recover'}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@fmask={'fmask'}}]}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000000)={0x1, 0x7fff}) 22:37:11 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17cc7e5737c"}) [ 252.259519] FAULT_INJECTION: forcing a failure. [ 252.259519] name failslab, interval 1, probability 0, space 0, times 0 22:37:11 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000080)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x1}, 0x188, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) remap_file_pages(&(0x7f0000fea000/0x13000)=nil, 0x13000, 0x4000000, 0x7, 0x0) [ 252.318176] ntfs: (device loop0): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 252.345430] CPU: 0 PID: 10353 Comm: syz-executor.4 Not tainted 4.14.156-syzkaller #0 [ 252.353354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 252.362718] Call Trace: 22:37:11 executing program 3: syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xfffffffffffffffc, 0x40) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SVE_GET_VL(0x33, 0x4322) [ 252.365336] dump_stack+0x142/0x197 [ 252.368992] should_fail.cold+0x10f/0x159 [ 252.373182] should_failslab+0xdb/0x130 [ 252.377181] kmem_cache_alloc+0x2d7/0x780 [ 252.381349] copy_process.part.0+0x4450/0x6a00 [ 252.385949] ? __cleanup_sighand+0x50/0x50 [ 252.385964] ? lock_downgrade+0x740/0x740 [ 252.394330] _do_fork+0x19e/0xce0 [ 252.397792] ? fork_idle+0x280/0x280 [ 252.398167] vhci_hcd: default hub control req: 0000 v0000 i0000 l124 [ 252.401509] ? fput+0xd4/0x150 [ 252.411201] ? SyS_write+0x15e/0x230 [ 252.411220] SyS_clone+0x37/0x50 22:37:11 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x1}, 0x188, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 252.411228] ? sys_vfork+0x30/0x30 [ 252.411243] do_syscall_64+0x1e8/0x640 [ 252.411251] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 252.411272] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 252.411281] RIP: 0033:0x45a679 [ 252.411289] RSP: 002b:00007f7ce7ebfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 252.446746] RAX: ffffffffffffffda RBX: 00007f7ce7ebfc90 RCX: 000000000045a679 [ 252.454011] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 252.461282] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 252.468549] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7ce7ec06d4 [ 252.475837] R13: 00000000004c0d71 R14: 00000000004d3d68 R15: 0000000000000004 22:37:11 executing program 4 (fault-call:2 fault-nth:53): r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:11 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) getsockname$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, &(0x7f00000000c0)=0x1c) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:11 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17cc7e5737c"}) [ 252.581059] ntfs: (device loop0): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 252.618533] FAULT_INJECTION: forcing a failure. [ 252.618533] name failslab, interval 1, probability 0, space 0, times 0 [ 252.645409] vhci_hcd: default hub control req: 0000 v0000 i0000 l124 [ 252.655146] CPU: 0 PID: 10387 Comm: syz-executor.4 Not tainted 4.14.156-syzkaller #0 [ 252.663073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 252.672435] Call Trace: [ 252.675046] dump_stack+0x142/0x197 [ 252.678693] should_fail.cold+0x10f/0x159 [ 252.682857] should_failslab+0xdb/0x130 [ 252.686848] kmem_cache_alloc+0x47/0x780 [ 252.690911] ? __lock_is_held+0xb6/0x140 22:37:11 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0xfff, 0x402500) accept$netrom(r0, 0x0, &(0x7f00000000c0)) r1 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000280)={0x78}, 0x78) ioctl$SIOCX25CALLACCPTAPPRV(0xffffffffffffffff, 0x89e8) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x1}, 0x188, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 252.690924] ? check_preemption_disabled+0x3c/0x250 [ 252.690937] anon_vma_clone+0xde/0x470 [ 252.690952] anon_vma_fork+0x87/0x4d0 [ 252.700030] copy_process.part.0+0x45e3/0x6a00 [ 252.700057] ? __cleanup_sighand+0x50/0x50 [ 252.700068] ? lock_downgrade+0x740/0x740 [ 252.700080] _do_fork+0x19e/0xce0 [ 252.700094] ? fork_idle+0x280/0x280 [ 252.727828] ? fput+0xd4/0x150 [ 252.731026] ? SyS_write+0x15e/0x230 [ 252.734747] SyS_clone+0x37/0x50 [ 252.738112] ? sys_vfork+0x30/0x30 [ 252.741767] do_syscall_64+0x1e8/0x640 22:37:11 executing program 3: syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 252.745659] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 252.750534] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 252.755727] RIP: 0033:0x45a679 [ 252.758914] RSP: 002b:00007f7ce7ebfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 252.766629] RAX: ffffffffffffffda RBX: 00007f7ce7ebfc90 RCX: 000000000045a679 [ 252.773913] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 252.781212] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 252.788487] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7ce7ec06d4 22:37:11 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x7a, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17cc7e5"}) [ 252.795755] R13: 00000000004c0d71 R14: 00000000004d3d68 R15: 0000000000000004 22:37:11 executing program 0: syz_mount_image$ntfs(&(0x7f0000000400)='ntfs\x00', &(0x7f0000000440)='./file0\x00', 0x900, 0x0, 0x0, 0x0, &(0x7f0000000c40)={[{@show_sys_files_no='show_sys_files=no'}, {@errors_continue='errors=continue'}, {@umask={'umask'}}, {@uid={'uid'}}, {@errors_recover='errors=recover'}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@fmask={'fmask'}}]}) inotify_init1(0x0) [ 252.883433] vhci_hcd: default hub control req: 0000 v0000 i0000 l122 22:37:11 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:37:11 executing program 4 (fault-call:2 fault-nth:54): r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:11 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r5 = fcntl$dupfd(r4, 0x0, r3) write$FUSE_ATTR(r5, &(0x7f0000000280)={0x78}, 0x78) ioctl$EVIOCGREP(r5, 0x80084503, &(0x7f0000000040)=""/162) r6 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) mmap(&(0x7f0000cb1000/0x3000)=nil, 0x3000, 0x4, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:11 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {0x8}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x6}, 0xfffffffffffffefe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) fsetxattr$trusted_overlay_origin(r1, &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x2, 0x1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) prctl$PR_GET_NAME(0x10, &(0x7f0000000100)=""/184) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000080), 0x4) [ 253.004182] FAULT_INJECTION: forcing a failure. [ 253.004182] name failslab, interval 1, probability 0, space 0, times 0 [ 253.016443] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 [ 253.047641] CPU: 1 PID: 10417 Comm: syz-executor.4 Not tainted 4.14.156-syzkaller #0 [ 253.055579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 253.064946] Call Trace: [ 253.067543] dump_stack+0x142/0x197 [ 253.071178] should_fail.cold+0x10f/0x159 [ 253.071194] should_failslab+0xdb/0x130 [ 253.071205] kmem_cache_alloc+0x2d7/0x780 [ 253.079311] ? anon_vma_clone+0x310/0x470 [ 253.087582] anon_vma_fork+0xe9/0x4d0 [ 253.091391] copy_process.part.0+0x45e3/0x6a00 [ 253.096078] ? __cleanup_sighand+0x50/0x50 [ 253.100325] ? lock_downgrade+0x740/0x740 [ 253.104478] _do_fork+0x19e/0xce0 [ 253.107944] ? fork_idle+0x280/0x280 [ 253.111669] ? fput+0xd4/0x150 [ 253.114281] vhci_hcd: default hub control req: 0000 v0000 i0000 l118 [ 253.114862] ? SyS_write+0x15e/0x230 [ 253.125058] SyS_clone+0x37/0x50 [ 253.128428] ? sys_vfork+0x30/0x30 [ 253.131978] do_syscall_64+0x1e8/0x640 [ 253.136326] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 253.141177] entry_SYSCALL_64_after_hwframe+0x42/0xb7 22:37:12 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x76, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44"}) 22:37:12 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x76, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44"}) [ 253.146366] RIP: 0033:0x45a679 [ 253.149553] RSP: 002b:00007f7ce7ebfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 253.157265] RAX: ffffffffffffffda RBX: 00007f7ce7ebfc90 RCX: 000000000045a679 [ 253.164545] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 253.171807] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 253.171812] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7ce7ec06d4 [ 253.171818] R13: 00000000004c0d71 R14: 00000000004d3d68 R15: 0000000000000004 22:37:12 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r6 = fcntl$dupfd(r5, 0x0, r4) r7 = syz_open_procfs(0x0, 0x0) preadv(r7, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000300)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r9) setresuid(r8, 0x0, r9) write$FUSE_ATTR(r6, &(0x7f0000000280)={0xfe8d, 0x0, 0x0, {0x4709, 0x4, 0x0, {0x0, 0x1000000000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8}}}, 0x78) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000340)="59980367ef7d1044a8961f422ce3687556e5057e844f53869f5f59b6e0bf5a0a471b64eec027ec54d468e3d083a91e4f6ee8a90aa244847e17cb0110dbedd78ce4240b43bb6bbd1247af29988a83d279b78799d2eed2f7f11648ed9fa334257c615c8b53de59d71e9e9f0bacf00269c0bd0d3d9eaf5007a7ce992a99801bbb96fa2782abf1ad4b1fae8e031dfd11d85b21264d30fdee2d71d023fae6dd644a", 0xfffffffffffffecf}, {&(0x7f0000000500)="bda274f018c5daeeed530db0ea3b6a4125373bfbd5e1d7bbbadf7f0daac5c9a22fa5447d49f91a97f5dd43dd7b8d4b73232c4e0680cf57f1b4940eb8d5779cd11a0c0d41164e53c2c575f0160664565174b6ad794b419c8edfa24588a79a6a710862c6affc39af3eda249c876aa3c01e57a2192d67220b2d2f39a3fe165bea8079538bfcca7200bb16ec4f0d75d186885eac65ea355097160b4ac7ec9990deb1104b45cf844504fb361f97c17c20c512dff9c5db3bcc18e7716323", 0xbb}, {&(0x7f0000000200)="751a783c69ba11f4174fb5dd8e44db6b1992b2e9b6ec669497ee9090e540c61a8870d3ae6d282df41ca52d5cd872482f9f943c40a8b1f8", 0x37}, {&(0x7f00000005c0)="f12f651b557581e6e8fb2bb6b903329c60a015ba4409b732a86f88e7ec0906ffbc71fc59beda782d1caf9e5bfc3607d83c5ce58d8222eacb76573fda4a6ff7f0489b3fe5fd83f0d46714a5c3100abdeca6289174be5b41bc796c4da5758bf48cb57337ac16e46c99ccafe48abd41e71f8a24981bdd8582e2cb58b9ec806d7d325b443cb4afad1e653fbc694111913113f9f294f6fd", 0x95}, {&(0x7f0000000680)="b6cc7ffb467c9237360ad3b21f7eda5f40f4e96e9662342892ca1fa5aaee611703a6ab836cd6d2efacff274a60d6b8c879cf77d520e36338", 0x38}, {&(0x7f00000006c0)="8b2b021c7b99fd8bbc40b1547005969de84e22877d817310a2403afd7abf133a03903503317a75f2f2a645bf1db6094aaffe2c53aad7f7ac65c33f95d12e7bb338950dfc1bb9d7", 0x47}, {&(0x7f0000000740)="cf4b1f3c03d43b37a565438587c860068ba911abad74661a7ce8b5cccbffa603cad03171bc77a0247c496c7768058bf9f9fdfa0e45ad17411eaa3d046403d234e02db7d3838ddbacb317fe5eee5d656a5079e1dfc32421e8812692d107abb96b94fda1ff0a3142e1a728b1870fd502e69a04720f9e21b841fa2141918ec2e9106983e5a708ab6a6e994d4e45c30e96499a3e57ad2720d91776cf4f15ee6d35af32f113cbd753c7", 0xa7}], 0x7}, 0x40) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r6, 0x84, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x4) getsockopt$inet_buf(r3, 0x0, 0x26, &(0x7f0000000040)=""/141, &(0x7f0000000100)=0x8d) [ 253.242134] vhci_hcd: default hub control req: 0000 v0000 i0000 l118 22:37:12 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x76, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44"}) 22:37:12 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffe6e2ffff2005ff13a7fffff7", @ANYRES32=r2], 0x2}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14) close(r2) socket$inet(0x10, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:37:12 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) getrlimit(0x8, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:12 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x77, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e1"}) [ 253.363219] vhci_hcd: default hub control req: 0000 v0000 i0000 l118 [ 253.428614] selinux_nlmsg_perm: 5 callbacks suppressed [ 253.428626] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=10452 comm=syz-executor.5 [ 253.451255] vhci_hcd: default hub control req: 0000 v0000 i0000 l119 22:37:12 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x77, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e1"}) [ 253.503601] netlink: 2220 bytes leftover after parsing attributes in process `syz-executor.5'. [ 253.539898] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=10452 comm=syz-executor.5 [ 253.553064] vhci_hcd: default hub control req: 0000 v0000 i0000 l119 [ 253.558160] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=10452 comm=syz-executor.5 [ 253.588293] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=10452 comm=syz-executor.5 [ 253.601392] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=10452 comm=syz-executor.5 [ 253.624757] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=10452 comm=syz-executor.5 22:37:12 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x77, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e1"}) [ 253.651809] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=10452 comm=syz-executor.5 [ 253.677383] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=10452 comm=syz-executor.5 [ 253.691220] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=10452 comm=syz-executor.5 22:37:12 executing program 4 (fault-call:2 fault-nth:55): r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:12 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r2, 0x29, 0x1, 0x0, &(0x7f00000000c0)) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 253.707948] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=10452 comm=syz-executor.5 [ 253.720434] vhci_hcd: default hub control req: 0000 v0000 i0000 l119 22:37:12 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x10b482, 0x0) write$rfkill(r2, &(0x7f0000000040)={0x0, 0x0, 0x3}, 0x66) [ 253.806617] FAULT_INJECTION: forcing a failure. [ 253.806617] name failslab, interval 1, probability 0, space 0, times 0 [ 253.840131] CPU: 1 PID: 10469 Comm: syz-executor.4 Not tainted 4.14.156-syzkaller #0 22:37:12 executing program 0: syz_mount_image$ntfs(&(0x7f0000000400)='ntfs\x00', &(0x7f0000000440)='./file0\x00', 0x900, 0x0, 0x0, 0x0, &(0x7f0000000c40)={[{@disable_sparse_no='disable_sparse=no'}, {@errors_continue='errors=continue'}, {@umask={'umask'}}, {@uid={'uid'}}, {@errors_recover='errors=recover'}, {@show_sys_files_no='sw\xc2\x00\x00\x00\x00\x00x\xcae\x8e*\x1a\xa6\x17o'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@fmask={'fmask'}}]}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r1, 0x29, 0x1, 0x0, &(0x7f00000000c0)) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000240)={0x0, 0xfb, 0x15, 0x6, 0x79, "520a706b7d04969d507d3c893bb15c08"}, 0x15, 0x1) pwrite64(r1, &(0x7f0000000040)="d2a294d7a437115a62779d4aba379b487726a34d7582c233eb6e2c766a55a5ea3a0eaaaaaad9167c2d6ffe75f7029019d0", 0x31, 0x1ff) r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x1bb) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000180)={r3}, 0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000140)={r3, 0xbbbe, 0x6, 0x1, 0x1, 0x9}, 0x14) ioctl$UI_DEV_CREATE(r0, 0x5501) 22:37:12 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x33d302) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r6 = fcntl$dupfd(r5, 0x0, r4) write$FUSE_ATTR(r6, &(0x7f0000000280)={0x78}, 0x78) ioctl$KDSKBLED(r6, 0x4b65, 0x4) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 253.848067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 253.857436] Call Trace: [ 253.860042] dump_stack+0x142/0x197 [ 253.863680] should_fail.cold+0x10f/0x159 [ 253.867838] should_failslab+0xdb/0x130 [ 253.871816] kmem_cache_alloc+0x2d7/0x780 [ 253.875974] ? anon_vma_clone+0x310/0x470 [ 253.880130] anon_vma_fork+0x1ce/0x4d0 [ 253.884109] copy_process.part.0+0x45e3/0x6a00 [ 253.888721] ? __cleanup_sighand+0x50/0x50 [ 253.892974] ? lock_downgrade+0x740/0x740 [ 253.897125] _do_fork+0x19e/0xce0 [ 253.900616] ? fork_idle+0x280/0x280 [ 253.904337] ? fput+0xd4/0x150 [ 253.907532] ? SyS_write+0x15e/0x230 [ 253.911254] SyS_clone+0x37/0x50 [ 253.914629] ? sys_vfork+0x30/0x30 [ 253.918173] do_syscall_64+0x1e8/0x640 [ 253.922066] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 253.926924] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 253.932118] RIP: 0033:0x45a679 [ 253.935306] RSP: 002b:00007f7ce7ebfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 253.943028] RAX: ffffffffffffffda RBX: 00007f7ce7ebfc90 RCX: 000000000045a679 22:37:12 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x200040) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r5 = fcntl$dupfd(r4, 0x0, r3) write$FUSE_ATTR(r5, &(0x7f0000000280)={0x78}, 0x78) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x5, 0x0, 0x2, 0x3}) ioctl$DRM_IOCTL_AGP_BIND(r5, 0x40106436, &(0x7f0000000080)={r6, 0x1000}) r7 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 253.950296] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 253.957567] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 253.964861] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7ce7ec06d4 [ 253.972137] R13: 00000000004c0d71 R14: 00000000004d3d68 R15: 0000000000000004 22:37:12 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x10b482, 0x0) write$rfkill(r2, &(0x7f0000000040)={0x0, 0x0, 0x3}, 0x66) 22:37:13 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000500)={0x0, {{0x2, 0x0, @local}}, 0x0, 0x2, [{{0x2, 0x0, @empty}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x190) 22:37:13 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='<\xf5H\xe2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:13 executing program 0: syz_mount_image$ntfs(&(0x7f0000000400)='ntfs\x00', &(0x7f0000000440)='./file0\x00', 0x900, 0x0, 0x0, 0x0, &(0x7f0000000c40)={[{@show_sys_files_no='show_sys_files=no'}, {@errors_continue='errors=continue'}, {@umask={'umask'}}, {@uid={'uid'}}, {@errors_recover='errors=recover'}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@fmask={'fmask'}}]}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) 22:37:13 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000340)="390000001300090468fe0700001a00000700ff3f03000000450001070000001419001a0004001210070000f48aa159", 0x2f}], 0x1) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492805, 0x0) 22:37:13 executing program 5: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x0, 0x0, 0x0, 0x0, 0x0) setpriority(0x1, 0x0, 0x0) 22:37:13 executing program 4 (fault-call:2 fault-nth:56): r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:13 executing program 1: io_setup(0x3, &(0x7f0000000200)=0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x0, 0x0) io_submit(r0, 0x0, &(0x7f00000014c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0xc2822, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) openat$apparmor_task_exec(0xffffffffffffff9c, 0x0, 0x3, 0x0) pipe(&(0x7f0000000300)) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000000)=0x7) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r4, 0x200004) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) sendfile(r1, r4, 0x0, 0x80001d00c0d0) 22:37:13 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PPPIOCGFLAGS(r3, 0x8004745a, &(0x7f00000000c0)) 22:37:13 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x50000000000, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7c000000240007050000003242ed5408567c1abf", @ANYRES32=r1, @ANYBLOB="00000060ffffffff000000f20a000100636f64656c00fdff4b00020008000500000000fe0700020000000000080005f300000000080003000000000008000500c0a5f8a4c04b6771d16b4500005f00080004000000000008004506000000000800010000"], 0x7c}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 22:37:13 executing program 0: syz_mount_image$ntfs(&(0x7f0000000400)='ntfs\x00', &(0x7f0000000440)='./file0\x00', 0x900, 0x0, 0x0, 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="73686f775f7379735f66696c65733d6e6f2c6572726f72733d636f6e74696e75652c756d61736b3d30f5197dd730303030303030303030303030302c7588011f0ee35334", @ANYRESHEX=0x0, @ANYBLOB="2c6572726f72733d7265636f7665722c73686f775f7379735f66696c65733d6e6f4b0b3a0de4f9bd73655f6d756c7469706c6965723d3078303030303030303030303030303030302c6d66745f7a6f6e655f6d756c7469706c6965723d30783030303030303030303030303030303000000000736b3d30303007000000000000003030303030303030303030302c00"]) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x1, 0x0, &(0x7f00000000c0)) syz_mount_image$nfs(&(0x7f0000000240)='nfs\x00', &(0x7f0000000280)='./file1\x00', 0x40a, 0x0, &(0x7f00000002c0), 0x101000, &(0x7f0000000300)='\xfd#em0^GPLeth1&*#eth0\x00') ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x81) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in=@remote, @in6=@empty}}, {{@in6=@mcast1}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, &(0x7f0000000140)=0xe8) syz_mount_image$nfs4(&(0x7f00000002c0)='nfs4\x00', &(0x7f0000000340)='./file1\x00', 0x7, 0x5, &(0x7f00000006c0)=[{&(0x7f0000000480)="b970c9483197716f725435bba9de1ebaa0407911347a00cbe4ca96433afb3dfc88e6e8a4290c0755ce7a5fb36451c41a36151ecba91fcf6bff744d1b14cc1a8494d055a4222e57fa3873547cd67c3e0da383c2c6aebb083ff296de87fd893ae67d42f15da67f7f6fba6b9ff42a4ef6153d017c384b45cf5add35aea1d983f48d503d4be8913173ac0b0cbb8dd42ebc8786de349fe8bf6b74e2cecbfb4e74642b40859747f52f8156a5fd19bcdfe6befbf5bea6a2a0b0dd6fc03b675be3e9b3d421553093e1b3ae8b3a5d7ddb9e5009024347ca0a1834b1fe424550ea498c2ef15a316a23e3", 0xe5, 0x2}, {&(0x7f0000000d40)="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", 0x1000}, {&(0x7f0000000580)="a4dc11203e6c6cc8507c504e8dcdd1c84935bb312f7e92d633783b21a76098d2cf2219f4b8ec46c707ed792c83be9908195b9bdf0add978ba2eb9861131124b03a77bb91ad558ead43a25952691489b7ef4e07b0cfbf4e4cbe6e08e40f8164e03f4ee6a1031eb52e942e2a22a635fa5c2648047be971a8e92ea27846a10e249e220dd7754e2653e25f06f3", 0x8b, 0x10001}, {&(0x7f0000000380)="aada952e0ad1c0bea59a849e85e53a630dca2dc16e0c50b98997e0f0b869f054cfed77a23e9fc98c43d4b84a5a63ad6f006a895b3958e5243039b30188fa4baa4449fd34774f11c6", 0x48, 0x8}, {&(0x7f0000000640)="8da9a0c063bfdabf352fe5b109dff399596772bf4bec207bcee3c88808f007629d5337ee81b2b728f4e0e15fd00b91cef1035b69a7c6587232cd00a8a75249bdb530a4e7cbbdd725da927b082c5a06", 0x4f}], 0x221010, &(0x7f0000000740)='!