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") mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x20420, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@noextend}, {@cachetag={'cachetag', 0x3d, '-'}}, {@uname={'uname', 0x3d, '/[\xa4)#)/,\x95('}}, {@cache_loose}, {@access_client}, {@nodevmap}, {@version_u}], [{@audit}, {@euid_eq={'euid', 0x3d, r1}}]}}) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r5 = getpid() getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e20, @loopback}}, 0x3, 0x3, 0x5, 0x494}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000004c0)={r6, 0x3, 0x30}, &(0x7f00000005c0)=0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/partitions\x00', 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000006c0)={0x30, 0x5, 0x0, {0x0, 0x6, 0x1000, 0x7f}}, 0x30) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e20, 0x5, @local, 0x2}, @in={0x2, 0x4e22, @loopback}], 0x3c) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, 0x0) ftruncate(0xffffffffffffffff, 0x0) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{0x0}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c", 0x2e}, {0x0}, {0x0}], 0x4, 0x0, 0x60}}], 0x1, 0x24000004) open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) setpriority(0x2, r5, 0x8) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 22:52:12 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0), 0x0, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:12 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000005c0)='./bus\x00', 0xc000, 0x9) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x2) r2 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000800)=@gettaction={0x5c, 0x32, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0x200b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xff54}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x100}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0xd0}, 0x40090) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r4}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r4, 0x1ff, 0x1, 0xe9e7}, 0x10) r5 = dup(r3) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r5, 0x4008550c, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) r6 = getpid() mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a42506000000b84a333bfbc93d1d2d6e5a4321b0c6"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r7 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r7, 0x800) r8 = creat(0x0, 0x0) sendmmsg$unix(r7, &(0x7f0000002180)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[], 0x60, 0x26000001}}, {{&(0x7f0000000380)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000f00)="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", 0x1000}, {&(0x7f0000000880)="f520ef0f05b1791e7cb4d19aa344832d9dd400b4d3cc274665b2a62a02f827ad8602f367b917c88cb2b3a9a86df7430f737fb987e875cdaa12723a6d5d298edd670f97ec063fec9f5aaefffe9b4392edc317b177703ebc34858bced39443881821c30ec0a8687680e1cd9d5cb19c2bc737fc38c2a909ac676a4bd4ffc843901e0ae699369446e1436f56b1f93b904946ebfb490086303b10f07614a79c460449f35c502eafa5ccdbb3b983483bc44de6f1d0a32ed80da54fb56ca963548718ad69183fd83c6c0bde", 0xc8}, {&(0x7f0000000980)="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", 0xfe}, {&(0x7f0000000a80)="e36524dfa62ac8741e4c828a4570ca6f292fbc0005de235d1e107a2ee91b07413f46cd46f8ec6c418b68639a2fd993e2685838bf2bc11df2870b76824b0b0c18cfd26ca812ebf84ae466a89e7c94ad9f75d658218406c1db66af6cbec939e39fe4ed46785fdc1d1e04f0104144738009efb1e153cdb58960de5ecc750065c457fd181ff71136bba47de3d241a67e71eceab1839e", 0x94}, {&(0x7f0000000c40)="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", 0xfe}, {&(0x7f0000000d40)="5477df4e8ce5b359a5627407b335107823f85c1b05febe2af6f6123438544a310c4eefd43bef0fba96e66dd6e68b3b6a606281a34eb3ad468dc178417b3a8fdbbc5481d7df61c6654724fa0bf8b8681c03b257b98eddc9216434e29cd49f44a335e02ed0cb264eeadc021b39ab91d242c7bdbab1d7ffd4414233495513b0d8d6691634fa6dfc724fdc7935b3e24dfc142e60978cb9347cbaa9ac490b23bb69d4c660a0945b22233d4844d1f672d9165519eb69c6a8350b5153e0cb5224eb7c376f52ada6319f8952c6c4c726018ac6e2", 0xd0}, {&(0x7f0000000440)="8a97deea147ece1162b65a503815ac6977d9acf0ad565fc1a3bf8a0284de6175757376eaee332e9fb6fd55bf6a3bda7defd7a509b5a515481c84154c7736fc155ce23a852930fd83f90e7410762890b72654e99da2173d6f721055734e211d903448bbf8ff6c783a3b8c6feb19c82cd78108120bab5facb88a77", 0x7a}], 0x7, &(0x7f00000020c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r6}}}, @rights={{0x30, 0x1, 0x1, [r2, 0xffffffffffffffff, r2, r8, r5, r3, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r2, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r2]}}], 0xc0, 0x40}}], 0x2, 0x24000004) lseek(r7, 0x0, 0x2) r9 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r7, r9, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) [ 2243.691428][ T27] audit: type=1804 audit(1681685532.410:15072): pid=14746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1892171996/syzkaller.Q2741I/1964/bus" dev="sda1" ino=1185 res=1 errno=0 22:52:12 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r2, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab88000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) [ 2243.931144][ T27] audit: type=1800 audit(1681685532.410:15073): pid=14746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1185 res=0 errno=0 22:52:12 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef", 0x1c}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) [ 2244.145862][ T27] audit: type=1804 audit(1681685532.690:15074): pid=14753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2578742061/syzkaller.W3XVNf/1892/bus" dev="sda1" ino=1177 res=1 errno=0 [ 2244.153737][T14748] loop2: detected capacity change from 0 to 4096 22:52:12 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r2, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:13 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000040)='sockfs\x00', 0x1015014, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0x10e9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r6 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r6, 0x800) creat(0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) open(&(0x7f00000001c0)='./file0\x00', 0x400280, 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x16b3) [ 2244.312053][T14748] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 2244.455497][ T27] audit: type=1800 audit(1681685532.690:15075): pid=14753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1177 res=0 errno=0 [ 2244.498018][T14748] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 2244.590854][ T27] audit: type=1804 audit(1681685532.910:15076): pid=14759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir4110182140/syzkaller.hTdUky/1461/bus" dev="sda1" ino=1188 res=1 errno=0 [ 2244.617051][ T27] audit: type=1800 audit(1681685532.910:15077): pid=14759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1188 res=0 errno=0 22:52:13 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef", 0x1c}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:13 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r2, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab88000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:13 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef", 0x1c}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:13 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:14 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000040)='sockfs\x00', 0x1015014, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0x10e9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r6 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r6, 0x800) creat(0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) open(&(0x7f00000001c0)='./file0\x00', 0x400280, 0x0) r7 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r6, r7, 0x0, 0x16b3) 22:52:14 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:14 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef", 0x1c}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:14 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x10c) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {0x0}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 22:52:14 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r2, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab88000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:15 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef", 0x1c}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:15 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000040)='sockfs\x00', 0x1015014, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0x10e9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r6 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r6, 0x800) creat(0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) open(&(0x7f00000001c0)='./file0\x00', 0x400280, 0x0) r7 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r6, r7, 0x0, 0x16b3) 22:52:15 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef", 0x1c}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:15 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef", 0x1c}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:15 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x10c) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {0x0}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 22:52:15 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:16 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r2, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab88000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:16 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000040)='sockfs\x00', 0x1015014, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0x10e9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r6 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r6, 0x800) creat(0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) open(&(0x7f00000001c0)='./file0\x00', 0x400280, 0x0) r7 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r6, r7, 0x0, 0x16b3) 22:52:16 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r2, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:16 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:16 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x10c) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {0x0}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 22:52:17 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000040)='sockfs\x00', 0x1015014, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0x10e9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000800)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf4004400670232a9d599a44d90b20dc12e0589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8af5a13ba20ca9bbe018131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec2bf1614ec1f796ef3db4cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c6000000030000004c86c8c7c2e608f0cfb1e105e05e5182ff13d4fdaf811d38f3513cc0381d992e3ce83a6022ee51ff0726b36eccea3a51641aba6ecbc66c902d681e22a4a5dec98b24a6b9c880a7119299ca842f227a00bc72da39f9c38e0e918061a3afd7b7f6aae1a8b60e2213b6e40e5bd3bb2e2432796411d2d407c05884ee016eac4888502a5c3f0735ac0b040000002c71967fdf0ed11f7e7446942a7c9012fe1c4c8becdafb2af6c191bea839c95f287d"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r6 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r6, 0x800) creat(0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r6, 0x0, 0x2) r7 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r6, r7, 0x0, 0x16b3) 22:52:17 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r2, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab88000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) [ 2248.368224][ T27] kauditd_printk_skb: 40 callbacks suppressed [ 2248.368243][ T27] audit: type=1804 audit(1681685537.080:15118): pid=14842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir1068322331/syzkaller.mpLRwx/1868/bus" dev="sda1" ino=1192 res=1 errno=0 22:52:17 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:17 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) [ 2248.625448][ T27] audit: type=1804 audit(1681685537.340:15119): pid=14848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1892171996/syzkaller.Q2741I/1972/bus" dev="sda1" ino=1176 res=1 errno=0 22:52:17 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x6b8680, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000440)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faeb00440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91db4c9c5bdf69769ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84e333bfbc93d1d2dccf41487bac6a0256e5a4321b0c616ba71e32d00ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000240)='\x00\x00\x00\x00\x00\x00\x80\x00@\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r6, &(0x7f00000000c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x1c, 0x0}}], 0x1, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {0x0}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d", @ANYRESOCT=r4, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRESHEX=r6, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r5, r7, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) [ 2248.929029][ T27] audit: type=1800 audit(1681685537.370:15120): pid=14848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1176 res=0 errno=0 [ 2248.959111][ T27] audit: type=1804 audit(1681685537.420:15121): pid=14851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir4110182140/syzkaller.hTdUky/1465/bus" dev="sda1" ino=1178 res=1 errno=0 [ 2248.987631][ T27] audit: type=1800 audit(1681685537.420:15122): pid=14851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1178 res=0 errno=0 [ 2249.039592][ T27] audit: type=1804 audit(1681685537.440:15123): pid=14852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir895531445/syzkaller.RpEK9g/1497/bus" dev="sda1" ino=1189 res=1 errno=0 22:52:17 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, 0x0, 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) [ 2249.219528][ T27] audit: type=1800 audit(1681685537.440:15124): pid=14852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1189 res=0 errno=0 [ 2249.369321][ T27] audit: type=1804 audit(1681685537.760:15125): pid=14856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3160652865/syzkaller.nVld8z/1950/bus" dev="sda1" ino=1162 res=1 errno=0 [ 2249.395786][ T27] audit: type=1800 audit(1681685537.790:15126): pid=14856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1162 res=0 errno=0 22:52:18 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r2, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab88000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:18 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000040)='sockfs\x00', 0x1015014, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0x10e9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r6 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r6, 0x800) creat(0x0, 0x0) lseek(r6, 0x0, 0x2) r7 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r6, r7, 0x0, 0x16b3) [ 2249.523137][ T27] audit: type=1804 audit(1681685538.240:15127): pid=14861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1892171996/syzkaller.Q2741I/1973/bus" dev="sda1" ino=1156 res=1 errno=0 22:52:18 executing program 5: mkdir(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x1ff, 0x1, 0xe9e7}, 0x10) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, 0x0) ftruncate(0xffffffffffffffff, 0x0) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{0x0}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c", 0x2e}, {0x0}, {0x0}], 0x4, 0x0, 0x60}}], 0x1, 0x24000004) open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r2, 0x3, &(0x7f0000000080)=0x3667) 22:52:18 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x620883, 0x40) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x2) r2 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r4}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r4, 0x1ff, 0x1, 0xe9e7}, 0x10) r5 = dup(r3) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r5, 0x4008550c, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c6"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r7 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r7, 0x800) sendmmsg$unix(r5, &(0x7f0000000c40)=[{{&(0x7f0000000440)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000800)="35011f4d2e6f2d228ed69dab8d817ef2039dc0d4529e46294d7dd67c93173e8908b519d7bac6654e852430511287e85a75a7961f891aa7e272b8e07d8c4c98e92284d894048398b5eaff0e7086bcdd6c56", 0x51}, {&(0x7f0000000880)="554ec9915c463746e9c4ae7252ebd5310a343bddb87d14f670316f6d2a03ecd4c36dc12380cee4d35742923200664dbefdd214053e978f6df822b798c5102e521c915d505cfa95c320eff83f07ba7f57a0452231c4165070dbff95259d4ec035ea87a9b1146a271d82a0f034bb86ffeed0d763aac3", 0x75}], 0x2, &(0x7f0000000900)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r0, r3, 0xffffffffffffffff, r0, r7]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x60, 0x4004400}}, {{&(0x7f0000000980)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000a00)="5c6e2a2688720c5d500afdbdaa57470c53d260bd23bbb1b03382ae18b6127d78d4fe11406bd138a27656d5c69240f0070cb2f3a85736f0996445294b713cec183b171714d2e56c398010638b77b82bd03c25cd58a6e328dbc03619ea9fcc7c44288f1b4602b253ef435b568a8634a714a4a746aa73ebe9f4bf8433dd6203f671e43d079eb90d74ad0f0dc93c215c215aa757d975badc96c2f0553f71770af7", 0x9f}], 0x1, &(0x7f0000000b80)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r5, r1, 0xffffffffffffffff, 0xffffffffffffffff, r3]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r6, 0x0, 0xee01}}}], 0x60}}], 0x2, 0x40) creat(0x0, 0x4c) sendmmsg$unix(r7, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r7, r8, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:18 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, 0x0, 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:19 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000340)=0x8000) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c1bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c6"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r6 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r6, 0x800) creat(0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r6, 0x0, 0x2) r7 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r6, r7, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:19 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, 0x0, 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:19 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r2, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab88000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:19 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000040)='sockfs\x00', 0x1015014, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0x10e9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r6 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r6, 0x800) lseek(r6, 0x0, 0x2) r7 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r6, r7, 0x0, 0x16b3) 22:52:19 executing program 5: mkdir(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x1ff, 0x1, 0xe9e7}, 0x10) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, 0x0) ftruncate(0xffffffffffffffff, 0x0) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{0x0}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c", 0x2e}, {0x0}, {0x0}], 0x4, 0x0, 0x60}}], 0x1, 0x24000004) open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r2, 0x3, &(0x7f0000000080)=0x3667) 22:52:19 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:20 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r2, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab88000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:20 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:20 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, 0x0, 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:20 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000040)='sockfs\x00', 0x1015014, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0x10e9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000800)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf4004400670232a9d599a44d90b20dc12e0589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8af5a13ba20ca9bbe018131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec2bf1614ec1f796ef3db4cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c6000000030000004c86c8c7c2e608f0cfb1e105e05e5182ff13d4fdaf811d38f3513cc0381d992e3ce83a6022ee51ff0726b36eccea3a51641aba6ecbc66c902d681e22a4a5dec98b24a6b9c880a7119299ca842f227a00bc72da39f9c38e0e918061a3afd7b7f6aae1a8b60e2213b6e40e5bd3bb2e2432796411d2d407c05884ee016eac4888502a5c3f0735ac0b040000002c71967fdf0ed11f7e7446942a7c9012fe1c4c8becdafb2af6c191bea839c95f287d"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r6 = creat(&(0x7f0000000400)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) r7 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r6, r7, 0x0, 0x16b3) 22:52:20 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x2) r2 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r4}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r4, 0x1ff, 0x1, 0xe9e7}, 0x10) r5 = dup(r3) write$6lowpan_enable(r5, &(0x7f0000000340)='0', 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000440)={r4, @in6={{0xa, 0x4e21, 0x1f, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffff7e1}}, 0x0, 0x9, 0x68b9, 0x4, 0x48, 0x5, 0x9}, 0x9c) ioctl$USBDEVFS_REAPURB(r5, 0x4008550c, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c6"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r7 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r7, 0x800) creat(0x0, 0x0) sendmmsg$unix(r7, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r7, r8, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:20 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:20 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:20 executing program 5: mkdir(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x1ff, 0x1, 0xe9e7}, 0x10) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, 0x0) ftruncate(0xffffffffffffffff, 0x0) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{0x0}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c", 0x2e}, {0x0}, {0x0}], 0x4, 0x0, 0x60}}], 0x1, 0x24000004) open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r2, 0x3, &(0x7f0000000080)=0x3667) 22:52:21 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:21 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r2, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab88000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:21 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:21 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000040)='sockfs\x00', 0x1015014, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0x10e9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r6 = creat(&(0x7f0000000400)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) r7 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r6, r7, 0x0, 0x16b3) 22:52:22 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:22 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) [ 2253.547477][ T27] kauditd_printk_skb: 42 callbacks suppressed [ 2253.547488][ T27] audit: type=1804 audit(1681685542.260:15170): pid=14950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1892171996/syzkaller.Q2741I/1980/bus" dev="sda1" ino=1187 res=1 errno=0 22:52:22 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r2, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab88000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:22 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c6"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r6 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r6, 0x800) creat(0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r6, 0x0, 0x2) r7 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r6, r7, 0x0, 0x1ddef) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:22 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:22 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000040)='sockfs\x00', 0x1015014, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0x10e9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000800)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf4004400670232a9d599a44d90b20dc12e0589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8af5a13ba20ca9bbe018131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec2bf1614ec1f796ef3db4cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c6000000030000004c86c8c7c2e608f0cfb1e105e05e5182ff13d4fdaf811d38f3513cc0381d992e3ce83a6022ee51ff0726b36eccea3a51641aba6ecbc66c902d681e22a4a5dec98b24a6b9c880a7119299ca842f227a00bc72da39f9c38e0e918061a3afd7b7f6aae1a8b60e2213b6e40e5bd3bb2e2432796411d2d407c05884ee016eac4888502a5c3f0735ac0b040000002c71967fdf0ed11f7e7446942a7c9012fe1c4c8becdafb2af6c191bea839c95f287d"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r6 = creat(&(0x7f0000000400)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) r7 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r6, r7, 0x0, 0x16b3) [ 2253.885078][ T27] audit: type=1800 audit(1681685542.300:15171): pid=14950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1187 res=0 errno=0 [ 2253.906745][ T27] audit: type=1804 audit(1681685542.550:15172): pid=14958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2578742061/syzkaller.W3XVNf/1900/bus" dev="sda1" ino=1153 res=1 errno=0 [ 2253.957411][ T27] audit: type=1800 audit(1681685542.550:15173): pid=14958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1153 res=0 errno=0 22:52:22 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) [ 2254.220960][ T27] audit: type=1804 audit(1681685542.790:15174): pid=14965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir4110182140/syzkaller.hTdUky/1470/bus" dev="sda1" ino=1189 res=1 errno=0 [ 2254.553519][ T27] audit: type=1800 audit(1681685542.790:15175): pid=14965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1189 res=0 errno=0 22:52:23 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r2, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab88000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:23 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:23 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r2, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab88000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) [ 2254.974962][ T27] audit: type=1804 audit(1681685542.870:15176): pid=14967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir1068322331/syzkaller.mpLRwx/1872/bus" dev="sda1" ino=1168 res=1 errno=0 22:52:23 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000040)='sockfs\x00', 0x1015014, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0x10e9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000800)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf4004400670232a9d599a44d90b20dc12e0589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8af5a13ba20ca9bbe018131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec2bf1614ec1f796ef3db4cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c6000000030000004c86c8c7c2e608f0cfb1e105e05e5182ff13d4fdaf811d38f3513cc0381d992e3ce83a6022ee51ff0726b36eccea3a51641aba6ecbc66c902d681e22a4a5dec98b24a6b9c880a7119299ca842f227a00bc72da39f9c38e0e918061a3afd7b7f6aae1a8b60e2213b6e40e5bd3bb2e2432796411d2d407c05884ee016eac4888502a5c3f0735ac0b040000002c71967fdf0ed11f7e7446942a7c9012fe1c4c8becdafb2af6c191bea839c95f287d"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0x16b3) 22:52:23 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r2, 0x1ff, 0x1, 0xe9e7}, 0x10) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r4 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r4, 0x800) creat(0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r5 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r4, r5, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) [ 2255.299524][ T27] audit: type=1800 audit(1681685542.870:15177): pid=14967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1168 res=0 errno=0 [ 2255.321517][ T27] audit: type=1804 audit(1681685542.900:15178): pid=14964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3160652865/syzkaller.nVld8z/1954/bus" dev="sda1" ino=1188 res=1 errno=0 [ 2255.354377][ T27] audit: type=1800 audit(1681685542.900:15179): pid=14964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1188 res=0 errno=0 22:52:24 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c6"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r6 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r6, 0x800) creat(0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r6, 0x0, 0x2) r7 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r6, r7, 0x0, 0x1dda3) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:24 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:24 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r2, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab88000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:24 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000040)='sockfs\x00', 0x1015014, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0x10e9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0x16b3) 22:52:24 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r2, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab88000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:25 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r2, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab88000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:25 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:25 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(0x0, 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:25 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r2, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab88000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:25 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000040)='sockfs\x00', 0x1015014, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0x10e9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0x16b3) 22:52:25 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:26 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c6"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r6 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r6, 0x800) creat(0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r6, 0x0, 0x2) r7 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r6, r7, 0x0, 0x1dd82) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:26 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:26 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r2, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab88000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:26 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000040)='sockfs\x00', 0x1015014, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0x10e9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) r6 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r6, 0x800) lseek(r6, 0x0, 0x2) r7 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r6, r7, 0x0, 0x16b3) 22:52:26 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r2, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c00000000000000010000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab88000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:26 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:27 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r2, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab88000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:27 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:27 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c6"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r6 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r6, 0x800) creat(0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r6, 0x0, 0x2) r7 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r6, r7, 0x0, 0x1dd0d) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) [ 2258.898634][ T27] kauditd_printk_skb: 42 callbacks suppressed [ 2258.898653][ T27] audit: type=1804 audit(1681685547.610:15222): pid=15061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2578742061/syzkaller.W3XVNf/1904/bus" dev="sda1" ino=1179 res=1 errno=0 [ 2259.109757][ T27] audit: type=1800 audit(1681685547.650:15223): pid=15061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1179 res=0 errno=0 [ 2259.131315][ T27] audit: type=1804 audit(1681685547.660:15224): pid=15062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1892171996/syzkaller.Q2741I/1988/bus" dev="sda1" ino=1166 res=1 errno=0 22:52:27 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000040)='sockfs\x00', 0x1015014, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0x10e9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) getpid() r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x16b3) [ 2259.157581][ T27] audit: type=1800 audit(1681685547.660:15225): pid=15062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1166 res=0 errno=0 22:52:27 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r2, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c00000000000000010000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab88000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:28 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c6"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r6 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r6, 0x800) creat(0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r6, 0x0, 0x2) r7 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r6, r7, 0x0, 0x1dd0b) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) [ 2259.228495][ T27] audit: type=1804 audit(1681685547.930:15226): pid=15066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3160652865/syzkaller.nVld8z/1957/bus" dev="sda1" ino=1191 res=1 errno=0 [ 2259.359264][ T27] audit: type=1800 audit(1681685547.930:15227): pid=15066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1191 res=0 errno=0 22:52:28 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) [ 2259.508632][ T27] audit: type=1804 audit(1681685548.220:15228): pid=15074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir895531445/syzkaller.RpEK9g/1507/bus" dev="sda1" ino=1169 res=1 errno=0 [ 2259.589119][ T27] audit: type=1800 audit(1681685548.260:15229): pid=15074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1169 res=0 errno=0 [ 2259.644513][ T27] audit: type=1804 audit(1681685548.360:15230): pid=15077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1892171996/syzkaller.Q2741I/1989/bus" dev="sda1" ino=1189 res=1 errno=0 22:52:28 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) [ 2259.674486][ T27] audit: type=1800 audit(1681685548.390:15231): pid=15077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1189 res=0 errno=0 22:52:29 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000040)='sockfs\x00', 0x1015014, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0x10e9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x16b3) 22:52:29 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:29 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r2, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c00000000000000010000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab88000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:29 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:29 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c6"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r6 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r6, 0x800) creat(0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r6, 0x0, 0x2) r7 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r6, r7, 0x0, 0x1dd0b) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:29 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) (fail_nth: 1) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:29 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e20090000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) [ 2260.943293][T15105] FAULT_INJECTION: forcing a failure. [ 2260.943293][T15105] name failslab, interval 1, probability 0, space 0, times 0 [ 2260.960399][T15105] CPU: 1 PID: 15105 Comm: syz-executor.3 Not tainted 6.3.0-rc6-next-20230414-syzkaller-12018-gd3f2cd248191 #0 [ 2260.972080][T15105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2260.982150][T15105] Call Trace: [ 2260.985433][T15105] [ 2260.988373][T15105] dump_stack_lvl+0x136/0x150 [ 2260.993084][T15105] should_fail_ex+0x4a3/0x5b0 [ 2260.997785][T15105] should_failslab+0x9/0x20 [ 2261.002285][T15105] __kmem_cache_alloc_node+0x5b/0x320 [ 2261.007658][T15105] ? alloc_pipe_info+0x10e/0x590 [ 2261.012588][T15105] ? lock_downgrade+0x690/0x690 [ 2261.017457][T15105] kmalloc_trace+0x26/0xe0 [ 2261.021919][T15105] alloc_pipe_info+0x10e/0x590 [ 2261.026702][T15105] splice_direct_to_actor+0x6c9/0x8a0 [ 2261.032076][T15105] ? do_splice_direct+0x280/0x280 [ 2261.037115][T15105] ? apparmor_file_permission+0x272/0x4e0 [ 2261.042856][T15105] ? folio_flags.constprop.0+0x150/0x150 [ 2261.048512][T15105] ? bpf_lsm_file_permission+0x9/0x10 [ 2261.053891][T15105] ? security_file_permission+0xaf/0xd0 [ 2261.059461][T15105] do_splice_direct+0x1ab/0x280 [ 2261.064344][T15105] ? splice_direct_to_actor+0x8a0/0x8a0 [ 2261.069911][T15105] do_sendfile+0xb19/0x12c0 [ 2261.074419][T15105] ? vfs_iocb_iter_write+0x480/0x480 [ 2261.079715][T15105] __x64_sys_sendfile64+0x1d0/0x210 [ 2261.084909][T15105] ? ksys_write+0x1a3/0x250 [ 2261.089413][T15105] ? __ia32_sys_sendfile+0x220/0x220 [ 2261.094719][T15105] ? syscall_enter_from_user_mode+0x26/0x80 [ 2261.100609][T15105] do_syscall_64+0x39/0xb0 [ 2261.105024][T15105] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2261.110930][T15105] RIP: 0033:0x7f25c908c169 [ 2261.115365][T15105] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2261.134985][T15105] RSP: 002b:00007f25c9e21168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2261.143399][T15105] RAX: ffffffffffffffda RBX: 00007f25c91ac050 RCX: 00007f25c908c169 [ 2261.151363][T15105] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000007 [ 2261.159332][T15105] RBP: 00007f25c9e211d0 R08: 0000000000000000 R09: 0000000000000000 [ 2261.167294][T15105] R10: 000000000001dd00 R11: 0000000000000246 R12: 0000000000000001 [ 2261.175256][T15105] R13: 00007ffe2ea49d7f R14: 00007f25c9e21300 R15: 0000000000022000 [ 2261.183229][T15105] 22:52:30 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000040)='sockfs\x00', 0x1015014, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0x10e9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x16b3) 22:52:30 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r2, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c00000000000000010000000200", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab88000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:30 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e20090000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:30 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) (fail_nth: 2) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) [ 2261.923382][T15123] FAULT_INJECTION: forcing a failure. [ 2261.923382][T15123] name failslab, interval 1, probability 0, space 0, times 0 [ 2261.960846][T15123] CPU: 1 PID: 15123 Comm: syz-executor.3 Not tainted 6.3.0-rc6-next-20230414-syzkaller-12018-gd3f2cd248191 #0 [ 2261.972565][T15123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2261.982613][T15123] Call Trace: [ 2261.985886][T15123] [ 2261.988826][T15123] dump_stack_lvl+0x136/0x150 [ 2261.993530][T15123] should_fail_ex+0x4a3/0x5b0 [ 2261.998202][T15123] should_failslab+0x9/0x20 [ 2262.002693][T15123] __kmem_cache_alloc_node+0x5b/0x320 [ 2262.008060][T15123] ? alloc_pipe_info+0x1e9/0x590 [ 2262.012986][T15123] ? __kmem_cache_alloc_node+0x1b0/0x320 [ 2262.018613][T15123] ? alloc_pipe_info+0x10e/0x590 [ 2262.023543][T15123] ? alloc_pipe_info+0x1e9/0x590 [ 2262.028478][T15123] __kmalloc+0x4e/0x190 [ 2262.032647][T15123] alloc_pipe_info+0x1e9/0x590 [ 2262.037404][T15123] splice_direct_to_actor+0x6c9/0x8a0 [ 2262.042775][T15123] ? do_splice_direct+0x280/0x280 [ 2262.047811][T15123] ? apparmor_file_permission+0x272/0x4e0 [ 2262.053531][T15123] ? folio_flags.constprop.0+0x150/0x150 [ 2262.059177][T15123] ? bpf_lsm_file_permission+0x9/0x10 [ 2262.064574][T15123] ? security_file_permission+0xaf/0xd0 [ 2262.070132][T15123] do_splice_direct+0x1ab/0x280 [ 2262.074990][T15123] ? splice_direct_to_actor+0x8a0/0x8a0 [ 2262.080549][T15123] do_sendfile+0xb19/0x12c0 [ 2262.085060][T15123] ? vfs_iocb_iter_write+0x480/0x480 [ 2262.090343][T15123] ? xfd_validate_state+0x5d/0x180 [ 2262.095452][T15123] ? restore_fpregs_from_fpstate+0xc1/0x1c0 [ 2262.101343][T15123] __x64_sys_sendfile64+0x1d0/0x210 [ 2262.106551][T15123] ? __ia32_sys_sendfile+0x220/0x220 [ 2262.111843][T15123] ? syscall_enter_from_user_mode+0x26/0x80 [ 2262.117758][T15123] do_syscall_64+0x39/0xb0 [ 2262.122191][T15123] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2262.128087][T15123] RIP: 0033:0x7f25c908c169 [ 2262.132495][T15123] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2262.152091][T15123] RSP: 002b:00007f25c9e21168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2262.160494][T15123] RAX: ffffffffffffffda RBX: 00007f25c91ac050 RCX: 00007f25c908c169 22:52:30 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) [ 2262.168456][T15123] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000007 [ 2262.176431][T15123] RBP: 00007f25c9e211d0 R08: 0000000000000000 R09: 0000000000000000 [ 2262.184393][T15123] R10: 000000000001dd00 R11: 0000000000000246 R12: 0000000000000001 [ 2262.192373][T15123] R13: 00007ffe2ea49d7f R14: 00007f25c9e21300 R15: 0000000000022000 [ 2262.200342][T15123] 22:52:31 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000040)='sockfs\x00', 0x1015014, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0x10e9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, 0x0) r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x16b3) 22:52:31 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c6"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r6 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r6, 0x800) creat(0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r6, 0x0, 0x2) r7 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r6, r7, 0x0, 0x1dd0b) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:31 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e20090000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:31 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r2, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c00000000000000010000000200", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab88000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:31 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:31 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) (fail_nth: 3) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:31 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:32 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000040)='sockfs\x00', 0x1015014, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0x10e9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x16b3) [ 2263.466887][T15155] FAULT_INJECTION: forcing a failure. [ 2263.466887][T15155] name failslab, interval 1, probability 0, space 0, times 0 [ 2263.480775][T15155] CPU: 1 PID: 15155 Comm: syz-executor.3 Not tainted 6.3.0-rc6-next-20230414-syzkaller-12018-gd3f2cd248191 #0 [ 2263.492454][T15155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2263.502535][T15155] Call Trace: [ 2263.505836][T15155] [ 2263.508793][T15155] dump_stack_lvl+0x136/0x150 [ 2263.513519][T15155] should_fail_ex+0x4a3/0x5b0 [ 2263.518238][T15155] should_failslab+0x9/0x20 [ 2263.522769][T15155] __kmem_cache_alloc_node+0x5b/0x320 [ 2263.528182][T15155] ? direct_splice_read+0x15b/0x980 [ 2263.533433][T15155] ? direct_splice_read+0x15b/0x980 [ 2263.538675][T15155] __kmalloc+0x4e/0x190 [ 2263.542855][T15155] direct_splice_read+0x15b/0x980 [ 2263.547906][T15155] ? __fsnotify_parent+0x49c/0xa60 [ 2263.553035][T15155] ? fsnotify+0x16e0/0x16e0 [ 2263.557553][T15155] ? vfs_splice_read+0x250/0x250 [ 2263.562522][T15155] ? fsnotify_perm.part.0+0x221/0x610 [ 2263.567914][T15155] ? apparmor_file_permission+0x272/0x4e0 [ 2263.573666][T15155] generic_file_splice_read+0x165/0x1b0 [ 2263.579235][T15155] ? direct_splice_read+0x980/0x980 [ 2263.584457][T15155] vfs_splice_read+0x1bd/0x250 [ 2263.589263][T15155] splice_direct_to_actor+0x2ab/0x8a0 [ 2263.594665][T15155] ? do_splice_direct+0x280/0x280 [ 2263.599715][T15155] ? folio_flags.constprop.0+0x150/0x150 [ 2263.605366][T15155] ? bpf_lsm_file_permission+0x9/0x10 [ 2263.610757][T15155] ? security_file_permission+0xaf/0xd0 [ 2263.616334][T15155] do_splice_direct+0x1ab/0x280 [ 2263.621212][T15155] ? splice_direct_to_actor+0x8a0/0x8a0 [ 2263.626794][T15155] do_sendfile+0xb19/0x12c0 [ 2263.631326][T15155] ? vfs_iocb_iter_write+0x480/0x480 [ 2263.636647][T15155] __x64_sys_sendfile64+0x1d0/0x210 [ 2263.641856][T15155] ? ksys_write+0x1a3/0x250 [ 2263.646390][T15155] ? __ia32_sys_sendfile+0x220/0x220 [ 2263.651688][T15155] ? syscall_enter_from_user_mode+0x26/0x80 [ 2263.657599][T15155] do_syscall_64+0x39/0xb0 [ 2263.662034][T15155] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2263.667947][T15155] RIP: 0033:0x7f25c908c169 [ 2263.672368][T15155] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2263.691983][T15155] RSP: 002b:00007f25c9e21168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2263.700406][T15155] RAX: ffffffffffffffda RBX: 00007f25c91ac050 RCX: 00007f25c908c169 [ 2263.708389][T15155] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000007 [ 2263.716365][T15155] RBP: 00007f25c9e211d0 R08: 0000000000000000 R09: 0000000000000000 [ 2263.724343][T15155] R10: 000000000001dd00 R11: 0000000000000246 R12: 0000000000000001 [ 2263.732344][T15155] R13: 00007ffe2ea49d7f R14: 00007f25c9e21300 R15: 0000000000022000 [ 2263.740339][T15155] 22:52:32 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r2, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c00000000000000010000000200", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab88000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) [ 2263.985395][ T27] kauditd_printk_skb: 44 callbacks suppressed [ 2263.985412][ T27] audit: type=1804 audit(1681685552.700:15276): pid=15162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir895531445/syzkaller.RpEK9g/1511/bus" dev="sda1" ino=1191 res=1 errno=0 22:52:32 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:32 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(0x0, 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r6 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r6, 0x800) creat(0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce", 0x36}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f3", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r7 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r6, r7, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) (fail_nth: 1) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x0, 0x7, 0x0, 0x1}, 0x48) [ 2264.039765][ T27] audit: type=1800 audit(1681685552.750:15277): pid=15162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1191 res=0 errno=0 [ 2264.290558][ T27] audit: type=1804 audit(1681685552.800:15278): pid=15164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir4110182140/syzkaller.hTdUky/1479/bus" dev="sda1" ino=1153 res=1 errno=0 [ 2264.413876][T15172] FAULT_INJECTION: forcing a failure. [ 2264.413876][T15172] name failslab, interval 1, probability 0, space 0, times 0 [ 2264.431506][T15172] CPU: 0 PID: 15172 Comm: syz-executor.5 Not tainted 6.3.0-rc6-next-20230414-syzkaller-12018-gd3f2cd248191 #0 [ 2264.443192][T15172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2264.453253][T15172] Call Trace: [ 2264.456538][T15172] [ 2264.459477][T15172] dump_stack_lvl+0x136/0x150 [ 2264.464161][T15172] should_fail_ex+0x4a3/0x5b0 [ 2264.468849][T15172] should_failslab+0x9/0x20 [ 2264.473392][T15172] kmem_cache_alloc+0x63/0x3b0 [ 2264.478157][T15172] ? lock_downgrade+0x690/0x690 [ 2264.483010][T15172] getname_flags.part.0+0x50/0x4f0 [ 2264.488125][T15172] getname+0x92/0xd0 [ 2264.492016][T15172] do_sys_openat2+0xf5/0x4c0 [ 2264.496610][T15172] ? build_open_flags+0x720/0x720 [ 2264.501638][T15172] __x64_sys_openat+0x143/0x1f0 [ 2264.506489][T15172] ? __ia32_sys_open+0x1c0/0x1c0 [ 2264.511438][T15172] ? ksys_write+0x1a3/0x250 [ 2264.515963][T15172] ? syscall_enter_from_user_mode+0x26/0x80 [ 2264.521875][T15172] do_syscall_64+0x39/0xb0 [ 2264.526320][T15172] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2264.532215][T15172] RIP: 0033:0x7f4461a8c169 [ 2264.536619][T15172] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2264.556231][T15172] RSP: 002b:00007f446272c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 22:52:33 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) (fail_nth: 4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:33 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r4 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x800) creat(0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615", 0xec}, {&(0x7f00000002c0)}, {0x0}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r4, r5, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) (fail_nth: 1) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) [ 2264.564652][T15172] RAX: ffffffffffffffda RBX: 00007f4461bac120 RCX: 00007f4461a8c169 [ 2264.572611][T15172] RDX: 0000000000000040 RSI: 0000000020000300 RDI: ffffffffffffff9c [ 2264.580574][T15172] RBP: 00007f446272c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2264.588547][T15172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2264.596527][T15172] R13: 