709123] ? nsecs_to_jiffies+0x30/0x30 [ 1340.709151] ? tomoyo_file_ioctl+0x23/0x30 [ 1340.778080] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1340.780024] lowmem_reserve[]: 0 0 2 2 [ 1340.783635] ? security_file_ioctl+0x93/0xc0 [ 1340.791851] ksys_ioctl+0xab/0xd0 [ 1340.795322] __x64_sys_ioctl+0x73/0xb0 [ 1340.796975] Node 0 Normal free:8kB min:28kB low:32kB high:36kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2204kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1340.799218] do_syscall_64+0x103/0x610 [ 1340.828909] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1340.834105] RIP: 0033:0x457f29 [ 1340.837315] Code: Bad RIP value. [ 1340.840686] RSP: 002b:00007f57b7c93c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1340.848399] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457f29 [ 1340.854759] lowmem_reserve[]: 0 0 0 0 [ 1340.855672] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1340.855684] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1340.867776] Node 1 Normal free:26604kB min:53624kB low:67028kB high:80432kB active_anon:4kB inactive_anon:0kB active_file:24kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870184kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 1340.874456] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f57b7c946d4 [ 1340.874469] R13: 00000000004c078b R14: 00000000004d24c0 R15: 00000000ffffffff [ 1340.916715] CPU: 0 PID: 30676 Comm: syz-executor.0 Not tainted 5.0.0+ #12 [ 1340.923658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1340.933011] Call Trace: [ 1340.935614] dump_stack+0x172/0x1f0 [ 1340.939267] warn_alloc.cold+0x87/0x17f [ 1340.943251] ? zone_watermark_ok_safe+0x260/0x260 [ 1340.948135] ? mark_held_locks+0xa4/0xf0 [ 1340.952228] __alloc_pages_slowpath+0x231d/0x28b0 [ 1340.957098] ? warn_alloc+0x110/0x110 [ 1340.957524] Mem-Info: [ 1340.960899] ? find_held_lock+0x35/0x130 [ 1340.960919] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1340.963344] active_anon:146392 inactive_anon:190 isolated_anon:0 [ 1340.963344] active_file:38 inactive_file:25 isolated_file:0 [ 1340.963344] unevictable:0 dirty:69 writeback:0 unstable:0 [ 1340.963344] slab_reclaimable:19986 slab_unreclaimable:97431 [ 1340.963344] mapped:52226 shmem:246 pagetables:2194 bounce:0 [ 1340.963344] free:13944 free_pcp:497 free_cma:0 [ 1340.967375] ? should_fail+0x1de/0x852 [ 1340.967406] __alloc_pages_nodemask+0x57e/0x7e0 [ 1340.967427] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1340.973154] Node 0 active_anon:585564kB inactive_anon:760kB active_file:152kB inactive_file:96kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:276kB writeback:0kB shmem:984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 282624kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1341.006195] ? retint_kernel+0x2d/0x2d [ 1341.006210] ? wait_for_completion+0x440/0x440 [ 1341.006225] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1341.006244] alloc_pages_current+0x107/0x210 [ 1341.010208] Node 1 active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1341.014899] ion_page_pool_alloc+0x137/0x1d0 [ 1341.019978] Node 0 DMA free:10308kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1341.047608] ion_system_heap_allocate+0x165/0xaa0 [ 1341.047636] ? ion_system_heap_free+0x250/0x250 [ 1341.047653] ? ion_ioctl+0xa3c/0xf70 [ 1341.047670] ion_ioctl+0x3d8/0xf70 [ 1341.051558] lowmem_reserve[]: 0 2553 2555 2555 [ 1341.056143] ? _ion_buffer_destroy+0x110/0x110 [ 1341.061714] Node 0 DMA32 free:18856kB min:36232kB low:45288kB high:54344kB active_anon:585564kB inactive_anon:760kB active_file:152kB inactive_file:152kB unevictable:0kB writepending:276kB present:3129332kB managed:2617984kB mlocked:0kB kernel_stack:8704kB pagetables:8776kB bounce:0kB free_pcp:1740kB local_pcp:1484kB free_cma:0kB [ 1341.066073] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1341.092064] lowmem_reserve[]: 0 0 2 2 [ 1341.096445] ? _ion_buffer_destroy+0x110/0x110 [ 1341.122585] Node 0 Normal free:8kB min:28kB low:32kB high:36kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2204kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1341.127376] do_vfs_ioctl+0xd6e/0x1390 [ 1341.127398] ? ioctl_preallocate+0x210/0x210 [ 1341.127416] ? selinux_file_mprotect+0x620/0x620 [ 1341.132072] lowmem_reserve[]: 0 0 0 0 [ 1341.135787] ? ksys_dup3+0x3e0/0x3e0 [ 1341.139343] Node 1 Normal free:26604kB min:53624kB low:67028kB high:80432kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870184kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 1341.143877] ? nsecs_to_jiffies+0x30/0x30 [ 1341.148477] lowmem_reserve[]: 0 0 0 0 [ 1341.177776] ? tomoyo_file_ioctl+0x23/0x30 [ 1341.177793] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1341.177806] ? security_file_ioctl+0x93/0xc0 [ 1341.177826] ksys_ioctl+0xab/0xd0 [ 1341.182930] Node 0 DMA: 1*4kB (E) 2*8kB (UE) 1*16kB (E) 1*32kB (E) 2*64kB (UE) 1*128kB (E) 1*256kB (E) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10308kB [ 1341.186727] __x64_sys_ioctl+0x73/0xb0 [ 1341.191346] Node 0 DMA32: 1932*4kB (UME) 561*8kB (UMEH) 154*16kB (UMEH) 82*32kB (UM) 3*64kB (H) 1*128kB (H) 1*256kB (H) 2*512kB (H) 0*1024kB 0*2048kB 0*4096kB = 18904kB [ 1341.217082] do_syscall_64+0x103/0x610 [ 1341.217103] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1341.217114] RIP: 0033:0x457f29 [ 1341.217139] Code: Bad RIP value. [ 1341.221026] Node 0 Normal: 0*4kB 1*8kB (E) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1341.225419] RSP: 002b:00007f7e0f635c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1341.230247] Node 1 Normal: 3*4kB (UM) 2*8kB (UM) 1*16kB (M) 2*32kB (M) 2*64kB (UM) 2*128kB (UM) 2*256kB (UM) 2*512kB (M) 0*1024kB 0*2048kB 6*4096kB (U) = 26604kB [ 1341.233973] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457f29 [ 1341.233985] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1341.237753] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1341.265105] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1341.265114] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7e0f6366d4 [ 1341.265121] R13: 00000000004c078b R14: 00000000004d24c0 R15: 00000000ffffffff [ 1341.426915] lowmem_reserve[]: 0 0 0 0 [ 1341.430770] Node 0 DMA: 1*4kB (E) 2*8kB (UE) 1*16kB (E) 1*32kB (E) 2*64kB (UE) 1*128kB (E) 1*256kB (E) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10308kB [ 1341.456912] Node 0 DMA32: 1806*4kB (UME) 585*8kB (UMEH) 154*16kB (UMEH) 83*32kB (UM) 646*64kB (UH) 182*128kB (UH) 82*256kB (UH) 53*512kB (UH) 0*1024kB 0*2048kB 0*4096kB = 129792kB [ 1341.486966] Node 0 Normal: 0*4kB 1*8kB (E) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1341.510171] Node 1 Normal: 3*4kB (UM) 2*8kB (UM) 1*16kB (M) 2*32kB (M) 469*64kB (UM) 276*128kB (UM) 24*256kB (UM) 16*512kB (UM) 1*1024kB (U) 1*2048kB (U) 2*4096kB (U) = 91052kB [ 1341.527792] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1341.536410] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1341.549437] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1341.567824] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1341.578543] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1341.587015] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1341.610711] 878 total pagecache pages [ 1341.614567] 0 pages in swap cache [ 1341.616915] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1341.647066] 853 total pagecache pages [ 1341.650920] 0 pages in swap cache [ 1341.654412] Swap cache stats: add 0, delete 0, find 0/0 [ 1341.654913] Swap cache stats: add 0, delete 0, find 0/0 [ 1341.677007] Free swap = 0kB [ 1341.680065] Total swap = 0kB [ 1341.683080] 1965979 pages RAM [ 1341.684549] Free swap = 0kB [ 1341.686186] 0 pages HighMem/MovableOnly [ 1341.686192] 339409 pages reserved [ 1341.686197] 0 pages cma reserved [ 1341.706935] syz-executor.0: page allocation failure: order:4, mode:0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 1341.741588] CPU: 1 PID: 30676 Comm: syz-executor.0 Not tainted 5.0.0+ #12 [ 1341.746894] Total swap = 