\x00') quotactl(0xb6, &(0x7f0000000000)='./file0\x00', 0xee01, &(0x7f0000000180)="8262b12ba61dd3c2dada759eaedec0c19e838b1672db49228c5dfc0785797846b70478f0317a56a883ce11da3cbd1af1f3e00efbe448fcd277ba24c9ef42190aae4192a83c2c9bf744fe40011ca9e4590487300106f5bdd6ddeb06e49c9217061233440cc25d9f12a5e7a90cb773045d21457ab7795640568482c9f2f806691b3582975c2abb6b1899891c0df01a5857fccd6c7390f91970591c5307") [ 254.473307] FAULT_INJECTION: forcing a failure. [ 254.473307] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 254.512557] CPU: 0 PID: 10531 Comm: syz-executor.4 Not tainted 4.14.156-syzkaller #0 [ 254.520480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 254.529840] Call Trace: [ 254.529863] dump_stack+0x142/0x197 [ 254.529885] should_fail.cold+0x10f/0x159 [ 254.540210] ? __might_sleep+0x93/0xb0 [ 254.544102] __alloc_pages_nodemask+0x1d6/0x7a0 [ 254.544116] ? save_stack_trace+0x16/0x20 [ 254.544125] ? save_stack+0x45/0xd0 [ 254.544136] ? __alloc_pages_slowpath+0x2930/0x2930 [ 254.561542] ? SyS_clone+0x37/0x50 [ 254.565086] ? do_syscall_64+0x1e8/0x640 [ 254.569158] ? __lock_acquire+0x5f7/0x4620 [ 254.573407] alloc_pages_current+0xec/0x1e0 [ 254.577734] pte_alloc_one+0x1a/0x100 [ 254.581537] copy_huge_pmd+0x7d/0x8c0 [ 254.585338] ? fault_around_bytes_get+0x50/0x50 [ 254.585354] copy_page_range+0x7a1/0x1de0 [ 254.585369] ? find_held_lock+0x35/0x130 [ 254.598235] ? vma_compute_subtree_gap+0x190/0x1f0 [ 254.603174] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 254.607925] ? __vma_link_rb+0x247/0x340 [ 254.607941] copy_process.part.0+0x4765/0x6a00 [ 254.607969] ? __cleanup_sighand+0x50/0x50 22:37:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f0000000000)={0x7b, 0x5, [0xc0000103, 0x0, 0x10000000000e1], [0xc1]}) [ 254.620820] ? lock_downgrade+0x740/0x740 [ 254.620839] _do_fork+0x19e/0xce0 [ 254.620851] ? fork_idle+0x280/0x280 [ 254.620865] ? fput+0xd4/0x150 [ 254.620874] ? SyS_write+0x15e/0x230 [ 254.620888] SyS_clone+0x37/0x50 [ 254.620895] ? sys_vfork+0x30/0x30 [ 254.620910] do_syscall_64+0x1e8/0x640 [ 254.650617] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 254.650641] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 254.650650] RIP: 0033:0x45a679 [ 254.650654] RSP: 002b:00007f7ce7ebfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 22:37:13 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$key(r3, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000011c0)=ANY=[], 0xffffffffffffff8b}}, 0x4008000) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r4, 0x29, 0x1, 0x0, &(0x7f00000000c0)) ioctl$sock_inet_SIOCGIFADDR(r4, 0x8915, &(0x7f00000000c0)={'veth0_to_bridge\x00', {0x2, 0x4e21, @multicast2}}) [ 254.650665] RAX: ffffffffffffffda RBX: 00007f7ce7ebfc90 RCX: 000000000045a679 [ 254.650671] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 254.650677] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 254.650683] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7ce7ec06d4 [ 254.650689] R13: 00000000004c0d71 R14: 00000000004d3d68 R15: 0000000000000004 22:37:13 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000300)="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", 0x1000) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r6, 0x29, 0x1, 0x0, &(0x7f00000000c0)) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000240)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000001300)={0xd8, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x5c, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3f1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x100}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3f}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, [], 0x26}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x8800}, 0x2000c042) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r8, 0x29, 0x1, 0x0, &(0x7f00000000c0)) getsockopt$inet6_mtu(r8, 0x29, 0x17, &(0x7f0000000140), &(0x7f0000000180)=0x4) getsockopt$IP6T_SO_GET_REVISION_MATCH(r6, 0x29, 0x44, &(0x7f0000000080)={'NETMAP\x00'}, &(0x7f0000000100)=0x1e) r9 = fcntl$dupfd(r5, 0x0, r4) write$FUSE_ATTR(r9, &(0x7f0000000280)={0x78}, 0x78) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r9, 0x84, 0x7, &(0x7f0000000040)={0x923}, 0x4) 22:37:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f0000000000)={0x7b, 0x5, [0xc0000103, 0x0, 0x100000000011e], [0xc1]}) 22:37:13 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x410000, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'filter\x00', 0x0, 0x3, 0xec, [], 0x6, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000100)=""/236}, &(0x7f0000000280)=0x78) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 254.937367] syz-executor.1 (10533) used greatest stack depth: 24640 bytes left 22:37:13 executing program 1: socket$alg(0x26, 0x5, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x80, 0x0) write$FUSE_IOCTL(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x23, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, &(0x7f00000000c0)) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) r2 = socket$isdn_base(0x22, 0x3, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x2, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) openat$vsock(0xffffffffffffff9c, 0x0, 0x64c0, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x4) recvmsg(r1, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1}, 0x100) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) rename(0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x18}]}, 0x30}}, 0x0) fcntl$dupfd(r2, 0x7bb9a2b335d46d36, r2) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0) ptrace$getsig(0x4202, 0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) [ 254.988263] kvm [10563]: vcpu0, guest rIP: 0xfff0 ignored wrmsr: 0x11e data 0x0 22:37:13 executing program 0: syz_mount_image$ntfs(&(0x7f0000000400)='ntfs\x00', &(0x7f0000000440)='./file0\x00', 0x900, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="2c54c9e1257d17958d00"]) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x10200, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000100)='TRUE', 0x4, 0x1) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6, 0x12, 0xffffffffffffffff, 0x756a0000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0xe, 0x4, 0x4c8, 0x2a0, 0x148, 0x148, 0x0, 0x0, 0x3f8, 0x3f8, 0x3f8, 0x3f8, 0x3f8, 0x4, &(0x7f0000000180), {[{{@ipv6={@mcast2, @rand_addr="7eee992023c91cb3962e1a3ed0a6557f", [0xff, 0xffffffff, 0xffffffff, 0xffffff00], [0xffffffff, 0xffffff00, 0x0, 0xff000000], 'veth1_to_bridge\x00', 'eql\x00', {}, {0xff}, 0x0, 0x1f, 0x7, 0x10}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@hl={0x28, 'hl\x00', 0x0, {0x2}}, @common=@srh={0x30, 'srh\x00', 0x0, {0x29, 0x7, 0x0, 0x2, 0xffff, 0x200, 0x204}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0x118, 0x158, 0x0, {}, [@common=@icmp6={0x28, 'icmp6\x00', 0x0, {0x3, 0x7, 0x1f}}, @common=@icmp6={0x28, 'icmp6\x00', 0x0, {0x10, 0x3f, 0xa7}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x7, 0x5, 0x8, 0x20, 0xffff, 0x460000, 0x7ff, 0x1000]}}}, {{@uncond, 0x0, 0x110, 0x158, 0x0, {}, [@common=@dst={0x48, 'dst\x00', 0x0, {0xdf, 0x0, 0x1, [0x8001, 0x7ff, 0x8, 0x7f, 0x304, 0x62, 0x3, 0x101, 0x3, 0x636, 0x7ff, 0x4, 0x7, 0xc1c3, 0x7, 0x2], 0x7}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@rand_addr="9c474b06e8b87173c970fcf56a6e1ef7", 'ip6gre0\x00', 0x3}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x528) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @remote}, 0xc) [ 255.074006] kvm [10563]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0 22:37:14 executing program 4 (fault-call:2 fault-nth:57): r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:14 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r6 = fcntl$dupfd(r5, 0x0, r4) write$FUSE_ATTR(r6, &(0x7f0000000280)={0x78}, 0x78) r7 = getpid() sched_setattr(r7, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r8 = getpgid(r7) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r6, 0xc1105518, &(0x7f0000000200)={{0x0, 0x0, 0xfff, 0x8001, 'syz0\x00', 0x85}, 0x5, 0x20000046, 0x6c1, r8, 0x9, 0x4, 'syz0\x00', &(0x7f0000000180)=['cpuset\x00', '&vboxnet1cpusetcgroup(#--!system\x00', '\x00', '/dev/usbmon#\x00', 'uservboxnet0bdev\x00', '/dev/dmmidi#\x00', '\'GPL./\xa6nodev!+vmnet0\x00', '/dev/dmmidi#\x00', '$\'\x00'], 0x79, [], [0x8, 0x0, 0x4b, 0x81]}) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r9, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r10, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r10, 0x29, 0x1, 0x0, &(0x7f00000000c0)) getsockopt$inet6_int(r3, 0x29, 0x1, 0x0, &(0x7f0000000040)=0xffffffa6) ioctl$EXT4_IOC_SWAP_BOOT(r9, 0x6611) r11 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x4, 0x800100) ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f0000000140)={0x6, r3, 0x1}) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:14 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x40501, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)="04000000010319", 0x7}], 0x1) [ 255.243238] FAULT_INJECTION: forcing a failure. [ 255.243238] name failslab, interval 1, probability 0, space 0, times 0 [ 255.246276] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 255.274032] CPU: 0 PID: 10597 Comm: syz-executor.4 Not tainted 4.14.156-syzkaller #0 [ 255.281948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 255.292345] Call Trace: [ 255.292373] dump_stack+0x142/0x197 [ 255.292392] should_fail.cold+0x10f/0x159 [ 255.292412] should_failslab+0xdb/0x130 [ 255.292422] kmem_cache_alloc+0x2d7/0x780 [ 255.292442] ptlock_alloc+0x20/0x70 [ 255.292455] pte_alloc_one+0x60/0x100 [ 255.292464] copy_huge_pmd+0x7d/0x8c0 [ 255.292472] ? fault_around_bytes_get+0x50/0x50 [ 255.292484] copy_page_range+0x7a1/0x1de0 [ 255.298727] ? find_held_lock+0x35/0x130 [ 255.298746] ? vma_compute_subtree_gap+0x190/0x1f0 [ 255.298768] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 255.344839] ? __vma_link_rb+0x247/0x340 [ 255.348916] copy_process.part.0+0x4765/0x6a00 [ 255.353533] ? __cleanup_sighand+0x50/0x50 [ 255.357773] ? lock_downgrade+0x740/0x740 [ 255.362118] _do_fork+0x19e/0xce0 [ 255.365576] ? fork_idle+0x280/0x280 [ 255.369326] ? fput+0xd4/0x150 [ 255.372528] ? SyS_write+0x15e/0x230 [ 255.376248] SyS_clone+0x37/0x50 [ 255.379635] ? sys_vfork+0x30/0x30 [ 255.383272] do_syscall_64+0x1e8/0x640 [ 255.387164] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 255.392025] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 255.397216] RIP: 0033:0x45a679 [ 255.400417] RSP: 002b:00007f7ce7ebfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 255.408240] RAX: ffffffffffffffda RBX: 00007f7ce7ebfc90 RCX: 000000000045a679 [ 255.415523] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 255.415529] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 255.415534] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7ce7ec06d4 22:37:14 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x440280, 0x0) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000080)={0x47, {{0x2, 0x4e24, @remote}}, 0x0, 0x2, [{{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e21, @local}}]}, 0x190) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000240)={0x0, 0x65a5}) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:14 executing program 0: syz_mount_image$ntfs(&(0x7f0000000400)='ntfs\x00', &(0x7f0000000440)='./file0\x00', 0x900, 0x0, 0x0, 0x0, &(0x7f0000000c40)={[{@show_sys_files_no='show_sys_files=no'}, {@errors_continue='errors=continue'}, {@umask={'umask'}}, {@uid={'uid'}}, {@errors_recover='errors=recover'}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@fmask={'fmask'}}]}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000013c0)='\'dgv/qachefileq\x00', 0x202100, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r5 = fcntl$dupfd(r4, 0x0, r3) write$FUSE_ATTR(r5, &(0x7f0000000280)={0x78}, 0x78) sendmsg$nl_xfrm(r5, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80610000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)=@newae={0x2b8, 0x1e, 0x4, 0x70bd28, 0x25dfdbfc, {{@in6=@mcast1, 0x4d6, 0x0, 0x33}, @in6=@rand_addr="35d775db938403dd49526fd0fe1174ff", 0x50}, [@migrate={0x30, 0x11, [{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x33, 0x0, 0x0, 0x3505, 0xa, 0xa}]}, @proto={0x8, 0x19, 0x3c}, @proto={0x8, 0x19, 0x15}, @sec_ctx={0xc8, 0x8, {0xc3, 0x8, 0x0, 0xdc, 0xbb, "6bfd467212404b5acaf81e73db7ab20a3936956d44c90b803eb7ebf9a0af0cd1e0db9e3436af61f1ec8ed176f621c71a5e2c37967a7609beec0ff5a0f62d30c6d2338d71c7b097ed8c6543e7a78368915304725b7d089a64011ce52d4ffe4a8254e80efa70c269125c7e88726ef632405b5175345c3d08c27e3bbf2974b81bfa999e36dbfb2ac4c67c0d111098416ce42b8b23f0db6fb6618d237395155011978f2d8ee74af2b9fb96145a2d50d5f723bb801638eb89d54e6edf78"}}, @mark={0xc, 0x15, {0x35075a, 0x1f}}, @algo_crypt={0xd0, 0x2, {{'ctr-aes-aesni\x00'}, 0x428, "fc883547aac77ca8a07147123306db9e012e9281b4b98b557a6eb6d77e62d8b9996ad01aaebdddf39b2b0c578753f818b62afb8ce7afdd5381b27ff93a608780ebfe20c4f7a81bfd3ae90c094b39dd91aca02f72703c23e41336e6cb67f9bdc9bad4a67ffe9e0d521c0c7580d53ea5eb756aba1e6b120752ecab93e56bf8b176bb301a84fc"}}, @migrate={0x5c, 0x11, [{@in=@remote, @in=@broadcast, 0x33, 0x4, 0x0, 0x3507, 0xa, 0xa}, {@in6=@empty, @in6=@rand_addr="e0c900917251cfa189eada2e075c493c", 0x64, 0x2, 0x0, 0x3504, 0x5, 0x2}]}, @lifetime_val={0x24, 0x9, {0x3ff, 0x5, 0x5b, 0x7}}, @proto={0x8, 0x19, 0x3c}, @mark={0xc, 0x15, {0x350759, 0x1}}]}, 0x2b8}, 0x1, 0x0, 0x0, 0x1000}, 0x8000) write$cgroup_pid(r2, &(0x7f0000000000), 0x10000000d) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_DMA(r1, 0xc0406429, &(0x7f0000000380)={r6, 0x7, &(0x7f0000000240)=[0x1, 0x10, 0xc195, 0xffff, 0x2, 0x5, 0x5], &(0x7f00000002c0)=[0x800, 0x8], 0x20, 0x1, 0x9, &(0x7f0000000300)=[0xffff], &(0x7f0000000340)=[0x8]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000140)={r6, &(0x7f0000000040)=""/239}) write$FUSE_POLL(r2, &(0x7f00000003c0)={0x18, 0x0, 0x5, {0x9d1e}}, 0x18) [ 255.415540] R13: 00000000004c0d71 R14: 00000000004d3d68 R15: 0000000000000004 22:37:14 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000040)={0xa78, 0x7f, 0x8}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:14 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x40501, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)="04000000010319", 0x7}], 0x1) 22:37:14 executing program 4 (fault-call:2 fault-nth:58): r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 255.607742] FAULT_INJECTION: forcing a failure. [ 255.607742] name failslab, interval 1, probability 0, space 0, times 0 [ 255.620851] CPU: 1 PID: 10624 Comm: syz-executor.4 Not tainted 4.14.156-syzkaller #0 [ 255.628762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 255.638127] Call Trace: [ 255.640737] dump_stack+0x142/0x197 [ 255.644394] should_fail.cold+0x10f/0x159 [ 255.648571] should_failslab+0xdb/0x130 [ 255.652560] kmem_cache_alloc+0x2d7/0x780 [ 255.656716] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 255.661475] ? __vma_link_rb+0x247/0x340 [ 255.665542] copy_process.part.0+0x4450/0x6a00 [ 255.670192] ? __cleanup_sighand+0x50/0x50 [ 255.674433] ? lock_downgrade+0x740/0x740 [ 255.678591] _do_fork+0x19e/0xce0 [ 255.682049] ? fork_idle+0x280/0x280 [ 255.685851] ? fput+0xd4/0x150 [ 255.689049] ? SyS_write+0x15e/0x230 [ 255.692785] SyS_clone+0x37/0x50 [ 255.696159] ? sys_vfork+0x30/0x30 [ 255.699706] do_syscall_64+0x1e8/0x640 [ 255.703597] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 255.708449] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 255.713638] RIP: 0033:0x45a679 [ 255.716829] RSP: 002b:00007f7ce7ebfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 255.724543] RAX: ffffffffffffffda RBX: 00007f7ce7ebfc90 RCX: 000000000045a679 [ 255.731830] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 255.739109] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 255.746419] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7ce7ec06d4 22:37:14 executing program 0: syz_mount_image$ntfs(&(0x7f0000000400)='ntfs\x00', &(0x7f0000000440)='./file0\x00', 0x900, 0x0, 0x0, 0x0, &(0x7f0000000c40)={[{@show_sys_files_no='show_sys_files=no'}, {@errors_continue='errors=continue'}, {@umask={'umask'}}, {@uid={'uid'}}, {@errors_recover='errors=recover'}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@fmask={'fmask'}}]}) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x11000, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000040)) 22:37:14 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x40501, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)="04000000010319", 0x7}], 0x1) [ 255.753697] R13: 00000000004c0d71 R14: 00000000004d3d68 R15: 0000000000000004 [ 255.907825] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 22:37:15 executing program 1: 22:37:15 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x23, 0x80) ioctl$EVIOCSABS20(r4, 0x401845e0, &(0x7f0000000080)={0x6, 0x6271, 0x1, 0x7, 0x9, 0x1a}) 22:37:15 executing program 4 (fault-call:2 fault-nth:59): r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:15 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setfsgid(0x0) 22:37:15 executing program 0: syz_mount_image$ntfs(&(0x7f0000000400)='ntfs\x00', &(0x7f0000000440)='./file0\x00', 0x900, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='show_sys_files=no,errors=continue,umask=00000000000000000000000,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c6572726f72733d7265636f65722c73686f775f7379c1ed54596c656e3d6e6f2c6d66745f7a6f6e655f6d756c7469706c6965723d3078303030303030303030303030303030302c6d66745f7a6f6e655f6d756c7469706c6965723d3078303030303030306401000000000000302c666d61736b3d303030303030303030302c00631923725da799d87477eb858143be22e1e659e5e0c60ec2eec06cf92f2b477a28612eba9a65acca91fed983eaa995efcb8d419e7cb240f7b33a6b2ecdc18055a510"]) symlink(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file1\x00') r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r2 = fcntl$dupfd(r1, 0x0, r0) write$FUSE_ATTR(r2, &(0x7f0000000280)={0x78}, 0x78) r3 = dup(0xffffffffffffffff) renameat(r2, &(0x7f00000001c0)='./file0\x00', r3, &(0x7f0000000200)='./file0\x00') 22:37:15 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e0000002f008151e00f8000db4cb9040f4865160f00030014000000120000140e003c001500cd5edc2976d153b4", 0x2e}], 0x1}, 0x0) [ 256.289734] FAULT_INJECTION: forcing a failure. [ 256.289734] name failslab, interval 1, probability 0, space 0, times 0 [ 256.349149] CPU: 0 PID: 10654 Comm: syz-executor.4 Not tainted 4.14.156-syzkaller #0 [ 256.357085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 256.366484] Call Trace: [ 256.369094] dump_stack+0x142/0x197 [ 256.372738] should_fail.cold+0x10f/0x159 [ 256.376912] should_failslab+0xdb/0x130 [ 256.380899] kmem_cache_alloc+0x2d7/0x780 [ 256.385057] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 256.389969] ? __vma_link_rb+0x247/0x340 [ 256.394035] copy_process.part.0+0x4450/0x6a00 [ 256.398673] ? __cleanup_sighand+0x50/0x50 [ 256.402919] ? lock_downgrade+0x740/0x740 [ 256.407076] _do_fork+0x19e/0xce0 [ 256.410539] ? fork_idle+0x280/0x280 [ 256.414265] ? fput+0xd4/0x150 [ 256.417462] ? SyS_write+0x15e/0x230 [ 256.421186] SyS_clone+0x37/0x50 [ 256.424557] ? sys_vfork+0x30/0x30 [ 256.428105] do_syscall_64+0x1e8/0x640 [ 256.431992] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 256.436856] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 256.442043] RIP: 0033:0x45a679 22:37:15 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000500)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x7, r0, 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.stet\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000380)=@in={0x2, 0x4e23, @rand_addr=0x7fffffff}, 0x80, 0x0}, 0xfd00) sendmsg(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000040)=@in6={0xa, 0x4e22, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000000680)=[{0x10, 0x1, 0x9}, {0xc8, 0x0, 0x10000, "da90abbb5f253fb525270a02473562afcbd964355aa865e0f955fef1b4ec127688bcf0f0cd3081b77d83c8a86e7068e18c2667bf33db4481ad2ddb0447e0e2a29079025d640a044711ad360b4d04dcc213b186d5598dc674f4cdace1bb0ffa6f3786ff90694cc1f6deebdc74d02c17a776271720616553e9fdf470792ae442e09e80f2062c843eaf8d55183efd26a6c5ffb3ca5bf5fe970b681936c6ad239695e2e0da04f3e00ef9e32036865b5afb60c0ccf20c18c89639"}, {0x10, 0x0, 0x400}], 0xe8}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000280)={[{0x0, 'memory'}]}, 0xfdef) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f0000000000)='&@[\x00') setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0), 0x161) perf_event_open$cgroup(&(0x7f0000000200)={0xf490c5648e916900, 0x70, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3f, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7f, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0xfffffffffffffffb, 0x5, @perf_config_ext={0x1, 0x5}, 0x1000, 0xfffffffffffffffa}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000a40)='memory.stat\x00', 0x0, 0x0) r4 = gettid() recvmsg(r1, &(0x7f0000000480)={&(0x7f0000000300)=@ax25={{0x3, @bcast}, [@rose, @rose, @remote, @bcast, @netrom, @remote, @netrom, @bcast]}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000580)=""/125, 0x7d}, {&(0x7f0000000600)=""/114, 0x72}], 0x2}, 0x40002000) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x801c581f, 0x20000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000cc0)={r4, r3, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000400)='@\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)='4\x15\x863\x04J\x03\xf6\x1ce\x04\xcb\xb1\x89\xd0\x8a'}, 0x30) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) r6 = socket$kcm(0x11, 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r8 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x3e, &(0x7f00000002c0)=r7, 0x161) write$cgroup_int(r7, &(0x7f0000000780)=0x1, 0x12) setsockopt$sock_attach_bpf(r5, 0x107, 0x12, &(0x7f00000000c0)=r6, 0x4) [ 256.445228] RSP: 002b:00007f7ce7ebfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 256.452932] RAX: ffffffffffffffda RBX: 00007f7ce7ebfc90 RCX: 000000000045a679 [ 256.460285] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 256.467558] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 256.474825] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7ce7ec06d4 [ 256.482093] R13: 00000000004c0d71 R14: 00000000004d3d68 R15: 0000000000000004 22:37:15 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2b, 0xfffffffffffffe7f, &(0x7f0000000500)="b9ff0300600d698cb89e14f088a81fffffff00004000630677fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x0, 0xfffffffffffffe09}, 0x28) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000440)=""/227, 0xe3}, {&(0x7f0000000040)=""/74, 0x4a}, {&(0x7f0000000240)=""/70, 0x46}], 0x4, &(0x7f0000000540)=""/249, 0xf9}, 0x2020) 22:37:15 executing program 0: syz_mount_image$ntfs(&(0x7f0000000400)='ntfs\x00', &(0x7f0000000440)='./file0\x00', 0x900, 0x0, 0x0, 0x0, &(0x7f0000000c40)={[{@show_sys_files_no='show_sys_files=no'}, {@errors_continue='errors=continue'}, {@umask={'umask'}}, {@uid={'uid'}}, {@errors_recover='errors=recover'}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@fmask={'fmask'}}]}) gettid() 22:37:15 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4e0f98f1d7282c98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff7f, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e180f000000e8bd6efb120009000e000100400000ff050005001201", 0x2e}], 0x1}, 0x0) 22:37:15 executing program 4 (fault-call:2 fault-nth:60): r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 