00007ffe4d66c0cf R14: 00007f446272c300 R15: 0000000000022000 [ 2264.604499][T15172] 22:52:33 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000040)='sockfs\x00', 0x1015014, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0x10e9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x16b3) [ 2264.732191][ T27] audit: type=1800 audit(1681685552.800:15279): pid=15164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1153 res=0 errno=0 [ 2264.753735][ T27] audit: type=1804 audit(1681685552.940:15280): pid=15168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1892171996/syzkaller.Q2741I/1996/bus" dev="sda1" ino=1185 res=1 errno=0 [ 2264.850596][T15177] FAULT_INJECTION: forcing a failure. [ 2264.850596][T15177] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2264.864737][T15177] CPU: 1 PID: 15177 Comm: syz-executor.3 Not tainted 6.3.0-rc6-next-20230414-syzkaller-12018-gd3f2cd248191 #0 [ 2264.876412][T15177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2264.886494][T15177] Call Trace: [ 2264.889798][T15177] [ 2264.892749][T15177] dump_stack_lvl+0x136/0x150 [ 2264.897471][T15177] should_fail_ex+0x4a3/0x5b0 [ 2264.902182][T15177] prepare_alloc_pages+0x178/0x570 [ 2264.907344][T15177] __alloc_pages+0x149/0x4a0 [ 2264.911973][T15177] ? __kmalloc+0x5e/0x190 [ 2264.916334][T15177] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2264.923148][T15177] ? splice_direct_to_actor+0x2ab/0x8a0 [ 2264.928739][T15177] ? do_splice_direct+0x1ab/0x280 [ 2264.933805][T15177] ? do_sendfile+0xb19/0x12c0 [ 2264.938519][T15177] ? do_syscall_64+0x39/0xb0 [ 2264.943146][T15177] ? unwind_get_return_address+0x55/0xa0 [ 2264.948784][T15177] __alloc_pages_bulk+0x7de/0x1350 [ 2264.953901][T15177] ? __alloc_pages+0x4a0/0x4a0 [ 2264.958666][T15177] ? __kmem_cache_alloc_node+0x1b0/0x320 [ 2264.964299][T15177] ? direct_splice_read+0x15b/0x980 [ 2264.969506][T15177] ? rcu_is_watching+0x12/0xb0 [ 2264.974307][T15177] direct_splice_read+0x195/0x980 [ 2264.979335][T15177] ? fsnotify+0x16e0/0x16e0 [ 2264.983829][T15177] ? vfs_splice_read+0x250/0x250 [ 2264.988773][T15177] ? fsnotify_perm.part.0+0x221/0x610 [ 2264.994165][T15177] ? apparmor_file_permission+0x272/0x4e0 [ 2264.999889][T15177] generic_file_splice_read+0x165/0x1b0 [ 2265.005431][T15177] ? direct_splice_read+0x980/0x980 [ 2265.010626][T15177] vfs_splice_read+0x1bd/0x250 [ 2265.015405][T15177] splice_direct_to_actor+0x2ab/0x8a0 [ 2265.020794][T15177] ? do_splice_direct+0x280/0x280 [ 2265.025851][T15177] ? folio_flags.constprop.0+0x150/0x150 [ 2265.031505][T15177] ? bpf_lsm_file_permission+0x9/0x10 [ 2265.036878][T15177] ? security_file_permission+0xaf/0xd0 [ 2265.042442][T15177] do_splice_direct+0x1ab/0x280 [ 2265.047302][T15177] ? splice_direct_to_actor+0x8a0/0x8a0 [ 2265.052852][T15177] do_sendfile+0xb19/0x12c0 [ 2265.057362][T15177] ? vfs_iocb_iter_write+0x480/0x480 [ 2265.062651][T15177] __x64_sys_sendfile64+0x1d0/0x210 [ 2265.067853][T15177] ? ksys_write+0x1a3/0x250 [ 2265.072373][T15177] ? __ia32_sys_sendfile+0x220/0x220 [ 2265.075853][ T27] audit: type=1800 audit(1681685552.940:15281): pid=15168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1185 res=0 errno=0 [ 2265.077671][T15177] ? syscall_enter_from_user_mode+0x26/0x80 [ 2265.104483][T15177] do_syscall_64+0x39/0xb0 [ 2265.108903][T15177] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2265.114790][T15177] RIP: 0033:0x7f25c908c169 [ 2265.119196][T15177] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2265.138803][T15177] RSP: 002b:00007f25c9e21168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 22:52:33 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab88000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) [ 2265.147215][T15177] RAX: ffffffffffffffda RBX: 00007f25c91ac050 RCX: 00007f25c908c169 [ 2265.155178][T15177] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000007 [ 2265.163138][T15177] RBP: 00007f25c9e211d0 R08: 0000000000000000 R09: 0000000000000000 [ 2265.171098][T15177] R10: 000000000001dd00 R11: 0000000000000246 R12: 0000000000000001 [ 2265.179057][T15177] R13: 00007ffe2ea49d7f R14: 00007f25c9e21300 R15: 0000000000022000 [ 2265.187028][T15177] 22:52:33 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r2, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000000001000000020000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab88000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) [ 2265.346135][T15182] FAULT_INJECTION: forcing a failure. [ 2265.346135][T15182] name failslab, interval 1, probability 0, space 0, times 0 [ 2265.361139][T15182] CPU: 0 PID: 15182 Comm: syz-executor.2 Not tainted 6.3.0-rc6-next-20230414-syzkaller-12018-gd3f2cd248191 #0 [ 2265.372807][T15182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2265.382855][T15182] Call Trace: [ 2265.386125][T15182] [ 2265.389055][T15182] dump_stack_lvl+0x136/0x150 [ 2265.393750][T15182] should_fail_ex+0x4a3/0x5b0 [ 2265.398440][T15182] should_failslab+0x9/0x20 [ 2265.402938][T15182] kmem_cache_alloc+0x63/0x3b0 [ 2265.407711][T15182] ? lock_downgrade+0x690/0x690 [ 2265.412582][T15182] getname_flags.part.0+0x50/0x4f0 [ 2265.417730][T15182] getname+0x92/0xd0 [ 2265.421642][T15182] do_sys_openat2+0xf5/0x4c0 [ 2265.426276][T15182] ? build_open_flags+0x720/0x720 [ 2265.431325][T15182] __x64_sys_openat+0x143/0x1f0 [ 2265.436192][T15182] ? __ia32_sys_open+0x1c0/0x1c0 [ 2265.441160][T15182] ? ksys_write+0x1a3/0x250 [ 2265.445670][T15182] ? syscall_enter_from_user_mode+0x26/0x80 [ 2265.451571][T15182] do_syscall_64+0x39/0xb0 [ 2265.456001][T15182] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2265.461899][T15182] RIP: 0033:0x7f08b748c169 [ 2265.466307][T15182] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2265.485912][T15182] RSP: 002b:00007f08b8181168 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2265.494319][T15182] RAX: ffffffffffffffda RBX: 00007f08b75ac050 RCX: 00007f08b748c169 [ 2265.502282][T15182] RDX: 0000000000000040 RSI: 0000000020000300 RDI: ffffffffffffff9c [ 2265.510242][T15182] RBP: 00007f08b81811d0 R08: 0000000000000000 R09: 0000000000000000 [ 2265.518202][T15182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2265.526185][T15182] R13: 00007ffc79e9b7ff R14: 00007f08b8181300 R15: 0000000000022000 [ 2265.534184][T15182] [ 2265.562994][ T27] audit: type=1804 audit(1681685553.550:15282): pid=15177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2578742061/syzkaller.W3XVNf/1909/bus" dev="sda1" ino=1165 res=1 errno=0 [ 2265.590448][ T27] audit: type=1800 audit(1681685553.550:15283): pid=15177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1165 res=0 errno=0 [ 2265.616496][ T27] audit: type=1804 audit(1681685554.000:15284): pid=15182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3160652865/syzkaller.nVld8z/1960/bus" dev="sda1" ino=1179 res=1 errno=0 [ 2265.648831][ T27] audit: type=1800 audit(1681685554.000:15285): pid=15182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1179 res=0 errno=0 22:52:34 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab88000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:34 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(0x0, 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r6 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r6, 0x800) creat(0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce", 0x36}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f3", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r7 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r6, r7, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) (fail_nth: 2) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x0, 0x7, 0x0, 0x1}, 0x48) 22:52:34 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r4 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x800) creat(0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615", 0xec}, {&(0x7f00000002c0)}, {0x0}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r4, r5, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) (fail_nth: 2) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) [ 2266.066394][T15202] FAULT_INJECTION: forcing a failure. [ 2266.066394][T15202] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2266.084696][T15202] CPU: 1 PID: 15202 Comm: syz-executor.5 Not tainted 6.3.0-rc6-next-20230414-syzkaller-12018-gd3f2cd248191 #0 [ 2266.096388][T15202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2266.106445][T15202] Call Trace: [ 2266.109719][T15202] [ 2266.112643][T15202] dump_stack_lvl+0x136/0x150 [ 2266.117337][T15202] should_fail_ex+0x4a3/0x5b0 [ 2266.122038][T15202] strncpy_from_user+0x38/0x400 [ 2266.126895][T15202] getname_flags.part.0+0x95/0x4f0 [ 2266.132040][T15202] getname+0x92/0xd0 [ 2266.135934][T15202] do_sys_openat2+0xf5/0x4c0 [ 2266.140528][T15202] ? build_open_flags+0x720/0x720 [ 2266.145560][T15202] __x64_sys_openat+0x143/0x1f0 [ 2266.150410][T15202] ? __ia32_sys_open+0x1c0/0x1c0 [ 2266.155379][T15202] ? ksys_write+0x1a3/0x250 [ 2266.159888][T15202] ? syscall_enter_from_user_mode+0x26/0x80 [ 2266.165783][T15202] do_syscall_64+0x39/0xb0 [ 2266.170205][T15202] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2266.176102][T15202] RIP: 0033:0x7f4461a8c169 [ 2266.180512][T15202] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2266.200128][T15202] RSP: 002b:00007f446272c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2266.208569][T15202] RAX: ffffffffffffffda RBX: 00007f4461bac120 RCX: 00007f4461a8c169 [ 2266.216534][T15202] RDX: 0000000000000040 RSI: 0000000020000300 RDI: ffffffffffffff9c [ 2266.224498][T15202] RBP: 00007f446272c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2266.232472][T15202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2266.240433][T15202] R13: 00007ffe4d66c0cf R14: 00007f446272c300 R15: 0000000000022000 [ 2266.248406][T15202] 22:52:35 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000040)='sockfs\x00', 0x1015014, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0x10e9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x16b3) 22:52:35 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r2, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000000001000000020000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab88000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:35 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab88000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) [ 2266.493176][T15207] FAULT_INJECTION: forcing a failure. [ 2266.493176][T15207] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2266.519639][T15207] CPU: 0 PID: 15207 Comm: syz-executor.2 Not tainted 6.3.0-rc6-next-20230414-syzkaller-12018-gd3f2cd248191 #0 [ 2266.531331][T15207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2266.541383][T15207] Call Trace: [ 2266.544655][T15207] [ 2266.547579][T15207] dump_stack_lvl+0x136/0x150 [ 2266.552260][T15207] should_fail_ex+0x4a3/0x5b0 [ 2266.556935][T15207] strncpy_from_user+0x38/0x400 [ 2266.561961][T15207] getname_flags.part.0+0x95/0x4f0 [ 2266.567101][T15207] getname+0x92/0xd0 [ 2266.571013][T15207] do_sys_openat2+0xf5/0x4c0 [ 2266.575604][T15207] ? build_open_flags+0x720/0x720 [ 2266.580641][T15207] ? xfd_validate_state+0x5d/0x180 [ 2266.585776][T15207] __x64_sys_openat+0x143/0x1f0 [ 2266.590675][T15207] ? __ia32_sys_open+0x1c0/0x1c0 [ 2266.595638][T15207] ? syscall_enter_from_user_mode+0x26/0x80 [ 2266.601551][T15207] do_syscall_64+0x39/0xb0 [ 2266.605995][T15207] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2266.611903][T15207] RIP: 0033:0x7f08b748c169 [ 2266.616323][T15207] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2266.635941][T15207] RSP: 002b:00007f08b8181168 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 22:52:35 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) (fail_nth: 5) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) [ 2266.644368][T15207] RAX: ffffffffffffffda RBX: 00007f08b75ac050 RCX: 00007f08b748c169 [ 2266.652366][T15207] RDX: 0000000000000040 RSI: 0000000020000300 RDI: ffffffffffffff9c [ 2266.660342][T15207] RBP: 00007f08b81811d0 R08: 0000000000000000 R09: 0000000000000000 [ 2266.668320][T15207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2266.676319][T15207] R13: 00007ffc79e9b7ff R14: 00007f08b8181300 R15: 0000000000022000 [ 2266.684311][T15207] 22:52:35 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(0x0, 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r6 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r6, 0x800) creat(0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce", 0x36}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f3", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r7 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r6, r7, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) (fail_nth: 3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x0, 0x7, 0x0, 0x1}, 0x48) [ 2266.899855][T15217] FAULT_INJECTION: forcing a failure. [ 2266.899855][T15217] name failslab, interval 1, probability 0, space 0, times 0 [ 2266.918095][T15217] CPU: 1 PID: 15217 Comm: syz-executor.3 Not tainted 6.3.0-rc6-next-20230414-syzkaller-12018-gd3f2cd248191 #0 [ 2266.929783][T15217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2266.939843][T15217] Call Trace: [ 2266.943121][T15217] [ 2266.946106][T15217] dump_stack_lvl+0x136/0x150 [ 2266.950792][T15217] should_fail_ex+0x4a3/0x5b0 [ 2266.955498][T15217] should_failslab+0x9/0x20 [ 2266.960013][T15217] __kmem_cache_alloc_node+0x5b/0x320 [ 2266.965387][T15217] ? __iomap_dio_rw+0x22b/0x1c20 [ 2266.970345][T15217] kmalloc_trace+0x26/0xe0 [ 2266.974808][T15217] __iomap_dio_rw+0x22b/0x1c20 [ 2266.979606][T15217] ? __lock_acquire+0x1916/0x5df0 [ 2266.984640][T15217] ? iomap_dio_bio_iter+0x1440/0x1440 [ 2266.990016][T15217] ? unwind_get_return_address+0x55/0xa0 [ 2266.995653][T15217] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2267.001652][T15217] ? lock_sync+0x190/0x190 [ 2267.006065][T15217] ? rcu_is_watching+0x12/0xb0 [ 2267.010832][T15217] ? trace_lock_acquire+0x12d/0x180 [ 2267.016031][T15217] iomap_dio_rw+0x40/0xa0 [ 2267.020397][T15217] ext4_file_read_iter+0x4be/0x690 [ 2267.025514][T15217] direct_splice_read+0x3cc/0x980 [ 2267.030553][T15217] ? fsnotify+0x16e0/0x16e0 [ 2267.035050][T15217] ? vfs_splice_read+0x250/0x250 [ 2267.039995][T15217] ? fsnotify_perm.part.0+0x221/0x610 [ 2267.045363][T15217] ? apparmor_file_permission+0x272/0x4e0 [ 2267.051099][T15217] generic_file_splice_read+0x165/0x1b0 [ 2267.056675][T15217] ? direct_splice_read+0x980/0x980 [ 2267.061885][T15217] vfs_splice_read+0x1bd/0x250 [ 2267.066657][T15217] splice_direct_to_actor+0x2ab/0x8a0 [ 2267.072036][T15217] ? do_splice_direct+0x280/0x280 [ 2267.077067][T15217] ? folio_flags.constprop.0+0x150/0x150 [ 2267.082706][T15217] ? bpf_lsm_file_permission+0x9/0x10 [ 2267.088090][T15217] ? security_file_permission+0xaf/0xd0 [ 2267.093658][T15217] do_splice_direct+0x1ab/0x280 [ 2267.098515][T15217] ? splice_direct_to_actor+0x8a0/0x8a0 [ 2267.104065][T15217] ? preempt_schedule_thunk+0x1a/0x20 [ 2267.109472][T15217] do_sendfile+0xb19/0x12c0 [ 2267.113980][T15217] ? vfs_iocb_iter_write+0x480/0x480 [ 2267.119291][T15217] __x64_sys_sendfile64+0x1d0/0x210 [ 2267.124493][T15217] ? ksys_write+0x1a3/0x250 [ 2267.128994][T15217] ? __ia32_sys_sendfile+0x220/0x220 [ 2267.134271][T15217] ? syscall_enter_from_user_mode+0x26/0x80 [ 2267.140160][T15217] do_syscall_64+0x39/0xb0 [ 2267.144578][T15217] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2267.150470][T15217] RIP: 0033:0x7f25c908c169 [ 2267.154881][T15217] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2267.174481][T15217] RSP: 002b:00007f25c9e21168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2267.182887][T15217] RAX: ffffffffffffffda RBX: 00007f25c91ac050 RCX: 00007f25c908c169 [ 2267.190851][T15217] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000007 [ 2267.198825][T15217] RBP: 00007f25c9e211d0 R08: 0000000000000000 R09: 0000000000000000 [ 2267.206798][T15217] R10: 000000000001dd00 R11: 0000000000000246 R12: 0000000000000001 [ 2267.214759][T15217] R13: 00007ffe2ea49d7f R14: 00007f25c9e21300 R15: 0000000000022000 [ 2267.222731][T15217] 22:52:36 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r4 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x800) creat(0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615", 0xec}, {&(0x7f00000002c0)}, {0x0}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r4, r5, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) (fail_nth: 3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:36 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000040)='sockfs\x00', 0x1015014, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0x10e9e7}, 0x10) dup(r2) r4 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r4, r5, 0x0, 0x16b3) [ 2267.465361][T15227] FAULT_INJECTION: forcing a failure. [ 2267.465361][T15227] name failslab, interval 1, probability 0, space 0, times 0 [ 2267.478427][T15227] CPU: 0 PID: 15227 Comm: syz-executor.5 Not tainted 6.3.0-rc6-next-20230414-syzkaller-12018-gd3f2cd248191 #0 [ 2267.490094][T15227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2267.500149][T15227] Call Trace: [ 2267.503434][T15227] [ 2267.506360][T15227] dump_stack_lvl+0x136/0x150 [ 2267.511054][T15227] should_fail_ex+0x4a3/0x5b0 [ 2267.515753][T15227] should_failslab+0x9/0x20 [ 2267.520265][T15227] kmem_cache_alloc+0x63/0x3b0 [ 2267.525056][T15227] __alloc_file+0x21/0x270 [ 2267.529487][T15227] alloc_empty_file+0x71/0x190 [ 2267.534268][T15227] path_openat+0xe6/0x2750 [ 2267.538712][T15227] ? path_lookupat+0x840/0x840 [ 2267.543504][T15227] do_filp_open+0x1ba/0x410 [ 2267.548026][T15227] ? may_open_dev+0xf0/0xf0 [ 2267.552553][T15227] ? preempt_schedule_common+0x45/0xb0 [ 2267.558042][T15227] ? preempt_schedule_thunk+0x1a/0x20 [ 2267.563449][T15227] ? _raw_spin_unlock+0x3a/0x40 [ 2267.568316][T15227] ? alloc_fd+0x2e4/0x750 [ 2267.572673][T15227] do_sys_openat2+0x16d/0x4c0 [ 2267.577378][T15227] ? build_open_flags+0x720/0x720 [ 2267.582441][T15227] __x64_sys_openat+0x143/0x1f0 [ 2267.587312][T15227] ? __ia32_sys_open+0x1c0/0x1c0 [ 2267.592264][T15227] ? ksys_write+0x1a3/0x250 [ 2267.596794][T15227] ? syscall_enter_from_user_mode+0x26/0x80 [ 2267.602709][T15227] do_syscall_64+0x39/0xb0 [ 2267.607144][T15227] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2267.613055][T15227] RIP: 0033:0x7f4461a8c169 [ 2267.617480][T15227] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2267.637095][T15227] RSP: 002b:00007f446272c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2267.645519][T15227] RAX: ffffffffffffffda RBX: 00007f4461bac120 RCX: 00007f4461a8c169 [ 2267.653502][T15227] RDX: 0000000000000040 RSI: 0000000020000300 RDI: ffffffffffffff9c [ 2267.661481][T15227] RBP: 00007f446272c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2267.669454][T15227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2267.677434][T15227] R13: 00007ffe4d66c0cf R14: 00007f446272c300 R15: 0000000000022000 [ 2267.685425][T15227] 22:52:36 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) (fail_nth: 6) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:36 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r2, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000000001000000020000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab88000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:36 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) [ 2267.900484][T15231] FAULT_INJECTION: forcing a failure. [ 2267.900484][T15231] name failslab, interval 1, probability 0, space 0, times 0 [ 2267.917084][T15231] CPU: 0 PID: 15231 Comm: syz-executor.3 Not tainted 6.3.0-rc6-next-20230414-syzkaller-12018-gd3f2cd248191 #0 [ 2267.928785][T15231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2267.938858][T15231] Call Trace: [ 2267.942143][T15231] [ 2267.945067][T15231] dump_stack_lvl+0x136/0x150 [ 2267.949751][T15231] should_fail_ex+0x4a3/0x5b0 [ 2267.954427][T15231] should_failslab+0x9/0x20 [ 2267.958929][T15231] __kmem_cache_alloc_node+0x5b/0x320 [ 2267.964336][T15231] ? ext4_find_extent+0xa3c/0xd20 [ 2267.969410][T15231] ? ext4_find_extent+0xa3c/0xd20 [ 2267.974447][T15231] __kmalloc+0x4e/0x190 [ 2267.978595][T15231] ? is_dynamic_key.part.0+0x1f0/0x1f0 [ 2267.984055][T15231] ext4_find_extent+0xa3c/0xd20 [ 2267.988928][T15231] ext4_ext_map_blocks+0x1e1/0x5be0 [ 2267.994143][T15231] ? __lock_acquire+0x1916/0x5df0 [ 2267.999185][T15231] ? is_bpf_text_address+0x7b/0x1b0 [ 2268.004408][T15231] ? ext4_ext_release+0x10/0x10 [ 2268.009264][T15231] ? find_held_lock+0x2d/0x110 [ 2268.014031][T15231] ? __down_read_common+0x884/0xf30 [ 2268.019230][T15231] ? down_write_nested+0x200/0x200 [ 2268.024341][T15231] ? lock_sync+0x190/0x190 [ 2268.028754][T15231] ? rcu_is_watching+0x12/0xb0 [ 2268.033521][T15231] ? trace_lock_acquire+0x12d/0x180 [ 2268.038737][T15231] ? ext4_map_blocks+0x267/0x18d0 [ 2268.043756][T15231] ? lock_acquire+0x32/0xc0 [ 2268.048252][T15231] ? ext4_map_blocks+0x267/0x18d0 [ 2268.053274][T15231] ext4_map_blocks+0xa7f/0x18d0 [ 2268.058125][T15231] ? ext4_issue_zeroout+0x200/0x200 [ 2268.063318][T15231] ? kasan_save_stack+0x32/0x40 [ 2268.068164][T15231] ? kasan_save_stack+0x22/0x40 [ 2268.073013][T15231] ? kasan_set_track+0x25/0x30 [ 2268.077772][T15231] ? __kasan_kmalloc+0xa2/0xb0 [ 2268.082534][T15231] ? __iomap_dio_rw+0x22b/0x1c20 [ 2268.087466][T15231] ? iomap_dio_rw+0x40/0xa0 [ 2268.091963][T15231] ? generic_file_splice_read+0x165/0x1b0 [ 2268.097679][T15231] ? vfs_splice_read+0x1bd/0x250 [ 2268.102613][T15231] ? splice_direct_to_actor+0x2ab/0x8a0 [ 2268.108154][T15231] ? do_splice_direct+0x1ab/0x280 [ 2268.113182][T15231] ? do_sendfile+0xb19/0x12c0 [ 2268.117865][T15231] ? __x64_sys_sendfile64+0x1d0/0x210 [ 2268.123229][T15231] ? do_syscall_64+0x39/0xb0 [ 2268.127841][T15231] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2268.133925][T15231] ext4_iomap_begin+0x6c9/0x7a0 [ 2268.138777][T15231] ? ext4_iomap_begin_report+0x610/0x610 [ 2268.144421][T15231] ? ext4_iomap_begin_report+0x610/0x610 [ 2268.150057][T15231] iomap_iter+0x446/0x10e0 [ 2268.154472][T15231] ? filemap_check_errors+0xa9/0x150 [ 2268.159757][T15231] __iomap_dio_rw+0x72b/0x1c20 [ 2268.164537][T15231] ? iomap_dio_bio_iter+0x1440/0x1440 [ 2268.169906][T15231] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2268.175900][T15231] ? lock_sync+0x190/0x190 [ 2268.180314][T15231] ? rcu_is_watching+0x12/0xb0 [ 2268.185079][T15231] ? trace_lock_acquire+0x12d/0x180 [ 2268.190273][T15231] iomap_dio_rw+0x40/0xa0 [ 2268.194604][T15231] ext4_file_read_iter+0x4be/0x690 [ 2268.199720][T15231] direct_splice_read+0x3cc/0x980 [ 2268.204748][T15231] ? fsnotify+0x16e0/0x16e0 [ 2268.209251][T15231] ? vfs_splice_read+0x250/0x250 [ 2268.214196][T15231] ? fsnotify_perm.part.0+0x221/0x610 [ 2268.219563][T15231] ? apparmor_file_permission+0x272/0x4e0 [ 2268.225288][T15231] generic_file_splice_read+0x165/0x1b0 [ 2268.230833][T15231] ? direct_splice_read+0x980/0x980 [ 2268.236030][T15231] vfs_splice_read+0x1bd/0x250 [ 2268.240795][T15231] splice_direct_to_actor+0x2ab/0x8a0 [ 2268.246184][T15231] ? do_splice_direct+0x280/0x280 [ 2268.251244][T15231] ? folio_flags.constprop.0+0x150/0x150 [ 2268.256889][T15231] ? bpf_lsm_file_permission+0x9/0x10 [ 2268.262307][T15231] ? security_file_permission+0xaf/0xd0 [ 2268.267862][T15231] do_splice_direct+0x1ab/0x280 [ 2268.272718][T15231] ? splice_direct_to_actor+0x8a0/0x8a0 [ 2268.278272][T15231] do_sendfile+0xb19/0x12c0 [ 2268.282803][T15231] ? vfs_iocb_iter_write+0x480/0x480 [ 2268.288106][T15231] __x64_sys_sendfile64+0x1d0/0x210 [ 2268.293317][T15231] ? ksys_write+0x1a3/0x250 [ 2268.297827][T15231] ? __ia32_sys_sendfile+0x220/0x220 [ 2268.303177][T15231] ? syscall_enter_from_user_mode+0x26/0x80 [ 2268.309079][T15231] do_syscall_64+0x39/0xb0 [ 2268.313511][T15231] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2268.319408][T15231] RIP: 0033:0x7f25c908c169 [ 2268.323821][T15231] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2268.343429][T15231] RSP: 002b:00007f25c9e42168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2268.351851][T15231] RAX: ffffffffffffffda RBX: 00007f25c91abf80 RCX: 00007f25c908c169 [ 2268.359826][T15231] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000007 [ 2268.367793][T15231] RBP: 00007f25c9e421d0 R08: 0000000000000000 R09: 0000000000000000 [ 2268.375759][T15231] R10: 000000000001dd00 R11: 0000000000000246 R12: 0000000000000001 [ 2268.383724][T15231] R13: 00007ffe2ea49d7f R14: 00007f25c9e42300 R15: 0000000000022000 [ 2268.391702][T15231] 22:52:37 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000040)='sockfs\x00', 0x1015014, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r2, 0x1ff, 0x1, 0x10e9e7}, 0x10) r3 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r3, r4, 0x0, 0x16b3) [ 2268.526807][T15236] FAULT_INJECTION: forcing a failure. [ 2268.526807][T15236] name failslab, interval 1, probability 0, space 0, times 0 [ 2268.565787][T15236] CPU: 