0kB [ 1341.748580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1341.748590] Call Trace: [ 1341.751633] 1965979 pages RAM [ 1341.760997] dump_stack+0x172/0x1f0 [ 1341.761018] warn_alloc.cold+0x87/0x17f [ 1341.761034] ? zone_watermark_ok_safe+0x260/0x260 [ 1341.761057] ? get_page_from_freelist+0x4170/0x4170 [ 1341.761071] ? __isolate_free_page+0x4c0/0x4c0 [ 1341.761085] ? mutex_unlock+0xd/0x10 [ 1341.761099] ? drain_all_pages+0x408/0x590 [ 1341.761122] __alloc_pages_slowpath+0x231d/0x28b0 [ 1341.761162] ? warn_alloc+0x110/0x110 [ 1341.768989] 0 pages HighMem/MovableOnly [ 1341.770458] ? find_held_lock+0x35/0x130 [ 1341.770480] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1341.774449] 339409 pages reserved [ 1341.779293] ? should_fail+0x1de/0x852 [ 1341.779314] ? __isolate_free_page+0x4c0/0x4c0 [ 1341.779344] ? ___might_sleep+0x163/0x280 [ 1341.779368] __alloc_pages_nodemask+0x57e/0x7e0 [ 1341.779389] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1341.779414] ? find_held_lock+0x35/0x130 [ 1341.786923] 0 pages cma reserved [ 1341.789002] ? wait_for_completion+0x440/0x440 [ 1341.792704] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/syz2,task=syz-executor.2,pid=12929,uid=0 [ 1341.796934] ? kasan_check_write+0x14/0x20 [ 1341.796950] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1341.796968] alloc_pages_current+0x107/0x210 [ 1341.796989] ion_page_pool_alloc+0x137/0x1d0 [ 1341.797006] ion_system_heap_allocate+0x165/0xaa0 [ 1341.797027] ? ion_system_heap_free+0x250/0x250 [ 1341.797048] ion_ioctl+0xa0a/0xf70 [ 1341.797074] ? _ion_buffer_destroy+0x110/0x110 [ 1341.835572] Out of memory: Killed process 12929 (syz-executor.2) total-vm:72576kB, anon-rss:2204kB, file-rss:34816kB, shmem-rss:0kB [ 1341.839994] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1341.840028] ? _ion_buffer_destroy+0x110/0x110 [ 1341.840047] do_vfs_ioctl+0xd6e/0x1390 [ 1341.840064] ? ioctl_preallocate+0x210/0x210 [ 1341.840078] ? selinux_file_mprotect+0x620/0x620 [ 1341.840097] ? ksys_dup3+0x3e0/0x3e0 [ 1341.840112] ? nsecs_to_jiffies+0x30/0x30 [ 1341.840139] ? tomoyo_file_ioctl+0x23/0x30 [ 1341.840156] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1341.840169] ? security_file_ioctl+0x93/0xc0 [ 1341.840185] ksys_ioctl+0xab/0xd0 [ 1341.840203] __x64_sys_ioctl+0x73/0xb0 [ 1341.840220] do_syscall_64+0x103/0x610 [ 1341.840242] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1341.840254] RIP: 0033:0x457f29 [ 1341.840279] Code: Bad RIP value. [ 1341.840287] RSP: 002b:00007f7e0f635c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1341.840307] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457f29 [ 1341.840315] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1341.840323] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1341.840331] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7e0f6366d4 [ 1341.840339] R13: 00000000004c078b R14: 00000000004d24c0 R15: 00000000ffffffff [ 1342.046667] warn_alloc_show_mem: 1 callbacks suppressed [ 1342.046673] Mem-Info: [ 1342.060911] active_anon:146392 inactive_anon:190 isolated_anon:0 [ 1342.060911] active_file:249 inactive_file:545 isolated_file:0 [ 1342.060911] unevictable:0 dirty:72 writeback:0 unstable:0 [ 1342.060911] slab_reclaimable:19988 slab_unreclaimable:97385 [ 1342.060911] mapped:52710 shmem:246 pagetables:2194 bounce:0 [ 1342.060911] free:46273 free_pcp:1242 free_cma:0 [ 1342.100848] Node 0 active_anon:585564kB inactive_anon:760kB active_file:992kB inactive_file:2180kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210840kB dirty:288kB writeback:0kB shmem:984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 282624kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1342.136150] Node 1 active_anon:4kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1342.180837] Node 0 DMA free:10484kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1342.261398] lowmem_reserve[]: 0 2553 2555 2555 [ 1342.266042] Node 0 DMA32 free:46204kB min:36232kB low:45288kB high:54344kB active_anon:583412kB inactive_anon:760kB active_file:1424kB inactive_file:3616kB unevictable:0kB writepending:436kB present:3129332kB managed:2617984kB mlocked:0kB kernel_stack:8672kB pagetables:8628kB bounce:0kB free_pcp:1108kB local_pcp:788kB free_cma:0kB [ 1342.304380] lowmem_reserve[]: 0 0 2 2 [ 1342.309397] Node 0 Normal free:8kB min:28kB low:32kB high:36kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2204kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1342.363153] lowmem_reserve[]: 0 0 0 0 [ 1342.370867] Node 1 Normal free:43140kB min:53624kB low:67028kB high:80432kB active_anon:4kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870184kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1342.407021] lowmem_reserve[]: 0 0 0 0 [ 1342.410868] Node 0 DMA: 1*4kB (E) 1*8kB (E) 1*16kB (E) 1*32kB (E) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10428kB [ 1342.489917] Node 0 DMA32: 2161*4kB (UME) 574*8kB (MEH) 163*16kB (UMEH) 69*32kB (UM) 3*64kB (H) 1*128kB (H) 1*256kB (H) 2*512kB (H) 0*1024kB 0*2048kB 0*4096kB = 19652kB [ 1342.527635] kworker/u4:3 invoked oom-killer: gfp_mask=0x40cd0(GFP_KERNEL|__GFP_COMP|__GFP_RECLAIMABLE), order=0, oom_score_adj=0 [ 1342.541720] Node 0 Normal: 0*4kB 1*8kB (E) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1342.553828] Node 1 Normal: 3*4kB (UM) 1*8kB (M) 2*16kB (UM) 3*32kB (UM) 1*64kB (M) 58*128kB (UM) 24*256kB (UM) 19*512kB (UM) 1*1024kB (U) 1*2048kB (U) 0*4096kB = 26580kB [ 1342.582306] CPU: 1 PID: 270 Comm: kworker/u4:3 Not tainted 5.0.0+ #12 [ 1342.587077] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1342.588931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1342.588948] Workqueue: writeback wb_workfn (flush-8:0) [ 1342.598036] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1342.607841] Call Trace: [ 1342.607866] dump_stack+0x172/0x1f0 [ 1342.607883] dump_header+0x10f/0xb6c [ 1342.607901] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1342.607915] ? ___ratelimit+0x60/0x595 [ 1342.607929] ? do_raw_spin_unlock+0x57/0x270 [ 1342.607945] oom_kill_process.cold+0x10/0x15 [ 1342.619011] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1342.621818] out_of_memory+0x79a/0x1280 [ 1342.624413] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1342.628043] ? oom_killer_disable+0x280/0x280 [ 1342.628061] ? mutex_trylock+0x18e/0x1e0 [ 1342.628073] ? __alloc_pages_slowpath+0xcd9/0x28b0 [ 1342.628090] __alloc_pages_slowpath+0x2199/0x28b0 [ 1342.628120] ? warn_alloc+0x110/0x110 [ 1342.628141] ? find_held_lock+0x35/0x130 [ 1342.628160] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1342.649519] 400 total pagecache pages [ 1342.649655] ? should_fail+0x1de/0x852 [ 1342.660613] 0 pages in swap cache [ 1342.662475] __alloc_pages_nodemask+0x57e/0x7e0 [ 1342.692578] Swap cache stats: add 0, delete 0, find 0/0 [ 1342.693120] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1342.719189] Free swap = 0kB [ 1342.723852] ? cache_grow_begin+0x594/0x860 [ 1342.733572] Total swap = 0kB [ 1342.736210] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1342.743815] ? trace_hardirqs_on+0x67/0x230 [ 1342.748164] cache_grow_begin+0x9c/0x860 [ 1342.752248] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1342.757799] ? __cpuset_node_allowed+0x136/0x540 [ 1342.762890] fallback_alloc+0x1fd/0x2d0 [ 1342.766883] ____cache_alloc_node+0x1be/0x1e0 [ 1342.771030] 1965979 pages RAM [ 1342.771400] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1342.774496] 0 pages HighMem/MovableOnly [ 1342.780046] kmem_cache_alloc+0x1e8/0x6f0 [ 1342.780071] ext4_init_io_end+0x29/0x120 [ 1342.780086] ext4_writepages+0x10a0/0x3540 [ 1342.780105] ? clear_page_dirty_for_io+0xfd0/0xff0 [ 1342.780142] ? ext4_mark_inode_dirty+0x940/0x940 [ 1342.780157] ? __lock_acquire+0x548/0x3fb0 [ 1342.780176] ? blk_finish_plug+0x44/0xa2 [ 1342.792825] 339409 pages reserved [ 1342.796591] ? mark_held_locks+0xf0/0xf0 [ 1342.801725] 0 pages cma reserved [ 1342.806274] ? __lock_acquire+0x548/0x3fb0 [ 