256.717586] FAULT_INJECTION: forcing a failure. [ 256.717586] name failslab, interval 1, probability 0, space 0, times 0 [ 256.767099] CPU: 0 PID: 10694 Comm: syz-executor.4 Not tainted 4.14.156-syzkaller #0 [ 256.775059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 256.784431] Call Trace: [ 256.787048] dump_stack+0x142/0x197 [ 256.790695] should_fail.cold+0x10f/0x159 [ 256.794860] should_failslab+0xdb/0x130 [ 256.798865] kmem_cache_alloc+0x47/0x780 [ 256.802955] ? __lock_is_held+0xb6/0x140 [ 256.807028] ? check_preemption_disabled+0x3c/0x250 [ 256.812067] anon_vma_clone+0xde/0x470 [ 256.815970] anon_vma_fork+0x87/0x4d0 [ 256.819782] copy_process.part.0+0x45e3/0x6a00 [ 256.824566] ? __cleanup_sighand+0x50/0x50 [ 256.828811] ? lock_downgrade+0x740/0x740 [ 256.833076] _do_fork+0x19e/0xce0 [ 256.836570] ? fork_idle+0x280/0x280 [ 256.840326] ? fput+0xd4/0x150 [ 256.843522] ? SyS_write+0x15e/0x230 [ 256.847250] SyS_clone+0x37/0x50 [ 256.850614] ? sys_vfork+0x30/0x30 [ 256.854167] do_syscall_64+0x1e8/0x640 [ 256.858069] ? trace_hardirqs_off_thunk+0x1a/0x1c 22:37:15 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x3c) bpf$MAP_UPDATE_ELEM(0x15, &(0x7f0000000180)={r0, &(0x7f0000000340), &(0x7f0000000400)}, 0x20) recvmsg(0xffffffffffffffff, 0x0, 0x0) 22:37:15 executing program 0: syz_mount_image$ntfs(&(0x7f0000000400)='ntfs\x00', &(0x7f0000000440)='./file0\x00', 0x900, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='show_sys_files=no,errors=continue,umask=00000000000000000000000,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c6572728372733d727dd0fc0865636f766572733d6e6f2c6d66745f7a6f6e650500756c7469706c6965723d30784b3030303030303030303030303030302c6d66745f7a6f6e655f6d756c7469706c6965723d25783030303030303068a12e5d236ea489c12f19e1a7870700000030303003000000000000003d30303030303030303030303030303030303030303030302c00"/157]) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x9, 0x3, 0x300, 0x0, 0x148, 0x148, 0x0, 0x0, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, &(0x7f0000000100), {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xffffff00, 0xff, 'bpq0\x00', 'syz_tun\x00', {0xff}, {0xff}, 0x67}, 0x0, 0xe8, 0x148, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x8}}, @inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xa}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x5, [0x7, 0x9, 0xc0, 0x7, 0x1, 0x7], 0x1f, 0x1f}, {0xfff, [0x3ff, 0x5, 0xc5, 0x0, 0x4e2, 0x4], 0x0, 0x9}}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x9}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @dev={[], 0x28}, 0x9, 0x5, [0x24, 0x3, 0x2f, 0xc, 0x31, 0xa, 0x2f, 0xd, 0x28, 0x14, 0x11, 0x29, 0x1a, 0x1e, 0x36, 0x11], 0x0, 0x7f, 0x100}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) [ 256.862928] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 256.868119] RIP: 0033:0x45a679 [ 256.871307] RSP: 002b:00007f7ce7ebfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 256.879118] RAX: ffffffffffffffda RBX: 00007f7ce7ebfc90 RCX: 000000000045a679 [ 256.886392] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 256.893684] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 256.900976] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7ce7ec06d4 [ 256.908248] R13: 00000000004c0d71 R14: 00000000004d3d68 R15: 0000000000000004 22:37:15 executing program 4 (fault-call:2 fault-nth:61): r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:15 executing program 1: [ 256.974912] __ntfs_error: 56 callbacks suppressed [ 256.974920] ntfs: (device loop0): parse_options(): Unrecognized mount option errƒrs. 22:37:16 executing program 1: [ 257.092324] FAULT_INJECTION: forcing a failure. [ 257.092324] name failslab, interval 1, probability 0, space 0, times 0 [ 257.107928] ntfs: (device loop0): parse_options(): Unrecognized mount option mft_zone. [ 257.147077] CPU: 0 PID: 10712 Comm: syz-executor.4 Not tainted 4.14.156-syzkaller #0 [ 257.155003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 257.164469] Call Trace: [ 257.167061] dump_stack+0x142/0x197 [ 257.170697] should_fail.cold+0x10f/0x159 [ 257.174845] should_failslab+0xdb/0x130 [ 257.178837] kmem_cache_alloc+0x2d7/0x780 [ 257.182988] ? anon_vma_clone+0x310/0x470 [ 257.187138] anon_vma_fork+0xe9/0x4d0 [ 257.190943] copy_process.part.0+0x45e3/0x6a00 [ 257.195536] ? __cleanup_sighand+0x50/0x50 [ 257.199771] ? lock_downgrade+0x740/0x740 [ 257.203918] _do_fork+0x19e/0xce0 [ 257.207383] ? fork_idle+0x280/0x280 [ 257.211112] ? fput+0xd4/0x150 [ 257.214321] ? SyS_write+0x15e/0x230 [ 257.218043] SyS_clone+0x37/0x50 [ 257.221497] ? sys_vfork+0x30/0x30 [ 257.225040] do_syscall_64+0x1e8/0x640 [ 257.228924] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 257.233891] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 257.239264] RIP: 0033:0x45a679 [ 257.242455] RSP: 002b:00007f7ce7ebfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 257.250430] RAX: ffffffffffffffda RBX: 00007f7ce7ebfc90 RCX: 000000000045a679 [ 257.257720] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 257.264986] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 257.272254] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7ce7ec06d4 [ 257.279532] R13: 00000000004c0d71 R14: 00000000004d3d68 R15: 0000000000000004 22:37:16 executing program 1: 22:37:16 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r1, 0x29, 0x1, 0x0, &(0x7f00000000c0)) r2 = signalfd4(r1, &(0x7f0000000040)={0x3ff}, 0x8, 0x81400) r3 = userfaultfd(0x80000) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x100010, r0, 0x801a2000) pipe(&(0x7f00000003c0)) clone(0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r7 = fcntl$dupfd(r6, 0x0, r5) write$FUSE_ATTR(r7, &(0x7f0000000280)={0x78}, 0x78) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000480)={0x0, @in6={{0xa, 0x4e23, 0x0, @empty, 0x5}}, 0x1, 0xff, 0x1, 0x10001, 0x98}, &(0x7f0000000540)=0x98) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r7, 0x84, 0x70, &(0x7f0000000580)={r8, @in={{0x2, 0x4e24, @remote}}, [0x4, 0x41, 0x8, 0x9, 0x5, 0x401, 0x5, 0x7, 0xece, 0x7, 0x9, 0x0, 0x5, 0x100000000, 0x401]}, &(0x7f0000000680)=0x100) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r10 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r11 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x40, 0x0) ioctl$TIOCGPKT(r11, 0x80045438, &(0x7f0000000380)) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r13 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r14 = fcntl$dupfd(r13, 0x0, r12) write$FUSE_ATTR(r14, &(0x7f0000000280)={0x78}, 0x78) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x1bb) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000180)={r15}, 0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r14, 0x84, 0x71, &(0x7f0000000400)={r15, 0x4}, &(0x7f0000000440)=0x8) r16 = fcntl$dupfd(r10, 0x0, r9) write$FUSE_ATTR(r16, &(0x7f0000000280)={0x78}, 0x78) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@ipv4={[], [], @initdev}, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}}}, &(0x7f0000000200)=0xe8) connect$can_bcm(r16, &(0x7f0000000240)={0x1d, r17}, 0x10) [ 257.302663] ntfs: (device loop0): parse_options(): Unrecognized mount option errƒrs. [ 257.334872] ntfs: (device loop0): parse_options(): Unrecognized mount option mft_zone. 22:37:16 executing program 1: [ 257.433941] Unknown ioctl -2147199944 [ 257.478503] Unknown ioctl -2147199944 22:37:16 executing program 5: 22:37:16 executing program 0: syz_mount_image$ntfs(&(0x7f0000000400)='ntfs\x00', &(0x7f0000000440)='./file0\x00', 0x900, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="73686f775f737973df66696c65733d6e6f2c4572726f72733d636f6e74696e75652c756d61736b3d30303030303030303030303030303030303030303030302c7569643d", @ANYRESHEX=0x0, @ANYBLOB="2c6572726f72733d7265636f7665722c73686f775f737973710f1d355e0ceecb6f2c6d66745f7a6f6e655f6d756c7469706c6965723d3078103030303030303030303030303030302c6d66745f7a6f6e6c7120655f6d756c7469706c6965723d3078303030103030303030303030303030302c666d61736b3d30303030303030303030300800000030303030303030a2976847adf09e380ac1"]) 22:37:16 executing program 1: 22:37:16 executing program 4 (fault-call:2 fault-nth:62): r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:16 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @remote, 0x9}, 0x1c) getsockopt$inet6_int(r1, 0x29, 0x1, 0x0, &(0x7f00000000c0)) fsetxattr$security_selinux(r1, &(0x7f0000000100)='security.selinux\x00', &(0x7f0000000140)='system_u:object_r:pam_exec_t:s0\x00', 0x20, 0x1) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x101000, 0x0) ioctl$IMDELTIMER(r2, 0x80044941, &(0x7f00000000c0)) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x4, 0x602100) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:16 executing program 1: [ 257.628699] FAULT_INJECTION: forcing a failure. [ 257.628699] name failslab, interval 1, probability 0, space 0, times 0 [ 257.651284] ntfs: (device loop0): parse_options(): Unrecognized mount option show_sysßfiles. [ 257.666004] ntfs: (device loop0): parse_options(): Unrecognized mount option Errors. [ 257.680280] CPU: 1 PID: 10739 Comm: syz-executor.4 Not tainted 4.14.156-syzkaller #0 [ 257.688194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 257.697547] Call Trace: [ 257.697571] dump_stack+0x142/0x197 [ 257.697592] should_fail.cold+0x10f/0x159 [ 257.697612] should_failslab+0xdb/0x130 [ 257.697627] kmem_cache_alloc+0x2d7/0x780 [ 257.697637] ? anon_vma_clone+0x310/0x470 [ 257.697654] anon_vma_fork+0x1ce/0x4d0 [ 257.697669] copy_process.part.0+0x45e3/0x6a00 [ 257.716151] ? __cleanup_sighand+0x50/0x50 [ 257.725365] ntfs: (device loop0): parse_options(): Unrecognized mount option show_sysq5^ îËo. [ 257.729099] ? lock_downgrade+0x740/0x740 [ 257.729116] _do_fork+0x19e/0xce0 [ 257.749754] ? fork_idle+0x280/0x280 [ 257.753473] ? fput+0xd4/0x150 [ 257.753485] ? SyS_write+0x15e/0x230 [ 257.753499] SyS_clone+0x37/0x50 [ 257.753508] ? sys_vfork+0x30/0x30 [ 257.763352] ntfs: (device loop0): parse_options(): Invalid mft_zone_multiplier option argument: 0x000000000000000 [ 257.763769] do_syscall_64+0x1e8/0x640 [ 257.763779] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 257.763798] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 257.763806] RIP: 0033:0x45a679 [ 257.763811] RSP: 002b:00007f7ce7ebfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 257.763822] RAX: ffffffffffffffda RBX: 00007f7ce7ebfc90 RCX: 000000000045a679 [ 257.763831] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 257.777848] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 22:37:16 executing program 1: 22:37:16 executing program 5: [ 257.777854] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7ce7ec06d4 [ 257.777860] R13: 00000000004c0d71 R14: 00000000004d3d68 R15: 0000000000000004 [ 257.846167] audit: type=1400 audit(1575067036.719:63): avc: denied { relabelto } for pid=10744 comm="syz-executor.3" name="UDPv6" dev="sockfs" ino=39409 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:pam_exec_t:s0 tclass=udp_socket permissive=1 22:37:16 executing program 5: 22:37:16 executing program 1: 22:37:16 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x82801, 0x0) getsockopt$CAN_RAW_LOOPBACK(r4, 0x65, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) fcntl$dupfd(r6, 0x0, r5) write$vhci(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="04696983fb3b2505f1d054d3a575a3708b0049abe6165077f3f47aca1fa4d3b3557892b6b5eda7dcaea00daa38753ac44159918b0c734f40d741119ffa46e1c48a57f2988ae419e20d74c98854adb4078176ad5240fb6322fcf4f93b9290270b137d697be9da654171a4cd2d87d70090b859809cbb80b1c6b9ec0eb219b0ad1a54a6dc66760e6455432b9d48"], 0x83) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) creat(&(0x7f0000000100)='./file0\x00', 0x8b) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) accept4$alg(r0, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r8, 0x29, 0x1, 0x0, &(0x7f00000000c0)) r9 = accept$inet6(r8, 0x0, &(0x7f0000000140)) getsockopt$inet6_int(r9, 0x29, 0x4c, 0x0, &(0x7f00000000c0)=0xffffffffffffffaf) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r11 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r12 = fcntl$dupfd(r11, 0x0, r10) write$FUSE_ATTR(r12, &(0x7f0000000280)={0x78}, 0x78) setsockopt$bt_hci_HCI_TIME_STAMP(r12, 0x0, 0x3, &(0x7f0000000200)=0x4, 0x4) lseek(r7, 0x6f53, 0x4) [ 257.959517] ntfs: (device loop0): parse_options(): Unrecognized mount option show_sysßfiles. 22:37:16 executing program 5: 22:37:16 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r3, 0x0, 0x200, 0x0) 22:37:16 executing program 0: r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@netrom, @null, @rose, @null, @bcast, @remote, @null, @rose]}, &(0x7f0000000080)=0x48, 0x180000) getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f00000000c0)=0x8001, &(0x7f0000000100)=0x4) syz_mount_image$ntfs(&(0x7f0000000400)='ntfs\x00', &(0x7f0000000440)='./file0\x00', 0x900, 0x0, 0x0, 0x0, &(0x7f0000000c40)={[{@show_sys_files_no='show_sys_files=no'}, {@errors_continue='errors=continue'}, {@umask={'umask'}}, {@uid={'uid'}}, {@errors_recover='errors=recover'}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@fmask={'fmask'}}]}) 22:37:17 executing program 4 (fault-call:2 fault-nth:63): r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:17 executing program 5: 22:37:17 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x80) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) r3 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x880) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400201) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:17 executing program 5: 22:37:17 executing program 1: [ 258.242428] FAULT_INJECTION: forcing a failure. [ 258.242428] name failslab, interval 1, probability 0, space 0, times 0 22:37:17 executing program 5: [ 258.307320] CPU: 1 PID: 10780 Comm: syz-executor.4 Not tainted 4.14.156-syzkaller #0 [ 258.315274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 258.324630] Call Trace: [ 258.327220] dump_stack+0x142/0x197 [ 258.330862] should_fail.cold+0x10f/0x159 [ 258.335001] should_failslab+0xdb/0x130 [ 258.338961] kmem_cache_alloc+0x2d7/0x780 [ 258.343097] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 258.347839] ? __vma_link_rb+0x247/0x340 [ 258.351904] copy_process.part.0+0x4450/0x6a00 [ 258.356488] ? __cleanup_sighand+0x50/0x50 [ 258.360708] ? lock_downgrade+0x740/0x740 [ 258.364842] _do_fork+0x19e/0xce0 [ 258.368289] ? fork_idle+0x280/0x280 [ 258.371990] ? fput+0xd4/0x150 [ 258.375168] ? SyS_write+0x15e/0x230 [ 258.378867] SyS_clone+0x37/0x50 [ 258.382216] ? sys_vfork+0x30/0x30 [ 258.385753] do_syscall_64+0x1e8/0x640 [ 258.389625] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 258.394467] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 258.399649] RIP: 0033:0x45a679 22:37:17 executing program 1: [ 258.402837] RSP: 002b:00007f7ce7ebfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 258.410548] RAX: ffffffffffffffda RBX: 00007f7ce7ebfc90 RCX: 000000000045a679 [ 258.417816] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 258.425091] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 258.432346] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7ce7ec06d4 [ 258.439611] R13: 00000000004c0d71 R14: 00000000004d3d68 R15: 0000000000000004 22:37:17 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x1073e4019b475000, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:17 executing program 5: 22:37:17 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_tables_names\x00') read$alg(r0, 0x0, 0x0) 22:37:17 executing program 5: 22:37:17 executing program 0: open$dir(&(0x7f0000000000)='./file0\x00', 0x200000, 0x120) syz_mount_image$ntfs(&(0x7f0000000400)='ntfs\x00', &(0x7f0000000440)='./file0\x00', 0x5, 0x0, 0x0, 0x0, &(0x7f0000000c40)={[{@show_sys_files_no='show_sys_files=no'}, {@errors_continue='errors=continue'}, {@errors_recover='errors=recover'}, {@uid={'uid'}}, {@errors_recover='errors=recover'}, {@show_sys_files_no='show_sVs_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@fmask={'fmask'}}]}) 22:37:17 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x1ffe) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) lsetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@random={'os2.', 'selinux\x00'}, &(0x7f00000000c0)='ppp1&!/\x00', 0x8, 0x1) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:17 executing program 1: 22:37:17 executing program 5: 22:37:17 executing program 4 (fault-call:2 fault-nth:64): r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:17 executing program 1: 22:37:17 executing program 5: [ 258.883513] FAULT_INJECTION: forcing a failure. [ 258.883513] name failslab, interval 1, probability 0, space 0, times 0 22:37:17 executing program 1: [ 258.943074] CPU: 1 PID: 10814 Comm: syz-executor.4 Not tainted 4.14.156-syzkaller #0 [ 258.951119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 258.960487] Call Trace: [ 258.963108] dump_stack+0x142/0x197 [ 258.966758] should_fail.cold+0x10f/0x159 [ 258.970945] should_failslab+0xdb/0x130 [ 258.974936] kmem_cache_alloc+0x2d7/0x780 [ 258.979361] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 258.984145] ? __vma_link_rb+0x247/0x340 [ 258.988222] copy_process.part.0+0x4450/0x6a00 [ 258.992943] ? __cleanup_sighand+0x50/0x50 [ 258.997304] ? lock_downgrade+0x740/0x740 [ 259.001460] _do_fork+0x19e/0xce0 [ 259.004947] ? fork_idle+0x280/0x280 [ 259.008668] ? fput+0xd4/0x150 [ 259.011870] ? SyS_write+0x15e/0x230 [ 259.015596] SyS_clone+0x37/0x50 [ 259.018964] ? sys_vfork+0x30/0x30 [ 259.022517] do_syscall_64+0x1e8/0x640 [ 259.026411] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 259.031358] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 259.036548] RIP: 0033:0x45a679 22:37:18 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:18 executing program 5: [ 259.039738] RSP: 002b:00007f7ce7ebfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 259.047451] RAX: ffffffffffffffda RBX: 00007f7ce7ebfc90 RCX: 000000000045a679 [ 259.054721] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 259.061991] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 259.069267] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7ce7ec06d4 [ 259.077859] R13: 00000000004c0d71 R14: 00000000004d3d68 R15: 0000000000000004 22:37:18 executing program 0: syz_mount_image$ntfs(&(0x7f0000000400)='ntfs\x00', &(0x7f0000000440)='./file0\x00', 0x900, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="73ecbcbe86686f775f7379735f66696c65733d6e6f2c6572726f72733d636f2e732b3d30303030303030303030303030303030303030302c7569643d000000", @ANYRESHEX=0x0, @ANYBLOB=',errors=recover,show_sys_files=no,mft_zone_multiplier=0x0000000000000000,mft_zone_multiplier=0x0000000000000000,fmask=00000000000000000000000,\x00']) lsetxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='security.ima\x00', &(0x7f0000000180)=@v1={0x2, "8eb14a95f8548a"}, 0x8, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r2 = fcntl$dupfd(r1, 0x0, r0) write$FUSE_ATTR(r2, &(0x7f0000000280)={0x78}, 0x78) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r2, 0x29, 0x1, 0x0, &(0x7f00000000c0)=0x39) socket$bt_cmtp(0x1f, 0x3, 0x5) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r4, 0x29, 0x1, 0x0, &(0x7f00000000c0)) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r7 = fcntl$dupfd(r6, 0x0, r5) write$FUSE_ATTR(r7, &(0x7f0000000280)={0x78}, 0x78) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) r9 = accept4$alg(r7, 0x0, 0x0, 0x0) fcntl$setpipe(r9, 0x407, 0x3) getsockopt$inet6_int(r8, 0x29, 0x1, 0x0, &(0x7f00000000c0)) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000000040)={r8, r4, 0xff, 0x5, &(0x7f0000000100)="eeb88a819441df3b0c5215a94587fa045221bd45b693", 0x0, 0x8, 0x3, 0x3ff, 0x1f, 0x6, 0x7, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}) ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f00000001c0)) 22:37:18 executing program 1: 22:37:18 executing program 5: 22:37:18 executing program 1: 22:37:18 executing program 5: 22:37:18 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r5, 0x29, 0x1, 0x0, &(0x7f00000000c0)) getsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000100), 0x10) getsockopt$inet_mreqsrc(r4, 0x0, 0x25, &(0x7f0000000080)={@rand_addr, @local, @broadcast}, &(0x7f00000000c0)=0xc) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x1, 0x4) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r6, 0x29, 0x1, 0x0, &(0x7f00000000c0)) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000004c0)={0x0, @multicast2}, &(0x7f0000000500)=0xc) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000540)={@loopback, 0x55, r7}) 22:37:18 executing program 4 (fault-call:2 fault-nth:65): r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:18 executing program 0: syz_mount_image$ntfs(&(0x7f0000000400)='ntfs\x00', &(0x7f0000000440)='./file0\x00', 0x900, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="7368b1956f775f7379735f66696c65733d6e6f2c6572726f72733d4b6f6e74696e75652c756d61736b3d30303030303030303030303030303030303030303030302c7569", @ANYRESHEX=0x0, @ANYBLOB="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"]) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000040)='./file0\x00', 0x1, 0xffff) 22:37:18 executing program 1: 22:37:18 executing program 5: [ 259.497711] FAULT_INJECTION: forcing a failure. [ 259.497711] name failslab, interval 1, probability 0, space 0, times 0 [ 259.539367] CPU: 1 PID: 10860 Comm: syz-executor.4 Not tainted 4.14.156-syzkaller #0 [ 259.547339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 259.556728] Call Trace: [ 259.559348] dump_stack+0x142/0x197 [ 259.563093] should_fail.cold+0x10f/0x159 [ 259.567352] should_failslab+0xdb/0x130 [ 259.571337] kmem_cache_alloc+0x47/0x780 [ 259.575430] ? __lock_is_held+0xb6/0x140 [ 259.579502] ? check_preemption_disabled+0x3c/0x250 [ 259.584558] anon_vma_clone+0xde/0x470 [ 259.588491] anon_vma_fork+0x87/0x4d0 [ 259.592302] copy_process.part.0+0x45e3/0x6a00 [ 259.596905] ? __cleanup_sighand+0x50/0x50 [ 259.601409] ? lock_downgrade+0x740/0x740 [ 259.605822] _do_fork+0x19e/0xce0 [ 259.609281] ? fork_idle+0x280/0x280 [ 259.612998] ? fput+0xd4/0x150 [ 259.616198] ? SyS_write+0x15e/0x230 [ 259.619944] SyS_clone+0x37/0x50 [ 259.623326] ? sys_vfork+0x30/0x30 [ 259.626882] do_syscall_64+0x1e8/0x640 [ 259.630775] ? trace_hardirqs_off_thunk+0x1a/0x1c 22:37:18 executing program 5: 22:37:18 executing program 1: [ 259.635629] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 259.640822] RIP: 0033:0x45a679 [ 259.644013] RSP: 002b:00007f7ce7ebfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 259.651737] RAX: ffffffffffffffda RBX: 00007f7ce7ebfc90 RCX: 000000000045a679 [ 259.659008] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 259.666278] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 259.673565] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7ce7ec06d4 [ 259.680925] R13: 00000000004c0d71 