1 PID: 15236 Comm: syz-executor.2 Not tainted 6.3.0-rc6-next-20230414-syzkaller-12018-gd3f2cd248191 #0 [ 2268.577479][T15236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2268.587566][T15236] Call Trace: [ 2268.590898][T15236] [ 2268.593869][T15236] dump_stack_lvl+0x136/0x150 [ 2268.598592][T15236] should_fail_ex+0x4a3/0x5b0 [ 2268.603305][T15236] should_failslab+0x9/0x20 [ 2268.607829][T15236] kmem_cache_alloc+0x63/0x3b0 [ 2268.612601][T15236] __alloc_file+0x21/0x270 [ 2268.617012][T15236] alloc_empty_file+0x71/0x190 [ 2268.621771][T15236] path_openat+0xe6/0x2750 [ 2268.626192][T15236] ? path_lookupat+0x840/0x840 [ 2268.630957][T15236] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 2268.636590][T15236] do_filp_open+0x1ba/0x410 [ 2268.641088][T15236] ? may_open_dev+0xf0/0xf0 [ 2268.645589][T15236] ? preempt_schedule_common+0x45/0xb0 [ 2268.651047][T15236] ? preempt_schedule_thunk+0x1a/0x20 [ 2268.656420][T15236] ? _raw_spin_unlock+0x3a/0x40 [ 2268.661263][T15236] ? alloc_fd+0x2e4/0x750 [ 2268.665596][T15236] do_sys_openat2+0x16d/0x4c0 [ 2268.670275][T15236] ? build_open_flags+0x720/0x720 [ 2268.675300][T15236] ? xfd_validate_state+0x5d/0x180 [ 2268.680407][T15236] __x64_sys_openat+0x143/0x1f0 [ 2268.685255][T15236] ? __ia32_sys_open+0x1c0/0x1c0 [ 2268.690191][T15236] ? syscall_enter_from_user_mode+0x26/0x80 [ 2268.696080][T15236] do_syscall_64+0x39/0xb0 [ 2268.700490][T15236] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2268.706378][T15236] RIP: 0033:0x7f08b748c169 [ 2268.710785][T15236] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2268.730385][T15236] RSP: 002b:00007f08b8181168 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2268.738787][T15236] RAX: ffffffffffffffda RBX: 00007f08b75ac050 RCX: 00007f08b748c169 [ 2268.746748][T15236] RDX: 0000000000000040 RSI: 0000000020000300 RDI: ffffffffffffff9c [ 2268.754706][T15236] RBP: 00007f08b81811d0 R08: 0000000000000000 R09: 0000000000000000 [ 2268.762665][T15236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 22:52:37 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000040)='sockfs\x00', 0x1015014, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r1}, 0xc) r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x0, 0x2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r2, r3, 0x0, 0x16b3) [ 2268.770622][T15236] R13: 00007ffc79e9b7ff R14: 00007f08b8181300 R15: 0000000000022000 [ 2268.778595][T15236] 22:52:37 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(0x0, 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r6 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r6, 0x800) creat(0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce", 0x36}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f3", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r7 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r6, r7, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) (fail_nth: 4) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x0, 0x7, 0x0, 0x1}, 0x48) 22:52:37 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r2, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab88000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:37 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) (fail_nth: 7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:37 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r4 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x800) creat(0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615", 0xec}, {&(0x7f00000002c0)}, {0x0}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r4, r5, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) (fail_nth: 4) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:37 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000040)='sockfs\x00', 0x1015014, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r1, r2, 0x0, 0x16b3) 22:52:37 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) [ 2269.061531][ T27] kauditd_printk_skb: 36 callbacks suppressed [ 2269.061546][ T27] audit: type=1804 audit(1681685557.780:15322): pid=15258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir1068322331/syzkaller.mpLRwx/1882/bus" dev="sda1" ino=1168 res=1 errno=0 [ 2269.106644][T15258] FAULT_INJECTION: forcing a failure. [ 2269.106644][T15258] name failslab, interval 1, probability 0, space 0, times 0 [ 2269.125058][T15258] CPU: 1 PID: 15258 Comm: syz-executor.5 Not tainted 6.3.0-rc6-next-20230414-syzkaller-12018-gd3f2cd248191 #0 [ 2269.136728][T15258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2269.146788][T15258] Call Trace: [ 2269.150060][T15258] [ 2269.152983][T15258] dump_stack_lvl+0x136/0x150 [ 2269.157669][T15258] should_fail_ex+0x4a3/0x5b0 [ 2269.162369][T15258] should_failslab+0x9/0x20 [ 2269.166869][T15258] kmem_cache_alloc+0x63/0x3b0 [ 2269.171635][T15258] security_file_alloc+0x38/0x170 [ 2269.176660][T15258] __alloc_file+0xd9/0x270 [ 2269.181086][T15258] alloc_empty_file+0x71/0x190 [ 2269.185874][T15258] path_openat+0xe6/0x2750 [ 2269.190295][T15258] ? path_lookupat+0x840/0x840 [ 2269.195083][T15258] do_filp_open+0x1ba/0x410 [ 2269.199580][T15258] ? may_open_dev+0xf0/0xf0 [ 2269.204080][T15258] ? find_held_lock+0x2d/0x110 [ 2269.208853][T15258] ? alloc_fd+0x2e4/0x750 [ 2269.213195][T15258] ? do_raw_spin_lock+0x124/0x2b0 [ 2269.218246][T15258] ? spin_bug+0x1c0/0x1c0 [ 2269.222579][T15258] ? _raw_spin_unlock+0x28/0x40 [ 2269.227517][T15258] ? alloc_fd+0x2e4/0x750 [ 2269.231881][T15258] do_sys_openat2+0x16d/0x4c0 [ 2269.236556][T15258] ? build_open_flags+0x720/0x720 [ 2269.241584][T15258] ? xfd_validate_state+0x5d/0x180 [ 2269.246695][T15258] __x64_sys_openat+0x143/0x1f0 [ 2269.251545][T15258] ? __ia32_sys_open+0x1c0/0x1c0 [ 2269.256486][T15258] ? syscall_enter_from_user_mode+0x26/0x80 [ 2269.262397][T15258] do_syscall_64+0x39/0xb0 [ 2269.266821][T15258] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2269.272711][T15258] RIP: 0033:0x7f4461a8c169 [ 2269.277115][T15258] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2269.296726][T15258] RSP: 002b:00007f446272c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2269.305171][T15258] RAX: ffffffffffffffda RBX: 00007f4461bac120 RCX: 00007f4461a8c169 [ 2269.313136][T15258] RDX: 0000000000000040 RSI: 0000000020000300 RDI: ffffffffffffff9c [ 2269.321106][T15258] RBP: 00007f446272c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2269.329077][T15258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2269.337057][T15258] R13: 00007ffe4d66c0cf R14: 00007f446272c300 R15: 0000000000022000 [ 2269.345031][T15258] [ 2269.449364][ T27] audit: type=1800 audit(1681685557.810:15323): pid=15258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1168 res=0 errno=0 [ 2269.473553][ T27] audit: type=1804 audit(1681685558.150:15324): pid=15262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir4110182140/syzkaller.hTdUky/1483/bus" dev="sda1" ino=1188 res=1 errno=0 [ 2269.539430][T15260] FAULT_INJECTION: forcing a failure. [ 2269.539430][T15260] name failslab, interval 1, probability 0, space 0, times 0 [ 2269.552595][T15260] CPU: 1 PID: 15260 Comm: syz-executor.3 Not tainted 6.3.0-rc6-next-20230414-syzkaller-12018-gd3f2cd248191 #0 [ 2269.564235][T15260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2269.574295][T15260] Call Trace: [ 2269.577578][T15260] [ 2269.580500][T15260] dump_stack_lvl+0x136/0x150 [ 2269.585200][T15260] should_fail_ex+0x4a3/0x5b0 [ 2269.589870][T15260] should_failslab+0x9/0x20 [ 2269.594367][T15260] kmem_cache_alloc+0x63/0x3b0 [ 2269.599131][T15260] __es_insert_extent+0x39b/0x13e0 [ 2269.604260][T15260] ? do_raw_write_lock+0x11e/0x3b0 [ 2269.609387][T15260] ? do_raw_read_unlock+0xe0/0xe0 [ 2269.614438][T15260] ? lock_acquire+0x32/0xc0 [ 2269.618966][T15260] ext4_es_insert_extent+0x302/0xbb0 [ 2269.624282][T15260] ? ext4_es_scan_clu+0x2e0/0x2e0 [ 2269.629331][T15260] ? lock_downgrade+0x690/0x690 [ 2269.634208][T15260] ? __ext4_handle_dirty_metadata+0x8e0/0x8e0 [ 2269.640382][T15260] ? __es_find_extent_range+0x197/0x4b0 [ 2269.645950][T15260] ? ext4_es_find_extent_range+0x138/0x480 [ 2269.651785][T15260] ? __ext4_handle_dirty_metadata+0x8e0/0x8e0 [ 2269.657870][T15260] ? rcu_is_watching+0x12/0xb0 [ 2269.662662][T15260] ext4_ext_map_blocks+0x1a91/0x5be0 [ 2269.667980][T15260] ? __lock_acquire+0x1916/0x5df0 [ 2269.673035][T15260] ? ext4_ext_release+0x10/0x10 [ 2269.677902][T15260] ? io_schedule_timeout+0x150/0x150 [ 2269.683225][T15260] ? mark_held_locks+0x9f/0xe0 [ 2269.688012][T15260] ? __down_read_common+0x884/0xf30 [ 2269.693228][T15260] ? down_write_nested+0x200/0x200 [ 2269.698357][T15260] ? lock_sync+0x190/0x190 [ 2269.702790][T15260] ? rcu_is_watching+0x12/0xb0 [ 2269.707574][T15260] ? trace_lock_acquire+0x12d/0x180 [ 2269.712787][T15260] ? ext4_map_blocks+0x267/0x18d0 [ 2269.717825][T15260] ? lock_acquire+0x32/0xc0 [ 2269.722340][T15260] ? ext4_map_blocks+0x267/0x18d0 [ 2269.727389][T15260] ext4_map_blocks+0xa7f/0x18d0 [ 2269.732260][T15260] ? ext4_issue_zeroout+0x200/0x200 [ 2269.737475][T15260] ? kasan_save_stack+0x32/0x40 [ 2269.742349][T15260] ? kasan_save_stack+0x22/0x40 [ 2269.747232][T15260] ? kasan_set_track+0x25/0x30 [ 2269.752012][T15260] ? __kasan_kmalloc+0xa2/0xb0 [ 2269.756790][T15260] ? __iomap_dio_rw+0x22b/0x1c20 [ 2269.761738][T15260] ? iomap_dio_rw+0x40/0xa0 [ 2269.766252][T15260] ? generic_file_splice_read+0x165/0x1b0 [ 2269.771990][T15260] ? vfs_splice_read+0x1bd/0x250 [ 2269.776948][T15260] ? splice_direct_to_actor+0x2ab/0x8a0 [ 2269.782513][T15260] ? do_splice_direct+0x1ab/0x280 [ 2269.787571][T15260] ? do_sendfile+0xb19/0x12c0 [ 2269.792281][T15260] ? __x64_sys_sendfile64+0x1d0/0x210 [ 2269.797683][T15260] ? do_syscall_64+0x39/0xb0 [ 2269.802291][T15260] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2269.808384][T15260] ext4_iomap_begin+0x6c9/0x7a0 [ 2269.813262][T15260] ? ext4_iomap_begin_report+0x610/0x610 [ 2269.818924][T15260] ? ext4_iomap_begin_report+0x610/0x610 [ 2269.824572][T15260] iomap_iter+0x446/0x10e0 [ 2269.829000][T15260] ? filemap_check_errors+0xa9/0x150 [ 2269.834306][T15260] __iomap_dio_rw+0x72b/0x1c20 [ 2269.839101][T15260] ? iomap_dio_bio_iter+0x1440/0x1440 [ 2269.844490][T15260] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2269.850516][T15260] ? lock_sync+0x190/0x190 [ 2269.854964][T15260] ? rcu_is_watching+0x12/0xb0 [ 2269.859748][T15260] ? trace_lock_acquire+0x12d/0x180 [ 2269.864968][T15260] iomap_dio_rw+0x40/0xa0 [ 2269.869316][T15260] ext4_file_read_iter+0x4be/0x690 [ 2269.874458][T15260] direct_splice_read+0x3cc/0x980 [ 2269.879506][T15260] ? fsnotify+0x16e0/0x16e0 [ 2269.884038][T15260] ? vfs_splice_read+0x250/0x250 [ 2269.889007][T15260] ? check_slab+0x110/0x110 [ 2269.893522][T15260] ? lock_acquire+0x32/0xc0 [ 2269.898041][T15260] ? check_slab+0x110/0x110 [ 2269.902563][T15260] ? fsnotify_perm.part.0+0x221/0x610 [ 2269.907953][T15260] ? apparmor_file_permission+0x272/0x4e0 [ 2269.913702][T15260] generic_file_splice_read+0x165/0x1b0 [ 2269.919273][T15260] ? direct_splice_read+0x980/0x980 [ 2269.924512][T15260] vfs_splice_read+0x1bd/0x250 [ 2269.929298][T15260] splice_direct_to_actor+0x2ab/0x8a0 [ 2269.934696][T15260] ? do_splice_direct+0x280/0x280 [ 2269.939747][T15260] ? folio_flags.constprop.0+0x150/0x150 [ 2269.945398][T15260] ? bpf_lsm_file_permission+0x9/0x10 [ 2269.950786][T15260] ? security_file_permission+0xaf/0xd0 [ 2269.956361][T15260] do_splice_direct+0x1ab/0x280 [ 2269.961235][T15260] ? splice_direct_to_actor+0x8a0/0x8a0 [ 2269.966842][T15260] do_sendfile+0xb19/0x12c0 [ 2269.971376][T15260] ? vfs_iocb_iter_write+0x480/0x480 [ 2269.976693][T15260] __x64_sys_sendfile64+0x1d0/0x210 [ 2269.981903][T15260] ? ksys_write+0x1a3/0x250 [ 2269.986426][T15260] ? __ia32_sys_sendfile+0x220/0x220 [ 2269.991723][T15260] ? syscall_enter_from_user_mode+0x26/0x80 [ 2269.997652][T15260] do_syscall_64+0x39/0xb0 [ 2270.002098][T15260] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2270.008036][T15260] RIP: 0033:0x7f25c908c169 [ 2270.012464][T15260] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2270.032086][T15260] RSP: 002b:00007f25c9e21168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2270.040512][T15260] RAX: ffffffffffffffda RBX: 00007f25c91ac050 RCX: 00007f25c908c169 [ 2270.048490][T15260] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 2270.056467][T15260] RBP: 00007f25c9e211d0 R08: 0000000000000000 R09: 0000000000000000 [ 2270.064447][T15260] R10: 000000000001dd00 R11: 0000000000000246 R12: 0000000000000001 [ 2270.072420][T15260] R13: 00007ffe2ea49d7f R14: 00007f25c9e21300 R15: 0000000000022000 [ 2270.080414][T15260] 22:52:38 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000040)='sockfs\x00', 0x1015014, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r1, r2, 0x0, 0x16b3) 22:52:39 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000040)='sockfs\x00', 0x1015014, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r1, r2, 0x0, 0x16b3) [ 2270.282555][ T27] audit: type=1800 audit(1681685558.150:15325): pid=15262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1188 res=0 errno=0 22:52:39 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r2, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab88000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:39 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r4 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x800) creat(0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615", 0xec}, {&(0x7f00000002c0)}, {0x0}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r4, r5, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) (fail_nth: 5) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) [ 2270.317996][ T27] audit: type=1804 audit(1681685558.220:15326): pid=15259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3160652865/syzkaller.nVld8z/1963/bus" dev="sda1" ino=1189 res=1 errno=0 22:52:39 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000040)='sockfs\x00', 0x1015014, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r1, r2, 0x0, 0x16b3) [ 2270.379455][ T27] audit: type=1800 audit(1681685558.220:15327): pid=15259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1189 res=0 errno=0 [ 2270.406044][ T27] audit: type=1804 audit(1681685558.230:15328): pid=15269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1892171996/syzkaller.Q2741I/2001/bus" dev="sda1" ino=1191 res=1 errno=0 [ 2270.433770][ T27] audit: type=1800 audit(1681685558.230:15329): pid=15269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1191 res=0 errno=0 22:52:39 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) [ 2270.456720][ T27] audit: type=1804 audit(1681685558.240:15331): pid=15267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir895531445/syzkaller.RpEK9g/1517/bus" dev="sda1" ino=1192 res=1 errno=0 [ 2270.499752][ T27] audit: type=1800 audit(1681685558.240:15332): pid=15267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1192 res=0 errno=0 22:52:39 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(0x0, 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r6 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r6, 0x800) creat(0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce", 0x36}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f3", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r7 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r6, r7, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) (fail_nth: 5) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x0, 0x7, 0x0, 0x1}, 0x48) 22:52:39 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000040)='sockfs\x00', 0x1015014, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r1, 0x0, 0x16b3) 22:52:39 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) [ 2270.695173][T15290] FAULT_INJECTION: forcing a failure. [ 2270.695173][T15290] name failslab, interval 1, probability 0, space 0, times 0 [ 2270.708196][T15290] CPU: 0 PID: 15290 Comm: syz-executor.2 Not tainted 6.3.0-rc6-next-20230414-syzkaller-12018-gd3f2cd248191 #0 [ 2270.719877][T15290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2270.729958][T15290] Call Trace: [ 2270.733244][T15290] [ 2270.736214][T15290] dump_stack_lvl+0x136/0x150 [ 2270.740896][T15290] should_fail_ex+0x4a3/0x5b0 [ 2270.745579][T15290] should_failslab+0x9/0x20 [ 2270.750098][T15290] __kmem_cache_alloc_node+0x5b/0x320 [ 2270.755471][T15290] ? tomoyo_realpath_from_path+0xc3/0x600 [ 2270.761204][T15290] ? tomoyo_realpath_from_path+0xc3/0x600 [ 2270.766931][T15290] __kmalloc+0x4e/0x190 [ 2270.771093][T15290] ? rcu_is_watching+0x12/0xb0 [ 2270.775865][T15290] tomoyo_realpath_from_path+0xc3/0x600 [ 2270.781436][T15290] tomoyo_check_open_permission+0x29a/0x3a0 [ 2270.787373][T15290] ? tomoyo_path_number_perm+0x570/0x570 [ 2270.793058][T15290] ? hook_path_unlink+0x520/0x520 [ 2270.798089][T15290] ? lock_downgrade+0x690/0x690 [ 2270.802942][T15290] ? spin_bug+0x1c0/0x1c0 [ 2270.807274][T15290] tomoyo_file_open+0xa1/0xc0 [ 2270.811957][T15290] security_file_open+0x49/0xb0 [ 2270.816851][T15290] do_dentry_open+0x575/0x13f0 [ 2270.821648][T15290] ? may_open+0x1f6/0x420 [ 2270.826002][T15290] path_openat+0x1baa/0x2750 [ 2270.830613][T15290] ? path_lookupat+0x840/0x840 [ 2270.835385][T15290] do_filp_open+0x1ba/0x410 [ 2270.839893][T15290] ? may_open_dev+0xf0/0xf0 [ 2270.844393][T15290] ? find_held_lock+0x2d/0x110 [ 2270.849157][T15290] ? do_raw_spin_lock+0x124/0x2b0 [ 2270.854183][T15290] ? spin_bug+0x1c0/0x1c0 [ 2270.858529][T15290] ? _raw_spin_unlock+0x28/0x40 [ 2270.863390][T15290] ? alloc_fd+0x2e4/0x750 [ 2270.867732][T15290] do_sys_openat2+0x16d/0x4c0 [ 2270.872411][T15290] ? build_open_flags+0x720/0x720 [ 2270.877463][T15290] __x64_sys_openat+0x143/0x1f0 [ 2270.882314][T15290] ? __ia32_sys_open+0x1c0/0x1c0 [ 2270.887252][T15290] ? ksys_write+0x1a3/0x250 [ 2270.891764][T15290] ? syscall_enter_from_user_mode+0x26/0x80 [ 2270.897668][T15290] do_syscall_64+0x39/0xb0 [ 2270.902098][T15290] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2270.908015][T15290] RIP: 0033:0x7f08b748c169 [ 2270.912424][T15290] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2270.932030][T15290] RSP: 002b:00007f08b8181168 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2270.940449][T15290] RAX: ffffffffffffffda RBX: 00007f08b75ac050 RCX: 00007f08b748c169 [ 2270.948432][T15290] RDX: 0000000000000040 RSI: 0000000020000300 RDI: ffffffffffffff9c [ 2270.956396][T15290] RBP: 00007f08b81811d0 R08: 0000000000000000 R09: 0000000000000000 [ 2270.964364][T15290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2270.972330][T15290] R13: 00007ffc79e9b7ff R14: 00007f08b8181300 R15: 0000000000022000 [ 2270.980323][T15290] [ 2270.997957][T15292] FAULT_INJECTION: forcing a failure. [ 2270.997957][T15292] name failslab, interval 1, probability 0, space 0, times 0 [ 2271.011630][T15292] CPU: 1 PID: 15292 Comm: syz-executor.5 Not tainted 6.3.0-rc6-next-20230414-syzkaller-12018-gd3f2cd248191 #0 [ 2271.023296][T15292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2271.033347][T15292] Call Trace: [ 2271.036618][T15292] [ 2271.039544][T15292] dump_stack_lvl+0x136/0x150 [ 2271.044227][T15292] should_fail_ex+0x4a3/0x5b0 [ 2271.048908][T15292] should_failslab+0x9/0x20 [ 2271.053406][T15292] __kmem_cache_alloc_node+0x5b/0x320 [ 2271.058774][T15292] ? tomoyo_realpath_from_path+0xc3/0x600 [ 2271.064494][T15292] ? tomoyo_realpath_from_path+0xc3/0x600 [ 2271.070260][T15292] __kmalloc+0x4e/0x190 [ 2271.074415][T15292] ? rcu_is_watching+0x12/0xb0 [ 2271.079187][T15292] tomoyo_realpath_from_path+0xc3/0x600 [ 2271.084743][T15292] tomoyo_check_open_permission+0x29a/0x3a0 [ 2271.090638][T15292] ? tomoyo_path_number_perm+0x570/0x570 [ 2271.096284][T15292] ? hook_path_unlink+0x520/0x520 [ 2271.101307][T15292] ? lock_downgrade+0x690/0x690 [ 2271.106156][T15292] ? spin_bug+0x1c0/0x1c0 [ 2271.110488][T15292] tomoyo_file_open+0xa1/0xc0 [ 2271.115171][T15292] security_file_open+0x49/0xb0 [ 2271.120034][T15292] do_dentry_open+0x575/0x13f0 [ 2271.124825][T15292] ? may_open+0x1f6/0x420 [ 2271.129170][T15292] path_openat+0x1baa/0x2750 [ 2271.133761][T15292] ? path_lookupat+0x840/0x840 [ 2271.138522][T15292] do_filp_open+0x1ba/0x410 [ 2271.143020][T15292] ? may_open_dev+0xf0/0xf0 [ 2271.147514][T15292] ? find_held_lock+0x2d/0x110 [ 2271.152275][T15292] ? do_raw_spin_lock+0x124/0x2b0 [ 2271.157292][T15292] ? spin_bug+0x1c0/0x1c0 [ 2271.161618][T15292] ? _raw_spin_unlock+0x28/0x40 [ 2271.166484][T15292] ? alloc_fd+0x2e4/0x750 [ 2271.170816][T15292] do_sys_openat2+0x16d/0x4c0 [ 2271.175488][T15292] ? build_open_flags+0x720/0x720 [ 2271.180513][T15292] __x64_sys_openat+0x143/0x1f0 [ 2271.185370][T15292] ? __ia32_sys_open+0x1c0/0x1c0 [ 2271.190353][T15292] ? ksys_write+0x1a3/0x250 [ 2271.194854][T15292] ? syscall_enter_from_user_mode+0x26/0x80 [ 2271.200749][T15292] do_syscall_64+0x39/0xb0 [ 2271.205160][T15292] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2271.211046][T15292] RIP: 0033:0x7f4461a8c169 [ 2271.215451][T15292] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2271.235045][T15292] RSP: 002b:00007f446274d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2271.243447][T15292] RAX: ffffffffffffffda RBX: 00007f4461bac050 RCX: 00007f4461a8c169 [ 2271.251407][T15292] RDX: 0000000000000040 RSI: 0000000020000300 RDI: ffffffffffffff9c [ 2271.259366][T15292] RBP: 00007f446274d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2271.267344][T15292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2271.275303][T15292] R13: 00007ffe4d66c0cf R14: 00007f446274d300 R15: 0000000000022000 [ 2271.283272][T15292] [ 2271.292103][T15292] ERROR: Out of memory at tomoyo_realpath_from_path. 22:52:40 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000040)='sockfs\x00', 0x1015014, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r1, 0x0, 0x16b3) [ 2271.332660][T15290] ERROR: Out of memory at tomoyo_realpath_from_path. 22:52:40 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:40 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r2, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab88000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:40 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000040)='sockfs\x00', 0x1015014, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r1, 0x0, 0x16b3) 22:52:40 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r4 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x800) creat(0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615", 0xec}, {&(0x7f00000002c0)}, {0x0}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r4, r5, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) (fail_nth: 6) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:40 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(0x0, 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r6 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r6, 0x800) creat(0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce", 0x36}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f3", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r7 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r6, r7, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) (fail_nth: 6) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x0, 0x7, 0x0, 0x1}, 0x48) 22:52:40 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000040)='sockfs\x00', 0x1015014, 0x0) r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r1, 0x0, 0x16b3) [ 2272.022498][T15324] FAULT_INJECTION: forcing a failure. [ 2272.022498][T15324] name failslab, interval 1, probability 0, space 0, times 0 [ 2272.036588][T15324] CPU: 0 PID: 15324 Comm: syz-executor.5 Not tainted 6.3.0-rc6-next-20230414-syzkaller-12018-gd3f2cd248191 #0 [ 2272.048268][T15324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2272.058352][T15324] Call Trace: [ 2272.061649][T15324] [ 2272.064589][T15324] dump_stack_lvl+0x136/0x150 [ 2272.069299][T15324] should_fail_ex+0x4a3/0x5b0 [ 2272.073996][T15324] should_failslab+0x9/0x20 [ 2272.078510][T15324] kmem_cache_alloc+0x63/0x3b0 [ 2272.083296][T15324] security_file_alloc+0x38/0x170 [ 2272.088345][T15324] __alloc_file+0xd9/0x270 [ 2272.092775][T15324] alloc_empty_file+0x71/0x190 [ 2272.097554][T15324] path_openat+0xe6/0x2750 [ 2272.102006][T15324] ? path_lookupat+0x840/0x840 [ 2272.106796][T15324] do_filp_open+0x1ba/0x410 [ 2272.111315][T15324] ? may_open_dev+0xf0/0xf0 [ 2272.115832][T15324] ? find_held_lock+0x2d/0x110 [ 2272.120614][T15324] ? alloc_fd+0x2e4/0x750 [ 2272.124965][T15324] ? do_raw_spin_lock+0x124/0x2b0 [ 2272.130012][T15324] ? spin_bug+0x1c0/0x1c0 [ 2272.134367][T15324] ? _raw_spin_unlock+0x28/0x40 [ 2272.139231][T15324] ? alloc_fd+0x2e4/0x750 [ 2272.143593][T15324] do_sys_openat2+0x16d/0x4c0 [ 2272.148290][T15324] ? build_open_flags+0x720/0x720 [ 2272.153343][T15324] __x64_sys_openat+0x143/0x1f0 [ 2272.158214][T15324] ? __ia32_sys_open+0x1c0/0x1c0 [ 2272.163169][T15324] ? ksys_write+0x1a3/0x250 [ 2272.167694][T15324] ? syscall_enter_from_user_mode+0x26/0x80 [ 2272.173607][T15324] do_syscall_64+0x39/0xb0 [ 