1342.829637] ? ext4_mark_inode_dirty+0x940/0x940 [ 1342.834406] do_writepages+0xfc/0x2a0 [ 1342.838219] ? ext4_mark_inode_dirty+0x940/0x940 [ 1342.842985] ? do_writepages+0xfc/0x2a0 [ 1342.846981] ? page_writeback_cpu_online+0x20/0x20 [ 1342.851921] ? find_held_lock+0x60/0x130 [ 1342.856020] __writeback_single_inode+0x11d/0x12f0 [ 1342.860965] ? _raw_spin_unlock+0x2d/0x50 [ 1342.865192] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1342.871228] ? wbc_attach_and_unlock_inode+0x5c4/0x930 [ 1342.876522] writeback_sb_inodes+0x596/0xed0 [ 1342.881913] ? wbc_detach_inode+0x840/0x840 [ 1342.886800] ? lock_acquire+0x16f/0x3f0 [ 1342.886996] syz-executor.0: page allocation failure: order:0, mode:0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 1342.891244] ? down_read_trylock+0x5d/0xa0 [ 1342.909703] ? trylock_super+0x22/0x110 [ 1342.913710] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1342.919311] __writeback_inodes_wb+0xc3/0x260 [ 1342.923995] wb_writeback+0x87f/0xd00 [ 1342.928330] ? wb_workfn+0x37e/0x1190 [ 1342.932562] ? find_held_lock+0x35/0x130 [ 1342.936760] ? writeback_inodes_wb.constprop.0+0x1a0/0x1a0 [ 1342.942803] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1342.948542] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1342.954040] ? get_nr_dirty_inodes+0xe2/0x140 [ 1342.958554] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1342.963611] wb_workfn+0xae5/0x1190 [ 1342.967250] ? mark_held_locks+0xf0/0xf0 [ 1342.971333] ? process_one_work+0x890/0x1790 [ 1342.975756] ? inode_wait_for_writeback+0x40/0x40 [ 1342.980638] process_one_work+0x98e/0x1790 [ 1342.984905] ? pwq_dec_nr_in_flight+0x320/0x320 [ 1342.989583] ? lock_acquire+0x16f/0x3f0 [ 1342.993592] worker_thread+0x98/0xe40 [ 1342.997419] kthread+0x357/0x430 [ 1343.000802] ? process_one_work+0x1790/0x1790 [ 1343.005305] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 1343.010854] ret_from_fork+0x3a/0x50 [ 1343.014581] CPU: 0 PID: 30676 Comm: syz-executor.0 Not tainted 5.0.0+ #12 [ 1343.021536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1343.030893] Call Trace: [ 1343.033495] dump_stack+0x172/0x1f0 [ 1343.037133] warn_alloc.cold+0x87/0x17f [ 1343.041117] ? zone_watermark_ok_safe+0x260/0x260 [ 1343.045964] ? mark_held_locks+0xa4/0xf0 [ 1343.047215] Mem-Info: [ 1343.050047] __alloc_pages_slowpath+0x231d/0x28b0 [ 1343.052464] active_anon:145849 inactive_anon:190 isolated_anon:0 [ 1343.052464] active_file:94 inactive_file:46 isolated_file:4 [ 1343.052464] unevictable:0 dirty:114 writeback:0 unstable:0 [ 1343.052464] slab_reclaimable:19984 slab_unreclaimable:97396 [ 1343.052464] mapped:52231 shmem:246 pagetables:2168 bounce:0 [ 1343.052464] free:13972 free_pcp:186 free_cma:0 [ 1343.057288] ? warn_alloc+0x110/0x110 [ 1343.057302] ? find_held_lock+0x35/0x130 [ 1343.057321] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1343.094088] Node 0 active_anon:583392kB inactive_anon:760kB active_file:368kB inactive_file:188kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208924kB dirty:456kB writeback:0kB shmem:984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 280576kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1343.094271] ? should_fail+0x1de/0x852 [ 1343.098400] Node 1 active_anon:4kB inactive_anon:0kB active_file:8kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1343.103917] __alloc_pages_nodemask+0x57e/0x7e0 [ 1343.140829] Node 0 DMA free:10316kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1343.161424] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1343.161443] ? find_held_lock+0x35/0x130 [ 1343.161461] ? wait_for_completion+0x440/0x440 [ 1343.161480] ? kasan_check_write+0x14/0x20 [ 1343.181008] lowmem_reserve[]: 0 2553 2555 2555 [ 1343.192266] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1343.192286] alloc_pages_current+0x107/0x210 [ 1343.192308] ion_page_pool_alloc+0x137/0x1d0 [ 1343.197345] Node 0 DMA32 free:18984kB min:42376kB low:51432kB high:60488kB active_anon:583392kB inactive_anon:760kB active_file:368kB inactive_file:228kB unevictable:0kB writepending:456kB present:3129332kB managed:2617984kB mlocked:0kB kernel_stack:8640kB pagetables:8672kB bounce:0kB free_pcp:496kB local_pcp:248kB free_cma:0kB [ 1343.201378] ion_system_heap_allocate+0x165/0xaa0 [ 1343.205937] lowmem_reserve[]: 0 0 2 2 [ 1343.210184] ? ion_system_heap_free+0x250/0x250 [ 1343.210208] ion_ioctl+0xa0a/0xf70 [ 1343.210232] ? _ion_buffer_destroy+0x110/0x110 [ 1343.214798] Node 0 Normal free:8kB min:28kB low:32kB high:36kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2204kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1343.220344] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1343.220379] ? _ion_buffer_destroy+0x110/0x110 [ 1343.220396] do_vfs_ioctl+0xd6e/0x1390 [ 1343.224786] lowmem_reserve[]: 0 0 0 0 [ 1343.229204] ? ioctl_preallocate+0x210/0x210 [ 1343.229220] ? selinux_file_mprotect+0x620/0x620 [ 1343.229244] ? ksys_dup3+0x3e0/0x3e0 [ 1343.258443] Node 1 Normal free:26580kB min:53624kB low:67028kB high:80432kB active_anon:4kB inactive_anon:0kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870184kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 1343.263432] ? nsecs_to_jiffies+0x30/0x30 [ 1343.267264] lowmem_reserve[]: 0 0 0 0 [ 1343.271896] ? tomoyo_file_ioctl+0x23/0x30 [ 1343.275417] Node 0 DMA: 1*4kB (E) 1*8kB (E) 2*16kB (UE) 1*32kB (E) 2*64kB (UE) 1*128kB (E) 1*256kB (E) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10316kB [ 1343.280001] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1343.280016] ? security_file_ioctl+0x93/0xc0 [ 1343.280032] ksys_ioctl+0xab/0xd0 [ 1343.280054] __x64_sys_ioctl+0x73/0xb0 [ 1343.305861] Node 0 DMA32: 2167*4kB (UME) 550*8kB (UMEH) 142*16kB (UMEH) 56*32kB (UM) 3*64kB (H) 1*128kB (H) 1*256kB (H) 2*512kB (H) 0*1024kB 0*2048kB 0*4096kB = 18732kB [ 1343.310932] do_syscall_64+0x103/0x610 [ 1343.310953] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1343.310969] RIP: 0033:0x457f29 [ 1343.315541] Node 0 Normal: 0*4kB 1*8kB (E) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1343.319436] Code: Bad RIP value. [ 1343.319445] RSP: 002b:00007f7e0f635c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1343.319458] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457f29 [ 1343.319472] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1343.323264] Node 1 Normal: 3*4kB (UM) 1*8kB (M) 2*16kB (UM) 3*32kB (UM) 1*64kB (M) 58*128kB (UM) 24*256kB (UM) 19*512kB (UM) 1*1024kB (U) 1*2048kB (U) 0*4096kB = 26580kB [ 1343.327665] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1343.327674] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7e0f6366d4 [ 1343.327681] R13: 00000000004c078b R14: 00000000004d24c0 R15: 00000000ffffffff [ 1343.394277] Mem-Info: [ 1343.406938] syz-executor.1: page allocation failure: order:0, mode:0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 1343.442336] active_anon:145849 inactive_anon:190 isolated_anon:0 [ 1343.442336] active_file:111 inactive_file:46 isolated_file:0 [ 1343.442336] unevictable:0 dirty:114 writeback:0 unstable:0 [ 1343.442336] slab_reclaimable:19984 slab_unreclaimable:97396 [ 1343.442336] mapped:52231 shmem:246 pagetables:2168 bounce:0 [ 1343.442336] free:13972 free_pcp:186 free_cma:0 [ 1343.467908] CPU: 1 PID: 30755 Comm: syz-executor.1 Not tainted 5.0.0+ #12 [ 1343.490848] Node 0 active_anon:583392kB inactive_anon:760kB active_file:336kB inactive_file:228kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208924kB dirty:456kB writeback:0kB shmem:984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 280576kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1343.497185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1343.497191] Call Trace: [ 1343.497215] dump_stack+0x172/0x1f0 [ 1343.497235] warn_alloc.cold+0x87/0x17f [ 1343.497250] ? zone_watermark_ok_safe+0x260/0x260 [ 1343.497266] ? mark_held_locks+0xa4/0xf0 [ 1343.497293] ? batadv_send_skb_to_orig+0x248/0x260 [ 1343.497316] __alloc_pages_slowpath+0x231d/0x28b0 [ 1343.515968] Node 1 