R14: 00000000004d3d68 R15: 0000000000000004 22:37:18 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x2, 0x80) lseek(r0, 0x800, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x40000, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r2, 0x29, 0x1, 0x0, &(0x7f00000000c0)) r3 = accept4$tipc(r0, &(0x7f0000000140)=@name, &(0x7f0000000180)=0x10, 0x800) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4800, 0x8) r5 = syz_open_dev$sndpcmp(&(0x7f0000000200)='/dev/snd/pcmC#D#p\x00', 0x81, 0x80242) poll(&(0x7f0000000240)=[{r1, 0x1028}, {r2, 0x2}, {r3, 0x1068}, {r4, 0x2}, {r5, 0x8140}], 0x5, 0x0) syz_mount_image$ntfs(&(0x7f0000000400)='ntfs\x00', &(0x7f0000000440)='./file0\x00', 0x900, 0x0, 0x0, 0x0, &(0x7f0000000c40)={[{@show_sys_files_no='show_sys_files=no'}, {@errors_continue='errors=continue'}, {@umask={'umask'}}, {@uid={'uid'}}, {@errors_recover='errors=recover'}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@fmask={'fmask'}}]}) 22:37:18 executing program 1: 22:37:18 executing program 5: 22:37:18 executing program 4 (fault-call:2 fault-nth:66): r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:18 executing program 5: 22:37:18 executing program 1: [ 259.904321] FAULT_INJECTION: forcing a failure. [ 259.904321] name failslab, interval 1, probability 0, space 0, times 0 [ 259.945607] CPU: 0 PID: 10887 Comm: syz-executor.4 Not tainted 4.14.156-syzkaller #0 [ 259.953539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 259.962904] Call Trace: [ 259.965511] dump_stack+0x142/0x197 [ 259.969160] should_fail.cold+0x10f/0x159 [ 259.973503] should_failslab+0xdb/0x130 [ 259.977530] kmem_cache_alloc+0x2d7/0x780 [ 259.981686] ? anon_vma_clone+0x310/0x470 [ 259.985845] anon_vma_fork+0xe9/0x4d0 [ 259.989695] copy_process.part.0+0x45e3/0x6a00 22:37:18 executing program 1: 22:37:18 executing program 5: 22:37:18 executing program 5: 22:37:18 executing program 1: [ 259.994298] ? __cleanup_sighand+0x50/0x50 [ 259.998540] ? lock_downgrade+0x740/0x740 [ 260.002691] _do_fork+0x19e/0xce0 [ 260.006147] ? fork_idle+0x280/0x280 [ 260.009885] ? fput+0xd4/0x150 [ 260.013193] ? SyS_write+0x15e/0x230 [ 260.016922] SyS_clone+0x37/0x50 [ 260.020299] ? sys_vfork+0x30/0x30 [ 260.023848] do_syscall_64+0x1e8/0x640 [ 260.027739] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 260.032597] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 260.037787] RIP: 0033:0x45a679 22:37:19 executing program 5: [ 260.040975] RSP: 002b:00007f7ce7ebfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 260.048710] RAX: ffffffffffffffda RBX: 00007f7ce7ebfc90 RCX: 000000000045a679 [ 260.055994] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 260.063395] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 260.070711] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7ce7ec06d4 [ 260.077986] R13: 00000000004c0d71 R14: 00000000004d3d68 R15: 0000000000000004 22:37:19 executing program 5: 22:37:19 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x1, 0x0, &(0x7f00000000c0)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r6 = fcntl$dupfd(r5, 0x0, r4) write$FUSE_ATTR(r6, &(0x7f0000000280)={0x78}, 0x78) write$eventfd(r6, &(0x7f0000000100)=0xffffffffffffff00, 0x8) getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0}, &(0x7f0000000380)=0x14) recvfrom(r0, &(0x7f0000000000)=""/131, 0x83, 0x12100, &(0x7f0000000480)=@xdp={0x2c, 0x8, r7, 0x3b}, 0x80) 22:37:19 executing program 1: 22:37:19 executing program 5: 22:37:19 executing program 4 (fault-call:2 fault-nth:67): r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:19 executing program 5: 22:37:19 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) ioctl$VIDIOC_DECODER_CMD(r2, 0xc0485660, &(0x7f0000000100)={0x6, 0x2, @raw_data=[0xcadc, 0x40, 0x4, 0x401, 0x10001, 0x4000, 0x3, 0x3ff, 0x0, 0x800, 0x5, 0x2, 0xfffffff8, 0x6, 0x0, 0x8]}) r3 = fcntl$dupfd(r1, 0x0, r0) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "0d4bf04bb143d920", "e6aa3209a01885dc4f470d1013d7f08f", "a95f6a92", "ddb375e2b0b7d10b"}, 0x28) syz_mount_image$ntfs(&(0x7f0000000400)='ntfs\x00', &(0x7f0000000440)='./file0\x00', 0x900, 0x0, 0x0, 0x0, &(0x7f0000000c40)={[{@show_sys_files_no='show_sys_files=no'}, {@errors_continue='errors=continue'}, {@umask={'umask'}}, {@uid={'uid'}}, {@errors_recover='errors=recover'}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@fmask={'fmask'}}]}) 22:37:19 executing program 1: 22:37:19 executing program 5: [ 260.375194] FAULT_INJECTION: forcing a failure. [ 260.375194] name failslab, interval 1, probability 0, space 0, times 0 [ 260.428735] CPU: 1 PID: 10916 Comm: syz-executor.4 Not tainted 4.14.156-syzkaller #0 [ 260.436712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 260.446082] Call Trace: [ 260.446115] dump_stack+0x142/0x197 [ 260.446147] should_fail.cold+0x10f/0x159 [ 260.446165] should_failslab+0xdb/0x130 [ 260.446176] kmem_cache_alloc+0x2d7/0x780 [ 260.446190] ? anon_vma_clone+0x310/0x470 [ 260.446202] anon_vma_fork+0x1ce/0x4d0 [ 260.446216] copy_process.part.0+0x45e3/0x6a00 [ 260.446242] ? __cleanup_sighand+0x50/0x50 [ 260.481667] ? lock_downgrade+0x740/0x740 [ 260.485834] _do_fork+0x19e/0xce0 [ 260.489298] ? fork_idle+0x280/0x280 [ 260.493022] ? fput+0xd4/0x150 [ 260.496225] ? SyS_write+0x15e/0x230 [ 260.499948] SyS_clone+0x37/0x50 [ 260.503319] ? sys_vfork+0x30/0x30 [ 260.506870] do_syscall_64+0x1e8/0x640 [ 260.510764] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 260.515625] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 260.520816] RIP: 0033:0x45a679 [ 260.524006] RSP: 002b:00007f7ce7ebfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 260.531799] RAX: ffffffffffffffda RBX: 00007f7ce7ebfc90 RCX: 000000000045a679 [ 260.539596] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 260.546867] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 260.554137] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7ce7ec06d4 [ 260.561404] R13: 00000000004c0d71 R14: 00000000004d3d68 R15: 0000000000000004 22:37:19 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) shmget(0x3, 0x3000, 0x54001a06, &(0x7f0000006000/0x3000)=nil) 22:37:19 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = shmget(0x3, 0x3000, 0x54001a06, &(0x7f0000006000/0x3000)=nil) shmctl$IPC_RMID(r3, 0x0) 22:37:19 executing program 0: syz_mount_image$ntfs(&(0x7f0000000400)='ntfs\x00', &(0x7f0000000440)='./file0\x00', 0x900, 0x0, 0x0, 0x0, &(0x7f0000000c40)={[{@show_sys_files_no='show_sys_files=no'}, {@errors_continue='errors=continue'}, {@umask={'umask'}}, {@uid={'uid'}}, {@errors_recover='errors=recover'}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@fmask={'fmask'}}]}) r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000040)=0x2, &(0x7f0000000080)=0x1) 22:37:19 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x72, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0xc01812f4, &(0x7f0000000040)) 22:37:19 executing program 5: syz_mount_image$ntfs(&(0x7f0000000400)='ntfs\x00', &(0x7f0000000440)='./file0\x00', 0x900, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="2c54c9e1257d17958d00"]) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x10200, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000100)='TRUE', 0x4, 0x1) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6, 0x12, 0xffffffffffffffff, 0x756a0000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0xe, 0x4, 0x4c8, 0x2a0, 0x148, 0x148, 0x0, 0x0, 0x3f8, 0x3f8, 0x3f8, 0x3f8, 0x3f8, 0x4, &(0x7f0000000180), {[{{@ipv6={@mcast2, @rand_addr="7eee992023c91cb3962e1a3ed0a6557f", [0xff, 0xffffffff, 0xffffffff, 0xffffff00], [0xffffffff, 0xffffff00, 0x0, 0xff000000], 'veth1_to_bridge\x00', 'eql\x00', {}, {0xff}, 0x0, 0x1f, 0x7, 0x10}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@hl={0x28, 'hl\x00', 0x0, {0x2}}, @common=@srh={0x30, 'srh\x00', 0x0, {0x29, 0x7, 0x0, 0x2, 0xffff, 0x200, 0x204}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0x118, 0x158, 0x0, {}, [@common=@icmp6={0x28, 'icmp6\x00', 0x0, {0x3, 0x7, 0x1f}}, @common=@icmp6={0x28, 'icmp6\x00', 0x0, {0x10, 0x3f, 0xa7}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x7, 0x5, 0x8, 0x20, 0xffff, 0x460000, 0x7ff, 0x1000]}}}, {{@uncond, 0x0, 0x110, 0x158, 0x0, {}, [@common=@dst={0x48, 'dst\x00', 0x0, {0xdf, 0x0, 0x1, [0x8001, 0x7ff, 0x8, 0x7f, 0x304, 0x62, 0x3, 0x101, 0x3, 0x636, 0x7ff, 0x4, 0x7, 0xc1c3, 0x7, 0x2], 0x7}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@rand_addr="9c474b06e8b87173c970fcf56a6e1ef7", 'ip6gre0\x00', 0x3}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x528) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @remote}, 0xc) 22:37:19 executing program 4 (fault-call:2 fault-nth:68): r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:19 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x1c, 0x1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0xc80e42) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) ioctl$VFIO_IOMMU_MAP_DMA(r3, 0x3b71, &(0x7f0000000080)={0x20, 0x4, 0x9, 0x9, 0xb7d}) ioctl$UI_SET_RELBIT(r3, 0x40045566, 0xf) 22:37:19 executing program 0: syz_mount_image$ntfs(&(0x7f0000000400)='ntfs\x00', &(0x7f0000000440)='./file0\x00', 0x900, 0x0, 0x0, 0x0, &(0x7f0000000c40)={[{@show_sys_files_no='show_sys_files=no'}, {@errors_continue='errors=continue'}, {@umask={'umask'}}, {@uid={'uid'}}, {@errors_recover='errors=recover'}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@fmask={'\x00\x00\x00\x8e\x00'}}]}) 22:37:19 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f00000001c0)=ANY=[@ANYBLOB="00050000ff0000004400000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="49ab96853a87975b12dfd47279e44a6914e5dc89c7eb52345a1ca3a78c5e59b7640a6bbaa9d56f7f18e525b83e6dadb874e93c2b8e67a36ca2cd71da2eaf47b27012d87733c830cdcb702af3b9f283220174d014521984d6dd7674a3364dd4913da5ec0ee1ab0d2f5e98671b0652c71bdc53f1530ba4244a6b530a"], @ANYBLOB="0000000086420000060201000006000000000000009ffb72c3d54df9ecacf8302616de19", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="5c3cbe5acd2260a765a03370939ed108075f5368d93beb7cad021d6141b963e20919d3cc7ac96708bcfd15033b48ac8765b0ef2654104e5eb74189ccbda10985f22bdcbe54206876abb638e1e2564dbfcda3f0cd45dad6fa2d40da4c7aef37b0da23bc01e9e0a33cd4e6483afad5a970fee0488d6ba922ee276eeb7f12c618e2ad26d976428a187e642604fc50c142cf0a25033fdaef75345f9f167cc24039bb92a88bd38af2742b034c174e73b571a582b2b04a871acc12c9c574dc454c4dc90aa2c7a9aaca598ec54de168cae3d6b2b1409544f65db0f7f27e61cfc085102b66e607c6699677089c086c5996f1808936fa85410e"], @ANYBLOB="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"]) [ 260.880465] vhci_hcd: default hub control req: 1c01 v0000 i0000 l0 [ 260.886129] FAULT_INJECTION: forcing a failure. [ 260.886129] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 260.927491] CPU: 1 PID: 10954 Comm: syz-executor.4 Not tainted 4.14.156-syzkaller #0 [ 260.935426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 260.944785] Call Trace: [ 260.947389] dump_stack+0x142/0x197 [ 260.951028] should_fail.cold+0x10f/0x159 [ 260.955166] ? __might_sleep+0x93/0xb0 [ 260.959058] __alloc_pages_nodemask+0x1d6/0x7a0 [ 260.963729] ? anon_vma_fork+0x1ce/0x4d0 [ 260.967797] ? copy_process.part.0+0x45e3/0x6a00 [ 260.972573] ? _do_fork+0x19e/0xce0 [ 260.976209] ? __alloc_pages_slowpath+0x2930/0x2930 [ 260.981232] ? __lock_acquire+0x5f7/0x4620 [ 260.986435] ? trace_hardirqs_on+0x10/0x10 [ 260.990683] ? trace_hardirqs_on+0x10/0x10 [ 260.994926] alloc_pages_current+0xec/0x1e0 [ 260.999251] __get_free_pages+0xf/0x40 [ 261.003161] get_zeroed_page+0x11/0x20 [ 261.007060] __pud_alloc+0x3b/0x200 [ 261.010687] copy_page_range+0x138b/0x1de0 [ 261.014959] ? find_held_lock+0x35/0x130 [ 261.019035] ? anon_vma_fork+0x358/0x4d0 [ 261.023096] ? vma_compute_subtree_gap+0x190/0x1f0 [ 261.028034] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 261.032792] ? __vma_link_rb+0x247/0x340 [ 261.036869] copy_process.part.0+0x4765/0x6a00 [ 261.041477] ? __cleanup_sighand+0x50/0x50 [ 261.045738] ? lock_downgrade+0x740/0x740 [ 261.049892] _do_fork+0x19e/0xce0 [ 261.053375] ? fork_idle+0x280/0x280 [ 261.057091] ? fput+0xd4/0x150 [ 261.060286] ? SyS_write+0x15e/0x230 [ 261.064000] SyS_clone+0x37/0x50 [ 261.067377] ? sys_vfork+0x30/0x30 [ 261.070924] do_syscall_64+0x1e8/0x640 [ 261.074816] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 261.079674] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 261.084874] RIP: 0033:0x45a679 [ 261.088061] RSP: 002b:00007f7ce7ebfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 261.095768] RAX: ffffffffffffffda RBX: 00007f7ce7ebfc90 RCX: 000000000045a679 [ 261.103033] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 261.110299] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 261.117571] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7ce7ec06d4 22:37:19 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x1d5d0f6d6b4345e1, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) fcntl$dupfd(r5, 0x0, r4) setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, &(0x7f0000000080)={0x8, 0x861, 0x9, 0x1}, 0x10) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 261.124951] R13: 00000000004c0d71 R14: 00000000004d3d68 R15: 0000000000000004 22:37:20 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f00000001c0)=ANY=[@ANYBLOB="00050000ff0000004400000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="49ab96853a87975b12dfd47279e44a6914e5dc89c7eb52345a1ca3a78c5e59b7640a6bbaa9d56f7f18e525b83e6dadb874e93c2b8e67a36ca2cd71da2eaf47b27012d87733c830cdcb702af3b9f283220174d014521984d6dd7674a3364dd4913da5ec0ee1ab0d2f5e98671b0652c71bdc53f1530ba4244a6b530a"], @ANYBLOB="0000000086420000060201000006000000000000009ffb72c3d54df9ecacf8302616de19", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="5c3cbe5acd2260a765a03370939ed108075f5368d93beb7cad021d6141b963e20919d3cc7ac96708bcfd15033b48ac8765b0ef2654104e5eb74189ccbda10985f22bdcbe54206876abb638e1e2564dbfcda3f0cd45dad6fa2d40da4c7aef37b0da23bc01e9e0a33cd4e6483afad5a970fee0488d6ba922ee276eeb7f12c618e2ad26d976428a187e642604fc50c142cf0a25033fdaef75345f9f167cc24039bb92a88bd38af2742b034c174e73b571a582b2b04a871acc12c9c574dc454c4dc90aa2c7a9aaca598ec54de168cae3d6b2b1409544f65db0f7f27e61cfc085102b66e607c6699677089c086c5996f1808936fa85410e"], @ANYBLOB="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"]) 22:37:20 executing program 0: syz_mount_image$ntfs(&(0x7f0000000400)='ntfs\x00', &(0x7f0000000440)='./file0\x00', 0x900, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='show_sys_files=no,errors=continue,umask=00000000000000000000000,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c6572775f7379735f66696c65733d6e6f2c6d66745f7a6f6e655f6d756c7469706c6965723d3078303030303030303030303030303030302c6d66745f7a6f6e655f6d756c7469706c6965723d3078303030303030303030303030303030302c666d61736b3d30303030303030303030303030303030303030303030302c000112761a036d000000000000000000000000000000001123b7badacedb4ff875720e852a3f7debcaaf3121d7ead0f58ef596bf8841b43599c8dfbac39a048492db921eaaf1e3f9d26a1a32371c2920dec38f"]) 22:37:20 executing program 4 (fault-call:2 fault-nth:69): r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:20 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f00000001c0)=ANY=[@ANYBLOB="00050000ff0000004400000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="49ab96853a87975b12dfd47279e44a6914e5dc89c7eb52345a1ca3a78c5e59b7640a6bbaa9d56f7f18e525b83e6dadb874e93c2b8e67a36ca2cd71da2eaf47b27012d87733c830cdcb702af3b9f283220174d014521984d6dd7674a3364dd4913da5ec0ee1ab0d2f5e98671b0652c71bdc53f1530ba4244a6b530a"], @ANYBLOB="0000000086420000060201000006000000000000009ffb72c3d54df9ecacf8302616de19", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="5c3cbe5acd2260a765a03370939ed108075f5368d93beb7cad021d6141b963e20919d3cc7ac96708bcfd15033b48ac8765b0ef2654104e5eb74189ccbda10985f22bdcbe54206876abb638e1e2564dbfcda3f0cd45dad6fa2d40da4c7aef37b0da23bc01e9e0a33cd4e6483afad5a970fee0488d6ba922ee276eeb7f12c618e2ad26d976428a187e642604fc50c142cf0a25033fdaef75345f9f167cc24039bb92a88bd38af2742b034c174e73b571a582b2b04a871acc12c9c574dc454c4dc90aa2c7a9aaca598ec54de168cae3d6b2b1409544f65db0f7f27e61cfc085102b66e607c6699677089c086c5996f1808936fa85410e"], @ANYBLOB="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"]) [ 261.343311] FAULT_INJECTION: forcing a failure. [ 261.343311] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 261.383439] CPU: 1 PID: 10979 Comm: syz-executor.4 Not tainted 4.14.156-syzkaller #0 [ 261.391455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 261.391462] Call Trace: [ 261.391488] dump_stack+0x142/0x197 [ 261.391509] should_fail.cold+0x10f/0x159 [ 261.391528] ? __might_sleep+0x93/0xb0 [ 261.415307] __alloc_pages_nodemask+0x1d6/0x7a0 [ 261.419988] ? __pud_alloc+0x16a/0x200 [ 261.423889] ? __alloc_pages_slowpath+0x2930/0x2930 [ 261.428905] ? __pud_alloc+0x16a/0x200 [ 261.428933] alloc_pages_current+0xec/0x1e0 [ 261.437124] ? do_raw_spin_unlock+0x16b/0x260 [ 261.441715] __pmd_alloc+0x41/0x410 [ 261.445337] ? __pud_alloc+0x16f/0x200 [ 261.445351] copy_page_range+0x1469/0x1de0 [ 261.445366] ? find_held_lock+0x35/0x130 [ 261.445379] ? vma_compute_subtree_gap+0x190/0x1f0 [ 261.453592] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 261.467299] ? __vma_link_rb+0x247/0x340 [ 261.471372] copy_process.part.0+0x4765/0x6a00 [ 261.475989] ? __cleanup_sighand+0x50/0x50 [ 261.480246] ? lock_downgrade+0x740/0x740 [ 261.484423] _do_fork+0x19e/0xce0 [ 261.487971] ? fork_idle+0x280/0x280 [ 261.491691] ? fput+0xd4/0x150 [ 261.494883] ? SyS_write+0x15e/0x230 [ 261.498629] SyS_clone+0x37/0x50 [ 261.502006] ? sys_vfork+0x30/0x30 [ 261.505549] do_syscall_64+0x1e8/0x640 [ 261.505560] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 261.505581] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 261.505593] RIP: 0033:0x45a679 [ 261.522662] RSP: 002b:00007f7ce7ebfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 261.530481] RAX: ffffffffffffffda RBX: 00007f7ce7ebfc90 RCX: 000000000045a679 22:37:20 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x1d5d0f6d6b4345e1, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) fcntl$dupfd(r5, 0x0, r4) setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, &(0x7f0000000080)={0x8, 0x861, 0x9, 0x1}, 0x10) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:20 executing program 0: syz_mount_image$ntfs(&(0x7f0000000400)='ntfs\x00', &(0x7f0000000440)='./file0\x00', 0x900, 0x0, 0x0, 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='show_sys_files=no,errors=continue,umask=00000000000000000000000,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c6572726f72733d7265636f7665722c73686f775f7379735f66696c65733d6e6f2c6d66745f7a6f6e655f6d756c7469706c6965723d307830b030303030303030303030303030302c6d66ca18d12119745f7a6f6e655f6d756c7469706c6965723d3078303030303030303030303030303030302c666d61736b3d3030301030303030303030303030303030303030"]) [ 261.537755] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 261.545035] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 261.552334] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7ce7ec06d4 [ 261.559605] R13: 00000000004c0d71 R14: 00000000004d3d68 R15: 0000000000000004 22:37:20 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x1d5d0f6d6b4345e1, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) fcntl$dupfd(r5, 0x0, r4) setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, &(0x7f0000000080)={0x8, 0x861, 0x9, 0x1}, 0x10) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:20 executing program 4 (fault-call:2 fault-nth:70): r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:20 executing program 0: syz_mount_image$ntfs(&(0x7f0000000400)='ntfs\x00', &(0x7f0000000440)='./file0\x00', 0x900, 0x0, 0x0, 0x0, &(0x7f0000000c40)={[{@show_sys_files_no='show_sys_files=no'}, {@errors_continue='errors=continue'}, {@umask={'umask'}}, {@uid={'uid'}}, {@errors_recover='errors=recover'}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@fmask={'fmask'}}]}) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0) 22:37:20 executing program 5: syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) [ 261.681968] FAULT_INJECTION: forcing a failure. [ 261.681968] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 261.752689] CPU: 1 PID: 10997 Comm: syz-executor.4 Not tainted 4.14.156-syzkaller #0 [ 261.760737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 261.770217] Call Trace: [ 261.772825] dump_stack+0x142/0x197 [ 261.776582] should_fail.cold+0x10f/0x159 [ 261.780923] ? __might_sleep+0x93/0xb0 [ 261.784843] __alloc_pages_nodemask+0x1d6/0x7a0 [ 261.789531] ? __pud_alloc+0x16a/0x200 [ 261.793427] ? __alloc_pages_slowpath+0x2930/0x2930 [ 261.798465] ? __pud_alloc+0x16a/0x200 [ 261.802578] alloc_pages_current+0xec/0x1e0 [ 261.806925] ? do_raw_spin_unlock+0x16b/0x260 [ 261.811432] __pmd_alloc+0x41/0x410 [ 261.815063] ? __pud_alloc+0x16f/0x200 [ 261.818961] copy_page_range+0x1469/0x1de0 [ 261.823748] ? find_held_lock+0x35/0x130 [ 261.827828] ? vma_compute_subtree_gap+0x190/0x1f0 [ 261.833643] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 261.838406] ? __vma_link_rb+0x247/0x340 [ 261.842474] copy_process.part.0+0x4765/0x6a00 [ 261.847080] ? __cleanup_sighand+0x50/0x50 [ 261.851320] ? lock_downgrade+0x740/0x740 [ 261.855472] _do_fork+0x19e/0xce0 [ 261.858929] ? fork_idle+0x280/0x280 [ 261.862659] ? fput+0xd4/0x150 [ 261.865871] ? SyS_write+0x15e/0x230 [ 261.869592] SyS_clone+0x37/0x50 [ 261.872961] ? sys_vfork+0x30/0x30 [ 261.876594] do_syscall_64+0x1e8/0x640 [ 261.880480] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 261.885330] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 261.890512] RIP: 0033:0x45a679 [ 261.893693] RSP: 002b:00007f7ce7ebfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 261.901432] RAX: ffffffffffffffda RBX: 00007f7ce7ebfc90 RCX: 000000000045a679 [ 261.908746] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 261.916017] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 261.923287] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7ce7ec06d4 [ 261.930557] R13: 00000000004c0d71 R14: 00000000004d3d68 R15: 0000000000000004 22:37:20 executing program 0: syz_mount_image$ntfs(&(0x7f0000000400)='ntfs\x00', &(0x7f0000000440)='./file0\x00', 0x901, 0x0, 0x0, 0x0, &(0x7f0000000c40)={[{@errors_recover='errors=recover'}, {@errors_continue='errors=continue'}, {@errors_recover='errors=recover'}, {@uid={'uid'}}, {@errors_recover='errors=recover'}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0xfffffffffffffffe}}, {@fmask={'fmask'}}]}) 22:37:20 executing program 5: syz_open_dev$usbfs(0x0, 0x40000000909, 0x1) 22:37:20 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x1d5d0f6d6b4345e1, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) fcntl$dupfd(r5, 0x0, r4) setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, &(0x7f0000000080)={0x8, 0x861, 0x9, 0x1}, 0x10) 22:37:21 executing program 4 (fault-call:2 fault-nth:71): r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:21 executing program 5: syz_open_dev$usbfs(0x0, 0x40000000909, 0x1) 22:37:21 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x1d5d0f6d6b4345e1, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, &(0x7f0000000080)={0x8, 0x861, 0x9, 0x1}, 0x10) [ 262.093477] __ntfs_error: 55 callbacks suppressed [ 262.093486] ntfs: (device loop0): parse_options(): Unrecognized mount option . 