2272.178039][T15324] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2272.183970][T15324] RIP: 0033:0x7f4461a8c169 [ 2272.188424][T15324] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2272.208051][T15324] RSP: 002b:00007f446272c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2272.216480][T15324] RAX: ffffffffffffffda RBX: 00007f4461bac120 RCX: 00007f4461a8c169 [ 2272.224463][T15324] RDX: 0000000000000040 RSI: 0000000020000300 RDI: ffffffffffffff9c [ 2272.232442][T15324] RBP: 00007f446272c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2272.240418][T15324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2272.248396][T15324] R13: 00007ffe4d66c0cf R14: 00007f446272c300 R15: 0000000000022000 [ 2272.256386][T15324] 22:52:41 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r1, 0x0, 0x16b3) [ 2272.290718][T15319] FAULT_INJECTION: forcing a failure. [ 2272.290718][T15319] name failslab, interval 1, probability 0, space 0, times 0 22:52:41 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) [ 2272.392819][T15319] CPU: 0 PID: 15319 Comm: syz-executor.2 Not tainted 6.3.0-rc6-next-20230414-syzkaller-12018-gd3f2cd248191 #0 [ 2272.404502][T15319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2272.414550][T15319] Call Trace: [ 2272.417821][T15319] [ 2272.420741][T15319] dump_stack_lvl+0x136/0x150 [ 2272.425441][T15319] should_fail_ex+0x4a3/0x5b0 [ 2272.430116][T15319] should_failslab+0x9/0x20 [ 2272.434608][T15319] __kmem_cache_alloc_node+0x5b/0x320 [ 2272.439982][T15319] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 2272.445355][T15319] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 2272.450737][T15319] __kmalloc+0x4e/0x190 [ 2272.454901][T15319] ? __kmem_cache_alloc_node+0x1b0/0x320 [ 2272.460530][T15319] tomoyo_encode2.part.0+0xe9/0x3a0 [ 2272.465726][T15319] ? tomoyo_realpath_from_path+0xc3/0x600 [ 2272.471441][T15319] ? rcu_is_watching+0x12/0xb0 [ 2272.476219][T15319] tomoyo_encode+0x2c/0x50 [ 2272.480673][T15319] tomoyo_realpath_from_path+0x185/0x600 [ 2272.486340][T15319] tomoyo_check_open_permission+0x29a/0x3a0 [ 2272.492244][T15319] ? tomoyo_path_number_perm+0x570/0x570 [ 2272.497892][T15319] ? hook_path_unlink+0x520/0x520 [ 2272.502923][T15319] ? lock_downgrade+0x690/0x690 [ 2272.507797][T15319] ? spin_bug+0x1c0/0x1c0 [ 2272.512152][T15319] tomoyo_file_open+0xa1/0xc0 [ 2272.516850][T15319] security_file_open+0x49/0xb0 [ 2272.521723][T15319] do_dentry_open+0x575/0x13f0 [ 2272.526509][T15319] ? may_open+0x1f6/0x420 [ 2272.530850][T15319] path_openat+0x1baa/0x2750 [ 2272.535462][T15319] ? trace_lock_acquire+0x12d/0x180 [ 2272.540674][T15319] ? path_lookupat+0x840/0x840 [ 2272.545458][T15319] do_filp_open+0x1ba/0x410 [ 2272.549981][T15319] ? may_open_dev+0xf0/0xf0 [ 2272.554499][T15319] ? find_held_lock+0x2d/0x110 [ 2272.559282][T15319] ? do_raw_spin_lock+0x124/0x2b0 [ 2272.564326][T15319] ? spin_bug+0x1c0/0x1c0 [ 2272.568676][T15319] ? _raw_spin_unlock+0x28/0x40 [ 2272.573540][T15319] ? alloc_fd+0x2e4/0x750 [ 2272.577893][T15319] do_sys_openat2+0x16d/0x4c0 [ 2272.582592][T15319] ? build_open_flags+0x720/0x720 [ 2272.587644][T15319] __x64_sys_openat+0x143/0x1f0 [ 2272.592511][T15319] ? __ia32_sys_open+0x1c0/0x1c0 [ 2272.597463][T15319] ? ksys_write+0x1a3/0x250 [ 2272.601991][T15319] ? syscall_enter_from_user_mode+0x26/0x80 [ 2272.607900][T15319] do_syscall_64+0x39/0xb0 [ 2272.612339][T15319] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2272.618249][T15319] RIP: 0033:0x7f08b748c169 [ 2272.622671][T15319] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2272.642285][T15319] RSP: 002b:00007f08b81a2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2272.650706][T15319] RAX: ffffffffffffffda RBX: 00007f08b75abf80 RCX: 00007f08b748c169 [ 2272.658683][T15319] RDX: 0000000000000040 RSI: 0000000020000300 RDI: ffffffffffffff9c [ 2272.666657][T15319] RBP: 00007f08b81a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2272.674634][T15319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2272.682609][T15319] R13: 00007ffc79e9b7ff R14: 00007f08b81a2300 R15: 0000000000022000 [ 2272.690602][T15319] 22:52:41 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd02) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) [ 2272.749385][T15319] ERROR: Out of memory at tomoyo_realpath_from_path. 22:52:41 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r2, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab88000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:41 executing program 0: r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r1, 0x0, 0x16b3) 22:52:41 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r4 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x800) creat(0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615", 0xec}, {&(0x7f00000002c0)}, {0x0}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r4, r5, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:41 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(0x0, 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r6 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r6, 0x800) creat(0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce", 0x36}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f3", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r7 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r6, r7, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) (fail_nth: 7) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x0, 0x7, 0x0, 0x1}, 0x48) 22:52:41 executing program 0: r0 = creat(0x0, 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r1, 0x0, 0x16b3) 22:52:41 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) [ 2273.259699][T15350] FAULT_INJECTION: forcing a failure. [ 2273.259699][T15350] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2273.284140][T15350] CPU: 1 PID: 15350 Comm: syz-executor.5 Not tainted 6.3.0-rc6-next-20230414-syzkaller-12018-gd3f2cd248191 #0 [ 2273.295815][T15350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2273.305862][T15350] Call Trace: [ 2273.309142][T15350] [ 2273.312068][T15350] dump_stack_lvl+0x136/0x150 [ 2273.316749][T15350] should_fail_ex+0x4a3/0x5b0 [ 2273.321420][T15350] _copy_to_user+0x30/0x160 [ 2273.325944][T15350] simple_read_from_buffer+0xd0/0x160 [ 2273.331312][T15350] proc_fail_nth_read+0x18b/0x220 [ 2273.336350][T15350] ? proc_fault_inject_read+0x220/0x220 [ 2273.341915][T15350] ? security_file_permission+0xaf/0xd0 [ 2273.347467][T15350] vfs_read+0x28d/0x960 [ 2273.351622][T15350] ? proc_fault_inject_read+0x220/0x220 [ 2273.357165][T15350] ? kernel_read+0x1c0/0x1c0 [ 2273.361751][T15350] ? receive_fd+0x110/0x110 [ 2273.366261][T15350] ? __fget_files+0x26a/0x480 [ 2273.370975][T15350] ksys_read+0x12b/0x250 [ 2273.375225][T15350] ? vfs_write+0xe40/0xe40 [ 2273.379651][T15350] ? syscall_enter_from_user_mode+0x26/0x80 [ 2273.385551][T15350] do_syscall_64+0x39/0xb0 [ 2273.389986][T15350] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2273.395909][T15350] RIP: 0033:0x7f4461a3df8c [ 2273.400320][T15350] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2273.419925][T15350] RSP: 002b:00007f446272c160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2273.428341][T15350] RAX: ffffffffffffffda RBX: 00007f4461bac120 RCX: 00007f4461a3df8c [ 2273.436305][T15350] RDX: 000000000000000f RSI: 00007f446272c1e0 RDI: 0000000000000009 [ 2273.444277][T15350] RBP: 00007f446272c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2273.452241][T15350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 22:52:42 executing program 0: r0 = creat(0x0, 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r1, 0x0, 0x16b3) [ 2273.460203][T15350] R13: 00007ffe4d66c0cf R14: 00007f446272c300 R15: 0000000000022000 [ 2273.468174][T15350] 22:52:42 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(0x0, 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r6 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r6, 0x800) creat(0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce", 0x36}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f3", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r7 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r6, r7, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x0, 0x7, 0x0, 0x1}, 0x48) 22:52:42 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:42 executing program 0: r0 = creat(0x0, 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r1, 0x0, 0x16b3) 22:52:42 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r2, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab88000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:42 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r4 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x800) creat(0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615", 0xec}, {&(0x7f00000002c0)}, {0x0}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r4, r5, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x5d, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:42 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd03) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:42 executing program 0: r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r1, 0x0, 0x16b3) [ 2274.110699][ T27] kauditd_printk_skb: 54 callbacks suppressed [ 2274.110711][ T27] audit: type=1804 audit(1681685562.830:15386): pid=15377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir895531445/syzkaller.RpEK9g/1530/bus" dev="sda1" ino=1188 res=1 errno=0 22:52:42 executing program 0: r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r1, 0x0, 0x16b3) 22:52:43 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) [ 2274.289367][ T27] audit: type=1800 audit(1681685562.870:15387): pid=15377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1188 res=0 errno=0 [ 2274.310566][ T27] audit: type=1804 audit(1681685563.010:15388): pid=15379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3160652865/syzkaller.nVld8z/1967/bus" dev="sda1" ino=1190 res=1 errno=0 [ 2274.370530][ T27] audit: type=1800 audit(1681685563.010:15389): pid=15379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1190 res=0 errno=0 [ 2274.650038][ T27] audit: type=1804 audit(1681685563.110:15390): pid=15380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2578742061/syzkaller.W3XVNf/1915/bus" dev="sda1" ino=1157 res=1 errno=0 22:52:43 executing program 0: r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r1, 0x0, 0x16b3) [ 2274.897797][ T27] audit: type=1800 audit(1681685563.110:15391): pid=15380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1157 res=0 errno=0 22:52:43 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r2, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab88000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:43 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd04) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) [ 2274.932998][ T27] audit: type=1804 audit(1681685563.270:15392): pid=15386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir895531445/syzkaller.RpEK9g/1531/bus" dev="sda1" ino=1188 res=1 errno=0 [ 2274.958753][ T27] audit: type=1800 audit(1681685563.270:15393): pid=15386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1188 res=0 errno=0 [ 2274.997107][ T27] audit: type=1804 audit(1681685563.320:15394): pid=15385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1892171996/syzkaller.Q2741I/2007/bus" dev="sda1" ino=1191 res=1 errno=0 22:52:43 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(0x0, 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r6 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r6, 0x800) creat(0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce", 0x36}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f3", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r7 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r6, r7, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x5d, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x0, 0x7, 0x0, 0x1}, 0x48) 22:52:43 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r4 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x800) creat(0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615", 0xec}, {&(0x7f00000002c0)}, {0x0}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r4, r5, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x10040, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:43 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:43 executing program 0: r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x0) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r1, 0x0, 0x16b3) [ 2275.254834][ T27] audit: type=1800 audit(1681685563.320:15395): pid=15385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1191 res=0 errno=0 22:52:44 executing program 0: r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x0) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r1, 0x0, 0x16b3) 22:52:44 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:44 executing program 0: r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x0) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r1, 0x0, 0x16b3) 22:52:44 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r4 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x800) creat(0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615", 0xec}, {&(0x7f00000002c0)}, {0x0}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r4, r5, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x200000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:44 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(0x0, 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r6 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r6, 0x800) creat(0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce", 0x36}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f3", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r7 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r6, r7, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x10040, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x0, 0x7, 0x0, 0x1}, 0x48) 22:52:44 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r2, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab88000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:44 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd05) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:44 executing program 0: r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r1, 0x0, 0x16b3) 22:52:45 executing program 0: r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r1, 0x0, 0x16b3) 22:52:45 executing program 0: r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r1, 0x0, 0x16b3) 22:52:45 executing program 0: r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r1, 0x0, 0x16b3) 22:52:45 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:45 executing program 0: r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r1, 0x0, 0x16b3) 22:52:45 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(0x0, 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r6 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r6, 0x800) creat(0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce", 0x36}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f3", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r7 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r6, r7, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x200000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x0, 0x7, 0x0, 0x1}, 0x48) 22:52:45 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r2, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab88000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:45 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r4 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x800) creat(0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615", 0xec}, {&(0x7f00000002c0)}, {0x0}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r4, r5, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:45 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd06) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:45 executing program 0: r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r1, 0x0, 0x16b3) 22:52:46 executing program 0: r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(0x0, 0x125000, 0x0) sendfile(r0, r1, 0x0, 0x16b3) 22:52:46 executing program 0: r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(0x0, 0x125000, 0x0) sendfile(r0, r1, 0x0, 0x16b3) 22:52:46 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:46 executing program 0: r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(0x0, 0x125000, 0x0) sendfile(r0, r1, 0x0, 0x16b3) 22:52:46 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(0x0, 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r6 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r6, 0x800) creat(0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce", 0x36}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f3", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r7 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r6, r7, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x0, 0x7, 0x0, 0x1}, 0x48) 22:52:46 executing program 0: r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x16b3) 22:52:46 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r4 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x800) creat(0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615", 0xec}, {&(0x7f00000002c0)}, {0x0}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r4, r5, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:46 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r2, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab88000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:46 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:46 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd07) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:46 executing program 0: r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x16b3) 22:52:47 executing program 0: r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x16b3) 22:52:47 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:47 executing program 0: r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x16b3) 22:52:47 executing program 0: r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x16b3) 22:52:47 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(0x0, 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r6 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r6, 0x800) creat(0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce", 0x36}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f3", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r7 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r6, r7, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x0, 0x7, 0x0, 0x1}, 0x48) 22:52:47 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r4 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x800) creat(0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615", 0xec}, {&(0x7f00000002c0)}, {0x0}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r4, r5, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:47 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:47 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd08) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:47 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r2, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab88000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:47 executing program 0: r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x16b3) [ 2279.234627][ T27] kauditd_printk_skb: 71 callbacks suppressed [ 2279.234645][ T27] audit: type=1804 audit(1681685567.950:15467): pid=15520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir1068322331/syzkaller.mpLRwx/1891/bus" dev="sda1" ino=1157 res=1 errno=0 22:52:48 executing program 0: r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x16b3) [ 2279.574532][ T27] audit: type=1800 audit(1681685567.980:15468): pid=15520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1157 res=0 errno=0 22:52:48 executing program 0: r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x16b3) [ 2279.739941][ T27] audit: type=1804 audit(1681685568.030:15469): pid=15521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3160652865/syzkaller.nVld8z/1972/bus" dev="sda1" ino=1168 res=1 errno=0 22:52:48 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(0x0, 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r6 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r6, 0x800) creat(0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce", 0x36}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f3", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r7 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r6, r7, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x0, 0x7, 0x0, 0x1}, 0x48) 22:52:48 executing program 0: r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x16b3) 22:52:48 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) [ 2280.043325][ T27] audit: type=1800 audit(1681685568.030:15470): pid=15521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1168 res=0 errno=0 22:52:48 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r4 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x800) creat(0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615", 0xec}, {&(0x7f00000002c0)}, {0x0}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r4, r5, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:48 executing program 0: r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r1, 0x0, 0x0) 22:52:48 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd09) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:48 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r2, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab88000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) [ 2280.225829][ T27] audit: type=1804 audit(1681685568.090:15471): pid=15527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1892171996/syzkaller.Q2741I/2014/bus" dev="sda1" ino=1185 res=1 errno=0 22:52:49 executing program 0: r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r1, 0x0, 0x0) [ 2280.352102][ T27] audit: type=1800 audit(1681685568.090:15472): pid=15527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1185 res=0 errno=0 [ 2280.392716][ T27] audit: type=1804 audit(1681685568.150:15473): pid=15530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2578742061/syzkaller.W3XVNf/1920/bus" dev="sda1" ino=1189 res=1 errno=0 22:52:49 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) [ 2280.511295][ T27] audit: type=1800 audit(1681685568.150:15474): pid=15530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1189 res=0 errno=0 22:52:49 executing program 0: r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r1, 0x0, 0x0) [ 2280.689272][ T27] audit: type=1804 audit(1681685568.190:15475): pid=15532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir895531445/syzkaller.RpEK9g/1550/bus" dev="sda1" ino=1190 res=1 errno=0 22:52:49 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(0x0, 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r6 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r6, 0x800) creat(0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce", 0x36}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f3", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r7 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r6, r7, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x0, 0x7, 0x0, 0x1}, 0x48) 22:52:49 executing program 0: r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x16b3) [ 2280.946290][ T27] audit: type=1800 audit(1681685568.190:15476): pid=15532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1190 res=0 errno=0 22:52:49 executing program 0: r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x16b3) 22:52:49 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:49 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r4 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x800) creat(0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615", 0xec}, {&(0x7f00000002c0)}, {0x0}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r4, r5, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:50 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd0a) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:50 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r2, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab88000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:50 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r2, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab88000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:50 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(0x0, 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r6 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r6, 0x800) creat(0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce", 