active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1343.529024] ? warn_alloc+0x110/0x110 [ 1343.529039] ? find_held_lock+0x35/0x130 [ 1343.529059] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1343.529079] ? should_fail+0x1de/0x852 [ 1343.529112] __alloc_pages_nodemask+0x57e/0x7e0 [ 1343.529139] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1343.529162] ? wait_for_completion+0x440/0x440 [ 1343.562543] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1343.569346] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1343.569365] alloc_pages_current+0x107/0x210 [ 1343.569387] ion_page_pool_alloc+0x137/0x1d0 [ 1343.569403] ion_system_heap_allocate+0x165/0xaa0 [ 1343.569424] ? ion_system_heap_free+0x250/0x250 [ 1343.569458] ion_ioctl+0xa0a/0xf70 [ 1343.606384] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1343.606683] ? _ion_buffer_destroy+0x110/0x110 [ 1343.609309] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1343.612898] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1343.631965] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1343.635981] ? _ion_buffer_destroy+0x110/0x110 [ 1343.666893] Node 0 DMA free:10316kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1343.669515] do_vfs_ioctl+0xd6e/0x1390 [ 1343.675037] lowmem_reserve[]: 0 2553 2555 2555 [ 1343.678934] ? ioctl_preallocate+0x210/0x210 [ 1343.678950] ? selinux_file_mprotect+0x620/0x620 [ 1343.678969] ? ksys_dup3+0x3e0/0x3e0 [ 1343.678983] ? nsecs_to_jiffies+0x30/0x30 [ 1343.679003] ? tomoyo_file_ioctl+0x23/0x30 [ 1343.679018] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1343.679032] ? security_file_ioctl+0x93/0xc0 [ 1343.679049] ksys_ioctl+0xab/0xd0 [ 1343.679069] __x64_sys_ioctl+0x73/0xb0 [ 1343.692133] Node 0 DMA32 free:18732kB min:42376kB low:51432kB high:60488kB active_anon:583392kB inactive_anon:760kB active_file:372kB inactive_file:224kB unevictable:0kB writepending:456kB present:3129332kB managed:2617984kB mlocked:0kB kernel_stack:8640kB pagetables:8672kB bounce:0kB free_pcp:508kB local_pcp:260kB free_cma:0kB [ 1343.693348] do_syscall_64+0x103/0x610 [ 1343.703274] lowmem_reserve[]: 0 0 2 2 [ 1343.707726] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1343.707739] RIP: 0033:0x457f29 [ 1343.707763] Code: Bad RIP value. [ 1343.707772] RSP: 002b:00007f57b7c93c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1343.707787] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457f29 [ 1343.707796] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1343.707805] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1343.707817] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f57b7c946d4 [ 1343.720355] Node 0 Normal free:8kB min:28kB low:32kB high:36kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2204kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1343.721461] R13: 00000000004c078b R14: 00000000004d24c0 R15: 00000000ffffffff [ 1343.726120] lowmem_reserve[]: 0 0 0 0 [ 1343.786921] 392 total pagecache pages [ 1343.864825] Node 1 Normal free:164820kB min:53624kB low:67028kB high:80432kB active_anon:4kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870184kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 1344.016926] lowmem_reserve[]: 0 0 0 0 [ 1344.020784] Node 0 DMA: 1*4kB (E) 1*8kB (E) 2*16kB (UE) 1*32kB (E) 2*64kB (UE) 1*128kB (E) 1*256kB (E) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10316kB [ 1344.062817] Node 0 DMA32: 1915*4kB (UME) 550*8kB (UMEH) 142*16kB (UMEH) 61*32kB (UM) 582*64kB (UMH) 210*128kB (UMH) 99*256kB (UMH) 51*512kB (UH) 39*1024kB (U) 0*2048kB 0*4096kB = 171804kB [ 1344.126917] Node 0 Normal: 0*4kB 1*8kB (E) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1344.172519] Node 1 Normal: 2*4kB (UM) 0*8kB 1*16kB (M) 1*32kB (M) 398*64kB (UM) 259*128kB (U) 48*256kB (UM) 22*512kB (U) 49*1024kB (U) 25*2048kB (U) 10*4096kB (U) = 224568kB [ 1344.217401] 0 pages in swap cache [ 1344.220896] Swap cache stats: add 0, delete 0, find 0/0 [ 1344.226260] Free swap = 0kB [ 1344.242449] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1344.267723] Total swap = 0kB [ 1344.270788] 1965979 pages RAM [ 1344.273895] 0 pages HighMem/MovableOnly [ 1344.286902] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1344.295523] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1344.332513] 339409 pages reserved [ 1344.336004] 0 pages cma reserved [ 1344.347014] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1344.356897] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/syz0,task=syz-executor.0,pid=4034,uid=0 [ 1344.378005] 2957 total pagecache pages [ 1344.382107] 0 pages in swap cache [ 1344.426921] Swap cache stats: add 0, delete 0, find 0/0 [ 1344.426965] Out of memory: Killed process 4034 (syz-executor.0) total-vm:72576kB, anon-rss:2200kB, file-rss:34816kB, shmem-rss:0kB [ 1344.432329] Free swap = 0kB [ 1344.432339] Total swap = 0kB [ 1344.520482] 1965979 pages RAM [ 1344.523892] 0 pages HighMem/MovableOnly [ 1344.556924] 339409 pages reserved [ 1344.560417] 0 pages cma reserved 19:24:27 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000001, 0x3b}) 19:24:27 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x400b, 0x8}}, 0xfe40}}, 0x0) 19:24:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x7, 0x4000) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000080)={0x1, 0x7fffffff, 0x4, 0xa79b, 0x1b, 0x9dd, 0xffff, 0x80000001, 0x0, 0xe0c}) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6012, r3, 0x2000) 19:24:27 executing program 5: syz_read_part_table(0x0, 0x2000, 0x0) 19:24:27 executing program 3 (fault-call:3 fault-nth:1): r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffe2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 19:24:27 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000001, 0x3b}) [ 1344.989512] ion_mmap: failure mapping buffer to userspace 19:24:28 executing program 5: syz_read_part_table(0x0, 0x3f00, 0x0) [ 1345.122634] ion_mmap: failure mapping buffer to userspace [ 1345.195483] FAULT_INJECTION: forcing a failure. [ 1345.195483] name failslab, interval 1, probability 0, space 0, times 0 [ 1345.287079] CPU: 1 PID: 30873 Comm: syz-executor.3 Not tainted 5.0.0+ #12 [ 1345.294065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1345.303441] Call Trace: [ 1345.306049] dump_stack+0x172/0x1f0 [ 1345.309696] should_fail.cold+0xa/0x15 [ 1345.313622] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1345.318746] ? ___might_sleep+0x163/0x280 [ 1345.322915] __should_failslab+0x121/0x190 [ 1345.327189] should_failslab+0x9/0x14 [ 1345.331003] __kmalloc+0x2dc/0x740 [ 1345.334575] ? drm_dev_exit+0x60/0x60 [ 1345.338400] ? drm_ioctl+0x45c/0xa50 [ 1345.342138] drm_ioctl+0x45c/0xa50 [ 1345.345691] ? drm_connector_property_set_ioctl+0x180/0x180 [ 1345.351409] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1345.356014] ? drm_version+0x3d0/0x3d0 [ 1345.359912] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1345.364687] ? retint_kernel+0x2d/0x2d [ 1345.368586] ? drm_version+0x3d0/0x3d0 [ 1345.372497] ? drm_version+0x3d0/0x3d0 [ 1345.376398] do_vfs_ioctl+0xd6e/0x1390 [ 1345.380306] ? ioctl_preallocate+0x210/0x210 [ 1345.384727] ? retint_kernel+0x2d/0x2d [ 1345.384751] ? security_file_ioctl+0x89/0xc0 [ 1345.384771] ? tomoyo_file_ioctl+0x23/0x30 [ 1345.397297] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1345.402846] ? security_file_ioctl+0x93/0xc0 [ 1345.407271] ksys_ioctl+0xab/0xd0 [ 1345.410738] __x64_sys_ioctl+0x73/0xb0 [ 1345.414638] ? do_syscall_64+0xfe/0x610 [ 1345.414657] do_syscall_64+0x103/0x610 [ 1345.414680] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1345.414695] RIP: 0033:0x457f29 [ 1345.430913] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1345.449967] RSP: 002b:00007f38a954ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1345.457876] RAX: ffffffffffffffda RBX: 00007f38a954ec90 RCX: 0000000000457f29 [ 1345.465811] RDX: 0000000020000140 RSI: fffffbfffff3ffa7 RDI: 0000000000000003 [ 1345.473328] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1345.480614] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f38a954f6d4 [ 1345.488004] R13: 00000000004bf139 R14: 00000000004d0ac8 R15: 0000000000000005 19:24:28 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x400b, 0xf}}, 0xfe40}}, 0x0) 19:24:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c12a41d88b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x200001, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') r4 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x4020c0) r5 = dup(r1) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_user\x00', 0x0, 0x0) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20100}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x7c, r3, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_SOCKETS={0x2c, 0x7, [{0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r0}, {0x8, 0x1, r6}, {0x8, 0x1, r7}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x105}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x40}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8011}, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1, 0x6012, r8, 0x2000) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in=@initdev}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000440)=0xe8) 19:24:29 executing program 5: syz_read_part_table(0x0, 0x4000, 0x0) [ 1346.129691] audit: type=1400 audit(1552073069.383:514): avc: denied { create } for pid=30984 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1346.216485] audit: type=1400 audit(1552073069.423:515): avc: denied { write } for pid=30984 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1346.247245] ion_mmap: failure mapping buffer to userspace 19:24:29 executing program 5: syz_read_part_table(0x0, 0x4800, 0x0) 19:24:29 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0xff31, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x400b, 0x10}}, 0xfe40}}, 0x0) [ 1346.373222] ion_mmap: failure mapping buffer to userspace [ 1346.378467] audit: type=1400 audit(1552073069.443:516): avc: denied { read } for pid=30984 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1346.447727] audit: type=1400 audit(1552073069.603:517): avc: denied { create } for pid=30984 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1346.556949] audit: type=1400 audit(1552073069.603:518): avc: denied { write } for pid=30984 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1346.656978] audit: type=1400 audit(1552073069.613:519): avc: denied { read } for pid=30984 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1346.944986] syz-executor.1: page allocation failure: order:4, mode:0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 1346.959610] syz-executor.0: page allocation failure: order:4, mode:0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 1346.986962] CPU: 0 PID: 30876 Comm: syz-executor.1 Not tainted 5.0.0+ #12 [ 1346.993917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1347.003282] Call Trace: [ 1347.005883] dump_stack+0x172/0x1f0 [ 1347.009521] warn_alloc.cold+0x87/0x17f [ 1347.013498] ? zone_watermark_ok_safe+0x260/0x260 [ 1347.018353] ? get_page_from_freelist+0x4170/0x4170 [ 1347.023370] ? __isolate_free_page+0x4c0/0x4c0 [ 1347.027955] ? mutex_unlock+0xd/0x10 [ 1347.031678] ? drain_all_pages+0x408/0x590 [ 1347.035927] __alloc_pages_slowpath+0x231d/0x28b0 [ 1347.040794] ? warn_alloc+0x110/0x110 [ 1347.044593] ? find_held_lock+0x35/0x130 [ 1347.048669] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1347.054211] ? should_fail+0x1de/0x852 [ 1347.058105] ? __isolate_free_page+0x4c0/0x4c0 [ 1347.062688] ? ___might_sleep+0x163/0x280 [ 1347.066844] __alloc_pages_nodemask+0x57e/0x7e0 [ 1347.071522] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1347.076566] ? wait_for_completion+0x440/0x440 [ 1347.081153] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1347.086692] alloc_pages_current+0x107/0x210 [ 1347.091107] ion_page_pool_alloc+0x137/0x1d0 [ 1347.095521] ion_system_heap_allocate+0x165/0xaa0 [ 1347.100373] ? ion_system_heap_free+0x250/0x250 [ 1347.105044] ? ion_ioctl+0xa3c/0xf70 [ 1347.108762] ion_ioctl+0x3d8/0xf70 [ 1347.112309] ? _ion_buffer_destroy+0x110/0x110 [ 1347.116897] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1347.122018] ? _ion_buffer_destroy+0x110/0x110 [ 1347.126602] do_vfs_ioctl+0xd6e/0x1390 [ 1347.130505] ? ioctl_preallocate+0x210/0x210 [ 1347.134914] ? selinux_file_mprotect+0x620/0x620 [ 1347.139679] ? ksys_dup3+0x3e0/0x3e0 [ 1347.143394] ? nsecs_to_jiffies+0x30/0x30 [ 1347.147548] ? tomoyo_file_ioctl+0x23/0x30 [ 1347.151781] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1347.157316] ? security_file_ioctl+0x93/0xc0 [ 1347.161730] ksys_ioctl+0xab/0xd0 [ 1347.165186] __x64_sys_ioctl+0x73/0xb0 [ 1347.169082] do_syscall_64+0x103/0x610 [ 1347.172982] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1347.178173] RIP: 0033:0x457f29 [ 1347.181365] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1347.200271] RSP: 002b:00007f57b7c93c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1347.207983] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457f29 [ 1347.215257] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1347.222528] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1347.229798] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f57b7c946d4 [ 1347.237113] R13: 00000000004c078b R14: 00000000004d24c0 R15: 00000000ffffffff [ 1347.247289] CPU: 1 PID: 30976 Comm: syz-executor.0 Not tainted 5.0.0+ #12 [ 1347.254248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1347.263620] Call Trace: [ 1347.266228] dump_stack+0x172/0x1f0 [ 1347.269876] warn_alloc.cold+0x87/0x17f [ 1347.273863] ? zone_watermark_ok_safe+0x260/0x260 [ 1347.278731] ? get_page_from_freelist+0x4170/0x4170 [ 1347.283762] ? __isolate_free_page+0x4c0/0x4c0 [ 1347.288357] ? mutex_unlock+0xd/0x10 [ 1347.292085] ? drain_all_pages+0x408/0x590 [ 1347.296346] __alloc_pages_slowpath+0x231d/0x28b0 [ 1347.301224] ? warn_alloc+0x110/0x110 [ 1347.305033] ? find_held_lock+0x35/0x130 [ 1347.309113] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1347.314668] ? should_fail+0x1de/0x852 [ 1347.318571] ? __isolate_free_page+0x4c0/0x4c0 [ 1347.323167] ? ___might_sleep+0x163/0x280 [ 1347.327746] __alloc_pages_nodemask+0x57e/0x7e0 [ 1347.332433] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1347.337473] ? wait_for_completion+0x440/0x440 [ 1347.342069] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1347.347818] alloc_pages_current+0x107/0x210 [ 1347.352245] ion_page_pool_alloc+0x137/0x1d0 [ 1347.356670] ion_system_heap_allocate+0x165/0xaa0 [ 1347.361542] ? ion_system_heap_free+0x250/0x250 [ 1347.366250] ? ion_ioctl+0xa3c/0xf70 [ 1347.369982] ion_ioctl+0x3d8/0xf70 [ 1347.373544] ? _ion_buffer_destroy+0x110/0x110 [ 1347.378151] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1347.383311] ? _ion_buffer_destroy+0x110/0x110 [ 1347.387916] do_vfs_ioctl+0xd6e/0x1390 [ 1347.391825] ? ioctl_preallocate+0x210/0x210 [ 1347.396249] ? selinux_file_mprotect+0x620/0x620 [ 1347.401027] ? ksys_dup3+0x3e0/0x3e0 [ 1347.404757] ? nsecs_to_jiffies+0x30/0x30 [ 1347.408922] ? tomoyo_file_ioctl+0x23/0x30 [ 1347.413179] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1347.418735] ? security_file_ioctl+0x93/0xc0 [ 1347.423166] ksys_ioctl+0xab/0xd0 [ 1347.426644] __x64_sys_ioctl+0x73/0xb0 [ 1347.430547] do_syscall_64+0x103/0x610 [ 1347.434458] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1347.439657] RIP: 0033:0x457f29 [ 1347.442859] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1347.461773] RSP: 002b:00007f7e0f635c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1347.469496] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457f29 [ 1347.476784] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1347.484068] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1347.491350] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7e0f6366d4 [ 1347.498639] R13: 00000000004c078b R14: 00000000004d24c0 R15: 00000000ffffffff [ 1347.529076] warn_alloc_show_mem: 1 callbacks suppressed [ 