22:37:21 executing program 5: syz_open_dev$usbfs(0x0, 0x40000000909, 0x1) [ 262.165987] FAULT_INJECTION: forcing a failure. [ 262.165987] name fail_page_alloc, interval 1, probability 0, space 0, times 0 22:37:21 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x1d5d0f6d6b4345e1, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, &(0x7f0000000080)={0x8, 0x861, 0x9, 0x1}, 0x10) [ 262.235246] ntfs: (device loop0): parse_options(): Unrecognized mount option . [ 262.255503] CPU: 1 PID: 11026 Comm: syz-executor.4 Not tainted 4.14.156-syzkaller #0 [ 262.263441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 262.272807] Call Trace: [ 262.275419] dump_stack+0x142/0x197 [ 262.279275] should_fail.cold+0x10f/0x159 22:37:21 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NET_DM_CMD_STOP(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80101200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x203, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000}, 0xc0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000040)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}}}, &(0x7f0000000580)=0xfffffffffffffdc6) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r7 = fcntl$dupfd(r6, 0x0, r5) write$FUSE_ATTR(r7, &(0x7f0000000280)={0x78}, 0x78) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r9, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r9) splice(r8, 0x0, r9, 0x0, 0x10000, 0x0) r10 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, 0x0) getsockname$packet(r10, &(0x7f0000001240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001280)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, 0x0, 0x0) r11 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x10, r11, 0x0) r12 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r12, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r12, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) sendfile(r12, 0xffffffffffffffff, &(0x7f0000000240)=0x202, 0x4000000000dc) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="7d63821696aac9d11df19b952b604600000000000000778bebb1", @ANYRES16=r13, @ANYBLOB="050c27bd7000ffdbdf2503000000e7401191a1d7da378753f18bb8db0c21d74b8c1994cb573ff0c5320e3fe397bd8a7c25799573fdffffffffffffff16ed2d05dfcd8089ed7cfcc53c2c4c19daee0a2449ee45439a1b546b1aba6dcc98"], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYRESOCT=0x0, @ANYRES16=r13, @ANYBLOB="000829bd7000fddbdf25030000000c00050020000000000000000c00030007000000000000000c00040008000000001e08184400080001000000000000000c0008006c000000000000000c000200f52c2f740000ffffffff060000a666414e0000000000000501000000000000001cd54ad4079f57c78528a5fa12dbc187d17e4c72095517987112b164919b1109b879a9a51b8be57aa25ba0617e6e38ca1d496582ed5dec85"], 0x3}, 0x1, 0x0, 0x0, 0x40000}, 0x24010855) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r14, 0x40086602, 0x400007) fsetxattr(r14, 0x0, &(0x7f0000000540)='em0/ppp1\xc5em0\x00', 0xd, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50d72800", @ANYRES16=r13, @ANYBLOB="00012bbd7000ffdbdf25020000000800010000000000080001000000000008000100000000000c00040001000000000000000c00040006000000000000000c0003000600000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x20000080}, 0x4) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x5038000c}, 0xc, &(0x7f00000005c0)={&(0x7f00000000c0)={0x38, r13, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) r15 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r16 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r17 = fcntl$dupfd(r16, 0x0, r15) write$FUSE_ATTR(r17, &(0x7f0000000280)={0x78}, 0x78) r18 = syz_open_dev$cec(&(0x7f0000000300)='/dev/cec#\x00', 0x0, 0x2) r19 = syz_open_dev$sndpcmc(&(0x7f0000000340)='/dev/snd/pcmC#D#c\x00', 0x2, 0x422002) r20 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r21 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r22 = fcntl$dupfd(r21, 0x0, r20) r23 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000640)='/dev/cachefiles\x00', 0xd9f68edf7926c2b7, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) getgroups(0x1, &(0x7f00000002c0)=[r24]) write$FUSE_ATTR(r23, &(0x7f0000000280)={0x78, 0x0, 0x0, {0x110, 0xfffffffe, 0x0, {0x0, 0xcc7, 0x8003, 0x0, 0xfffffffffffffffa, 0x3, 0x1, 0x0, 0xe, 0x0, 0x1, 0x0, r24, 0x0, 0x1}}}, 0x78) r25 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r26 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r27 = fcntl$dupfd(r26, 0x0, r25) write$FUSE_ATTR(r27, &(0x7f0000000280)={0x78}, 0x78) r28 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r29 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r30 = fcntl$dupfd(r29, 0x0, r28) write$FUSE_ATTR(r30, &(0x7f0000000280)={0x78}, 0x78) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r7, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2100}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xc8, r13, 0x820, 0x70bd2a, 0x40e, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_SOCKETS={0xc, 0x7, [{0x8, 0x1, r17}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x44, 0x7, [{0x8, 0x1, r18}, {0x8, 0x1, r3}, {0x8, 0x1, r3}, {0x8, 0x1, r3}, {0x8, 0x1, r19}, {0x8, 0x1, r3}, {0x8, 0x1, r3}, {0x8, 0x1, r22}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x34, 0x7, [{0x8, 0x1, r3}, {0x8, 0x1, r3}, {0x8, 0x1, r27}, {0x8, 0x1, r30}, {0x8, 0x1, r3}, {0x8, 0x1, r31}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x10}, 0x40000000) bind$can_raw(r3, &(0x7f0000000180)={0x1d, r4}, 0x10) [ 262.283458] ? __might_sleep+0x93/0xb0 [ 262.287356] __alloc_pages_nodemask+0x1d6/0x7a0 [ 262.292030] ? __alloc_pages_slowpath+0x2930/0x2930 [ 262.297054] alloc_pages_current+0xec/0x1e0 [ 262.301382] pte_alloc_one+0x1a/0x100 [ 262.305184] __pte_alloc+0x2a/0x2d0 [ 262.308818] copy_page_range+0x1299/0x1de0 [ 262.313066] ? vma_compute_subtree_gap+0x190/0x1f0 [ 262.318006] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 262.322792] copy_process.part.0+0x4765/0x6a00 [ 262.327406] ? __cleanup_sighand+0x50/0x50 [ 262.331657] ? lock_downgrade+0x740/0x740 [ 262.335826] _do_fork+0x19e/0xce0 [ 262.339305] ? fork_idle+0x280/0x280 [ 262.343022] ? fput+0xd4/0x150 [ 262.346215] ? SyS_write+0x15e/0x230 [ 262.349932] SyS_clone+0x37/0x50 [ 262.353303] ? sys_vfork+0x30/0x30 [ 262.357040] do_syscall_64+0x1e8/0x640 [ 262.360926] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 262.365776] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 262.370992] RIP: 0033:0x45a679 [ 262.374170] RSP: 002b:00007f7ce7ebfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 22:37:21 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x1d5d0f6d6b4345e1, 0x0) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000080)={0x8, 0x861, 0x9, 0x1}, 0x10) 22:37:21 executing program 5: syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) 22:37:21 executing program 0: r0 = getgid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000380)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) getgroups(0x1, &(0x7f00000002c0)=[r2]) syz_mount_image$ntfs(&(0x7f0000000400)='ntfs\x00', &(0x7f0000000440)='./file0\x00', 0x900, 0x2fd, 0x0, 0x0, &(0x7f0000000580)={[{@show_sys_files_no='show_sys_files=no'}, {@errors_continue='errors=continue'}, {@umask={'umaUk'}}, {@fmask={'fmask', 0x3d, 0xa71}}, {@gid={'gid', 0x3d, r0}}, {@disable_sparse_no='disable_sparse=no'}, {@gid={'gid', 0x3d, r2}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@fmask={'fmask'}}], [{@fowner_lt={'fowner<', r1}}, {@fowner_gt={'fowner>', r1}}]}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x40000, 0x0) ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, &(0x7f0000000180)={'team0\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}}) setsockopt$netrom_NETROM_IDLE(r3, 0x103, 0x7, &(0x7f00000001c0)=0x10001, 0x4) write$FUSE_DIRENT(r3, &(0x7f0000000040)={0x138, 0x0, 0x3, [{0x2, 0x44, 0x2, 0xa431, '\\+'}, {0x3, 0x8, 0x8, 0x2, 'cgroup#\\'}, {0x3, 0xffff, 0x0, 0x3f}, {0x0, 0xffff, 0x16, 0x67d, 'systemtrustedtrusted\xd2@'}, {0x3, 0x0, 0x9, 0x6, '\xdc-selinux'}, {0x1, 0x8, 0x3, 0x2, 'uid'}, {0x5, 0x1, 0xf, 0x20, 'errors=continue'}, {0x4, 0x2, 0x13, 0x0, ',vboxnet0.eth1user\xfe'}]}, 0x138) [ 262.381881] RAX: ffffffffffffffda RBX: 00007f7ce7ebfc90 RCX: 000000000045a679 [ 262.381886] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 262.381892] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 262.381897] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7ce7ec06d4 [ 262.381902] R13: 00000000004c0d71 R14: 00000000004d3d68 R15: 0000000000000004 22:37:21 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x3f, 0x400000) sendto$netrom(r4, &(0x7f0000000080)="dda06ee4a91121f147edd767ebf9ac8f02c6db341c22946067ac87d279f4aaa631c2ce6c273381571522a415fe3f7b389aabf23aca1fca3d1f8006c7894602de61dfc3c0bed807ec4516655496e21b1d52ceac62bfc685e151353fca140f6b35", 0x60, 0x1c9968fcc7cd7787, &(0x7f0000000100)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) 22:37:21 executing program 5: syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) 22:37:21 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x1d5d0f6d6b4345e1, 0x0) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000080)={0x8, 0x861, 0x9, 0x1}, 0x10) 22:37:21 executing program 4 (fault-call:2 fault-nth:72): r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:21 executing program 0: syz_mount_image$ntfs(&(0x7f0000000400)='ntfs\x00', &(0x7f0000000440)='./file0\x00', 0x900, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='show_sys_files=no,errors=continue,umask=00000000000000000000000,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c6572726f72733d7265636f7665722c73686f775f7379735f66696c65733d6e6f2c6d66745f7a6f6e655f6d756c7469706c6965723d3078309730303030303030303030302e1f002c6d66745f7a6f6e655f6d756c7469706c6965723dfaff303030303030303030303030303030302c666d61736b3d30303030306830303030303030303030303030303030302c007d883c65571a9ced975d4acf9245575481775dd5f66bab7f6aa2d6811540c31f1ebd3656da71ca601339f1b19876cef3d056"]) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000040)={0x0, 0x84b, 0x2002, 0x1}) 22:37:21 executing program 5: syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) 22:37:21 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000caf000/0x3000)=nil, 0x3000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x200000, 0x0) ioctl$TIOCGLCKTRMIOS(r4, 0x5456, &(0x7f0000000100)={0x9, 0x1, 0x0, 0x1000, 0xb, 0x80, 0x0, 0x7, 0x71, 0x7, 0xff, 0x1ff}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x222141, 0x0) r7 = fcntl$dupfd(r6, 0x0, r5) write$FUSE_ATTR(r7, &(0x7f0000000280)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0x78) ioctl$KDENABIO(r7, 0x4b36) [ 262.617123] FAULT_INJECTION: forcing a failure. [ 262.617123] name failslab, interval 1, probability 0, space 0, times 0 22:37:21 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x1d5d0f6d6b4345e1, 0x0) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000080)={0x8, 0x861, 0x9, 0x1}, 0x10) [ 262.665593] ntfs: (device loop0): parse_options(): Invalid mft_zone_multiplier option argument: 0x0—00000000000. [ 262.728039] CPU: 0 PID: 11065 Comm: syz-executor.4 Not tainted 4.14.156-syzkaller #0 [ 262.735982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 262.745369] Call Trace: [ 262.747997] dump_stack+0x142/0x197 [ 262.751643] should_fail.cold+0x10f/0x159 [ 262.755811] should_failslab+0xdb/0x130 [ 262.759803] kmem_cache_alloc+0x2d7/0x780 [ 262.763963] ? alloc_pages_current+0xf4/0x1e0 [ 262.768463] ? do_raw_spin_unlock+0x16b/0x260 [ 262.772965] __pmd_alloc+0xbd/0x410 22:37:21 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, &(0x7f0000000080)={0x8, 0x861, 0x9, 0x1}, 0x10) [ 262.776593] ? __pud_alloc+0x16f/0x200 [ 262.780483] copy_page_range+0x1469/0x1de0 [ 262.784728] ? find_held_lock+0x35/0x130 [ 262.788837] ? vma_compute_subtree_gap+0x190/0x1f0 [ 262.793800] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 262.793812] ? __vma_link_rb+0x247/0x340 [ 262.793827] copy_process.part.0+0x4765/0x6a00 [ 262.793853] ? __cleanup_sighand+0x50/0x50 [ 262.802632] ? lock_downgrade+0x740/0x740 [ 262.802647] _do_fork+0x19e/0xce0 [ 262.802662] ? fork_idle+0x280/0x280 [ 262.802676] ? fput+0xd4/0x150 22:37:21 executing program 5: syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x0) 22:37:21 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r2, 0x29, 0x1, 0x0, &(0x7f00000000c0)) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_tables_targets\x00') setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000200)=0x6, 0x4) r4 = fcntl$dupfd(r2, 0x406, r1) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@initdev, @in6=@local}}, {{@in6=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000000040)=0xe8) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 262.802684] ? SyS_write+0x15e/0x230 [ 262.802696] SyS_clone+0x37/0x50 [ 262.802703] ? sys_vfork+0x30/0x30 [ 262.802717] do_syscall_64+0x1e8/0x640 [ 262.802726] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 262.802745] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 262.802754] RIP: 0033:0x45a679 [ 262.802759] RSP: 002b:00007f7ce7ebfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 262.802769] RAX: ffffffffffffffda RBX: 00007f7ce7ebfc90 RCX: 000000000045a679 [ 262.802774] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 262.802779] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 262.802784] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7ce7ec06d4 [ 262.802792] R13: 00000000004c0d71 R14: 00000000004d3d68 R15: 0000000000000004 22:37:21 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0xd05825bb9bc09409, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000080)={{0x2, 0x3, 0x5, 0x1, 0x9}}) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:21 executing program 4 (fault-call:2 fault-nth:73): r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:21 executing program 1: syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000080)={0x8, 0x861, 0x9, 0x1}, 0x10) 22:37:21 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:37:21 executing program 0: syz_mount_image$ntfs(&(0x7f0000000400)='ntfs\x00', &(0x7f0000000440)='./file0\x00', 0x900, 0x0, 0x0, 0x0, &(0x7f0000000c40)={[{@show_sys_files_no='show_sys_files=no'}, {@errors_continue='errors=continue'}, {@umask={'umask'}}, {@uid={'uid'}}, {@errors_recover}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@fmask={'fmask', 0x3d, 0x9}}]}) [ 262.968133] ntfs: (device loop0): parse_options(): Invalid mft_zone_multiplier option argument: 0x0—00000000000. [ 263.020759] FAULT_INJECTION: forcing a failure. [ 263.020759] name failslab, interval 1, probability 0, space 0, times 0 [ 263.051758] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 263.065348] CPU: 1 PID: 11093 Comm: syz-executor.4 Not tainted 4.14.156-syzkaller #0 [ 263.073256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 263.073262] Call Trace: [ 263.073284] dump_stack+0x142/0x197 [ 263.073303] should_fail.cold+0x10f/0x159 [ 263.073325] should_failslab+0xdb/0x130 [ 263.073336] kmem_cache_alloc+0x2d7/0x780 [ 263.073355] copy_process.part.0+0x4450/0x6a00 [ 263.106114] ? __cleanup_sighand+0x50/0x50 [ 263.110369] ? lock_downgrade+0x740/0x740 [ 263.110388] _do_fork+0x19e/0xce0 [ 263.110402] ? fork_idle+0x280/0x280 [ 263.110417] ? fput+0xd4/0x150 [ 263.110426] ? SyS_write+0x15e/0x230 [ 263.110438] SyS_clone+0x37/0x50 [ 263.131969] ? sys_vfork+0x30/0x30 [ 263.135525] do_syscall_64+0x1e8/0x640 [ 263.139431] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 263.144481] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 263.149704] RIP: 0033:0x45a679 [ 263.153065] RSP: 002b:00007f7ce7ebfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 263.160803] RAX: ffffffffffffffda RBX: 00007f7ce7ebfc90 RCX: 000000000045a679 22:37:22 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r2 = fcntl$dupfd(r1, 0x0, r0) write$FUSE_ATTR(r2, &(0x7f0000000280)={0x78}, 0x78) ioctl$TIOCLINUX3(r2, 0x541c, &(0x7f0000000040)) r3 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000100)=""/98) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r3, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:22 executing program 1: syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000080)={0x8, 0x861, 0x9, 0x1}, 0x10) [ 263.168093] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 263.175382] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 263.182662] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7ce7ec06d4 [ 263.189952] R13: 00000000004c0d71 R14: 00000000004d3d68 R15: 0000000000000004 22:37:22 executing program 5: syz_mount_image$ntfs(&(0x7f0000000400)='ntfs\x00', &(0x7f0000000440)='./file0\x00', 0x900, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='show_sys_files=no,errors=continue,umask=00000000000000000000000,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c6572726f72733d7265636f7665722c73686f775f7379735f66696c65733d6e6f2c6d66745f7a6f6e655f6d756c7469706c6965723d30784f8172541b967ed109e4a4a006889f303030303030303030303030303030302c6d66745f7a6f6e655f6d756c7469706c6965723d3078303030303030303030303030303030302c666d61736b3d30303030303030303030303030303030303030303030302c00"]) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x1, 0x0, &(0x7f00000000c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000480)={{{@in=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@loopback}}, &(0x7f0000000580)=0xe8) r2 = syz_open_procfs(0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000300)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r4) setresuid(r3, 0x0, r4) stat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r8 = fcntl$dupfd(r7, 0x0, r6) write$FUSE_ATTR(r8, &(0x7f0000000280)={0x78}, 0x78) ioctl$NS_GET_OWNER_UID(r8, 0xb704, &(0x7f0000000680)=0x0) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x4, 0x5, &(0x7f0000000380)=[{&(0x7f0000000080)="158e47ef253b1b1d705a1b9b24b615c86827a58a0fbedde313447fe39ed652ea901ec6db5ce37b3705ce39574e6e77f3c2ae6e34bf8f34e66969855eb395250cd5e51d8ea4a6a2d2ba3b814f65beaca2198447427b7d38b207148f31e470e2369b439db00284eebb3e4600e703ec3494b21350657f4c5122db24315ee003a03d687a5e5913ab0833822fb9ad2faa7a770e95a3f6ce5d77584b10cb691a302afd0aaf994702c83d7236ffc381a62ed9846bea72f3c362e186f9115b35985ff88d64368cad5b9e9c17f73bb164ed0646e8b432ee7d", 0xd4, 0x7}, {&(0x7f0000000180)="7080d943695f6cba1ac59ace67a24bf5281555c2f9e50db933ff9164a3364fc1471c2dbcc26f3ba7f977072c8533d5e284bbe10991dac531def30f49", 0x3c, 0xffffffffffffffff}, {&(0x7f00000001c0)="90f37296cb888a7d5a7693c648e7bd60cc02eab190fc58d4025c9480aad36197e138e4bb6cdc0e93862173cfe9063f90d3db1521e85087606964175268bfa6f99ddc4ea6427597d66d74732c1df1d7793273a1a43d9a1faf9bcd617907ef69ea48d58bbf625eddaca234d49df368d9115c6616297b0d7bfad32be4c6c2fc2546087f6c34e06cc84f7429d6c1eacf29bfafc8793a9f53b75a1afcc51c7374ba240565974e35b4618697a0885760189d", 0xaf, 0x37}, {&(0x7f0000000280)="1811d41da94dc76cb027680dae4704162ec6f4e32882ac27c4a2e3c0179d8ad445fe4ad4d0e3b3b987ab4956b0adf6c0740efe950e4594fa4ebfee2e1165dae3ba1bc826a170f72a3a519b92efdb0dfeb06089aa231cf7bf7d624e0ca6ed483029910dd3dc02bd3ed00535375d744e36d4b07996dce5b3a9a91e684331227dc759f78e79cb6f14a662230446236ca5d0c37f", 0x92, 0x20ef}, {&(0x7f0000000340), 0x0, 0x100000000}], 0x156062, &(0x7f00000006c0)={[{@uid={'uid', 0x3d, r1}}, {@mode={'mode', 0x3d, 0x10001}}, {@check_relaxed='check=relaxed'}, {@check_strict='check=strict'}, {@mode={'mode', 0x3d, 0x2}}, {@block={'block', 0x3d, 0x1000}}, {@nocompress='nocompress'}, {@nocompress='nocompress'}], [{@fowner_lt={'fowner<', r4}}, {@subj_type={'subj_type', 0x3d, 'ntfs\x00'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@obj_user={'obj_user'}}, {@uid_eq={'uid', 0x3d, r9}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@fsname={'fsname', 0x3d, 'uid'}}]}) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000340)={0x28, 0x0, 0x2711, @my=0x0}, 0x10, 0x800) [ 263.227634] ntfs: (device loop0): parse_options(): Unrecognized mount option . 