0x36}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f3", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r7 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r6, r7, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x0, 0x7, 0x0, 0x1}, 0x48) 22:52:50 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:51 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r4 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x800) creat(0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615", 0xec}, {&(0x7f00000002c0)}, {0x0}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r4, r5, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:51 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd0b) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:51 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:51 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(0x0, 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r6 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r6, 0x800) creat(0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce", 0x36}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f3", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r7 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r6, r7, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x0, 0x7, 0x0, 0x1}, 0x48) 22:52:51 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd0a) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:51 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r2, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab88000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:51 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) [ 2283.300119][ T1213] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.306453][ T1213] ieee802154 phy1 wpan1: encryption failed: -22 22:52:52 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r4 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x800) creat(0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615", 0xec}, {&(0x7f00000002c0)}, {0x0}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r4, r5, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:52 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(0x0, 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r6 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r6, 0x800) creat(0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce", 0x36}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f3", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r7 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r6, r7, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x0, 0x7, 0x0, 0x1}, 0x48) 22:52:52 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd0c) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:52 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r2, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab88000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:52 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c00000000000000010000000200", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) [ 2284.241692][ T27] kauditd_printk_skb: 69 callbacks suppressed [ 2284.241742][ T27] audit: type=1800 audit(1681685572.950:15546): pid=15655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1192 res=0 errno=0 22:52:53 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(0x0, 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r6 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r6, 0x800) creat(0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce", 0x36}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f3", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r7 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r6, r7, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x0, 0x7, 0x0, 0x1}, 0x48) 22:52:53 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd0d) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:53 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:53 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c00000000000000010000000200", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:53 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r4 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x800) creat(0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615", 0xec}, {&(0x7f00000002c0)}, {0x0}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r4, r5, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) [ 2284.829231][ T27] audit: type=1804 audit(1681685573.550:15547): pid=15662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2578742061/syzkaller.W3XVNf/1925/bus" dev="sda1" ino=1170 res=1 errno=0 22:52:53 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r2, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab88000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) [ 2285.091385][ T27] audit: type=1800 audit(1681685573.580:15548): pid=15662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1170 res=0 errno=0 [ 2285.292185][ T27] audit: type=1804 audit(1681685573.610:15549): pid=15666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir1068322331/syzkaller.mpLRwx/1897/bus" dev="sda1" ino=1161 res=1 errno=0 [ 2285.369083][ T27] audit: type=1800 audit(1681685573.610:15550): pid=15666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1161 res=0 errno=0 [ 2285.396566][ T27] audit: type=1804 audit(1681685573.640:15551): pid=15668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1892171996/syzkaller.Q2741I/2022/bus" dev="sda1" ino=1164 res=1 errno=0 [ 2285.539202][ T27] audit: type=1800 audit(1681685573.640:15552): pid=15668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1164 res=0 errno=0 [ 2285.561018][ T27] audit: type=1804 audit(1681685573.660:15553): pid=15667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir895531445/syzkaller.RpEK9g/1561/bus" dev="sda1" ino=1180 res=1 errno=0 22:52:54 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c00000000000000010000000200", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) [ 2285.587587][ T27] audit: type=1800 audit(1681685573.670:15554): pid=15667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1180 res=0 errno=0 22:52:54 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd05) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) [ 2285.634258][ T27] audit: type=1804 audit(1681685573.970:15555): pid=15676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3160652865/syzkaller.nVld8z/1977/bus" dev="sda1" ino=1178 res=1 errno=0 22:52:54 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(0x0, 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r6 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r6, 0x800) creat(0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce", 0x36}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f3", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r7 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r6, r7, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x0, 0x7, 0x0, 0x1}, 0x48) 22:52:54 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd0e) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:54 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r4 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x800) creat(0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615", 0xec}, {&(0x7f00000002c0)}, {0x0}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r4, r5, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x500) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:55 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000000001000000020000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:55 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r2, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab88000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60}}], 0x1, 0x24000004) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:55 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(0x0, 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r6 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r6, 0x800) creat(0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce", 0x36}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f3", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r7 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r6, r7, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x500) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x0, 0x7, 0x0, 0x1}, 0x48) 22:52:55 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd0f) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:55 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000000001000000020000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:55 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r4 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x800) creat(0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615", 0xec}, {&(0x7f00000002c0)}, {0x0}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r4, r5, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x600) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:56 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r2, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab88000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:56 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r2, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab88000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60}}], 0x1, 0x24000004) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:56 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(0x0, 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r6 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r6, 0x800) creat(0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce", 0x36}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f3", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r7 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r6, r7, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x600) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x0, 0x7, 0x0, 0x1}, 0x48) 22:52:56 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:56 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000000001000000020000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:57 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r4 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x800) creat(0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615", 0xec}, {&(0x7f00000002c0)}, {0x0}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r4, r5, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x700) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:57 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r2, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab88000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60}}], 0x1, 0x24000004) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:57 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:57 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(0x0, 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r6 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r6, 0x800) creat(0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce", 0x36}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f3", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r7 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r6, r7, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x700) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x0, 0x7, 0x0, 0x1}, 0x48) 22:52:57 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd11) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:57 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r2, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab88000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:57 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:58 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r4 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x800) creat(0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615", 0xec}, {&(0x7f00000002c0)}, {0x0}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r4, r5, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x1800) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:58 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(0x0, 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r6 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r6, 0x800) creat(0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce", 0x36}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f3", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r7 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r6, r7, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x900) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x0, 0x7, 0x0, 0x1}, 0x48) 22:52:58 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r2, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab88000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:58 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd23) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:58 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) [ 2289.784998][ T27] kauditd_printk_skb: 49 callbacks suppressed [ 2289.785014][ T27] audit: type=1804 audit(1681685578.500:15605): pid=15780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3160652865/syzkaller.nVld8z/1981/bus" dev="sda1" ino=1183 res=1 errno=0 [ 2289.946070][ T27] audit: type=1800 audit(1681685578.540:15606): pid=15780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1183 res=0 errno=0 [ 2289.967775][ T27] audit: type=1804 audit(1681685578.570:15607): pid=15781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2578742061/syzkaller.W3XVNf/1930/bus" dev="sda1" ino=1186 res=1 errno=0 [ 2290.259567][ T27] audit: type=1800 audit(1681685578.570:15608): pid=15781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1186 res=0 errno=0 22:52:59 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab88000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:59 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(0x0, 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r6 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r6, 0x800) creat(0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce", 0x36}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f3", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r7 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r6, r7, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x1800) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x0, 0x7, 0x0, 0x1}, 0x48) 22:52:59 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) [ 2290.678223][ T27] audit: type=1804 audit(1681685578.610:15609): pid=15782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir1068322331/syzkaller.mpLRwx/1902/bus" dev="sda1" ino=1188 res=1 errno=0 [ 2290.704570][ T27] audit: type=1800 audit(1681685578.610:15610): pid=15782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1188 res=0 errno=0 22:52:59 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd28) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) [ 2290.727803][ T27] audit: type=1804 audit(1681685578.610:15611): pid=15779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1892171996/syzkaller.Q2741I/2029/bus" dev="sda1" ino=1187 res=1 errno=0 [ 2290.755478][ T27] audit: type=1800 audit(1681685578.620:15612): pid=15779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1187 res=0 errno=0 [ 2290.779214][ T27] audit: type=1804 audit(1681685578.810:15613): pid=15786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir4110182140/syzkaller.hTdUky/1501/bus" dev="sda1" ino=1192 res=1 errno=0 22:52:59 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r4 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x800) creat(0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615", 0xec}, {&(0x7f00000002c0)}, {0x0}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r4, r5, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0xff00) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:52:59 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r2, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab88000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) [ 2290.826504][ T27] audit: type=1800 audit(1681685578.810:15614): pid=15786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1192 res=0 errno=0 22:53:00 executing program 0: r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r1, 0x0, 0x16b3) (fail_nth: 1) [ 2291.587664][T15815] FAULT_INJECTION: forcing a failure. [ 2291.587664][T15815] name failslab, interval 1, probability 0, space 0, times 0 [ 2291.638968][T15815] CPU: 0 PID: 15815 Comm: syz-executor.0 Not tainted 6.3.0-rc6-next-20230414-syzkaller-12018-gd3f2cd248191 #0 [ 2291.650656][T15815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2291.660719][T15815] Call Trace: [ 2291.664003][T15815] [ 2291.666928][T15815] dump_stack_lvl+0x136/0x150 [ 2291.671615][T15815] should_fail_ex+0x4a3/0x5b0 [ 2291.676296][T15815] should_failslab+0x9/0x20 [ 2291.680791][T15815] __kmem_cache_alloc_node+0x5b/0x320 [ 2291.686160][T15815] ? alloc_pipe_info+0x10e/0x590 [ 2291.691090][T15815] ? lock_downgrade+0x690/0x690 [ 2291.695940][T15815] kmalloc_trace+0x26/0xe0 [ 2291.700358][T15815] alloc_pipe_info+0x10e/0x590 [ 2291.705127][T15815] splice_direct_to_actor+0x6c9/0x8a0 [ 2291.710497][T15815] ? do_splice_direct+0x280/0x280 [ 2291.715520][T15815] ? apparmor_file_permission+0x272/0x4e0 [ 2291.721242][T15815] ? folio_flags.constprop.0+0x150/0x150 [ 2291.726870][T15815] ? bpf_lsm_file_permission+0x9/0x10 [ 2291.732237][T15815] ? security_file_permission+0xaf/0xd0 [ 2291.737789][T15815] do_splice_direct+0x1ab/0x280 [ 2291.742647][T15815] ? splice_direct_to_actor+0x8a0/0x8a0 [ 2291.748226][T15815] do_sendfile+0xb19/0x12c0 [ 2291.752758][T15815] ? vfs_iocb_iter_write+0x480/0x480 [ 2291.758078][T15815] __x64_sys_sendfile64+0x1d0/0x210 [ 2291.763288][T15815] ? ksys_write+0x1a3/0x250 [ 2291.767813][T15815] ? __ia32_sys_sendfile+0x220/0x220 [ 2291.773109][T15815] ? syscall_enter_from_user_mode+0x26/0x80 [ 2291.779052][T15815] do_syscall_64+0x39/0xb0 [ 2291.783490][T15815] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2291.789402][T15815] RIP: 0033:0x7f878ba8c169 [ 2291.793828][T15815] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2291.813440][T15815] RSP: 002b:00007f878c7cf168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2291.821871][T15815] RAX: ffffffffffffffda RBX: 00007f878bbabf80 RCX: 00007f878ba8c169 [ 2291.829855][T15815] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2291.837834][T15815] RBP: 00007f878c7cf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2291.845814][T15815] R10: 00000000000016b3 R11: 0000000000000246 R12: 0000000000000001 [ 2291.853793][T15815] R13: 00007ffe38db150f R14: 00007f878c7cf300 R15: 0000000000022000 [ 2291.861792][T15815] 22:53:00 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:53:00 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(0x0, 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r6 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r6, 0x800) creat(0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce", 0x36}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f3", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r7 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r6, r7, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0xff00) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x0, 0x7, 0x0, 0x1}, 0x48) 22:53:00 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r4 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x800) creat(0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615", 0xec}, {&(0x7f00000002c0)}, {0x0}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r4, r5, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x1000000) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:53:00 executing program 0: r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r1, 0x0, 0x16b3) (fail_nth: 2) 22:53:00 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r2, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab88000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:53:00 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd29) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) [ 2292.167656][T15826] FAULT_INJECTION: forcing a failure. [ 2292.167656][T15826] name failslab, interval 1, probability 0, space 0, times 0 [ 2292.360848][T15826] CPU: 1 PID: 15826 Comm: syz-executor.0 Not tainted 6.3.0-rc6-next-20230414-syzkaller-12018-gd3f2cd248191 #0 [ 2292.372542][T15826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2292.382603][T15826] Call Trace: [ 2292.385876][T15826] [ 2292.388803][T15826] dump_stack_lvl+0x136/0x150 [ 2292.393495][T15826] should_fail_ex+0x4a3/0x5b0 [ 2292.398167][T15826] should_failslab+0x9/0x20 [ 2292.402670][T15826] __kmem_cache_alloc_node+0x5b/0x320 [ 2292.408037][T15826] ? alloc_pipe_info+0x1e9/0x590 [ 2292.412961][T15826] ? __kmem_cache_alloc_node+0x1b0/0x320 [ 2292.418590][T15826] ? alloc_pipe_info+0x10e/0x590 [ 2292.423528][T15826] ? alloc_pipe_info+0x1e9/0x590 [ 2292.428459][T15826] __kmalloc+0x4e/0x190 [ 2292.432610][T15826] alloc_pipe_info+0x1e9/0x590 [ 2292.437367][T15826] splice_direct_to_actor+0x6c9/0x8a0 [ 2292.442741][T15826] ? do_splice_direct+0x280/0x280 [ 2292.447766][T15826] ? apparmor_file_permission+0x272/0x4e0 [ 2292.453488][T15826] ? folio_flags.constprop.0+0x150/0x150 [ 2292.459119][T15826] ? bpf_lsm_file_permission+0x9/0x10 [ 2292.464490][T15826] ? security_file_permission+0xaf/0xd0 [ 2292.470059][T15826] do_splice_direct+0x1ab/0x280 [ 2292.474914][T15826] ? splice_direct_to_actor+0x8a0/0x8a0 [ 2292.480466][T15826] do_sendfile+0xb19/0x12c0 [ 2292.484976][T15826] ? vfs_iocb_iter_write+0x480/0x480 [ 2292.490267][T15826] __x64_sys_sendfile64+0x1d0/0x210 [ 2292.495462][T15826] ? ksys_write+0x1a3/0x250 [ 2292.499963][T15826] ? __ia32_sys_sendfile+0x220/0x220 [ 2292.505240][T15826] ? syscall_enter_from_user_mode+0x26/0x80 [ 2292.511131][T15826] do_syscall_64+0x39/0xb0 [ 2292.515542][T15826] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2292.521438][T15826] RIP: 0033:0x7f878ba8c169 [ 2292.525849][T15826] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2292.545451][T15826] RSP: 002b:00007f878c7cf168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2292.553881][T15826] RAX: ffffffffffffffda RBX: 00007f878bbabf80 RCX: 00007f878ba8c169 [ 2292.561861][T15826] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2292.569825][T15826] RBP: 00007f878c7cf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2292.577784][T15826] R10: 00000000000016b3 R11: 0000000000000246 R12: 0000000000000001 [ 2292.585743][T15826] R13: 00007ffe38db150f R14: 00007f878c7cf300 R15: 0000000000022000 [ 2292.593720][T15826] 22:53:01 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:53:01 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(0x0, 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r6 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r6, 0x800) creat(0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce", 0x36}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f3", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r7 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r6, r7, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x1000000) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x0, 0x7, 0x0, 0x1}, 0x48) 22:53:01 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r2, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab88000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r6 = open(0x0, 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:53:01 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd2a) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:53:01 executing program 0: r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r1, 0x0, 0x16b3) (fail_nth: 3) 22:53:01 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r4 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x800) creat(0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615", 0xec}, {&(0x7f00000002c0)}, {0x0}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r4, r5, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x2000000) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:53:01 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) [ 2293.173534][T15850] FAULT_INJECTION: forcing a failure. [ 2293.173534][T15850] name failslab, interval 1, probability 0, space 0, times 0 [ 2293.284054][T15850] CPU: 1 PID: 15850 Comm: syz-executor.0 Not tainted 6.3.0-rc6-next-20230414-syzkaller-12018-gd3f2cd248191 #0 [ 2293.295739][T15850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2293.305795][T15850] Call Trace: [ 2293.309091][T15850] [ 2293.312013][T15850] dump_stack_lvl+0x136/0x150 [ 2293.316695][T15850] should_fail_ex+0x4a3/0x5b0 [ 2293.321370][T15850] should_failslab+0x9/0x20 [ 2293.325869][T15850] __kmem_cache_alloc_node+0x5b/0x320 [ 