1347.529082] Mem-Info: [ 1347.561754] active_anon:146311 inactive_anon:190 isolated_anon:66 [ 1347.561754] active_file:675 inactive_file:2588 isolated_file:4 [ 1347.561754] unevictable:0 dirty:122 writeback:0 unstable:0 [ 1347.561754] slab_reclaimable:20011 slab_unreclaimable:97487 [ 1347.561754] mapped:54446 shmem:246 pagetables:2142 bounce:0 [ 1347.561754] free:57352 free_pcp:1099 free_cma:0 [ 1347.607166] Node 0 active_anon:585240kB inactive_anon:760kB active_file:2404kB inactive_file:10012kB unevictable:0kB isolated(anon):264kB isolated(file):16kB mapped:216996kB dirty:488kB writeback:0kB shmem:984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 282624kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1347.643528] Node 1 active_anon:4kB inactive_anon:0kB active_file:296kB inactive_file:340kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:788kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1347.686536] Node 0 DMA free:10496kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1347.720009] lowmem_reserve[]: 0 2553 2555 2555 [ 1347.724727] Node 0 DMA32 free:164340kB min:36232kB low:45288kB high:54344kB active_anon:585240kB inactive_anon:760kB active_file:2404kB inactive_file:10312kB unevictable:0kB writepending:488kB present:3129332kB managed:2617984kB mlocked:0kB kernel_stack:8608kB pagetables:8568kB bounce:0kB free_pcp:1892kB local_pcp:1236kB free_cma:0kB [ 1347.761381] lowmem_reserve[]: 0 0 2 2 [ 1347.765539] Node 0 Normal free:8kB min:28kB low:32kB high:36kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2204kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1347.797754] lowmem_reserve[]: 0 0 0 0 [ 1347.801676] Node 1 Normal free:54364kB min:53624kB low:67028kB high:80432kB active_anon:4kB inactive_anon:0kB active_file:580kB inactive_file:576kB unevictable:0kB writepending:0kB present:3932160kB managed:3870184kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:2428kB local_pcp:1060kB free_cma:0kB [ 1347.835681] lowmem_reserve[]: 0 0 0 0 [ 1347.839914] Node 0 DMA: 2*4kB (UE) 3*8kB (UE) 4*16kB (UE) 3*32kB (UE) 3*64kB (UE) 3*128kB (UE) 4*256kB (UE) 3*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10496kB [ 1347.861360] Node 0 DMA32: 1456*4kB (ME) 1367*8kB (UMEH) 2154*16kB (UMEH) 2183*32kB (UM) 7*64kB (UMH) 5*128kB (UMH) 3*256kB (UMH) 5*512kB (UMH) 0*1024kB 0*2048kB 0*4096kB = 125496kB [ 1347.885892] Node 0 Normal: 0*4kB 1*8kB (E) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1347.904715] Node 1 Normal: 154*4kB (UM) 206*8kB (UM) 282*16kB (UM) 83*32kB (UM) 4*64kB (UM) 1*128kB (U) 13*256kB (U) 13*512kB (UM) 8*1024kB (U) 5*2048kB (U) 4*4096kB (U) = 54616kB [ 1347.927949] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1347.942537] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1347.952789] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1347.968063] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1347.976760] 3643 total pagecache pages [ 1347.986060] 0 pages in swap cache [ 1347.990884] Swap cache stats: add 0, delete 0, find 0/0 [ 1347.996354] Free swap = 0kB [ 1348.004803] Total swap = 0kB [ 1348.009187] 1965979 pages RAM [ 1348.012377] 0 pages HighMem/MovableOnly [ 1348.016424] 339409 pages reserved [ 1348.025391] 0 pages cma reserved [ 1348.521185] oom_reaper: reaped process 30976 (syz-executor.0), now anon-rss:0kB, file-rss:34688kB, shmem-rss:0kB [ 1348.588218] oom_reaper: reaped process 30876 (syz-executor.1), now anon-rss:0kB, file-rss:34688kB, shmem-rss:0kB [ 1348.600474] syz-executor.0 invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=1, oom_score_adj=0 [ 1348.611056] CPU: 0 PID: 8174 Comm: syz-executor.0 Not tainted 5.0.0+ #12 [ 1348.617909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1348.627275] Call Trace: [ 1348.629880] dump_stack+0x172/0x1f0 [ 1348.633525] dump_header+0x10f/0xb6c [ 1348.637250] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1348.642368] ? ___ratelimit+0x60/0x595 [ 1348.646260] ? do_raw_spin_unlock+0x57/0x270 [ 1348.650679] oom_kill_process.cold+0x10/0x15 [ 1348.655097] out_of_memory+0x79a/0x1280 [ 1348.659086] ? oom_killer_disable+0x280/0x280 [ 1348.663589] ? mutex_trylock+0x18e/0x1e0 [ 1348.667667] ? __alloc_pages_slowpath+0xcd9/0x28b0 [ 1348.672612] __alloc_pages_slowpath+0x2199/0x28b0 [ 1348.677483] ? warn_alloc+0x110/0x110 [ 1348.681287] ? find_held_lock+0x35/0x130 [ 1348.685356] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 1348.690290] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1348.695836] ? should_fail+0x1de/0x852 [ 1348.699749] __alloc_pages_nodemask+0x57e/0x7e0 [ 1348.704434] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1348.709465] ? cache_grow_begin+0x594/0x860 [ 1348.713795] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1348.718384] ? trace_hardirqs_on+0x67/0x230 [ 1348.722718] cache_grow_begin+0x9c/0x860 [ 1348.726787] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1348.732328] ? __cpuset_node_allowed+0x136/0x540 [ 1348.737091] fallback_alloc+0x1fd/0x2d0 [ 1348.741081] ____cache_alloc_node+0x1be/0x1e0 [ 1348.745583] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1348.751146] kmem_cache_alloc+0x1e8/0x6f0 [ 1348.755309] getname_flags+0xd6/0x5b0 [ 1348.759124] getname+0x1a/0x20 [ 1348.763842] do_sys_open+0x2c9/0x5d0 [ 1348.767565] ? filp_open+0x80/0x80 [ 1348.771120] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1348.775881] ? do_syscall_64+0x26/0x610 [ 1348.779862] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1348.785237] ? do_syscall_64+0x26/0x610 [ 1348.789223] __x64_sys_open+0x7e/0xc0 [ 1348.793034] do_syscall_64+0x103/0x610 [ 1348.796929] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1348.802120] RIP: 0033:0x455f50 [ 1348.805324] Code: Bad RIP value. [ 1348.808686] RSP: 002b:00007ffc9a1052c0 EFLAGS: 00000206 ORIG_RAX: 0000000000000002 [ 1348.816421] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000455f50 [ 1348.823701] RDX: 0000000000000000 RSI: 0000000000090800 RDI: 00000000004bca56 [ 1348.830981] RBP: 0000000000001f9e R08: 0000000000000001 R09: 0000000001537940 [ 1348.838260] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 1348.845542] R13: 00007ffc9a1053a0 R14: 0000000000148614 R15: 00007ffc9a1053b0 [ 1348.920513] Mem-Info: [ 1348.922995] active_anon:145317 inactive_anon:190 isolated_anon:0 [ 1348.922995] active_file:7 inactive_file:0 isolated_file:0 [ 1348.922995] unevictable:0 dirty:14 writeback:0 unstable:0 [ 1348.922995] slab_reclaimable:20016 slab_unreclaimable:97259 [ 1348.922995] mapped:52235 shmem:246 pagetables:2142 bounce:0 [ 1348.922995] free:14056 free_pcp:204 free_cma:0 [ 1348.970160] syz-executor.1: page allocation failure: order:0, mode:0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 1348.984496] syz-executor.0: page allocation failure: order:0, mode:0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 1348.984530] CPU: 0 PID: 30976 Comm: syz-executor.0 Not tainted 5.0.0+ #12 [ 1348.984539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1348.984544] Call Trace: [ 1348.984568] dump_stack+0x172/0x1f0 [ 1349.021292] warn_alloc.cold+0x87/0x17f [ 1349.025300] ? zone_watermark_ok_safe+0x260/0x260 [ 1349.030150] ? mark_held_locks+0xa4/0xf0 [ 1349.034242] __alloc_pages_slowpath+0x231d/0x28b0 [ 1349.039111] ? warn_alloc+0x110/0x110 [ 1349.042918] ? find_held_lock+0x35/0x130 [ 1349.046920] Node 0 active_anon:581264kB inactive_anon:760kB active_file:24kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208940kB dirty:56kB writeback:0kB shmem:984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 282624kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1349.046987] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1349.079955] ? should_fail+0x1de/0x852 [ 1349.083870] __alloc_pages_nodemask+0x57e/0x7e0 [ 1349.088559] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1349.093594] ? wait_for_completion+0x440/0x440 [ 1349.098194] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1349.103748] alloc_pages_current+0x107/0x210 [ 1349.108177] ion_page_pool_alloc+0x137/0x1d0 [ 1349.112596] ion_system_heap_allocate+0x165/0xaa0 [ 1349.117461] ? ion_system_heap_free+0x250/0x250 [ 1349.122150] ? ion_ioctl+0xa3c/0xf70 [ 1349.125876] ion_ioctl+0x3d8/0xf70 [ 1349.129437] ? _ion_buffer_destroy+0x110/0x110 [ 1349.134036] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1349.136925] Node 1 active_anon:4kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1349.139164] ? _ion_buffer_destroy+0x110/0x110 [ 1349.169430] do_vfs_ioctl+0xd6e/0x1390 [ 1349.173335] ? ioctl_preallocate+0x210/0x210 [ 1349.177751] ? selinux_file_mprotect+0x620/0x620 [ 1349.182528] ? ksys_dup3+0x3e0/0x3e0 [ 1349.186248] ? nsecs_to_jiffies+0x30/0x30 [ 1349.190411] ? tomoyo_file_ioctl+0x23/0x30 [ 1349.194667] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1349.200214] ? security_file_ioctl+0x93/0xc0 [ 1349.204640] ksys_ioctl+0xab/0xd0 [ 1349.208103] __x64_sys_ioctl+0x73/0xb0 [ 1349.212003] do_syscall_64+0x103/0x610 [ 1349.215904] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1349.221132] RIP: 0033:0x457f29 [ 1349.224340] Code: Bad RIP value. [ 1349.227704] RSP: 002b:00007f7e0f635c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1349.235416] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457f29 [ 1349.236906] Node 0 DMA free:10308kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1349.242692] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1349.242705] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1349.283371] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7e0f6366d4 [ 1349.290671] R13: 00000000004c078b R14: 00000000004d24c0 R15: 00000000ffffffff [ 1349.297975] CPU: 1 PID: 30876 Comm: syz-executor.1 Not tainted 5.0.0+ #12 [ 1349.304917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1349.314285] Call Trace: [ 1349.316898] dump_stack+0x172/0x1f0 [ 1349.316911] warn_alloc_show_mem: 1 callbacks suppressed [ 1349.316916] Mem-Info: [ 1349.320540] warn_alloc.cold+0x87/0x17f [ 1349.325917] active_anon:145317 inactive_anon:190 isolated_anon:0 [ 1349.325917] active_file:7 inactive_file:0 isolated_file:0 [ 1349.325917] unevictable:0 dirty:14 writeback:0 unstable:0 [ 1349.325917] slab_reclaimable:20016 slab_unreclaimable:97259 [ 1349.325917] mapped:52235 shmem:246 pagetables:2142 bounce:0 [ 1349.325917] free:13854 free_pcp:0 free_cma:0 [ 1349.328313] ? zone_watermark_ok_safe+0x260/0x260 [ 1349.328329] ? mark_held_locks+0xa4/0xf0 [ 1349.328361] __alloc_pages_slowpath+0x231d/0x28b0 [ 1349.328392] ? warn_alloc+0x110/0x110 [ 1349.328407] ? find_held_lock+0x35/0x130 [ 1349.337016] Node 0 active_anon:581264kB inactive_anon:760kB active_file:24kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208940kB dirty:56kB writeback:0kB shmem:984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 282624kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1349.365112] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1349.365134] ? should_fail+0x1de/0x852 [ 1349.365166] __alloc_pages_nodemask+0x57e/0x7e0 [ 1349.365185] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1349.377429] Node 1 active_anon:4kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1349.378941] ? wait_for_completion+0x440/0x440 [ 1349.382719] Node 0 DMA free:10308kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1349.386783] ? retint_kernel+0x2d/0x2d [ 1349.386803] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1349.425445] lowmem_reserve[]: 0 2553 2555 2555 [ 1349.428308] alloc_pages_current+0x107/0x210 [ 1349.428331] ion_page_pool_alloc+0x137/0x1d0 [ 1349.428348] ion_system_heap_allocate+0x165/0xaa0 [ 1349.428369] ? ion_system_heap_free+0x250/0x250 [ 1349.428384] ? ion_ioctl+0xa3c/0xf70 [ 1349.428401] ion_ioctl+0x3d8/0xf70 [ 1349.428426] ? _ion_buffer_destroy+0x110/0x110 [ 1349.428446] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1349.434225] lowmem_reserve[]: 0 2553 2555 2555 [ 1349.459174] ? _ion_buffer_destroy+0x110/0x110 [ 1349.459193] do_vfs_ioctl+0xd6e/0x1390 [ 1349.459212] ? ioctl_preallocate+0x210/0x210 [ 1349.459226] ? selinux_file_mprotect+0x620/0x620 [ 1349.459248] ? ksys_dup3+0x3e0/0x3e0 [ 1349.459266] ? nsecs_to_jiffies+0x30/0x30 [ 1349.468377] Node 0 DMA32 free:18256kB min:36232kB low:45288kB high:54344kB active_anon:581264kB inactive_anon:760kB active_file:356kB inactive_file:392kB unevictable:0kB writepending:56kB present:3129332kB managed:2617984kB mlocked:0kB kernel_stack:8608kB pagetables:8568kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1349.489977] ? tomoyo_file_ioctl+0x23/0x30 [ 1349.489994] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1349.490007] ? security_file_ioctl+0x93/0xc0 [ 1349.490025] ksys_ioctl+0xab/0xd0 [ 1349.490044] __x64_sys_ioctl+0x73/0xb0 [ 1349.490061] do_syscall_64+0x103/0x610 [ 1349.490081] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1349.490093] RIP: 0033:0x457f29 [ 1349.490117] Code: Bad RIP value. [ 1349.502771] lowmem_reserve[]: 0 0 2 2 [ 1349.504129] RSP: 002b:00007f57b7c93c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1349.508607] Node 0 Normal free:8kB min:28kB low:32kB high:36kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2204kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1349.512932] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457f29 [ 1349.527547] Node 0 DMA32 free:18580kB min:36232kB low:45288kB high:54344kB active_anon:581248kB inactive_anon:760kB active_file:212kB inactive_file:344kB unevictable:0kB writepending:56kB present:3129332kB managed:2617984kB mlocked:0kB kernel_stack:8608kB pagetables:8564kB bounce:0kB free_pcp:144kB local_pcp:144kB free_cma:0kB [ 1349.529666] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1349.529677] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1349.534264] lowmem_reserve[]: 0 0 2 2 [ 1349.539364] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f57b7c946d4 [ 1349.539374] R13: 00000000004c078b R14: 00000000004d24c0 R15: 00000000ffffffff [ 1349.682285] lowmem_reserve[]: 0 0 0 0 [ 1349.757137] Node 0 Normal free:8kB min:28kB low:32kB high:36kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2204kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1349.761473] Node 1 Normal free:32336kB min:53624kB low:67028kB high:80432kB active_anon:4kB inactive_anon:0kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:3932160kB managed:3870184kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:2116kB local_pcp:688kB free_cma:0kB [ 1349.783627] lowmem_reserve[]: 0 0 0 0 [ 1349.783652] Node 1 Normal free:32336kB min:53624kB low:67028kB high:80432kB active_anon:4kB inactive_anon:0kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:3932160kB managed:3870184kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:2116kB local_pcp:1428kB free_cma:0kB [ 1349.783687] lowmem_reserve[]: 0 0 0 0 [ 1349.783704] Node 0 DMA: 1*4kB (E) 2*8kB (UE) 1*16kB (E) 1*32kB (E) 2*64kB (UE) 3*128kB (UE) 4*256kB (UE) 3*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10308kB [ 1349.818560] lowmem_reserve[]: 0 0 0 0 [ 1349.843931] Node 0 DMA32: 1871*4kB (UME) 689*8kB (UMEH) 401*16kB (UMEH) 771*32kB (UM) 4*64kB (MH) 2*128kB (UH) 1*256kB (H) 3*512kB (UH) 0*1024kB 0*2048kB 0*4096kB = 46388kB [ 1349.866913] Node 0 DMA: 1*4kB (E) 2*8kB (UE) 1*16kB (E) 1*32kB (E) 2*64kB (UE) 3*128kB (UE) 4*256kB (UE) 3*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10308kB [ 1349.895815] Node 0 Normal: 0*4kB 1*8kB (E) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1349.924132] Node 1 Normal: 2*4kB (U) 3*8kB (UM) 34*16kB (UM) 4*32kB (UM) 1*64kB (M) 2*128kB (UM) 1*256kB (M) 2*512kB (M) 0*1024kB 2*2048kB (U) 5*4096kB (UM) = 26880kB [ 1349.941523] Node 0 DMA32: 1890*4kB (UME) 688*8kB (UMEH) 400*16kB (UMEH) 802*32kB (UM) 3*64kB (H) 1*128kB (H) 1*256kB (H) 2*512kB (H) 0*1024kB 0*2048kB 0*4096kB = 46728kB [ 1349.957011] syz-executor.1: page allocation failure: order:4, mode:0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 1349.973108] CPU: 0 PID: 30876 Comm: syz-executor.1 Not tainted 5.0.0+ #12 [ 1349.980051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1349.989406] Call