22:37:22 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PPPIOCSNPMODE(r3, 0x4008744b, &(0x7f0000000100)) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) clone(0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) setxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000240)={0x0, 0xfb, 0xa8, 0x7, 0x9f, "2145dd6b79696961db6116d4e1f3ec67", "24d9cfae54ab1be15fd723400158eeeed39c8a413899278357482b8b68b88e4e651a2931a97e9d17deb14d907fd2136246aab5b804b7f250f95c923b2fbbcd5e37a299e60cabbd45c912fc0d21f8d1b594a020d9a2b32f25936153a4fc25daea2edcdcd58f6b21c5f2fb7a5e1dfeb7792debbe02089c6c1de046049ce16715bbef140737377ea9687b228460b10a36e9754b63"}, 0xa8, 0x1) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r7 = fcntl$dupfd(r6, 0x0, r5) write$FUSE_ATTR(r7, &(0x7f0000000280)={0x78}, 0x78) ioctl$UFFDIO_COPY(r7, 0xc028aa03, &(0x7f0000000300)={&(0x7f0000cb0000/0x2000)=nil, &(0x7f0000caf000/0x2000)=nil, 0x2000, 0x3}) getsockopt$inet6_int(r4, 0x29, 0x1, 0x0, &(0x7f00000000c0)) ioctl$int_in(r4, 0x5452, &(0x7f0000000040)=0x100) 22:37:22 executing program 4 (fault-call:2 fault-nth:74): r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:22 executing program 0: syz_mount_image$ntfs(&(0x7f0000000400)='ntfs\x00', &(0x7f0000000440)='./file0\x00', 0x900, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='show_sys_files=no,errors=continue,umask=00000000000000000000000,uid=', @ANYRESHEX=0x0, @ANYBLOB="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"]) [ 263.309791] ntfs: (device loop0): parse_options(): Unrecognized mount option . [ 263.332596] ntfs: (device loop5): parse_options(): Invalid mft_zone_multiplier option argument: 0xOrT–~Ñ ä¤ ˆŸ0000000000000000 22:37:22 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='\x90\xcf\x8e\xd8\x06R\xe1\x03mo\x06#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:22 executing program 1: syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000080)={0x8, 0x861, 0x9, 0x1}, 0x10) [ 263.440739] FAULT_INJECTION: forcing a failure. [ 263.440739] name failslab, interval 1, probability 0, space 0, times 0 [ 263.494721] ntfs: (device loop0): parse_options(): Unrecognized mount option errrs. [ 263.497075] CPU: 1 PID: 11129 Comm: syz-executor.4 Not tainted 4.14.156-syzkaller #0 [ 263.510569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 263.519930] Call Trace: [ 263.522534] dump_stack+0x142/0x197 [ 263.526186] should_fail.cold+0x10f/0x159 [ 263.530355] should_failslab+0xdb/0x130 [ 263.534333] kmem_cache_alloc+0x2d7/0x780 [ 263.536885] ntfs: (device loop0): parse_options(): Unrecognized mount option show_sys_fes. [ 263.538487] copy_process.part.0+0x4450/0x6a00 [ 263.538513] ? __cleanup_sighand+0x50/0x50 [ 263.555694] ? lock_downgrade+0x740/0x740 [ 263.559852] _do_fork+0x19e/0xce0 [ 263.563325] ? fork_idle+0x280/0x280 [ 263.567046] ? fput+0xd4/0x150 [ 263.570244] ? SyS_write+0x15e/0x230 [ 263.573967] SyS_clone+0x37/0x50 [ 263.577334] ? sys_vfork+0x30/0x30 [ 263.580882] do_syscall_64+0x1e8/0x640 [ 263.584776] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 263.589634] entry_SYSCALL_64_after_hwframe+0x42/0xb7 22:37:22 executing program 5 (fault-call:0 fault-nth:0): syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x0) 22:37:22 executing program 3: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0xd11729e5fa0a093, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x2, 0x145000) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$isdn(r3, &(0x7f00000001c0)={0x22, 0xc1, 0x4, 0x2f, 0x20}, 0x6) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) epoll_wait(0xffffffffffffffff, &(0x7f0000000080)=[{}, {}, {}, {}], 0x4, 0xb8116596) clone(0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0xfa91, 0x94203) ioctl$MON_IOCX_GET(r4, 0x40189206, &(0x7f0000000180)={&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000140)=""/41, 0x29}) [ 263.594822] RIP: 0033:0x45a679 [ 263.598014] RSP: 002b:00007f7ce7ebfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 263.605729] RAX: ffffffffffffffda RBX: 00007f7ce7ebfc90 RCX: 000000000045a679 [ 263.612999] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 263.620286] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 263.627557] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7ce7ec06d4 [ 263.634833] R13: 00000000004c0d71 R14: 00000000004d3d68 R15: 0000000000000004 22:37:22 executing program 1: syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000080)={0x8, 0x861, 0x9, 0x1}, 0x10) [ 263.680883] ntfs: (device loop0): parse_options(): Unrecognized mount option errrs. [ 263.685398] FAULT_INJECTION: forcing a failure. [ 263.685398] name failslab, interval 1, probability 0, space 0, times 0 22:37:22 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000280), 0x4) open(0x0, 0x0, 0x0) getpid() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000100), 0x0, 0x22, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) rmdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) connect(r4, &(0x7f0000000000)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x43) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000003c80), 0x400000000000252, 0x62, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000340)={@remote}, &(0x7f0000000100)=0x14800000) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') preadv(r5, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket(0x1000000010, 0x400000400080803, 0x0) 22:37:22 executing program 0: syz_mount_image$ntfs(&(0x7f0000000400)='ntfs\x00', &(0x7f0000000440)='./file0\x00', 0x900, 0x0, 0x0, 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="73686f775f7379735f66696c65733d6e6f2c8572726f72733d636f6e74696e75652c756d61736b3d30303030303030303030303030303030303030303030302c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',errors=recover,show_sys_files=no,mft_zone_multiplier=0x0000000000000000,mft_zone_multiplier=0x0000000000000000,fmask=00000000000000000000000,\x00']) [ 263.737261] CPU: 1 PID: 11148 Comm: syz-executor.5 Not tainted 4.14.156-syzkaller #0 [ 263.745195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 263.754645] Call Trace: [ 263.757255] dump_stack+0x142/0x197 [ 263.760900] should_fail.cold+0x10f/0x159 [ 263.765062] should_failslab+0xdb/0x130 [ 263.769045] kmem_cache_alloc+0x2d7/0x780 [ 263.773315] ? lock_downgrade+0x740/0x740 [ 263.777482] getname_flags+0xcb/0x580 [ 263.781293] getname+0x1a/0x20 [ 263.784498] do_sys_open+0x1e7/0x430 [ 263.788222] ? filp_open+0x70/0x70 [ 263.791771] SyS_open+0x2d/0x40 [ 263.795052] ? do_sys_open+0x430/0x430 [ 263.798947] do_syscall_64+0x1e8/0x640 [ 263.802837] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 263.807690] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 263.812879] RIP: 0033:0x414411 [ 263.816064] RSP: 002b:00007fcb168bc7a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 263.823949] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000414411 [ 263.831220] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007fcb168bc850 [ 263.838490] RBP: 000000000075bf20 R08: 000000000000000f R09: 0000000000000000 [ 263.845763] R10: 0000000000000064 R11: 0000000000000293 R12: 00007fcb168bd6d4 [ 263.853118] R13: 00000000004ca55d R14: 00000000004e2c30 R15: 0000000000000003 22:37:22 executing program 4 (fault-call:2 fault-nth:75): r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:22 executing program 1: syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000080)={0x8, 0x861, 0x9, 0x1}, 0x10) 22:37:22 executing program 5 (fault-call:0 fault-nth:1): syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x0) [ 263.988267] FAULT_INJECTION: forcing a failure. [ 263.988267] name failslab, interval 1, probability 0, space 0, times 0 [ 264.019153] FAULT_INJECTION: forcing a failure. [ 264.019153] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 264.031011] CPU: 1 PID: 11171 Comm: syz-executor.5 Not tainted 4.14.156-syzkaller #0 [ 264.038906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 264.038915] Call Trace: [ 264.038933] dump_stack+0x142/0x197 [ 264.038951] should_fail.cold+0x10f/0x159 [ 264.058657] __alloc_pages_nodemask+0x1d6/0x7a0 [ 264.063338] ? fs_reclaim_acquire+0x20/0x20 [ 264.067669] ? __alloc_pages_slowpath+0x2930/0x2930 [ 264.072700] cache_grow_begin+0x80/0x400 [ 264.076772] kmem_cache_alloc+0x6a6/0x780 [ 264.080929] ? lock_downgrade+0x740/0x740 [ 264.085097] getname_flags+0xcb/0x580 [ 264.088911] getname+0x1a/0x20 [ 264.092124] do_sys_open+0x1e7/0x430 [ 264.095849] ? filp_open+0x70/0x70 [ 264.099405] SyS_open+0x2d/0x40 [ 264.102680] ? do_sys_open+0x430/0x430 [ 264.106593] do_syscall_64+0x1e8/0x640 [ 264.110479] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 264.115335] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 264.120523] RIP: 0033:0x414411 [ 264.123714] RSP: 002b:00007fcb168bc7a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 264.131425] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000414411 [ 264.138695] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007fcb168bc850 [ 264.145964] RBP: 000000000075bf20 R08: 000000000000000f R09: 0000000000000000 [ 264.153232] R10: 0000000000000064 R11: 0000000000000293 R12: 00007fcb168bd6d4 [ 264.160513] R13: 00000000004ca55d R14: 00000000004e2c30 R15: 0000000000000003 [ 264.171878] CPU: 1 PID: 11161 Comm: syz-executor.4 Not tainted 4.14.156-syzkaller #0 [ 264.179772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 22:37:23 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r2 = fcntl$dupfd(r1, 0x0, r0) write$FUSE_ATTR(r2, &(0x7f0000000280)={0x78}, 0x78) ioctl$KVM_GET_NR_MMU_PAGES(0xffffffffffffffff, 0xae45, 0xc47) syz_mount_image$ntfs(&(0x7f0000000400)='ntfs\x00', &(0x7f0000000440)='./file0\x00', 0x900, 0x0, 0x0, 0x0, &(0x7f0000000c40)={[{@show_sys_files_no='show_sys_files=no'}, {@errors_continue='errors=continue'}, {@umask={'umask'}}, {@uid={'uid'}}, {@errors_recover='errors=recover'}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x800000}}, {@fmask={'fmask'}}]}) 22:37:23 executing program 1: syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000080)={0x8, 0x861, 0x9, 0x1}, 0x10) [ 264.189131] Call Trace: [ 264.191731] dump_stack+0x142/0x197 [ 264.195376] should_fail.cold+0x10f/0x159 [ 264.199546] should_failslab+0xdb/0x130 [ 264.203532] kmem_cache_alloc+0x2d7/0x780 [ 264.207699] ? anon_vma_clone+0x310/0x470 [ 264.211945] anon_vma_fork+0xe9/0x4d0 [ 264.215758] copy_process.part.0+0x45e3/0x6a00 [ 264.220369] ? __cleanup_sighand+0x50/0x50 [ 264.224631] ? lock_downgrade+0x740/0x740 [ 264.228793] _do_fork+0x19e/0xce0 [ 264.232265] ? fork_idle+0x280/0x280 [ 264.235989] ? fput+0xd4/0x150 [ 264.239196] ? SyS_write+0x15e/0x230 [ 264.243233] SyS_clone+0x37/0x50 [ 264.246634] ? sys_vfork+0x30/0x30 [ 264.250272] do_syscall_64+0x1e8/0x640 [ 264.254165] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 264.259024] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 264.264212] RIP: 0033:0x45a679 [ 264.267408] RSP: 002b:00007f7ce7ebfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 264.275120] RAX: ffffffffffffffda RBX: 00007f7ce7ebfc90 RCX: 000000000045a679 [ 264.282390] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 22:37:23 executing program 4 (fault-call:2 fault-nth:76): r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 264.289660] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 264.297297] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7ce7ec06d4 [ 264.304569] R13: 00000000004c0d71 R14: 00000000004d3d68 R15: 0000000000000004 22:37:23 executing program 5 (fault-call:0 fault-nth:2): syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x0) 22:37:23 executing program 1: syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000080)={0x8, 0x861, 0x9, 0x1}, 0x10) [ 264.467712] FAULT_INJECTION: forcing a failure. [ 264.467712] name failslab, interval 1, probability 0, space 0, times 0 [ 264.468314] FAULT_INJECTION: forcing a failure. [ 264.468314] name failslab, interval 1, probability 0, space 0, times 0 [ 264.559137] CPU: 1 PID: 11188 Comm: syz-executor.5 Not tainted 4.14.156-syzkaller #0 [ 264.567084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 264.576454] Call Trace: [ 264.579062] dump_stack+0x142/0x197 [ 264.582710] should_fail.cold+0x10f/0x159 [ 264.586880] should_failslab+0xdb/0x130 [ 264.590874] kmem_cache_alloc+0x2d7/0x780 [ 264.595030] ? save_stack+0xa9/0xd0 [ 264.598664] get_empty_filp+0x8c/0x3f0 [ 264.602565] path_openat+0x8f/0x3f70 22:37:23 executing program 1: syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000080)={0x8, 0x861, 0x9, 0x1}, 0x10) [ 264.606283] ? trace_hardirqs_on+0x10/0x10 [ 264.610522] ? check_preemption_disabled+0x3c/0x250 [ 264.615555] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 264.620233] ? find_held_lock+0x35/0x130 [ 264.624291] ? save_trace+0x290/0x290 [ 264.628091] ? __alloc_fd+0x1d4/0x4a0 [ 264.631981] do_filp_open+0x18e/0x250 [ 264.635784] ? may_open_dev+0xe0/0xe0 [ 264.639596] ? lock_downgrade+0x740/0x740 [ 264.643837] ? do_raw_spin_unlock+0x16b/0x260 [ 264.648333] ? _raw_spin_unlock+0x2d/0x50 [ 264.652481] ? __alloc_fd+0x1d4/0x4a0 [ 264.656292] do_sys_open+0x2c5/0x430 [ 264.660006] ? filp_open+0x70/0x70 [ 264.663554] SyS_open+0x2d/0x40 [ 264.666835] ? do_sys_open+0x430/0x430 [ 264.670734] do_syscall_64+0x1e8/0x640 [ 264.674625] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 264.679476] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 264.684660] RIP: 0033:0x414411 [ 264.687839] RSP: 002b:00007fcb168bc7a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 264.695544] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000414411 22:37:23 executing program 1: syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000080)={0x8, 0x861, 0x9, 0x1}, 0x10) [ 264.702815] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007fcb168bc850 [ 264.710086] RBP: 000000000075bf20 R08: 000000000000000f R09: 0000000000000000 [ 264.717355] R10: 0000000000000064 R11: 0000000000000293 R12: 00007fcb168bd6d4 [ 264.725148] R13: 00000000004ca55d R14: 00000000004e2c30 R15: 0000000000000003 [ 264.735454] CPU: 0 PID: 11187 Comm: syz-executor.4 Not tainted 4.14.156-syzkaller #0 [ 264.743355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 264.752709] Call Trace: [ 264.755306] dump_stack+0x142/0x197 [ 264.758958] should_fail.cold+0x10f/0x159 [ 264.763112] should_failslab+0xdb/0x130 [ 264.767092] kmem_cache_alloc+0x2d7/0x780 [ 264.771241] ? anon_vma_clone+0x310/0x470 [ 264.775399] anon_vma_fork+0x1ce/0x4d0 [ 264.779300] copy_process.part.0+0x45e3/0x6a00 [ 264.783915] ? __cleanup_sighand+0x50/0x50 [ 264.788152] ? lock_downgrade+0x740/0x740 [ 264.792304] _do_fork+0x19e/0xce0 [ 264.795757] ? fork_idle+0x280/0x280 [ 264.799473] ? fput+0xd4/0x150 [ 264.802661] ? SyS_write+0x15e/0x230 [ 264.806375] SyS_clone+0x37/0x50 [ 264.809737] ? sys_vfork+0x30/0x30 [ 264.813282] do_syscall_64+0x1e8/0x640 [ 264.817170] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 264.822030] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 264.827220] RIP: 0033:0x45a679 [ 264.830407] RSP: 002b:00007f7ce7ebfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 264.838115] RAX: ffffffffffffffda RBX: 00007f7ce7ebfc90 RCX: 000000000045a679 [ 264.845377] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 264.852642] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 264.859907] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7ce7ec06d4 [ 264.867173] R13: 00000000004c0d71 R14: 00000000004d3d68 R15: 0000000000000004 22:37:23 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f00000004c0)=0xff67) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r5}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001600)={'vxcan0\x00', r5}) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000001640)={r6, 0x1, 0x6, @dev={[], 0x16}}, 0x10) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:23 executing program 0: r0 = getpid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) prlimit64(r1, 0x4, &(0x7f0000000080)={0x6, 0x100}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = getpid() r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r4, 0x1a04}}, 0x10) sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) ptrace$peeksig(0x4209, r2, &(0x7f00000001c0)={0x5, 0x3}, &(0x7f0000000900)) syz_mount_image$ntfs(&(0x7f0000000400)='ntfs\x00', &(0x7f0000000440)='./file0\x00', 0x900, 0x0, 0x0, 0x4084080, &(0x7f0000000480)=ANY=[@ANYBLOB="73686f775f7379735f66696c65733d6e6f2c6572726f72733d636f6e74696e75652c756d61736b3d30303030303030303030303030303030303030303030302c7569643d7b425ba74c0ed5055b62c10ac574187b734d07b8e1ddf8885137cefc9ea0304798361c62c64b4083fab072d8741468a1e81a6bfefc0637f254938e0dda4e26e93d80d723772dab8515a8b54976fc0bb576bd46e040fb1c685bee1517fd600b72d0ee34342e84781d04b4b89ade17a248efec7608963b97118e88c08444f3b9faa95f35a0172cfb360bacebe6d1c81cdaa9f76d1dffbc24fa8a", @ANYRESHEX=0x0, @ANYBLOB="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"]) 22:37:23 executing program 1: syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000080)={0x8, 0x861, 0x9, 0x1}, 0x10) 22:37:23 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) getsockname$netrom(r3, &(0x7f0000000040)={{0x3, @netrom}, [@bcast, @default, @netrom, @rose, @rose, @default, @netrom, @netrom]}, &(0x7f00000000c0)=0x48) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:23 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000080)={0x8, 0x861, 0x9, 0x1}, 0x10) 22:37:24 executing program 0: syz_mount_image$ntfs(&(0x7f0000000400)='ntfs\x00', &(0x7f0000000440)='./file0\x00', 0x900, 0x0, 0x0, 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='show_sys_files=no,errors=continue,umask=0000000000000000[\x00\x00\x00000,uid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=recover,show_sys_files=no,mft_zone_mu,tiplier=0x000000000000000,mft_zone_multiplier=0x0000000000000000,fmask=00000000000000000000000,\x00\x00']) open(&(0x7f0000000000)='./file0\x00', 0x200, 0x8) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) fremovexattr(r0, &(0x7f0000000080)=@known='com.apple.system.Security\x00') 22:37:24 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000080)={0x8, 0x861, 0x9, 0x1}, 0x10) 22:37:24 executing program 4 (fault-call:2 fault-nth:77): r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:24 executing program 3: syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0xffffc000) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:24 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000080)={0x8, 0x861, 0x9, 0x1}, 0x10) 22:37:24 executing program 5 (fault-call:0 fault-nth:3): syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x0) 22:37:24 executing program 0: syz_mount_image$ntfs(&(0x7f0000000400)='ntfs\x00', &(0x7f0000000440)='./file0\x00', 0x900, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="73686f775f7379735f66696c6558a47a733d6e6f2c6572726f72733d636f6e74696e75652c756d615a6b3d30303030303030303030303030303030303030303030302c75", @ANYRESHEX=0x0, @ANYBLOB="2c6572726f72733d7265636f7665722c73686f775f7379735f66696c65733d6e6f2c6d66745f7a6f6e655f6d756c7469706c6965723d3078303030303030303030303030303030302c6d66745f7a6f6e655f6d756c7469706c6965723d3078303030303030303030303030303030302c666d61736b3d303030303030303030302c00000000000000000000000000007aee23a7bba9aeed86df40412ed873ac2355da241e400686ab4d645241c505c8c988efa89cac1325d0594e8221c3cd34b45980d3e30bd6efcb47488f1c87b41b8d4e14e3baac260ffe"]) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mknod(&(0x7f0000000080)='./file0\x00', 0x800, 0xa1) ioctl$CAPI_NCCI_GETUNIT(r0, 0x80044327, &(0x7f00000000c0)=0x6) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000040)={0x7}) 22:37:24 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000080)={0x8, 0x861, 0x9, 0x1}, 0x10) [ 265.366820] FAULT_INJECTION: forcing a failure. [ 265.366820] name failslab, interval 1, probability 0, space 0, times 0 [ 265.393730] FAULT_INJECTION: forcing a failure. [ 265.393730] name failslab, interval 1, probability 0, space 0, times 0 [ 265.445281] CPU: 0 PID: 11244 Comm: syz-executor.5 Not tainted 4.14.156-syzkaller #0 [ 265.453229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 265.462762] Call Trace: [ 265.465372] dump_stack+0x142/0x197 [ 265.469047] should_fail.cold+0x10f/0x159 [ 265.473214] should_failslab+0xdb/0x130 [ 265.477278] kmem_cache_alloc+0x2d7/0x780 [ 265.481435] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 265.486893] ? check_preemption_disabled+0x3c/0x250 [ 265.491912] selinux_file_alloc_security+0xb4/0x190 [ 265.496931] security_file_alloc+0x6d/0xa0 [ 265.501166] get_empty_filp+0x162/0x3f0 [ 265.505139] path_openat+0x8f/0x3f70 [ 265.509027] ? trace_hardirqs_on+0x10/0x10 [ 265.513263] ? check_preemption_disabled+0x3c/0x250 [ 265.518292] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 265.522960] ? find_held_lock+0x35/0x130 [ 265.527022] ? save_trace+0x290/0x290 [ 265.530838] ? __alloc_fd+0x1d4/0x4a0 [ 265.534690] do_filp_open+0x18e/0x250 [ 265.538499] ? may_open_dev+0xe0/0xe0 [ 265.542304] ? lock_downgrade+0x740/0x740 [ 265.546454] ? do_raw_spin_unlock+0x16b/0x260 [ 265.550957] ? _raw_spin_unlock+0x2d/0x50 [ 265.555105] ? __alloc_fd+0x1d4/0x4a0 [ 265.558909] do_sys_open+0x2c5/0x430 [ 265.562620] ? filp_open+0x70/0x70 [ 265.566161] SyS_open+0x2d/0x40 [ 265.569599] ? do_sys_open+0x430/0x430 [ 265.573498] do_syscall_64+0x1e8/0x640 [ 265.577383] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 265.582240] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 265.587432] RIP: 0033:0x414411 [ 265.590614] RSP: 002b:00007fcb168bc7a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 265.598324] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000414411 [ 265.605594] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007fcb168bc850 [ 265.612867] RBP: 000000000075bf20 R08: 000000000000000f R09: 0000000000000000 [ 265.620348] R10: 0000000000000064 R11: 0000000000000293 R12: 00007fcb168bd6d4 [ 265.627618] R13: 00000000004ca55d R14: 00000000004e2c30 R15: 0000000000000003 [ 265.634905] CPU: 1 PID: 11247 Comm: syz-executor.4 Not tainted 4.14.156-syzkaller #0 22:37:24 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r3, 0x29, 0x1, 0x0, &(0x7f00000000c0)) fsetxattr$security_capability(r3, &(0x7f0000000180)='security.capability\x00', &(0x7f00000001c0)=@v2={0x2000000, [{0x4, 0x1}, {0x69867966, 0x8}]}, 0x14, 0x1) r4 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r5, 0x0, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4024}, 0x801) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 265.642806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 265.652248] Call Trace: [ 265.654842] dump_stack+0x142/0x197 [ 265.658479] should_fail.cold+0x10f/0x159 [ 265.662654] should_failslab+0xdb/0x130 [ 265.666667] kmem_cache_alloc+0x2d7/0x780 [ 265.670816] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 265.675575] copy_process.part.0+0x4450/0x6a00 [ 265.680185] ? __cleanup_sighand+0x50/0x50 [ 265.684422] ? lock_downgrade+0x740/0x740 [ 265.688842] _do_fork+0x19e/0xce0 [ 265.692295] ? fork_idle+0x280/0x280 [ 265.696013] ? fput+0xd4/0x150 [ 265.699200] ? SyS_write+0x15e/0x230 [ 265.702920] SyS_clone+0x37/0x50 [ 265.706307] ? sys_vfork+0x30/0x30 [ 265.709856] do_syscall_64+0x1e8/0x640 [ 265.714008] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 265.718862] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 265.724051] RIP: 0033:0x45a679 [ 265.727235] RSP: 002b:00007f7ce7ebfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 265.734940] RAX: ffffffffffffffda RBX: 00007f7ce7ebfc90 RCX: 000000000045a679 [ 265.742205] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 265.749472] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 265.756751] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7ce7ec06d4 [ 265.764020] R13: 00000000004c0d71 R14: 00000000004d3d68 R15: 0000000000000004 22:37:24 executing program 0: syz_mount_image$ntfs(&(0x7f0000000400)='ntfs\x00', &(0x7f0000000440)='./file0\x00', 0x900, 0x0, 0x0, 0x0, &(0x7f0000000c40)={[{@show_sys_files_no='show_sys_files=no'}, {@errors_continue='errors=continue'}, {@umask={'umask'}}, {@uid={'uid'}}, {@errors_recover='errors=recover'}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@fmask={'fmask'}}]}) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) recvfrom$unix(r0, &(0x7f0000000040)=""/124, 0x7c, 0x340, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) 22:37:24 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000080)={0x8, 0x861, 0x9, 0x1}, 0x10) 22:37:24 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = geteuid() fstat(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000340)=0xe8) syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x6, 0x1, &(0x7f0000000180)=[{&(0x7f00000000c0)="ae2f48506d547f2938a9b3abbd94fba2eaffe4107f4f806b79bfffb10bc8f0c96ca9f25c266361e412a267e43b434ed7fb0c4e1f42f968530c100f4f2451525c3defc38ff5697a3d1d742ccfd3eb33335e3b1e36ff323150471ef099593474079e2f1d9c4e4586a29b431dd69602ce7229092a023792e7120f44a1cddb03f8500e49c150e8beeb6fd024ad7c56fa693873fd6ac19ae100b0367cbe2fc35152aa629db1574e86c0bae65b8a6a271daa51136e3ca11310", 0xb6, 0xcf4}], 0x800, &(0x7f0000000380)={[{@check_relaxed='check=relaxed'}, {@nocompress='nocompress'}, {@map_off='map=off'}, {@mode={'mode', 0x3d, 0x1}}, {@nocompress='nocompress'}, {@map_acorn='map=acorn'}, {@sbsector={'sbsector', 0x3d, 0x2}}, {@sbsector={'sbsector', 0x3d, 