2293.331239][T15850] ? direct_splice_read+0x15b/0x980 [ 2293.336445][T15850] ? direct_splice_read+0x15b/0x980 [ 2293.341640][T15850] __kmalloc+0x4e/0x190 [ 2293.345799][T15850] direct_splice_read+0x15b/0x980 [ 2293.350844][T15850] ? __fsnotify_parent+0x49c/0xa60 [ 2293.355951][T15850] ? fsnotify+0x16e0/0x16e0 [ 2293.360448][T15850] ? vfs_splice_read+0x250/0x250 [ 2293.365386][T15850] ? lock_downgrade+0x690/0x690 [ 2293.370236][T15850] ? check_slab+0x110/0x110 [ 2293.374735][T15850] ? lock_acquire+0x32/0xc0 [ 2293.379238][T15850] ? check_slab+0x110/0x110 [ 2293.383768][T15850] ? fsnotify_perm.part.0+0x221/0x610 [ 2293.389157][T15850] ? apparmor_file_permission+0x272/0x4e0 [ 2293.394906][T15850] generic_file_splice_read+0x165/0x1b0 [ 2293.400474][T15850] ? direct_splice_read+0x980/0x980 [ 2293.405695][T15850] vfs_splice_read+0x1bd/0x250 [ 2293.410487][T15850] splice_direct_to_actor+0x2ab/0x8a0 [ 2293.415882][T15850] ? do_splice_direct+0x280/0x280 [ 2293.420930][T15850] ? folio_flags.constprop.0+0x150/0x150 [ 2293.426582][T15850] ? bpf_lsm_file_permission+0x9/0x10 [ 2293.431973][T15850] ? security_file_permission+0xaf/0xd0 [ 2293.437547][T15850] do_splice_direct+0x1ab/0x280 [ 2293.442421][T15850] ? splice_direct_to_actor+0x8a0/0x8a0 [ 2293.447998][T15850] do_sendfile+0xb19/0x12c0 [ 2293.452530][T15850] ? vfs_iocb_iter_write+0x480/0x480 [ 2293.457845][T15850] __x64_sys_sendfile64+0x1d0/0x210 [ 2293.463051][T15850] ? ksys_write+0x1a3/0x250 [ 2293.467573][T15850] ? __ia32_sys_sendfile+0x220/0x220 [ 2293.472873][T15850] ? syscall_enter_from_user_mode+0x26/0x80 [ 2293.478782][T15850] do_syscall_64+0x39/0xb0 [ 2293.483219][T15850] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2293.489126][T15850] RIP: 0033:0x7f878ba8c169 [ 2293.493550][T15850] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2293.513164][T15850] RSP: 002b:00007f878c7cf168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2293.521588][T15850] RAX: ffffffffffffffda RBX: 00007f878bbabf80 RCX: 00007f878ba8c169 [ 2293.529570][T15850] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2293.537543][T15850] RBP: 00007f878c7cf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2293.545521][T15850] R10: 00000000000016b3 R11: 0000000000000246 R12: 0000000000000001 [ 2293.553494][T15850] R13: 00007ffe38db150f R14: 00007f878c7cf300 R15: 0000000000022000 [ 2293.561486][T15850] 22:53:02 executing program 0: r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r1, 0x0, 0x16b3) (fail_nth: 4) 22:53:02 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(0x0, 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r6 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r6, 0x800) creat(0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce", 0x36}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f3", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r7 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r6, r7, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x2000000) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x0, 0x7, 0x0, 0x1}, 0x48) 22:53:02 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r2, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab88000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r6 = open(0x0, 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) [ 2293.972053][T15866] FAULT_INJECTION: forcing a failure. [ 2293.972053][T15866] name fail_page_alloc, interval 1, probability 0, space 0, times 0 22:53:02 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:53:02 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd2b) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) [ 2294.260276][T15866] CPU: 0 PID: 15866 Comm: syz-executor.0 Not tainted 6.3.0-rc6-next-20230414-syzkaller-12018-gd3f2cd248191 #0 [ 2294.271971][T15866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2294.282027][T15866] Call Trace: [ 2294.285298][T15866] [ 2294.288234][T15866] dump_stack_lvl+0x136/0x150 [ 2294.292937][T15866] should_fail_ex+0x4a3/0x5b0 [ 2294.297611][T15866] prepare_alloc_pages+0x178/0x570 [ 2294.302745][T15866] __alloc_pages+0x149/0x4a0 [ 2294.307338][T15866] ? __kmalloc+0x5e/0x190 [ 2294.311674][T15866] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2294.318470][T15866] ? splice_direct_to_actor+0x2ab/0x8a0 [ 2294.324020][T15866] ? do_splice_direct+0x1ab/0x280 [ 2294.329056][T15866] ? do_sendfile+0xb19/0x12c0 [ 2294.333762][T15866] ? do_syscall_64+0x39/0xb0 [ 2294.338360][T15866] ? ___slab_alloc+0xca0/0x1400 [ 2294.343209][T15866] ? lockdep_hardirqs_on+0x7d/0x100 [ 2294.348404][T15866] __alloc_pages_bulk+0x7de/0x1350 [ 2294.353544][T15866] ? __alloc_pages+0x4a0/0x4a0 [ 2294.358332][T15866] ? __kmem_cache_alloc_node+0x1b0/0x320 [ 2294.363970][T15866] ? direct_splice_read+0x15b/0x980 [ 2294.369168][T15866] ? rcu_is_watching+0x12/0xb0 [ 2294.373934][T15866] direct_splice_read+0x195/0x980 [ 2294.378964][T15866] ? fsnotify+0x16e0/0x16e0 [ 2294.383485][T15866] ? vfs_splice_read+0x250/0x250 [ 2294.388420][T15866] ? lock_downgrade+0x690/0x690 [ 2294.393268][T15866] ? check_slab+0x110/0x110 [ 2294.397772][T15866] ? lock_acquire+0x32/0xc0 [ 2294.402302][T15866] ? check_slab+0x110/0x110 [ 2294.406810][T15866] ? fsnotify_perm.part.0+0x221/0x610 [ 2294.412178][T15866] ? apparmor_file_permission+0x272/0x4e0 [ 2294.417898][T15866] generic_file_splice_read+0x165/0x1b0 [ 2294.423445][T15866] ? direct_splice_read+0x980/0x980 [ 2294.428644][T15866] vfs_splice_read+0x1bd/0x250 [ 2294.433411][T15866] splice_direct_to_actor+0x2ab/0x8a0 [ 2294.438782][T15866] ? do_splice_direct+0x280/0x280 [ 2294.443808][T15866] ? folio_flags.constprop.0+0x150/0x150 [ 2294.449443][T15866] ? bpf_lsm_file_permission+0x9/0x10 [ 2294.454812][T15866] ? security_file_permission+0xaf/0xd0 [ 2294.460362][T15866] do_splice_direct+0x1ab/0x280 [ 2294.465212][T15866] ? splice_direct_to_actor+0x8a0/0x8a0 [ 2294.470761][T15866] do_sendfile+0xb19/0x12c0 [ 2294.475268][T15866] ? vfs_iocb_iter_write+0x480/0x480 [ 2294.480560][T15866] __x64_sys_sendfile64+0x1d0/0x210 [ 2294.485747][T15866] ? ksys_write+0x1a3/0x250 [ 2294.490250][T15866] ? __ia32_sys_sendfile+0x220/0x220 [ 2294.495547][T15866] ? syscall_enter_from_user_mode+0x26/0x80 [ 2294.501436][T15866] do_syscall_64+0x39/0xb0 [ 2294.505851][T15866] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2294.511739][T15866] RIP: 0033:0x7f878ba8c169 [ 2294.516145][T15866] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2294.535743][T15866] RSP: 002b:00007f878c7cf168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2294.544151][T15866] RAX: ffffffffffffffda RBX: 00007f878bbabf80 RCX: 00007f878ba8c169 [ 2294.552114][T15866] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 22:53:03 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r4 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x800) creat(0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615", 0xec}, {&(0x7f00000002c0)}, {0x0}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r4, r5, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x3000000) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) [ 2294.560075][T15866] RBP: 00007f878c7cf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2294.568053][T15866] R10: 00000000000016b3 R11: 0000000000000246 R12: 0000000000000001 [ 2294.576029][T15866] R13: 00007ffe38db150f R14: 00007f878c7cf300 R15: 0000000000022000 [ 2294.584003][T15866] 22:53:03 executing program 0: r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r1, 0x0, 0x16b3) (fail_nth: 5) 22:53:03 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(0x0, 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r6 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r6, 0x800) creat(0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce", 0x36}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f3", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r7 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r6, r7, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x3000000) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x0, 0x7, 0x0, 0x1}, 0x48) 22:53:03 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:53:03 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd2d) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) [ 2294.899770][ T27] kauditd_printk_skb: 46 callbacks suppressed [ 2294.899819][ T27] audit: type=1804 audit(1681685583.610:15661): pid=15889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3160652865/syzkaller.nVld8z/1985/bus" dev="sda1" ino=1161 res=1 errno=0 22:53:03 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r2, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab88000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r6 = open(0x0, 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) [ 2295.074144][T15894] FAULT_INJECTION: forcing a failure. [ 2295.074144][T15894] name failslab, interval 1, probability 0, space 0, times 0 [ 2295.109058][T15894] CPU: 1 PID: 15894 Comm: syz-executor.0 Not tainted 6.3.0-rc6-next-20230414-syzkaller-12018-gd3f2cd248191 #0 [ 2295.121067][T15894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2295.131118][T15894] Call Trace: [ 2295.134391][T15894] [ 2295.137316][T15894] dump_stack_lvl+0x136/0x150 [ 2295.142010][T15894] should_fail_ex+0x4a3/0x5b0 [ 2295.146724][T15894] should_failslab+0x9/0x20 [ 2295.151252][T15894] __kmem_cache_alloc_node+0x5b/0x320 [ 2295.156628][T15894] ? __iomap_dio_rw+0x22b/0x1c20 [ 2295.161569][T15894] kmalloc_trace+0x26/0xe0 [ 2295.165998][T15894] __iomap_dio_rw+0x22b/0x1c20 [ 2295.170786][T15894] ? __lock_acquire+0x1916/0x5df0 [ 2295.175814][T15894] ? iomap_dio_bio_iter+0x1440/0x1440 [ 2295.181183][T15894] ? unwind_get_return_address+0x55/0xa0 [ 2295.186811][T15894] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2295.192803][T15894] ? lock_sync+0x190/0x190 [ 2295.197217][T15894] ? rcu_is_watching+0x12/0xb0 [ 2295.201978][T15894] ? trace_lock_acquire+0x12d/0x180 [ 2295.207176][T15894] iomap_dio_rw+0x40/0xa0 [ 2295.211511][T15894] ext4_file_read_iter+0x4be/0x690 [ 2295.216650][T15894] direct_splice_read+0x3cc/0x980 [ 2295.221675][T15894] ? fsnotify+0x16e0/0x16e0 [ 2295.226173][T15894] ? vfs_splice_read+0x250/0x250 [ 2295.231109][T15894] ? check_slab+0x110/0x110 [ 2295.235606][T15894] ? lock_acquire+0x32/0xc0 [ 2295.240100][T15894] ? check_slab+0x110/0x110 [ 2295.244610][T15894] ? fsnotify_perm.part.0+0x221/0x610 [ 2295.249976][T15894] ? apparmor_file_permission+0x272/0x4e0 [ 2295.255696][T15894] generic_file_splice_read+0x165/0x1b0 [ 2295.261244][T15894] ? direct_splice_read+0x980/0x980 [ 2295.266443][T15894] vfs_splice_read+0x1bd/0x250 [ 2295.271207][T15894] splice_direct_to_actor+0x2ab/0x8a0 [ 2295.276574][T15894] ? do_splice_direct+0x280/0x280 [ 2295.281617][T15894] ? folio_flags.constprop.0+0x150/0x150 [ 2295.287247][T15894] ? bpf_lsm_file_permission+0x9/0x10 [ 2295.292616][T15894] ? security_file_permission+0xaf/0xd0 [ 2295.298423][T15894] do_splice_direct+0x1ab/0x280 [ 2295.303275][T15894] ? splice_direct_to_actor+0x8a0/0x8a0 [ 2295.308831][T15894] do_sendfile+0xb19/0x12c0 [ 2295.313357][T15894] ? vfs_iocb_iter_write+0x480/0x480 [ 2295.318653][T15894] __x64_sys_sendfile64+0x1d0/0x210 [ 2295.323842][T15894] ? ksys_write+0x1a3/0x250 [ 2295.328343][T15894] ? __ia32_sys_sendfile+0x220/0x220 [ 2295.333618][T15894] ? syscall_enter_from_user_mode+0x26/0x80 [ 2295.339506][T15894] do_syscall_64+0x39/0xb0 [ 2295.343918][T15894] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2295.349806][T15894] RIP: 0033:0x7f878ba8c169 [ 2295.354213][T15894] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2295.373813][T15894] RSP: 002b:00007f878c7cf168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2295.382216][T15894] RAX: ffffffffffffffda RBX: 00007f878bbabf80 RCX: 00007f878ba8c169 [ 2295.390178][T15894] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2295.398155][T15894] RBP: 00007f878c7cf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2295.406112][T15894] R10: 00000000000016b3 R11: 0000000000000246 R12: 0000000000000001 [ 2295.414071][T15894] R13: 00007ffe38db150f R14: 00007f878c7cf300 R15: 0000000000022000 [ 2295.422041][T15894] [ 2295.553675][ T27] audit: type=1800 audit(1681685583.660:15662): pid=15889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1161 res=0 errno=0 22:53:04 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r4 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x800) creat(0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615", 0xec}, {&(0x7f00000002c0)}, {0x0}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r4, r5, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:53:04 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:53:04 executing program 0: r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r1, 0x0, 0x16b3) (fail_nth: 6) 22:53:04 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(0x0, 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r6 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r6, 0x800) creat(0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce", 0x36}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f3", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r7 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r6, r7, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x0, 0x7, 0x0, 0x1}, 0x48) [ 2295.926531][ T27] audit: type=1804 audit(1681685583.730:15663): pid=15893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1892171996/syzkaller.Q2741I/2035/bus" dev="sda1" ino=1170 res=1 errno=0 [ 2295.960979][T15916] FAULT_INJECTION: forcing a failure. [ 2295.960979][T15916] name failslab, interval 1, probability 0, space 0, times 0 22:53:04 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd2e) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) [ 2296.065204][T15916] CPU: 0 PID: 15916 Comm: syz-executor.0 Not tainted 6.3.0-rc6-next-20230414-syzkaller-12018-gd3f2cd248191 #0 [ 2296.076922][T15916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2296.086990][T15916] Call Trace: [ 2296.090282][T15916] [ 2296.093221][T15916] dump_stack_lvl+0x136/0x150 [ 2296.097903][T15916] should_fail_ex+0x4a3/0x5b0 [ 2296.102585][T15916] should_failslab+0x9/0x20 [ 2296.107086][T15916] __kmem_cache_alloc_node+0x5b/0x320 [ 2296.112470][T15916] ? ext4_find_extent+0xa3c/0xd20 [ 2296.117540][T15916] ? ext4_find_extent+0xa3c/0xd20 [ 2296.122564][T15916] __kmalloc+0x4e/0x190 [ 2296.126711][T15916] ? is_dynamic_key.part.0+0x1f0/0x1f0 [ 2296.132170][T15916] ext4_find_extent+0xa3c/0xd20 [ 2296.137046][T15916] ext4_ext_map_blocks+0x1e1/0x5be0 [ 2296.142256][T15916] ? __lock_acquire+0x1916/0x5df0 [ 2296.147291][T15916] ? is_bpf_text_address+0x7b/0x1b0 [ 2296.152506][T15916] ? ext4_ext_release+0x10/0x10 [ 2296.157377][T15916] ? find_held_lock+0x2d/0x110 [ 2296.162172][T15916] ? __down_read_common+0x884/0xf30 [ 2296.167373][T15916] ? down_write_nested+0x200/0x200 [ 2296.172486][T15916] ? lock_sync+0x190/0x190 [ 2296.176922][T15916] ? rcu_is_watching+0x12/0xb0 [ 2296.181689][T15916] ? trace_lock_acquire+0x12d/0x180 [ 2296.186904][T15916] ? ext4_map_blocks+0x267/0x18d0 [ 2296.191927][T15916] ? lock_acquire+0x32/0xc0 [ 2296.196449][T15916] ? ext4_map_blocks+0x267/0x18d0 [ 2296.201492][T15916] ext4_map_blocks+0xa7f/0x18d0 [ 2296.206354][T15916] ? ext4_issue_zeroout+0x200/0x200 [ 2296.211654][T15916] ? kasan_save_stack+0x32/0x40 [ 2296.216501][T15916] ? kasan_save_stack+0x22/0x40 [ 2296.221375][T15916] ? kasan_set_track+0x25/0x30 [ 2296.226139][T15916] ? __kasan_kmalloc+0xa2/0xb0 [ 2296.230898][T15916] ? __iomap_dio_rw+0x22b/0x1c20 [ 2296.235832][T15916] ? iomap_dio_rw+0x40/0xa0 [ 2296.240332][T15916] ? generic_file_splice_read+0x165/0x1b0 [ 2296.246064][T15916] ? vfs_splice_read+0x1bd/0x250 [ 2296.251009][T15916] ? splice_direct_to_actor+0x2ab/0x8a0 [ 2296.256560][T15916] ? do_splice_direct+0x1ab/0x280 [ 2296.261582][T15916] ? do_sendfile+0xb19/0x12c0 [ 2296.266269][T15916] ? __x64_sys_sendfile64+0x1d0/0x210 [ 2296.271675][T15916] ? do_syscall_64+0x39/0xb0 [ 2296.276275][T15916] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2296.282369][T15916] ext4_iomap_begin+0x6c9/0x7a0 [ 2296.287225][T15916] ? ext4_iomap_begin_report+0x610/0x610 [ 2296.292864][T15916] ? ext4_iomap_begin_report+0x610/0x610 [ 2296.298495][T15916] iomap_iter+0x446/0x10e0 [ 2296.302907][T15916] ? filemap_check_errors+0xa9/0x150 [ 2296.308194][T15916] __iomap_dio_rw+0x72b/0x1c20 [ 2296.312967][T15916] ? iomap_dio_bio_iter+0x1440/0x1440 [ 2296.318337][T15916] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2296.324334][T15916] ? lock_sync+0x190/0x190 [ 2296.328753][T15916] ? rcu_is_watching+0x12/0xb0 [ 2296.333523][T15916] ? trace_lock_acquire+0x12d/0x180 [ 2296.338723][T15916] iomap_dio_rw+0x40/0xa0 [ 2296.343058][T15916] ext4_file_read_iter+0x4be/0x690 [ 2296.348176][T15916] direct_splice_read+0x3cc/0x980 [ 2296.353220][T15916] ? fsnotify+0x16e0/0x16e0 [ 2296.357720][T15916] ? vfs_splice_read+0x250/0x250 [ 2296.362682][T15916] ? check_slab+0x110/0x110 [ 2296.367183][T15916] ? lock_acquire+0x32/0xc0 [ 2296.371682][T15916] ? check_slab+0x110/0x110 [ 2296.376187][T15916] ? fsnotify_perm.part.0+0x221/0x610 [ 2296.381579][T15916] ? apparmor_file_permission+0x272/0x4e0 [ 2296.387305][T15916] generic_file_splice_read+0x165/0x1b0 [ 2296.392855][T15916] ? direct_splice_read+0x980/0x980 [ 2296.398057][T15916] vfs_splice_read+0x1bd/0x250 [ 2296.402825][T15916] splice_direct_to_actor+0x2ab/0x8a0 [ 2296.408217][T15916] ? do_splice_direct+0x280/0x280 [ 2296.413273][T15916] ? folio_flags.constprop.0+0x150/0x150 [ 2296.418908][T15916] ? bpf_lsm_file_permission+0x9/0x10 [ 2296.424282][T15916] ? security_file_permission+0xaf/0xd0 [ 2296.429854][T15916] do_splice_direct+0x1ab/0x280 [ 2296.434705][T15916] ? splice_direct_to_actor+0x8a0/0x8a0 [ 2296.440262][T15916] do_sendfile+0xb19/0x12c0 [ 2296.444769][T15916] ? vfs_iocb_iter_write+0x480/0x480 [ 2296.450067][T15916] __x64_sys_sendfile64+0x1d0/0x210 [ 2296.455258][T15916] ? ksys_write+0x1a3/0x250 [ 2296.459759][T15916] ? __ia32_sys_sendfile+0x220/0x220 [ 2296.465058][T15916] ? syscall_enter_from_user_mode+0x26/0x80 [ 2296.470951][T15916] do_syscall_64+0x39/0xb0 [ 2296.475365][T15916] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2296.481258][T15916] RIP: 0033:0x7f878ba8c169 [ 2296.485666][T15916] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2296.505288][T15916] RSP: 002b:00007f878c7cf168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 22:53:05 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r2, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab88000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) [ 2296.513703][T15916] RAX: ffffffffffffffda RBX: 00007f878bbabf80 RCX: 00007f878ba8c169 [ 2296.521719][T15916] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2296.529689][T15916] RBP: 00007f878c7cf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2296.537656][T15916] R10: 00000000000016b3 R11: 0000000000000246 R12: 0000000000000001 [ 2296.545619][T15916] R13: 00007ffe38db150f R14: 00007f878c7cf300 R15: 0000000000022000 [ 2296.553594][T15916] 22:53:05 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(0x0, 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r6 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r6, 0x800) creat(0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce", 0x36}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f3", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r7 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r6, r7, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x5000000) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x0, 0x7, 0x0, 0x1}, 0x48) 22:53:05 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r4 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x800) creat(0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615", 0xec}, {&(0x7f00000002c0)}, {0x0}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r4, r5, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x5000000) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:53:05 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) [ 2296.755755][ T27] audit: type=1800 audit(1681685583.730:15664): pid=15893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1170 res=0 errno=0 [ 2296.889526][ T27] audit: type=1804 audit(1681685583.770:15665): pid=15894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir895531445/syzkaller.RpEK9g/1570/bus" dev="sda1" ino=1174 res=1 errno=0 [ 2296.916742][ T27] audit: type=1800 audit(1681685583.770:15666): pid=15894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1174 res=0 errno=0 [ 2296.941048][ T27] audit: type=1804 audit(1681685584.170:15667): pid=15902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir1068322331/syzkaller.mpLRwx/1907/bus" dev="sda1" ino=1184 res=1 errno=0 [ 2297.220718][ T27] audit: type=1800 audit(1681685584.170:15668): pid=15902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1184 res=0 errno=0 22:53:06 executing program 0: r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r1, 0x0, 0x16b3) (fail_nth: 7) 22:53:06 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd2f) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) [ 2297.437031][ T27] audit: type=1804 audit(1681685584.240:15669): pid=15903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2578742061/syzkaller.W3XVNf/1935/bus" dev="sda1" ino=1190 res=1 errno=0 22:53:06 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(0x0, 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r6 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r6, 0x800) creat(0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce", 0x36}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f3", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r7 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r6, r7, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x6000000) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x0, 0x7, 0x0, 0x1}, 0x48) 22:53:06 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) [ 2297.679629][ T27] audit: type=1800 audit(1681685584.240:15670): pid=15903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1190 res=0 errno=0 [ 2297.705836][T15948] FAULT_INJECTION: forcing a failure. [ 2297.705836][T15948] name failslab, interval 1, probability 0, space 0, times 0 [ 2297.719105][T15948] CPU: 0 PID: 15948 Comm: syz-executor.0 Not tainted 6.3.0-rc6-next-20230414-syzkaller-12018-gd3f2cd248191 #0 [ 2297.730748][T15948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2297.740837][T15948] Call Trace: [ 2297.744122][T15948] [ 2297.747054][T15948] dump_stack_lvl+0x136/0x150 [ 2297.751741][T15948] should_fail_ex+0x4a3/0x5b0 [ 2297.756420][T15948] should_failslab+0x9/0x20 [ 2297.760919][T15948] kmem_cache_alloc+0x63/0x3b0 [ 2297.765699][T15948] __es_insert_extent+0x39b/0x13e0 [ 2297.770826][T15948] ? do_raw_write_lock+0x11e/0x3b0 [ 2297.775962][T15948] ? do_raw_read_unlock+0xe0/0xe0 [ 2297.781039][T15948] ? lock_acquire+0x32/0xc0 [ 2297.785601][T15948] ext4_es_insert_extent+0x302/0xbb0 [ 2297.790947][T15948] ? ext4_es_scan_clu+0x2e0/0x2e0 [ 2297.796005][T15948] ? lock_downgrade+0x690/0x690 [ 2297.800884][T15948] ? __ext4_handle_dirty_metadata+0x8e0/0x8e0 [ 2297.807019][T15948] ? __es_find_extent_range+0x197/0x4b0 [ 2297.812590][T15948] ? ext4_es_find_extent_range+0x138/0x480 [ 2297.818430][T15948] ? __ext4_handle_dirty_metadata+0x8e0/0x8e0 [ 2297.824546][T15948] ? rcu_is_watching+0x12/0xb0 [ 2297.829353][T15948] ext4_ext_map_blocks+0x1a91/0x5be0 [ 2297.834668][T15948] ? __lock_acquire+0x1916/0x5df0 [ 2297.839722][T15948] ? is_bpf_text_address+0x7b/0x1b0 [ 2297.844949][T15948] ? ext4_ext_release+0x10/0x10 [ 2297.849854][T15948] ? find_held_lock+0x2d/0x110 [ 2297.854638][T15948] ? __down_read_common+0x884/0xf30 [ 2297.859859][T15948] ? down_write_nested+0x200/0x200 [ 2297.865037][T15948] ? lock_sync+0x190/0x190 [ 2297.869476][T15948] ? rcu_is_watching+0x12/0xb0 [ 2297.874264][T15948] ? trace_lock_acquire+0x12d/0x180 [ 2297.879507][T15948] ? ext4_map_blocks+0x267/0x18d0 [ 2297.884550][T15948] ? lock_acquire+0x32/0xc0 [ 2297.889073][T15948] ? ext4_map_blocks+0x267/0x18d0 [ 2297.894122][T15948] ext4_map_blocks+0xa7f/0x18d0 [ 2297.899009][T15948] ? ext4_issue_zeroout+0x200/0x200 [ 2297.904241][T15948] ? kasan_save_stack+0x32/0x40 [ 2297.909127][T15948] ? kasan_save_stack+0x22/0x40 [ 2297.914006][T15948] ? kasan_set_track+0x25/0x30 [ 2297.918797][T15948] ? __kasan_kmalloc+0xa2/0xb0 [ 2297.923589][T15948] ? __iomap_dio_rw+0x22b/0x1c20 [ 2297.928545][T15948] ? iomap_dio_rw+0x40/0xa0 [ 2297.933070][T15948] ? generic_file_splice_read+0x165/0x1b0 [ 2297.938815][T15948] ? vfs_splice_read+0x1bd/0x250 [ 2297.943782][T15948] ? splice_direct_to_actor+0x2ab/0x8a0 [ 2297.949351][T15948] ? do_splice_direct+0x1ab/0x280 [ 2297.954396][T15948] ? do_sendfile+0xb19/0x12c0 [ 2297.959094][T15948] ? __x64_sys_sendfile64+0x1d0/0x210 [ 2297.964481][T15948] ? do_syscall_64+0x39/0xb0 [ 2297.969094][T15948] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2297.975185][T15948] ext4_iomap_begin+0x6c9/0x7a0 [ 