Trace: [ 1349.992009] dump_stack+0x172/0x1f0 [ 1349.995656] warn_alloc.cold+0x87/0x17f [ 1349.999649] ? zone_watermark_ok_safe+0x260/0x260 [ 1350.004518] ? get_page_from_freelist+0x4170/0x4170 [ 1350.006902] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1350.009551] ? __isolate_free_page+0x4c0/0x4c0 [ 1350.022978] ? mutex_unlock+0xd/0x10 [ 1350.026700] ? drain_all_pages+0x408/0x590 [ 1350.030950] __alloc_pages_slowpath+0x231d/0x28b0 [ 1350.035822] ? warn_alloc+0x110/0x110 [ 1350.039634] ? find_held_lock+0x35/0x130 [ 1350.043730] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1350.046903] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1350.049280] ? should_fail+0x1de/0x852 [ 1350.049302] ? __isolate_free_page+0x4c0/0x4c0 [ 1350.049316] ? ___might_sleep+0x163/0x280 [ 1350.049343] __alloc_pages_nodemask+0x57e/0x7e0 [ 1350.075487] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1350.076899] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1350.080521] ? wait_for_completion+0x440/0x440 [ 1350.093935] ? kasan_check_write+0x14/0x20 [ 1350.098180] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1350.103737] alloc_pages_current+0x107/0x210 [ 1350.108167] ion_page_pool_alloc+0x137/0x1d0 [ 1350.112587] ion_system_heap_allocate+0x165/0xaa0 [ 1350.116902] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1350.117456] ? ion_system_heap_free+0x250/0x250 [ 1350.126024] 688 total pagecache pages [ 1350.130703] ion_ioctl+0xa0a/0xf70 [ 1350.130728] ? _ion_buffer_destroy+0x110/0x110 [ 1350.130748] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1350.130780] ? _ion_buffer_destroy+0x110/0x110 [ 1350.152407] do_vfs_ioctl+0xd6e/0x1390 [ 1350.156313] ? ioctl_preallocate+0x210/0x210 [ 1350.160734] ? selinux_file_mprotect+0x620/0x620 [ 1350.165505] ? ksys_dup3+0x3e0/0x3e0 [ 1350.166902] 0 pages in swap cache [ 1350.169230] ? nsecs_to_jiffies+0x30/0x30 [ 1350.172680] Swap cache stats: add 0, delete 0, find 0/0 [ 1350.176825] ? tomoyo_file_ioctl+0x23/0x30 [ 1350.186416] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1350.191962] ? security_file_ioctl+0x93/0xc0 [ 1350.196386] ksys_ioctl+0xab/0xd0 [ 1350.199851] __x64_sys_ioctl+0x73/0xb0 [ 1350.203751] do_syscall_64+0x103/0x610 [ 1350.207660] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1350.212855] RIP: 0033:0x457f29 [ 1350.216063] Code: Bad RIP value. [ 1350.216883] Free swap = 0kB [ 1350.219429] RSP: 002b:00007f57b7c93c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1350.222457] Total swap = 0kB [ 1350.230152] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457f29 [ 1350.230160] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1350.230169] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1350.230176] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f57b7c946d4 [ 1350.230184] R13: 00000000004c078b R14: 00000000004d24c0 R15: 00000000ffffffff [ 1350.232009] Node 0 Normal: 0*4kB 1*8kB (E) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1350.281747] Node 1 Normal: 2*4kB (U) 3*8kB (UM) 34*16kB (UM) 4*32kB (UM) 1*64kB (M) 2*128kB (UM) 1*256kB (M) 2*512kB (M) 0*1024kB 2*2048kB (U) 5*4096kB (UM) = 26880kB [ 1350.299072] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1350.308087] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1350.316676] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1350.325823] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1350.334569] 412 total pagecache pages [ 1350.338581] 0 pages in swap cache [ 1350.340745] 1965979 pages RAM [ 1350.342074] Swap cache stats: add 0, delete 0, find 0/0 [ 1350.345177] 0 pages HighMem/MovableOnly [ 1350.350760] Free swap = 0kB [ 1350.358664] 339409 pages reserved [ 1350.362124] 0 pages cma reserved [ 1350.365495] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0-1,global_oom,task_memcg=/syz0,task=syz-executor.0,pid=11131,uid=0 [ 1350.412726] Total swap = 0kB [ 1350.415783] 1965979 pages RAM [ 1350.442968] 0 pages HighMem/MovableOnly [ 1350.465468] 339409 pages reserved [ 1350.493098] 0 pages cma reserved [ 1350.507665] Out of memory: Killed process 11131 (syz-executor.0) total-vm:72576kB, anon-rss:2200kB, file-rss:34816kB, shmem-rss:0kB [ 1351.320415] ------------[ cut here ]------------ [ 1351.326896] kernel BUG at mm/page_alloc.c:3010! [ 1351.331583] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 1351.336956] CPU: 1 PID: 1046 Comm: kcompactd0 Not tainted 5.0.0+ #12 [ 1351.343438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1351.352813] RIP: 0010:__isolate_free_page+0x3b8/0x4c0 [ 1351.358005] Code: 83 c4 20 44 89 e1 b8 01 00 00 00 5b 48 d3 e0 41 5c 41 5d 41 5e 41 5f 5d c3 48 c7 c6 80 fa 71 87 4c 89 ff e8 3a ff 0b 00 0f 0b <0f> 0b 48 c7 c6 80 f6 71 87 4c 89 ff e8 27 ff 0b 00 0f 0b 48 8b 7d [ 1351.376989] RSP: 0018:ffff8880a8277850 EFLAGS: 00010007 [ 1351.382353] RAX: 0000000000000000 RBX: ffffea0001aec908 RCX: dffffc0000000000 [ 1351.389618] RDX: 1ffff11025fff909 RSI: 0000000000000007 RDI: ffff88812fffc818 [ 1351.396899] RBP: ffff8880a8277898 R08: ffff8880a82fc0c0 R09: ffffed101504ef02 [ 1351.404169] R10: ffffed101504ef01 R11: 0000000000000003 R12: 0000000000000007 [ 1351.411439] R13: 0000000000000007 R14: 0000000000000001 R15: ffff88812fffc818 [ 1351.418711] FS: 0000000000000000(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 1351.426934] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1351.432812] CR2: 0000000000422d10 CR3: 0000000095fd8000 CR4: 00000000001426e0 [ 1351.440093] Call Trace: [ 1351.442698] compaction_alloc+0xa9b/0x2290 [ 1351.446943] ? isolate_freepages_block+0xd40/0xd40 [ 1351.451870] ? trace_hardirqs_on+0x67/0x230 [ 1351.456201] migrate_pages+0x484/0x2cd0 [ 1351.460179] ? __ClearPageMovable+0x250/0x250 [ 1351.464679] ? isolate_freepages_block+0xd40/0xd40 [ 1351.469608] compact_zone+0x1b56/0x38d0 [ 1351.473612] ? compaction_suitable+0x3b0/0x3b0 [ 1351.478196] ? rcu_read_lock_sched_held+0x110/0x130 [ 1351.483207] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1351.488740] ? compaction_suitable+0xfb/0x3b0 [ 1351.493236] kcompactd_do_work+0x303/0xaa0 [ 1351.497563] ? sysfs_compact_node+0x100/0x100 [ 1351.502067] ? _raw_spin_unlock_irq+0x5e/0x90 [ 1351.506568] kcompactd+0x247/0x890 [ 1351.510113] ? kcompactd_do_work+0xaa0/0xaa0 [ 1351.514525] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1351.519105] ? trace_hardirqs_on+0x67/0x230 [ 1351.523434] ? finish_wait+0x260/0x260 [ 1351.527325] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1351.532430] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1351.537964] ? __kthread_parkme+0xfb/0x1b0 [ 1351.542201] kthread+0x357/0x430 [ 1351.545591] ? kcompactd_do_work+0xaa0/0xaa0 [ 1351.550022] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 1351.555560] ret_from_fork+0x3a/0x50 [ 1351.559294] Modules linked in: [ 1351.562493] ---[ end trace 95dae1552e8bcf55 ]--- [ 1351.567252] RIP: 0010:__isolate_free_page+0x3b8/0x4c0 [ 1351.572436] Code: 83 c4 20 44 89 e1 b8 01 00 00 00 5b 48 d3 e0 41 5c 41 5d 41 5e 41 5f 5d c3 48 c7 c6 80 fa 71 87 4c 89 ff e8 3a ff 0b 00 0f 0b <0f> 0b 48 c7 c6 80 f6 71 87 4c 89 ff e8 27 ff 0b 00 0f 0b 48 8b 7d [ 1351.591423] RSP: 0018:ffff8880a8277850 EFLAGS: 00010007 [ 1351.596789] RAX: 0000000000000000 RBX: ffffea0001aec908 RCX: dffffc0000000000 [ 1351.604056] RDX: 1ffff11025fff909 RSI: 0000000000000007 RDI: ffff88812fffc818 [ 1351.611321] RBP: ffff8880a8277898 R08: ffff8880a82fc0c0 R09: ffffed101504ef02 [ 1351.618584] R10: ffffed101504ef01 R11: 0000000000000003 R12: 0000000000000007 [ 1351.625857] R13: 0000000000000007 R14: 0000000000000001 R15: ffff88812fffc818 [ 1351.633147] FS: 0000000000000000(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 1351.641371] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1351.647246] CR2: 0000000000422d10 CR3: 0000000095fd8000 CR4: 00000000001426e0 [ 1351.654521] Kernel panic - not syncing: Fatal exception [ 1352.792713] Shutting down cpus with NMI [ 1352.797795] Kernel Offset: disabled [ 1352.801640] Rebooting in 86400 seconds..