0x80000000}}, {@unhide='unhide'}, {@check_relaxed='check=relaxed'}], [{@euid_lt={'euid<', r1}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/usbmon#\x00'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@fowner_gt={'fowner>', r2}}, {@fowner_gt={'fowner>', r3}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/usbmon#\x00'}}]}) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:24 executing program 5 (fault-call:0 fault-nth:4): syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x0) 22:37:24 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000080)={0x8, 0x861, 0x9, 0x1}, 0x10) [ 266.001278] FAULT_INJECTION: forcing a failure. [ 266.001278] name failslab, interval 1, probability 0, space 0, times 0 [ 266.056493] CPU: 1 PID: 11281 Comm: syz-executor.5 Not tainted 4.14.156-syzkaller #0 [ 266.064427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 266.064434] Call Trace: [ 266.064452] dump_stack+0x142/0x197 [ 266.064470] should_fail.cold+0x10f/0x159 [ 266.084251] should_failslab+0xdb/0x130 [ 266.084265] kmem_cache_alloc_trace+0x2e9/0x790 [ 266.092928] ? processcompl_compat+0x5d0/0x5d0 [ 266.097528] usbdev_open+0x51/0x840 [ 266.101179] ? do_raw_spin_unlock+0x16b/0x260 [ 266.105690] ? processcompl_compat+0x5d0/0x5d0 [ 266.110275] chrdev_open+0x207/0x590 [ 266.113996] ? cdev_put.part.0+0x50/0x50 [ 266.118068] ? security_file_open+0x89/0x190 [ 266.122482] do_dentry_open+0x73b/0xeb0 [ 266.126464] ? cdev_put.part.0+0x50/0x50 [ 266.130532] vfs_open+0x105/0x220 [ 266.133996] path_openat+0x8bd/0x3f70 [ 266.137801] ? trace_hardirqs_on+0x10/0x10 [ 266.142048] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 266.146717] ? find_held_lock+0x35/0x130 [ 266.150784] ? __alloc_fd+0x1d4/0x4a0 [ 266.154591] do_filp_open+0x18e/0x250 [ 266.158397] ? may_open_dev+0xe0/0xe0 [ 266.162196] ? do_raw_spin_unlock+0x16b/0x260 [ 266.166781] ? _raw_spin_unlock+0x2d/0x50 [ 266.170927] ? __alloc_fd+0x1d4/0x4a0 [ 266.174733] do_sys_open+0x2c5/0x430 [ 266.178622] ? filp_open+0x70/0x70 [ 266.182172] SyS_open+0x2d/0x40 [ 266.185451] ? do_sys_open+0x430/0x430 [ 266.189343] do_syscall_64+0x1e8/0x640 [ 266.193248] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 266.198102] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 266.203285] RIP: 0033:0x414411 22:37:25 executing program 4 (fault-call:2 fault-nth:78): r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:25 executing program 0: syz_mount_image$ntfs(&(0x7f0000000400)='ntfs\x00', &(0x7f0000000440)='./file0\x00', 0x900, 0x0, 0x0, 0x0, &(0x7f0000000c40)={[{@show_sys_files_no='show_sys_files=no'}, {@errors_continue='errors=continue'}, {@umask={'umask'}}, {@uid={'uid'}}, {@errors_recover='errors=recover'}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@show_sys_files_yes='show_sys_files=yes'}, {@fmask={'fmask'}}]}) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040)=0x2, 0x4) [ 266.206468] RSP: 002b:00007fcb168bc7a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 266.214182] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000414411 [ 266.221595] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007fcb168bc850 [ 266.228868] RBP: 000000000075bf20 R08: 000000000000000f R09: 0000000000000000 [ 266.236144] R10: 0000000000000064 R11: 0000000000000293 R12: 00007fcb168bd6d4 [ 266.243418] R13: 00000000004ca55d R14: 00000000004e2c30 R15: 0000000000000003 [ 266.295097] FAULT_INJECTION: forcing a failure. [ 266.295097] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 266.327386] CPU: 1 PID: 11297 Comm: syz-executor.4 Not tainted 4.14.156-syzkaller #0 [ 266.335316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 266.344795] Call Trace: [ 266.347410] dump_stack+0x142/0x197 [ 266.351055] should_fail.cold+0x10f/0x159 [ 266.355213] ? __might_sleep+0x93/0xb0 [ 266.359112] __alloc_pages_nodemask+0x1d6/0x7a0 [ 266.363794] ? __alloc_pages_slowpath+0x2930/0x2930 [ 266.368819] ? kasan_slab_alloc+0xf/0x20 [ 266.372911] alloc_pages_current+0xec/0x1e0 [ 266.377243] pte_alloc_one+0x1a/0x100 [ 266.381047] __pte_alloc+0x2a/0x2d0 [ 266.384690] copy_page_range+0x1299/0x1de0 [ 266.388923] ? save_trace+0x290/0x290 [ 266.392836] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 266.397601] copy_process.part.0+0x4765/0x6a00 [ 266.402212] ? __cleanup_sighand+0x50/0x50 [ 266.406461] ? lock_downgrade+0x740/0x740 [ 266.410623] _do_fork+0x19e/0xce0 [ 266.414085] ? fork_idle+0x280/0x280 [ 266.417803] ? fput+0xd4/0x150 [ 266.420992] ? SyS_write+0x15e/0x230 [ 266.424891] SyS_clone+0x37/0x50 [ 266.428258] ? sys_vfork+0x30/0x30 [ 266.431839] do_syscall_64+0x1e8/0x640 [ 266.435739] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 266.440627] entry_SYSCALL_64_after_hwframe+0x42/0xb7 22:37:25 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r6 = fcntl$dupfd(r5, 0x0, r4) write$FUSE_ATTR(r6, &(0x7f0000000280)={0x78}, 0x78) ioctl$NBD_SET_SIZE_BLOCKS(r6, 0xab07, 0x4) 22:37:25 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000080)={0x8, 0x861, 0x9, 0x1}, 0x10) [ 266.445817] RIP: 0033:0x45a679 [ 266.449001] RSP: 002b:00007f7ce7ebfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 266.456895] RAX: ffffffffffffffda RBX: 00007f7ce7ebfc90 RCX: 000000000045a679 [ 266.464402] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 266.471678] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 266.478962] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7ce7ec06d4 [ 266.486237] R13: 00000000004c0d71 R14: 00000000004d3d68 R15: 0000000000000004 22:37:25 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000080)={0x8, 0x861, 0x9, 0x1}, 0x10) 22:37:25 executing program 0: syz_mount_image$ntfs(&(0x7f0000000400)='ntfs\x00', &(0x7f0000000440)='./file0\x00', 0x900, 0x0, 0x0, 0x0, &(0x7f0000000c40)={[{@show_sys_files_no='show_sys_files=no'}, {@errors_continue='errors=continue'}, {@umask={'umask'}}, {@uid={'uid'}}, {@errors_recover='errors=recover'}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@fmask={'fmask'}}]}) r0 = msgget(0x2, 0x2) msgrcv(r0, &(0x7f0000000000)={0x0, ""/184}, 0xc0, 0x0, 0x1000) 22:37:25 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) fcntl$setpipe(r0, 0x407, 0x400) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x10010, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:25 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000080)={0x8, 0x861, 0x9, 0x1}, 0x10) 22:37:25 executing program 4 (fault-call:2 fault-nth:79): r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:25 executing program 0: syz_mount_image$ntfs(&(0x7f0000000400)='ntfs\x00', &(0x7f0000000440)='./file0\x00', 0x900, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="73686f775f7379735f66696c65733d6e6f2c6572726f72733d636f6e74696e75652c756d61736b3d3030303030303058422496cf68a91263d6f059b273303030303030303030303030303030302c646d61736b3d30303030303030303030303030303030303030303030342c6572726f72733d7265636f7665722c73686f775f7379735f66696c65733d6e6f2c757466382c6d66745f7a6f6e655f6d756c7469706c69c1fa81b8910ed997b41826b665723d3078303030303030303030303030303030302c666d61736b3d30303030303030303030303030a8c9ee288c13348f85182b8bc782c4aca8bbf943db522ebe51dff69c223f3feab5af452614d388dfc2dd46ece87d3274f95dc3eb3f80a23917e1b1531502992cd4fd9ef982df7e0300000000000000e5ab5604a2b18095645f8e3b8b359dde06c0ee313db9bcdc6c29a61648ad0a2cc9"]) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000300)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r5) setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x48f, &(0x7f0000000000)={0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x1, 'wlc\x00', 0x2, 0x7, 0x18}, 0x2c) setresuid(r4, 0x0, r5) write$FUSE_ATTR(r2, &(0x7f0000000140)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0xfffffbfffffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}}}, 0x78) ioctl$VIDIOC_ENUMSTD(r2, 0xc0485619, &(0x7f0000000100)={0x831, 0x1000, "edd1fda4dad7d5c746dbf384d9527b95944f32b92e84d6ec", {0x2, 0x7}, 0x8}) 22:37:25 executing program 5: syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:system_cron_spool_t:s0\x00', 0x29, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x1, 0x0, &(0x7f00000000c0)) tee(r0, 0xffffffffffffffff, 0x9, 0x6) 22:37:25 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000080)={0x8, 0x861, 0x9, 0x1}, 0x10) [ 266.861782] FAULT_INJECTION: forcing a failure. [ 266.861782] name failslab, interval 1, probability 0, space 0, times 0 22:37:25 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r2 = fcntl$dupfd(r1, 0x0, r0) write$FUSE_ATTR(r2, &(0x7f0000000280)={0x78}, 0x78) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r5 = fcntl$dupfd(r4, 0x0, r3) write$FUSE_ATTR(r5, &(0x7f0000000280)={0x78}, 0x78) ioctl$DRM_IOCTL_GEM_OPEN(r5, 0xc010640b, &(0x7f0000000300)={0x0, 0x0, 0x897}) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000340)={r6, 0x0, 0x7fff}) r7 = socket$inet6(0xa, 0x40000080806, 0x0) listen(r7, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r8, 0x29, 0x1, 0x0, &(0x7f00000000c0)) recvfrom(r8, &(0x7f0000000000)=""/46, 0x2e, 0x140, &(0x7f0000000040)=@nfc_llcp={0x27, 0x1, 0x1, 0x5, 0x1, 0x1f, "ff96d9a869544a97d0ce1e8d4d72a02cea9e021ee516009822ee9b1fbcffd2038adf8ba2ccb7eb99178aea696b587f7ad8ef34110fbce8b2d74db0b90a7a70", 0x22}, 0x80) shutdown(r7, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r9, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r9, 0x29, 0x1, 0x0, &(0x7f00000000c0)) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f0000000140)='bdevprocppp1security\xa2/(\x00') r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r11 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r12 = fcntl$dupfd(r11, 0x0, r10) write$FUSE_ATTR(r12, &(0x7f0000000280)={0x78}, 0x78) getsockopt$inet_IP_XFRM_POLICY(r12, 0x0, 0x11, &(0x7f0000000180)={{{@in, @in6}}, {{}, 0x0, @in=@empty}}, &(0x7f0000000280)=0xe8) write(r9, &(0x7f0000000100)="b8da542eb0328a622cb29848b7d946f829bd2dc060637fdf1a653fff08f99019adfa41f62dc328a2e6a5230eab67d2a385d05afbfb93f2", 0x37) [ 266.923827] CPU: 1 PID: 11334 Comm: syz-executor.4 Not tainted 4.14.156-syzkaller #0 [ 266.931763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 266.941127] Call Trace: [ 266.943728] dump_stack+0x142/0x197 [ 266.947378] should_fail.cold+0x10f/0x159 [ 266.951539] should_failslab+0xdb/0x130 [ 266.955519] kmem_cache_alloc+0x2d7/0x780 [ 266.959677] ptlock_alloc+0x20/0x70 [ 266.963311] pte_alloc_one+0x60/0x100 [ 266.967114] __pte_alloc+0x2a/0x2d0 [ 266.970747] copy_page_range+0x1299/0x1de0 [ 266.974987] ? save_trace+0x290/0x290 [ 266.978824] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 266.983589] copy_process.part.0+0x4765/0x6a00 [ 266.988211] ? __cleanup_sighand+0x50/0x50 [ 266.992459] ? lock_downgrade+0x740/0x740 [ 266.996612] _do_fork+0x19e/0xce0 [ 267.000072] ? fork_idle+0x280/0x280 [ 267.003793] ? fput+0xd4/0x150 [ 267.006992] ? SyS_write+0x15e/0x230 [ 267.010711] SyS_clone+0x37/0x50 [ 267.014079] ? sys_vfork+0x30/0x30 [ 267.017626] do_syscall_64+0x1e8/0x640 22:37:25 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) listen(r0, 0x0) shutdown(r0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x1) 22:37:25 executing program 5: syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x1, 0x0) [ 267.021517] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 267.026399] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 267.031585] RIP: 0033:0x45a679 [ 267.034772] RSP: 002b:00007f7ce7ebfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 267.042494] RAX: ffffffffffffffda RBX: 00007f7ce7ebfc90 RCX: 000000000045a679 [ 267.049770] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 267.057039] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 267.064454] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7ce7ec06d4 22:37:26 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r2 = fcntl$dupfd(r1, 0x0, r0) write$FUSE_ATTR(r2, &(0x7f0000000280)={0x78}, 0x78) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_mount_image$ntfs(&(0x7f0000000400)='ntfs\x00', &(0x7f0000000440)='./file0\x00', 0x900, 0x0, 0x0, 0x0, &(0x7f0000000c40)={[{@show_sys_files_no='show_sys_files=no'}, {@errors_continue='errors=continue'}, {@umask={'umask'}}, {@uid={'uid'}}, {@errors_recover='errors=recover'}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@fmask={'fmask'}}]}) 22:37:26 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000040)={0x20000000, 0x100, "959f28354973ad0b6f41834390c05a1c871725aaac51849d9f478cbe4a130c29", 0x0, 0x4, 0x5, 0x2, 0xd52, 0x8, 0x3ff, 0x7, [0x1, 0x40, 0x4, 0x5]}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) remap_file_pages(&(0x7f0000cb1000/0x4000)=nil, 0x4000, 0x0, 0xff, 0x10000) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r6 = fcntl$dupfd(r5, 0x0, r4) write$FUSE_ATTR(r6, &(0x7f0000000280)={0x78}, 0x78) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r7, &(0x7f00000000c0)={0xc, 0x8, 0xfa00, {0x0}}, 0xfffffe04) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x80000000001, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r9, r10, 0xee00) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote}, r8}}, 0x171) write$RDMA_USER_CM_CMD_CONNECT(r6, &(0x7f0000000140)={0x6, 0x118, 0xfa00, {{0x20, 0xbd7c641f, "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", 0x6, 0xa6, 0x40, 0x4, 0xa, 0x8, 0xff}, r8}}, 0x120) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r12 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r13 = fcntl$dupfd(r12, 0x0, r11) write$FUSE_ATTR(r13, &(0x7f0000000280)={0x78}, 0x78) ioctl$NBD_SET_SIZE(r13, 0xab02, 0x3ff) clone(0x0, 0x0, 0x0, 0x0, 0x0) accept$inet6(r6, &(0x7f0000000480)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000004c0)=0x1c) 22:37:26 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000080)={0x8, 0x861, 0x9, 0x1}, 0x10) [ 267.071711] R13: 00000000004c0d71 R14: 00000000004d3d68 R15: 0000000000000004 22:37:26 executing program 4 (fault-call:2 fault-nth:80): r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:26 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000080)={0x8, 0x861, 0x9, 0x1}, 0x10) [ 267.166905] ucma_write: process 546 (syz-executor.3) changed security contexts after opening file descriptor, this is not allowed. [ 267.188842] __ntfs_error: 32 callbacks suppressed [ 267.188848] ntfs: (device loop0): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 267.203499] FAULT_INJECTION: forcing a failure. [ 267.203499] name failslab, interval 1, probability 0, space 0, times 0 22:37:26 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r2 = fcntl$dupfd(r1, 0x0, r0) write$FUSE_ATTR(r2, &(0x7f0000000280)={0x78}, 0x78) ioctl$RTC_VL_READ(r2, 0x80047013, &(0x7f0000000000)) syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x0) 22:37:26 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x8022000, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r6 = fcntl$dupfd(r5, 0x0, r4) write$FUSE_ATTR(r6, &(0x7f0000000280)={0x78}, 0x78) ioctl$USBDEVFS_REAPURB(r6, 0x4008550c, &(0x7f0000000040)) [ 267.297430] CPU: 1 PID: 11371 Comm: syz-executor.4 Not tainted 4.14.156-syzkaller #0 [ 267.305372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 267.314731] Call Trace: [ 267.317324] dump_stack+0x142/0x197 [ 267.320978] should_fail.cold+0x10f/0x159 [ 267.325734] should_failslab+0xdb/0x130 [ 267.329714] kmem_cache_alloc+0x2d7/0x780 [ 267.333853] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 267.338598] copy_process.part.0+0x4450/0x6a00 [ 267.343195] ? __cleanup_sighand+0x50/0x50 [ 267.347417] ? lock_downgrade+0x740/0x740 [ 267.351560] _do_fork+0x19e/0xce0 [ 267.354996] ? fork_idle+0x280/0x280 [ 267.358694] ? fput+0xd4/0x150 [ 267.361909] ? SyS_write+0x15e/0x230 [ 267.365609] SyS_clone+0x37/0x50 [ 267.368972] ? sys_vfork+0x30/0x30 [ 267.372497] do_syscall_64+0x1e8/0x640 [ 267.376365] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 267.381195] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 267.386371] RIP: 0033:0x45a679 [ 267.390067] RSP: 002b:00007f7ce7ebfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 22:37:26 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f00000004c0)=0xff67) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r3}) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f00000004c0)=0xff67) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r5}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001780)={0x0, @empty, @remote}, &(0x7f00000017c0)=0xc) r7 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r7, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f00000004c0)=0xff67) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r8}) sendmmsg$inet(r1, &(0x7f0000001900)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="5b83eb106de0bd447dfd4e51c35b51dc080c4cca68be805420a23ce9588f3df73b97ed653495f1ec6f20afe7", 0x2c}], 0x1, &(0x7f0000000080)=[@ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x10001}}], 0x60}}, {{&(0x7f0000000100)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000140)="58092105797c6362a9b678935661ea842e6a373926f5b8fb4eb7dc3df5192d4fd9b63269218abd944b0a656ea8993e89ae8d5066e0054b037a0e989092d8607c0793c9e949fcdfbd30386d52dccb12c890be32de07d5caa67864a722ae201c12020cf9c8eb784d292b47a9cb4c971e659e9846a319ebbec3a71de37abf84847422053baf3e315bd5f92ba693c2", 0x8d}, {&(0x7f0000000200)="eaa411b6e3c2a1459abd73dbda6440684221460e8bfb0dbe3a4cb7d6d2581e5cced4dd88dbd42fd0b2c6f11107299bc358c2630adea7f47b631a2078fcf1004dc487840c3d2f5b8ce478b02da63253c6e21d98fce0598c05a347e65b081aa05eb6c6671326dc1bc0fcadad816be0d58a40da18a39c3eba96bd", 0x79}], 0x2}}, {{&(0x7f00000002c0)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000300)="2e27aa1a3d2a9e92f5fb4c07880f3b479fdae619f422115d4cb67eeb340b97d42021c75733f16fdea0cee095b4974e6e72a8b6086866de715c2a06f7cbd43a387e5ed217427d38ad7fda6b1ac43b2ae3170b92742116ecca855e8e8aea20cd424db98ece29e371ea0e91ca9eeec14341df9a1ef8d1f87c2017c6c7ae788c73007f965d57ed80e14fce729ad4e518c3a14944a15d2aba35318bd4e4f38f882ca88dee74d5e7b8a1be209c3b575cc7ad262e802e1fa90b2e8e73f360fbf0d90d44f67c5118d3d310e4bc783a8b28d710399c52e1da5193", 0xd6}], 0x1}}, {{&(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000480)="e6b8886dba7c3b454a0072112809316d7c4db548845715f2ed0116e799ca71f44478835e30f1edab12e1da1326624108a25e3383e26a6cb76fe4a75ebb8badb3ec263d4e4d9e3656057cba7faddf57ea026915ac5bda3af818f578abc42545ed46f4367b7e2f80732f36e3eff7f228782c026717b61392107d37799bf448888d4e65c581b8c8b015a8b5184cb3273667686c20785ff7aba43ac4be4f782bb1d0317584b4e1b011ab584aa438ede83a22ff48710e0050a2a9afbf3c05f1674f7e47cd383e859dd06cdcb257f037bac06d051e4056673f", 0xd6}, {&(0x7f0000000580)="8a554311fbeda42d805093aea29f2d4baf06709d101461174dfb", 0x1a}, {&(0x7f00000005c0)="1d4ec91daaf60f2dbb3e92fca412847e162fdedcfcec320c0f0cf543865c4b42570f751bb338033a105a0940a577ab", 0x2f}], 0x3, &(0x7f0000000640)=[@ip_retopts={{0x34, 0x0, 0x7, {[@end, @ssrr={0x89, 0x1f, 0x81, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @local, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @noop]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x20}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xff0}}], 0x80}}, {{&(0x7f00000006c0)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000001740)=[{&(0x7f0000000700)="650a99112f", 0x5}, {&(0x7f0000000740)="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", 0x1000}], 0x2, &(0x7f0000001800)=[@ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @rand_addr=0x6, @rand_addr=0x3}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @rand_addr=0x8, @loopback}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @dev={0xac, 0x14, 0x14, 0x15}, @local}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0xc8}}], 0x5, 0x44000) listen(r0, 0x0) shutdown(r0, 0x0) socket$inet6(0xa, 0x3, 0x11) [ 267.397771] RAX: ffffffffffffffda RBX: 00007f7ce7ebfc90 RCX: 000000000045a679 [ 267.405025] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 267.412279] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 267.419533] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7ce7ec06d4 [ 267.426786] R13: 00000000004c0d71 R14: 00000000004d3d68 R15: 0000000000000004 22:37:26 executing program 5: syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4000, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x1000, 0x400) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r2, 0x29, 0x1, 0x0, &(0x7f00000000c0)) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r3, 0x29, 0x1, 0x0, &(0x7f00000000c0)) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r4, 0x29, 0x1, 0x0, &(0x7f00000000c0)) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYBLOB="49d16fa69a994ec61d4d8866d99ca4017b274c5478fa9ed1007dcceb9ef23d6aaf20cc434cedf3dff378d84f77ce08032838e3eb3ae5a068e0781746af60c1a4574c987955b9b3bf5af02e0b740c3e32057202862fc641a9107a1707188da61c64ec36130a2bf21381d2117fdb32d673f75e1175e6448c4590cb69e1c372b2766d6f1f0773de8c090004441545da5db98d37ec0e3a449b7b5d07a4bbf77b4e0767b3852236769a68d0a3c5a3", @ANYBLOB="5040746987a98430c6db075b5e56ef19448619e539b13944e73f82352e320b2f8215a613266dce6af5d4afa84913c7e85f4351d2991b28bcfe2ea84dfa0dde30ab88a8867e5d6ac93fb506826b42ceab32e27fc087cc322b746d8b49f3be203a8847c792426b0baf6122ba02eb86cea55537fb7c0875bf7820ba35b1369daadd0fb2c5bddae5eed125570d272c35b44645e9eda1863b91c567fb0d5e429722a8bcb84409154f71093ca0a82b7d324433243d3662a819e37c6042b2b98a9617fab65b22739a6d0e8f69b4ce79ea3ca688741d9081827332f41007705ecb67cc6f125ee2315ec573f79f7205b30aa100bdf76c426c1a3bda9b0a2c6a", @ANYRES16=r4, @ANYRES16=r3], @ANYRESHEX, @ANYRES32=r2, @ANYBLOB="a64d657f0eb3f15e03816b2bcdccb3f5feca4411771a3e00271aff39305af681d857098a3c90649d14968f25"], 0x4}, 0x1, 0x0, 0x0, 0x8}, 0x40) 22:37:26 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000080)={0x8, 0x861, 0x9, 0x1}, 0x10) 22:37:26 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x0) listen(r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socket$unix(0x1, 0x4, 0x0) r2 = socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r5 = fcntl$dupfd(r4, 0x0, r3) write$FUSE_ATTR(r5, &(0x7f0000000280)={0x78}, 0x78) r6 = ioctl$TIOCGPTPEER(r5, 0x5441, 0x4) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x2000, 0x0) connect$ax25(r7, &(0x7f0000000100)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default]}, 0x14e) ioctl$PIO_UNIMAPCLR(r6, 0x4b68, &(0x7f0000000000)={0x36, 0x4, 0xff}) getsockopt$inet6_int(r1, 0x29, 0x1, 0x0, &(0x7f00000000c0)) shutdown(r1, 0x1) 22:37:26 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x180000b, 0x8012, r0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r6 = fcntl$dupfd(r5, 0x0, r4) write$FUSE_ATTR(r6, &(0x7f0000000280)={0x78}, 0x78) recvfrom$rxrpc(r6, &(0x7f0000000100)=""/188, 0xbc, 0x40020000, &(0x7f00000001c0)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @remote}}, 0x24) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r7, 0x29, 0x1, 0x0, &(0x7f00000000c0)) fsetxattr(r7, &(0x7f0000000300)=@known='system.advise\x00', &(0x7f0000000340)='@\'\x00', 0x3, 0x1) clone(0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r10 = fcntl$dupfd(r9, 0x0, r8) write$FUSE_ATTR(r10, &(0x7f0000000280)={0x78}, 0x78) ioctl$KVM_GET_DEBUGREGS(r10, 0x8080aea1, &(0x7f0000000200)) r11 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r11, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r11, 0x29, 0x1, 0x0, &(0x7f00000000c0)) write(r11, &(0x7f0000000040)="a56eaad65190ae7921264049bac25b31b419b7b9f63694b16c1ea408dda6e023464ce0a54a11f33335941a28d2f6604d3ad08cb9a15297fa7f007e60f1e190ed85508100507580a822877d37c00f2acb3eb0b5db18937720f3679306d670b24fcfe51d7179c4ae784ad51e603bdfb6b458b25fbfe779740225d604719b9259e94ac7d6b13f1bcee254d38bff", 0x8c) 22:37:26 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000080)={0x8, 0x861, 0x9, 0x1}, 0x10) [ 267.718681] ntfs: (device loop0): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 267.742253] ntfs: (device loop0): read_ntfs_boot_sector(): Could not find a valid backup boot sector. [ 267.783588] ntfs: (device loop0): ntfs_fill_super(): Not an NTFS volume. 