2297.980064][T15948] ? ext4_iomap_begin_report+0x610/0x610 [ 2297.985728][T15948] ? ext4_iomap_begin_report+0x610/0x610 [ 2297.991380][T15948] iomap_iter+0x446/0x10e0 [ 2297.995810][T15948] ? filemap_check_errors+0xa9/0x150 [ 2298.001123][T15948] __iomap_dio_rw+0x72b/0x1c20 [ 2298.005941][T15948] ? iomap_dio_bio_iter+0x1440/0x1440 [ 2298.011355][T15948] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2298.017397][T15948] ? lock_sync+0x190/0x190 [ 2298.021850][T15948] ? rcu_is_watching+0x12/0xb0 [ 2298.026659][T15948] ? trace_lock_acquire+0x12d/0x180 [ 2298.031894][T15948] iomap_dio_rw+0x40/0xa0 [ 2298.036252][T15948] ext4_file_read_iter+0x4be/0x690 [ 2298.041402][T15948] direct_splice_read+0x3cc/0x980 [ 2298.046467][T15948] ? fsnotify+0x16e0/0x16e0 [ 2298.051002][T15948] ? vfs_splice_read+0x250/0x250 [ 2298.055975][T15948] ? check_slab+0x110/0x110 [ 2298.060503][T15948] ? lock_acquire+0x32/0xc0 [ 2298.065025][T15948] ? check_slab+0x110/0x110 [ 2298.069554][T15948] ? fsnotify_perm.part.0+0x221/0x610 [ 2298.074950][T15948] ? apparmor_file_permission+0x272/0x4e0 [ 2298.080705][T15948] generic_file_splice_read+0x165/0x1b0 [ 2298.086274][T15948] ? direct_splice_read+0x980/0x980 [ 2298.091518][T15948] vfs_splice_read+0x1bd/0x250 [ 2298.096332][T15948] splice_direct_to_actor+0x2ab/0x8a0 [ 2298.101751][T15948] ? do_splice_direct+0x280/0x280 [ 2298.106816][T15948] ? folio_flags.constprop.0+0x150/0x150 [ 2298.112474][T15948] ? bpf_lsm_file_permission+0x9/0x10 [ 2298.117865][T15948] ? security_file_permission+0xaf/0xd0 [ 2298.123444][T15948] do_splice_direct+0x1ab/0x280 [ 2298.128322][T15948] ? splice_direct_to_actor+0x8a0/0x8a0 [ 2298.133910][T15948] do_sendfile+0xb19/0x12c0 [ 2298.138451][T15948] ? vfs_iocb_iter_write+0x480/0x480 [ 2298.143802][T15948] __x64_sys_sendfile64+0x1d0/0x210 [ 2298.149014][T15948] ? ksys_write+0x1a3/0x250 [ 2298.153543][T15948] ? __ia32_sys_sendfile+0x220/0x220 [ 2298.158849][T15948] ? syscall_enter_from_user_mode+0x26/0x80 [ 2298.164766][T15948] do_syscall_64+0x39/0xb0 [ 2298.169208][T15948] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2298.175128][T15948] RIP: 0033:0x7f878ba8c169 [ 2298.179557][T15948] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2298.199177][T15948] RSP: 002b:00007f878c7cf168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2298.207607][T15948] RAX: ffffffffffffffda RBX: 00007f878bbabf80 RCX: 00007f878ba8c169 [ 2298.215590][T15948] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2298.223569][T15948] RBP: 00007f878c7cf1d0 R08: 0000000000000000 R09: 0000000000000000 22:53:06 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r2, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab88000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:53:07 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r4 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x800) creat(0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615", 0xec}, {&(0x7f00000002c0)}, {0x0}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r4, r5, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x6000000) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) [ 2298.231547][T15948] R10: 00000000000016b3 R11: 0000000000000246 R12: 0000000000000001 [ 2298.239530][T15948] R13: 00007ffe38db150f R14: 00007f878c7cf300 R15: 0000000000022000 [ 2298.247528][T15948] 22:53:07 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:53:07 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd30) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:53:07 executing program 0: r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r1, 0x0, 0x16b3) (fail_nth: 8) 22:53:07 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:53:07 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(0x0, 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r6 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r6, 0x800) creat(0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce", 0x36}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f3", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r7 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r6, r7, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x7000000) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x0, 0x7, 0x0, 0x1}, 0x48) [ 2299.226496][T15979] FAULT_INJECTION: forcing a failure. [ 2299.226496][T15979] name failslab, interval 1, probability 0, space 0, times 0 [ 2299.239449][T15979] CPU: 0 PID: 15979 Comm: syz-executor.0 Not tainted 6.3.0-rc6-next-20230414-syzkaller-12018-gd3f2cd248191 #0 [ 2299.251114][T15979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2299.261169][T15979] Call Trace: [ 2299.264446][T15979] [ 2299.267373][T15979] dump_stack_lvl+0x136/0x150 [ 2299.272068][T15979] should_fail_ex+0x4a3/0x5b0 [ 2299.276746][T15979] should_failslab+0x9/0x20 [ 2299.281248][T15979] __kmem_cache_alloc_node+0x5b/0x320 [ 2299.286621][T15979] ? iter_file_splice_write+0x16c/0xc80 [ 2299.292170][T15979] ? direct_splice_read+0x450/0x980 [ 2299.297379][T15979] ? iter_file_splice_write+0x16c/0xc80 [ 2299.302929][T15979] __kmalloc+0x4e/0x190 [ 2299.307117][T15979] iter_file_splice_write+0x16c/0xc80 [ 2299.312506][T15979] ? page_cache_pipe_buf_try_steal+0x350/0x350 [ 2299.318662][T15979] ? check_slab+0x110/0x110 [ 2299.323163][T15979] ? lock_acquire+0x32/0xc0 [ 2299.327665][T15979] ? check_slab+0x110/0x110 [ 2299.332177][T15979] ? generic_file_splice_read+0x139/0x1b0 [ 2299.337903][T15979] ? page_cache_pipe_buf_try_steal+0x350/0x350 [ 2299.344065][T15979] direct_splice_actor+0x114/0x180 [ 2299.349186][T15979] splice_direct_to_actor+0x335/0x8a0 [ 2299.354563][T15979] ? do_splice_direct+0x280/0x280 [ 2299.359594][T15979] ? folio_flags.constprop.0+0x150/0x150 [ 2299.365230][T15979] ? bpf_lsm_file_permission+0x9/0x10 [ 2299.370603][T15979] ? security_file_permission+0xaf/0xd0 [ 2299.376154][T15979] do_splice_direct+0x1ab/0x280 [ 2299.381011][T15979] ? splice_direct_to_actor+0x8a0/0x8a0 [ 2299.386567][T15979] do_sendfile+0xb19/0x12c0 [ 2299.391078][T15979] ? vfs_iocb_iter_write+0x480/0x480 [ 2299.396377][T15979] __x64_sys_sendfile64+0x1d0/0x210 [ 2299.401573][T15979] ? ksys_write+0x1a3/0x250 [ 2299.406078][T15979] ? __ia32_sys_sendfile+0x220/0x220 [ 2299.411361][T15979] ? syscall_enter_from_user_mode+0x26/0x80 [ 2299.417258][T15979] do_syscall_64+0x39/0xb0 [ 2299.421676][T15979] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2299.427569][T15979] RIP: 0033:0x7f878ba8c169 [ 2299.431982][T15979] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2299.451617][T15979] RSP: 002b:00007f878c7cf168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2299.460028][T15979] RAX: ffffffffffffffda RBX: 00007f878bbabf80 RCX: 00007f878ba8c169 [ 2299.467995][T15979] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 22:53:08 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r2, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab88000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) [ 2299.475963][T15979] RBP: 00007f878c7cf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2299.483930][T15979] R10: 00000000000016b3 R11: 0000000000000246 R12: 0000000000000001 [ 2299.491899][T15979] R13: 00007ffe38db150f R14: 00007f878c7cf300 R15: 0000000000022000 [ 2299.499906][T15979] 22:53:08 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r4 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x800) creat(0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615", 0xec}, {&(0x7f00000002c0)}, {0x0}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r4, r5, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x7000000) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:53:08 executing program 0: r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r0, r1, 0x0, 0x16b3) (fail_nth: 9) 22:53:08 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:53:08 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd31) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:53:08 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(0x0, 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r6 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r6, 0x800) creat(0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce", 0x36}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f3", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r7 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r6, r7, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x9000000) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x0, 0x7, 0x0, 0x1}, 0x48) [ 2300.106694][ T27] kauditd_printk_skb: 41 callbacks suppressed [ 2300.106707][ T27] audit: type=1804 audit(1681685588.820:15712): pid=15996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1892171996/syzkaller.Q2741I/2041/bus" dev="sda1" ino=1177 res=1 errno=0 [ 2300.306282][ T27] audit: type=1800 audit(1681685588.860:15713): pid=15996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1177 res=0 errno=0 22:53:09 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r2, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab88000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) [ 2300.482400][ T27] audit: type=1804 audit(1681685588.870:15714): pid=15997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2578742061/syzkaller.W3XVNf/1939/bus" dev="sda1" ino=1178 res=1 errno=0 22:53:09 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r4 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x800) creat(0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615", 0xec}, {&(0x7f00000002c0)}, {0x0}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r4, r5, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x18000000) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) 22:53:09 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) [ 2300.744282][ T27] audit: type=1800 audit(1681685588.870:15715): pid=15997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1178 res=0 errno=0 22:53:09 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd32) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) [ 2300.831443][ T27] audit: type=1804 audit(1681685589.060:15716): pid=16005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir1068322331/syzkaller.mpLRwx/1912/bus" dev="sda1" ino=1179 res=1 errno=0 22:53:09 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(0x0, 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r6 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r6, 0x800) creat(0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce", 0x36}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f3", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r7 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r6, r7, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x18000000) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x0, 0x7, 0x0, 0x1}, 0x48) [ 2301.072689][ T27] audit: type=1800 audit(1681685589.060:15717): pid=16005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1179 res=0 errno=0 [ 2301.195674][T16027] FAULT_INJECTION: forcing a failure. [ 2301.195674][T16027] name fail_page_alloc, interval 1, probability 0, space 0, times 0 22:53:10 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab8800000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) [ 2301.386305][T16027] CPU: 0 PID: 16027 Comm: syz-executor.0 Not tainted 6.3.0-rc6-next-20230414-syzkaller-12018-gd3f2cd248191 #0 [ 2301.397979][T16027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2301.408032][T16027] Call Trace: [ 2301.411306][T16027] [ 2301.414234][T16027] dump_stack_lvl+0x136/0x150 [ 2301.418934][T16027] should_fail_ex+0x4a3/0x5b0 [ 2301.423914][T16027] prepare_alloc_pages+0x178/0x570 [ 2301.429049][T16027] __alloc_pages+0x149/0x4a0 [ 2301.433684][T16027] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2301.437226][ T27] audit: type=1804 audit(1681685589.490:15718): pid=16010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir4110182140/syzkaller.hTdUky/1510/bus" dev="sda1" ino=1166 res=1 errno=0 [ 2301.440486][T16027] ? filemap_get_entry+0x203/0x430 [ 2301.440568][T16027] ? lock_downgrade+0x690/0x690 [ 2301.475884][T16027] alloc_pages+0x1aa/0x270 [ 2301.480307][T16027] folio_alloc+0x20/0x70 [ 2301.484549][T16027] filemap_alloc_folio+0x3ad/0x450 [ 2301.489662][T16027] ? trace_mm_filemap_delete_from_page_cache+0x190/0x190 [ 2301.496688][T16027] ? ext4_xattr_security_set+0x50/0x50 [ 2301.502145][T16027] ? __vfs_getxattr+0x140/0x1a0 [ 2301.507000][T16027] __filemap_get_folio+0x2a6/0x990 [ 2301.512117][T16027] ext4_da_write_begin+0x466/0x8b0 [ 2301.517232][T16027] ? ext4_write_begin+0x1020/0x1020 [ 2301.522434][T16027] ? current_time+0x1fe/0x2c0 [ 2301.527113][T16027] generic_perform_write+0x256/0x570 [ 2301.532404][T16027] ? generic_file_readonly_mmap+0x180/0x180 [ 2301.538294][T16027] ? iunique+0x370/0x370 [ 2301.542541][T16027] ext4_buffered_write_iter+0x15b/0x460 [ 2301.548093][T16027] ext4_file_write_iter+0xbe0/0x1740 [ 2301.553384][T16027] ? aa_file_perm+0x592/0x1250 [ 2301.558150][T16027] ? iter_file_splice_write+0x16c/0xc80 [ 2301.563701][T16027] ? kasan_save_stack+0x32/0x40 [ 2301.568553][T16027] ? kasan_set_track+0x25/0x30 [ 2301.573319][T16027] ? ext4_file_mmap+0x6c0/0x6c0 [ 2301.578172][T16027] ? do_sendfile+0xb19/0x12c0 [ 2301.582853][T16027] ? __x64_sys_sendfile64+0x1d0/0x210 [ 2301.588227][T16027] ? do_syscall_64+0x39/0xb0 [ 2301.592824][T16027] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2301.598907][T16027] ? debug_check_no_obj_freed+0x210/0x420 [ 2301.604661][T16027] do_iter_readv_writev+0x20b/0x3b0 [ 2301.609882][T16027] ? generic_copy_file_range+0x1d0/0x1d0 [ 2301.615575][T16027] ? bpf_lsm_file_permission+0x9/0x10 [ 2301.621208][T16027] ? security_file_permission+0xaf/0xd0 [ 2301.626762][T16027] do_iter_write+0x185/0x7e0 [ 2301.631362][T16027] vfs_iter_write+0x74/0xa0 [ 2301.635868][T16027] iter_file_splice_write+0x745/0xc80 [ 2301.641259][T16027] ? page_cache_pipe_buf_try_steal+0x350/0x350 [ 2301.647431][T16027] ? generic_file_splice_read+0x139/0x1b0 [ 2301.653152][T16027] ? page_cache_pipe_buf_try_steal+0x350/0x350 [ 2301.659310][T16027] direct_splice_actor+0x114/0x180 [ 2301.664427][T16027] splice_direct_to_actor+0x335/0x8a0 [ 2301.669802][T16027] ? do_splice_direct+0x280/0x280 [ 2301.674835][T16027] ? folio_flags.constprop.0+0x150/0x150 [ 2301.680472][T16027] ? bpf_lsm_file_permission+0x9/0x10 [ 2301.685843][T16027] ? security_file_permission+0xaf/0xd0 [ 2301.691430][T16027] do_splice_direct+0x1ab/0x280 [ 2301.696288][T16027] ? splice_direct_to_actor+0x8a0/0x8a0 [ 2301.701847][T16027] do_sendfile+0xb19/0x12c0 [ 2301.706359][T16027] ? vfs_iocb_iter_write+0x480/0x480 [ 2301.711649][T16027] ? xfd_validate_state+0x5d/0x180 [ 2301.716762][T16027] ? restore_fpregs_from_fpstate+0xc1/0x1c0 [ 2301.722656][T16027] __x64_sys_sendfile64+0x1d0/0x210 [ 2301.727845][T16027] ? __ia32_sys_sendfile+0x220/0x220 [ 2301.733125][T16027] ? syscall_enter_from_user_mode+0x26/0x80 [ 2301.739018][T16027] do_syscall_64+0x39/0xb0 [ 2301.743436][T16027] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2301.749328][T16027] RIP: 0033:0x7f878ba8c169 [ 2301.753826][T16027] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2301.773430][T16027] RSP: 002b:00007f878c7cf168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 22:53:10 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(0x0, 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x1ff, 0x1, 0xe9e7}, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r6 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r6, 0x800) creat(0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce", 0x36}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000004100000002000000ec0f3bee4b4b18bee7af353eb60e02bd3d30451e2675fe19c34509", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f3", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r7 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r6, r7, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0xf6ffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x0, 0x7, 0x0, 0x1}, 0x48) [ 2301.781840][T16027] RAX: ffffffffffffffda RBX: 00007f878bbabf80 RCX: 00007f878ba8c169 [ 2301.789808][T16027] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2301.797773][T16027] RBP: 00007f878c7cf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2301.805743][T16027] R10: 00000000000016b3 R11: 0000000000000246 R12: 0000000000000001 [ 2301.813711][T16027] R13: 00007ffe38db150f R14: 00007f878c7cf300 R15: 0000000000022000 [ 2301.821690][T16027] 22:53:10 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r2}, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r2, 0x1ff, 0x1, 0xe9e7}, 0x10) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) socket$unix(0x1, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="00af6ec1d9f2bc12faf400440000000000fc9d90b20dcb2e8589dc3a3fbac4a3409ae98225a11430790194aee1f69120eb4fcee7cbed785364f48db31943dbc8aed07e26215660c4d38131402e9aec4dbb4da5704d9ae324f79be6297502ba327ff4a1ced9a32bf0b91cb4c9c5bdf69169ec6ba1850bc1f796ef3db4378c828cf92080cb11dd74a4257a1e5476b84a333bfbc93d1d2d6e5a4321b0c616ba71e32900ef4bee53"], &(0x7f0000000580)='./file0\x00', 0x0, 0x102809a, &(0x7f0000000600)='\x8a\xd7]*\\\x00') r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r5, 0x800) creat(0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)="db1c6b355a918643e498ce7bcfb29925adc9aede03699d4875b1bd2005e3238f282bfebfdbe642f1edabf52cb592699cb5d82e876ce69b9b003bd63b4e300752cd68bffc0a84983138d579016c8ae30c82a2768972758f6e1829b8b3f70791ac342466d9f310dd25d0cf0088529a7f296ea310c0432a625d6b9691417a21b49ec4442a7055b5d533fa306696900eac2540b2db3876c42fe5b462a356830142d3edd78420f2ffed01605b9a65929e05772da377d8945aa5b4de941bde4d0f8f658ac1059511beed73cc46b426047acb34e311c7317d45b20dd51529c77692764b9b443a01c7ddf50ff11a9615681912aa43ec", 0xf2}, {&(0x7f00000002c0)="2f251188de5f12607f7046b3c4915e33f8d082c3738b71e450a50bef52607903fb7f5c7d5d49c53848154b31651c34d30be1fc1e73ce32", 0x37}, {&(0x7f0000000580)}, {0x0}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f383a99e2009000000236ab88000", @ANYRES32, @ANYRES32, @ANYRES32=0x0], 0x60, 0x26000001}}], 0x1, 0x24000004) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0x1dd00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x7, 0x7, 0x0, 0x1}, 0x48) [ 2301.933931][T16027] general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN [ 2301.945698][T16027] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 2301.954098][T16027] CPU: 1 PID: 16027 Comm: syz-executor.0 Not tainted 6.3.0-rc6-next-20230414-syzkaller-12018-gd3f2cd248191 #0 [ 2301.965715][T16027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2301.975765][T16027] RIP: 0010:folio_wait_stable+0x23/0xe0 [ 2301.981314][T16027] Code: 00 00 00 0f 1f 40 00 f3 0f 1e fa 55 48 89 fd 53 e8 82 93 d1 ff 48 8d 7d 18 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 a4 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b [ 2302.000917][T16027] RSP: 0018:ffffc90013b4f488 EFLAGS: 00010203 [ 2302.006983][T16027] RAX: dffffc0000000000 RBX: ffff8880821ae6b0 RCX: ffffc90004283000 [ 2302.014947][T16027] RDX: 0000000000000001 RSI: ffffffff81b1e30e RDI: 000000000000000c [ 2302.022910][T16027] RBP: fffffffffffffff4 R08: 0000000000000001 R09: ffffffff8c8f09d3 [ 2302.030876][T16027] R10: fffffbfff191e13a R11: 0000000000000000 R12: 0000000000000000 [ 2302.038845][T16027] R13: ffff8880821ae8d8 R14: 0000000000000800 R15: ffff8880821ae450 [ 2302.046819][T16027] FS: 00007f878c7cf700(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 2302.055753][T16027] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2302.062342][T16027] CR2: 00007f08b75831b8 CR3: 000000002a49e000 CR4: 00000000003506e0 [ 2302.070308][T16027] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2302.078280][T16027] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2302.086251][T16027] Call Trace: [ 2302.089529][T16027] [ 2302.092453][T16027] ext4_da_write_begin+0x47f/0x8b0 [ 2302.097575][T16027] ? ext4_write_begin+0x1020/0x1020 [ 2302.102776][T16027] ? current_time+0x1fe/0x2c0 [ 2302.107454][T16027] generic_perform_write+0x256/0x570 [ 2302.112750][T16027] ? generic_file_readonly_mmap+0x180/0x180 [ 2302.118660][T16027] ? iunique+0x370/0x370 [ 2302.122904][T16027] ext4_buffered_write_iter+0x15b/0x460 [ 2302.128453][T16027] ext4_file_write_iter+0xbe0/0x1740 [ 2302.133741][T16027] ? aa_file_perm+0x592/0x1250 [ 2302.138506][T16027] ? iter_file_splice_write+0x16c/0xc80 [ 2302.144074][T16027] ? kasan_save_stack+0x32/0x40 [ 2302.148924][T16027] ? kasan_set_track+0x25/0x30 [ 2302.153683][T16027] ? ext4_file_mmap+0x6c0/0x6c0 [ 2302.158564][T16027] ? do_sendfile+0xb19/0x12c0 [ 2302.163244][T16027] ? __x64_sys_sendfile64+0x1d0/0x210 [ 2302.168612][T16027] ? do_syscall_64+0x39/0xb0 [ 2302.173199][T16027] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2302.179264][T16027] ? debug_check_no_obj_freed+0x210/0x420 [ 2302.185020][T16027] do_iter_readv_writev+0x20b/0x3b0 [ 2302.190220][T16027] ? generic_copy_file_range+0x1d0/0x1d0 [ 2302.195853][T16027] ? bpf_lsm_file_permission+0x9/0x10 [ 2302.201224][T16027] ? security_file_permission+0xaf/0xd0 [ 2302.206771][T16027] do_iter_write+0x185/0x7e0 [ 2302.211364][T16027] vfs_iter_write+0x74/0xa0 [ 2302.215869][T16027] iter_file_splice_write+0x745/0xc80 [ 2302.221246][T16027] ? page_cache_pipe_buf_try_steal+0x350/0x350 [ 2302.227401][T16027] ? generic_file_splice_read+0x139/0x1b0 [ 2302.233117][T16027] ? page_cache_pipe_buf_try_steal+0x350/0x350 [ 2302.239268][T16027] direct_splice_actor+0x114/0x180 [ 2302.244375][T16027] splice_direct_to_actor+0x335/0x8a0 [ 2302.249743][T16027] ? do_splice_direct+0x280/0x280 [ 2302.254766][T16027] ? folio_flags.constprop.0+0x150/0x150 [ 2302.260398][T16027] ? bpf_lsm_file_permission+0x9/0x10 [ 2302.265768][T16027] ? security_file_permission+0xaf/0xd0 [ 2302.271314][T16027] do_splice_direct+0x1ab/0x280 [ 2302.276161][T16027] ? splice_direct_to_actor+0x8a0/0x8a0 [ 2302.281746][T16027] do_sendfile+0xb19/0x12c0 [ 2302.286251][T16027] ? vfs_iocb_iter_write+0x480/0x480 [ 2302.291535][T16027] ? xfd_validate_state+0x5d/0x180 [ 2302.296664][T16027] ? restore_fpregs_from_fpstate+0xc1/0x1c0 [ 2302.302582][T16027] __x64_sys_sendfile64+0x1d0/0x210 [ 2302.307777][T16027] ? __ia32_sys_sendfile+0x220/0x220 [ 2302.313054][T16027] ? syscall_enter_from_user_mode+0x26/0x80 [ 2302.318943][T16027] do_syscall_64+0x39/0xb0 [ 2302.323705][T16027] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2302.329599][T16027] RIP: 0033:0x7f878ba8c169 [ 2302.334008][T16027] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2302.353612][T16027] RSP: 002b:00007f878c7cf168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2302.362185][T16027] RAX: ffffffffffffffda RBX: 00007f878bbabf80 RCX: 00007f878ba8c169 [ 2302.370148][T16027] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2302.378109][T16027] RBP: 00007f878c7cf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2302.386081][T16027] R10: 00000000000016b3 R11: 0000000000000246 R12: 0000000000000001 [ 2302.394040][T16027] R13: 00007ffe38db150f R14: 00007f878c7cf300 R15: 0000000000022000 [ 2302.402007][T16027] [ 2302.405014][T16027] Modules linked in: [ 2302.424465][T16027] ---[ end trace 0000000000000000 ]--- [ 2302.430362][T16027] RIP: 0010:folio_wait_stable+0x23/0xe0 [ 2302.447171][T16027] Code: 00 00 00 0f 1f 40 00 f3 0f 1e fa 55 48 89 fd 53 e8 82 93 d1 ff 48 8d 7d 18 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 a4 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b [ 2302.478781][ T27] audit: type=1800 audit(1681685589.490:15719): pid=16010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1166 res=0 errno=0 [ 2302.503231][ T27] audit: type=1804 audit(1681685589.590:15720): pid=16013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1892171996/syzkaller.Q2741I/2042/bus" dev="sda1" ino=1185 res=1 errno=0 [ 2302.533693][ T27] audit: type=1800 audit(1681685589.600:15721): pid=16013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1185 res=0 errno=0 [ 2302.602684][T16027] RSP: 0018:ffffc90013b4f488 EFLAGS: 00010203 [ 2302.609313][T16027] RAX: dffffc0000000000 RBX: ffff8880821ae6b0 RCX: ffffc90004283000 [ 2302.662391][T16027] RDX: 0000000000000001 RSI: ffffffff81b1e30e RDI: 000000000000000c [ 2302.698740][T16027] RBP: fffffffffffffff4 R08: 0000000000000001 R09: ffffffff8c8f09d3 [ 2302.735881][T16027] R10: fffffbfff191e13a R11: 0000000000000000 R12: 0000000000000000 [ 2302.775334][T16027] R13: ffff8880821ae8d8 R14: 0000000000000800 R15: ffff8880821ae450 [ 2302.814541][T16027] FS: 00007f878c7cf700(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 2302.861501][T16027] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2302.895373][T16027] CR2: 0000000020491000 CR3: 000000002a49e000 CR4: 00000000003506f0 [ 2302.937982][T16027] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2302.981410][T16027] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2303.021517][T16027] Kernel panic - not syncing: Fatal exception [ 2303.027803][T16027] Kernel Offset: disabled [ 2303.032126][T16027] Rebooting in 86400 seconds..