22:37:26 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000080)={0x8, 0x861, 0x9, 0x1}, 0x10) 22:37:26 executing program 5: syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x5) write$FUSE_ATTR(r2, &(0x7f0000000280)={0x78}, 0x78) ioctl$BLKGETSIZE64(r2, 0x80081272, &(0x7f0000000000)) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000080)) 22:37:26 executing program 2: r0 = socket$inet6(0xa, 0x5, 0xfc) listen(r0, 0x0) shutdown(r0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0xc0040, 0x0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x8) 22:37:26 executing program 4 (fault-call:2 fault-nth:81): r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:26 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r3, 0x29, 0x1, 0x0, &(0x7f00000000c0)) r4 = syz_open_procfs(0x0, 0x0) preadv(r4, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000300)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r6) setresuid(r5, 0x0, r6) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@initdev}}, &(0x7f0000000180)=0xe8) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = syz_open_procfs(0x0, 0x0) preadv(r9, 0x0, 0x0, 0x0) r10 = open(&(0x7f00000003c0)='./file0\x00', 0x282c04, 0xcaa56a22d79e6a7a) getsockopt$inet_IP_XFRM_POLICY(r10, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000300)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r12) setresuid(r11, 0x0, r12) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) getgroups(0x1, &(0x7f00000002c0)=[r13]) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) getgroups(0x1, &(0x7f00000002c0)=[r15]) fsetxattr$system_posix_acl(r3, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="02000000010003000000000002000300", @ANYRES32=r5, @ANYBLOB="02000700", @ANYRES32=r7, @ANYBLOB="02000100", @ANYRES32=r8, @ANYBLOB="020000003d7f6b669a7e8b12788f3928d74dfb494cb72f5ff9d25429502fb8558800637315f486709d7eb10995ebff2159ede04241bb1e803bb5cf213375fe4cd978cf89be09eb05", @ANYRES32=r11, @ANYBLOB="02000100", @ANYRES32=0xee01, @ANYBLOB="040001000000000008000100", @ANYRES32=r13, @ANYBLOB="08200200", @ANYRES32=r14, @ANYBLOB="08000400", @ANYRES32=r15, @ANYBLOB="100003000000000020005bea00000000"], 0x64, 0x2) r16 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x1f) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:26 executing program 0: syz_mount_image$ntfs(&(0x7f0000000400)='ntfs\x00', &(0x7f0000000440)='./file0\x00', 0x900, 0x0, 0x0, 0x0, &(0x7f0000000c40)={[{@show_sys_files_no='show_sys_files=no'}, {@errors_continue='errors=continue'}, {@umask={'umask'}}, {@uid={'uid'}}, {@errors_recover='errors=recover'}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@fmask={'fmask'}}]}) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000040)={0x60, 0x0, 0x1, {{0x1, 0xfc, 0x2, 0xcbac, 0x0, 0x3, 0x401, 0x9}}}, 0x60) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r1, 0x29, 0x1, 0x0, &(0x7f00000000c0)) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f00000000c0)=r2) 22:37:26 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000080)={0x8, 0x861, 0x9, 0x1}, 0x10) [ 267.886681] FAULT_INJECTION: forcing a failure. [ 267.886681] name failslab, interval 1, probability 0, space 0, times 0 [ 267.945971] ntfs: (device loop0): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 267.981309] CPU: 0 PID: 11435 Comm: syz-executor.4 Not tainted 4.14.156-syzkaller #0 [ 267.989231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 267.998584] Call Trace: [ 268.001173] dump_stack+0x142/0x197 [ 268.004791] should_fail.cold+0x10f/0x159 [ 268.008931] should_failslab+0xdb/0x130 [ 268.012890] kmem_cache_alloc+0x2d7/0x780 [ 268.017021] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 268.021763] copy_process.part.0+0x4450/0x6a00 [ 268.026343] ? __cleanup_sighand+0x50/0x50 [ 268.030572] ? lock_downgrade+0x740/0x740 [ 268.034705] _do_fork+0x19e/0xce0 [ 268.038142] ? fork_idle+0x280/0x280 [ 268.041844] ? fput+0xd4/0x150 [ 268.045030] ? SyS_write+0x15e/0x230 [ 268.048729] SyS_clone+0x37/0x50 [ 268.052075] ? sys_vfork+0x30/0x30 [ 268.055600] do_syscall_64+0x1e8/0x640 [ 268.059479] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 268.064311] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 268.069480] RIP: 0033:0x45a679 [ 268.072653] RSP: 002b:00007f7ce7ebfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 268.080345] RAX: ffffffffffffffda RBX: 00007f7ce7ebfc90 RCX: 000000000045a679 [ 268.087596] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 22:37:27 executing program 5: syz_open_dev$usbfs(&(0x7f0000000000)='/`e\a\xfc\xff\xff\xff\x00#\xaf10#\x00', 0x0, 0x300840) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) [ 268.094846] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 268.102097] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7ce7ec06d4 [ 268.109348] R13: 00000000004c0d71 R14: 00000000004d3d68 R15: 0000000000000004 22:37:27 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) r4 = geteuid() write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78, 0x0, 0x0, {0xb, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}}}, 0x78) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) fchdir(r5) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r10 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r11 = fcntl$dupfd(r10, 0x0, r9) write$FUSE_ATTR(r11, &(0x7f0000000280)={0x78}, 0x78) connect$unix(r11, &(0x7f0000000300)=@abs={0x3, 0x0, 0x4e20}, 0x6e) r12 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r13 = fcntl$dupfd(r12, 0x0, r8) write$FUSE_ATTR(r13, &(0x7f0000000280)={0x78}, 0x78) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r13, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x101, 0x4}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000140)=@assoc_id=r14, 0x4) r15 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_proto_private(r3, 0x89e5, &(0x7f0000000180)="37910b48f2b1117686986fc8f96757a1d3a2aa88223e6bb5edd782e78d5a8ec97709346067691ef1148c57d9773c3e456712f0f6f8a7c2c80014e44a1fe77c12521701af49b2baac45fe2a707a899fc479db6ccd7939ffc1bc3dbb96efa81462aa8d6e9f786cc46a67019ac0113dd341594dae8266db9e7dae38dfb7879143eafdb69ef3892a81432ff3ee2ecdb4ab6b7d2fb3149df10d824b444e68a920e2e48fc1c1196da98b82a280e15c200024b198396eb2d2") connect$inet6(r15, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r15, 0x29, 0x1, 0x0, &(0x7f00000000c0)) fcntl$dupfd(r15, 0x406, r0) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000240)=0xf000) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:27 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000080)={0x8, 0x861, 0x9, 0x1}, 0x10) 22:37:27 executing program 5: syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x1, 0x0, &(0x7f00000000c0)) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x2) openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x20300, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) 22:37:27 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) listen(r0, 0x0) shutdown(r0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="99b500", @ANYRES16=r8, @ANYBLOB="0fe400000000000000000100000000000000014100000003001700000000000000006574683a726f736530000000"], 0x3}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r6, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000810}, 0xc, &(0x7f0000000400)={&(0x7f0000000180)={0x38, r8, 0x300, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x4107, 0x0, {0x1c, 0x18, {0x36, @bearer=@l2={'eth', 0x3a, 'bond_slave_1\x00'}}}}}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x400c0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x9000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r8, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, 0x0, 0xb, 0x0, {0xc, 0x14, 'syz0\x00'}}, [""]}, 0x28}}, 0x20) 22:37:27 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x200000) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000040)) listen(r0, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0) shutdown(r0, 0x0) 22:37:27 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000080)={0x8, 0x861, 0x9, 0x1}, 0x10) 22:37:27 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) clock_settime(0x6, &(0x7f0000000040)={0x77359400}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r6 = fcntl$dupfd(r5, 0x0, r4) write$FUSE_ATTR(r6, &(0x7f0000000280)={0x78}, 0x78) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x1bb) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000180)={r7}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000080)={r7, @in={{0x2, 0x4e23, @multicast1}}, 0x2, 0x1}, &(0x7f0000000140)=0x90) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000180)={r8, 0x40, 0x5}, &(0x7f00000001c0)=0x8) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:27 executing program 4 (fault-call:2 fault-nth:82): r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:27 executing program 5: syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x400, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x1, 0x0, &(0x7f00000000c0)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r1, 0x29, 0x1, 0x0, &(0x7f00000000c0)) r2 = dup2(r0, r1) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000040)={0x7, 0x7, 0x1, {0xb, @pix={0x8, 0xffff, 0x31324d59, 0xf, 0x100, 0xbec3, 0x6, 0x9, 0x1, 0x2, 0x0, 0x3}}}) [ 268.507062] ntfs: (device loop0): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 268.527482] ntfs: (device loop0): read_ntfs_boot_sector(): Could not find a valid backup boot sector. [ 268.538744] FAULT_INJECTION: forcing a failure. [ 268.538744] name failslab, interval 1, probability 0, space 0, times 0 [ 268.551400] CPU: 0 PID: 11504 Comm: syz-executor.4 Not tainted 4.14.156-syzkaller #0 [ 268.553284] ntfs: (device loop0): ntfs_fill_super(): Not an NTFS volume. [ 268.559292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 268.559299] Call Trace: [ 268.559322] dump_stack+0x142/0x197 [ 268.583061] should_fail.cold+0x10f/0x159 [ 268.587223] should_failslab+0xdb/0x130 [ 268.591200] kmem_cache_alloc+0x2d7/0x780 [ 268.595349] ptlock_alloc+0x20/0x70 [ 268.599506] pte_alloc_one+0x60/0x100 [ 268.603312] __pte_alloc+0x2a/0x2d0 [ 268.606954] copy_page_range+0x1299/0x1de0 [ 268.611303] ? save_trace+0x290/0x290 [ 268.615132] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 268.619886] copy_process.part.0+0x4765/0x6a00 [ 268.624466] ? __cleanup_sighand+0x50/0x50 [ 268.628845] ? lock_downgrade+0x740/0x740 [ 268.633189] _do_fork+0x19e/0xce0 [ 268.636630] ? fork_idle+0x280/0x280 [ 268.640339] ? fput+0xd4/0x150 [ 268.643524] ? SyS_write+0x15e/0x230 [ 268.647222] SyS_clone+0x37/0x50 [ 268.650577] ? sys_vfork+0x30/0x30 [ 268.654116] do_syscall_64+0x1e8/0x640 [ 268.657990] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 268.662837] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 268.668022] RIP: 0033:0x45a679 [ 268.671194] RSP: 002b:00007f7ce7ebfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 268.678888] RAX: ffffffffffffffda RBX: 00007f7ce7ebfc90 RCX: 000000000045a679 [ 268.686247] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 268.693505] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 268.700766] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7ce7ec06d4 22:37:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r2 = fcntl$dupfd(r1, 0x0, r0) write$FUSE_ATTR(r2, &(0x7f0000000280)={0x78}, 0x78) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000100)={{{@in=@dev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) syz_mount_image$ntfs(&(0x7f0000000400)='ntfs\x00', &(0x7f0000000440)='./file0\x00', 0x900, 0x0, 0x0, 0x31080a, &(0x7f0000000240)={[{@show_sys_files_no='show_sys_files=no'}, {@uid={'uid', 0x3d, r3}}, {@umask={'umask'}}, {@uid={'uid'}}, {@errors_recover='errors=recover'}, {@disable_sparse_yes='disable_sparse=yes'}, {@case_sensitive_yes='case_sensitive=yes'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@fmask={'fmask'}}]}) fallocate(r1, 0xb44f0ee04cc8f7ac, 0x7, 0x3f) 22:37:27 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000080)={0x8, 0x861, 0x9, 0x1}, 0x10) 22:37:27 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000040)={0x100, 0x0, [], {0x0, @reserved}}) r1 = socket$inet6(0xa, 0x40000080806, 0x0) listen(r1, 0x0) shutdown(r1, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000100)={0x2, 0x401, 0x6, 0x1}) 22:37:27 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r4, 0x29, 0x1, 0x0, &(0x7f00000000c0)) fsync(r4) 22:37:27 executing program 5: r0 = socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000), 0x10) syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x0) 22:37:27 executing program 4 (fault-call:2 fault-nth:83): r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 268.708155] R13: 00000000004c0d71 R14: 00000000004d3d68 R15: 0000000000000004 [ 268.789703] FAULT_INJECTION: forcing a failure. [ 268.789703] name failslab, interval 1, probability 0, space 0, times 0 [ 268.830009] CPU: 0 PID: 11518 Comm: syz-executor.4 Not tainted 4.14.156-syzkaller #0 [ 268.837934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 268.837941] Call Trace: [ 268.837963] dump_stack+0x142/0x197 [ 268.837987] should_fail.cold+0x10f/0x159 [ 268.857672] should_failslab+0xdb/0x130 [ 268.861657] kmem_cache_alloc+0x2d7/0x780 [ 268.865806] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 268.865824] copy_process.part.0+0x4450/0x6a00 [ 268.865852] ? __cleanup_sighand+0x50/0x50 22:37:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r2 = fcntl$dupfd(r1, 0x0, r0) write$FUSE_ATTR(r2, &(0x7f0000000280)={0x78}, 0x78) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r2, 0xc0bc5310, &(0x7f0000001200)) r3 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) signalfd(0xffffffffffffffff, &(0x7f0000000040)={0x5}, 0x8) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r7, 0x29, 0x1, 0x0, &(0x7f00000000c0)) ioctl$FS_IOC_ENABLE_VERITY(r7, 0x40806685, &(0x7f0000001180)={0x1, 0x2, 0x1000, 0xda, &(0x7f0000000080)="a7bf241dda85526483a32f742b6b07ad9c3e86fbd61122d524e3449a27d1a1b76be30bcd614c7bb1b228d3ff9d6d093bbcf8a2df9290277a49e120d8bf6e774d2aa3e56a0e7bbefbb38b93ad17e4816c95140c77b20da18d27aa70f3e3e58043ad7aa257ece673c467490dc4142b3a6ff5a7db881d6fa8af8ffab0ea3d00568b9a0c477c32c578e05d93ebbd00a44d618271bec51059f078114472d7f743c9e4d6aeae07e9a1137605aed5c832a9d0081272f94cf27345bc02f3f55f92a697e50a350f7785e30bc2974f34c7d942be09c649ae4657a1cfe42687", 0x1000, 0x0, &(0x7f0000000180)="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"}) 22:37:27 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000080)={0x8, 0x861, 0x9, 0x1}, 0x10) 22:37:27 executing program 2: r0 = socket$inet6(0xa, 0x40000080802, 0x9a) listen(r0, 0x0) shutdown(r0, 0x0) bind$isdn(0xffffffffffffffff, &(0x7f0000000000)={0x22, 0xb2, 0x57, 0x7f, 0x72}, 0x6) [ 268.865872] ? lock_downgrade+0x740/0x740 [ 268.883545] _do_fork+0x19e/0xce0 [ 268.887006] ? fork_idle+0x280/0x280 [ 268.890732] ? fput+0xd4/0x150 [ 268.890742] ? SyS_write+0x15e/0x230 [ 268.890756] SyS_clone+0x37/0x50 [ 268.890763] ? sys_vfork+0x30/0x30 [ 268.890778] do_syscall_64+0x1e8/0x640 [ 268.890787] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 268.890806] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 268.890816] RIP: 0033:0x45a679 [ 268.901035] RSP: 002b:00007f7ce7ebfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 22:37:27 executing program 5: syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x89}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x1, 0x0, &(0x7f00000000c0)) getpeername(r0, &(0x7f0000000000)=@isdn, &(0x7f0000000080)=0x80) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f0000000140)={0x3, 0xfff, 0x9, 0xa000}) 22:37:27 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000080)={0x8, 0x861, 0x9, 0x1}, 0x10) [ 268.901046] RAX: ffffffffffffffda RBX: 00007f7ce7ebfc90 RCX: 000000000045a679 [ 268.901051] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 268.901056] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 268.901061] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7ce7ec06d4 [ 268.901067] R13: 00000000004c0d71 R14: 00000000004d3d68 R15: 0000000000000004 22:37:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r2 = fcntl$dupfd(r1, 0x0, r0) fstat(r0, &(0x7f0000000000)) write$FUSE_ATTR(r2, &(0x7f0000000280)={0x78, 0x0, 0x0, {0x91ce, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}}, 0x78) ioctl$VFIO_CHECK_EXTENSION(r2, 0x3b65, 0x4) syz_mount_image$ntfs(&(0x7f0000000400)='ntfs\x00', &(0x7f0000000440)='./file0\x00', 0x900, 0x0, 0x0, 0x0, &(0x7f0000000c40)={[{@show_sys_files_no='show_sys_files=no'}, {@errors_continue='errors=continue'}, {@umask={'umask'}}, {@uid={'uid'}}, {@errors_recover='errors=recover'}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@fmask={'fmask'}}]}) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x7fff) 22:37:28 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x5bc756119a2f4fa9, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000001200)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000001100)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, &(0x7f0000001140)=""/188, 0xbc}, 0x2020) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:28 executing program 5: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x200, 0x604200) 22:37:28 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000080)={0x8, 0x861, 0x9, 0x1}, 0x10) [ 269.099797] ntfs: (device loop0): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. 22:37:28 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x1, 0x0, &(0x7f00000000c0)) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @hci={0x1f, 0x0, 0x1}, @isdn={0x22, 0x1, 0x40, 0x1f, 0x81}, @nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x1}, 0x8000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='veth0_to_hsr\x00', 0x100000001, 0x5, 0xffde}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={@dev={0xfe, 0x80, [], 0x18}, @loopback, @empty, 0x534, 0x6, 0x6, 0x700, 0x200, 0x80010000, r1}) r2 = socket$inet6(0xa, 0x40000080806, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r5 = fcntl$dupfd(r4, 0x0, r3) write$FUSE_ATTR(r5, &(0x7f0000000280)={0x78}, 0x78) ioctl$VIDIOC_ENUM_DV_TIMINGS(r5, 0xc0945662, &(0x7f0000000140)={0x7fffffff, 0x0, [], {0x0, @bt={0xffff98c5, 0x8e35, 0x1, 0x1, 0x3, 0x9, 0xffffffff, 0x900000, 0x12d, 0x1, 0x1000, 0x80, 0xffffffff, 0xfffffff9, 0x10, 0x40d4cadcda51190e}}}) listen(r2, 0x0) shutdown(r2, 0x0) 22:37:28 executing program 5: syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x200000, 0x0) bind$netlink(r0, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfb, 0x4001000}, 0xc) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0), 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78, 0x0, 0x0, {0x0, 0x6a, 0x0, {0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0xcd2, 0x1}}}, 0x78) ioctl$int_out(0xffffffffffffffff, 0x2, &(0x7f00000001c0)) ioctl$USBDEVFS_RELEASE_PORT(r3, 0x80045519, &(0x7f0000000180)=0x3f) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp\x00', 0x111101, 0x0) sendto$inet(r4, &(0x7f0000000040)="08e50c5b4b0c5f272dacaa3e2a87b9c7bf694c569c7c67300f1325c38fc4b0f06d3fe9190209c4632bf276ab14a3a8ae5fddaadfec1cc4c3efaa45657f6f42bbcfff38fc578b042cae433457937d8c7d0582cf38d4873938eb00bb157727", 0x5e, 0x40080c4, &(0x7f00000000c0)={0x2, 0x4e24, @local}, 0x10) [ 269.162150] ntfs: (device loop0): read_ntfs_boot_sector(): Primary boot sector is invalid. 22:37:28 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) r1 = syz_open_procfs(0x0, 0x0) preadv(r1, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000300)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r3) setresuid(r2, 0x0, r3) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r6 = fcntl$dupfd(r5, 0x0, r4) write$FUSE_ATTR(r6, &(0x7f0000000280)={0x78}, 0x78) accept4$x25(r6, &(0x7f0000000040)={0x9, @remote}, &(0x7f0000000080)=0x12, 0x800) ioctl$SIOCAX25ADDUID(0xffffffffffffffff, 0x89e1, &(0x7f0000000000)={0x3, @default, r3}) listen(r0, 0x0) shutdown(r0, 0x0) 22:37:28 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00'}, &(0x7f00000000c0)=0x54) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200001, 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi\x120\x00', 0x0, 0x0) getpeername$tipc(r5, &(0x7f0000000140)=@name, &(0x7f0000000180)=0x10) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:28 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x4042, 0x0) sendmmsg$alg(r0, &(0x7f0000000b00)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000540)="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", 0xfd}], 0x1, &(0x7f0000000680)=[@assoc={0x18, 0x117, 0x4, 0x9}, @assoc={0x18, 0x117, 0x4, 0x5}, @iv={0x88, 0x117, 0x2, 0x6e, "fa62ba73c161cfcf57871b68d7fc1e61cb7f8971c20b1a11f8dab3e577f937e1782978231330bda0e446338c41402393139f8607673026cb2a06c785ee0bdb749fe621db9556f4ec3769e17cb7a001dac62e60179544c764d9b1adc08c7bb3f998eeea8200919b8f04dd9963cd46"}], 0xb8, 0x40000}, {0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000740)="5a7d906e1b23b8d00416ba628d5260fc939a85cdee9f21f75e69d6ec6997d42b10a54267385a474fd4778a0f36264b8135e6568e24602a95acbdc7de01dedfe0b55c69f1f95a22775c4016b02f12200b52f874a09ff255ae9bd18ce66c2545f1f6b7623a66172cfea3cc4077f648f499308971fa7ee78ad615275cad1722", 0x7e}, {&(0x7f00000007c0)="61c1b811ccc3a0a743e652c8a6258677fce248020b6da64def54db1289d6790fb80470ec3df35e3f39b6c27be4accde859c39e373379cfab", 0x38}, {&(0x7f0000000d40)="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", 0x1000}, {&(0x7f0000001d40)="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", 0x1000}, {&(0x7f0000000800)="bad6dd5a50eb758708fddf2058a396b540828a32b05e0f6821b6fdbb09835aa00f31b5d445ec4b81c610a26abe6a99314c7f70bcaaa4b61e10ed9280c3576e0b81f3dae7ce871bbe7a51e107df84d33f29b8997d5251e799415623708bb11b821cad50564e93052e361ce6008058bca7cc4b6888dc871ed99e4cc2358857764f7647125bac0b55f36293f85172b3cf38f03f5b98e28dd339de966ebd5d004b801008ac534c6d2ffaf55f2bdac9c142b55938ef082d28661d43ec45e93966e2d5c246c331bddf26e48e3cedcc51bf418a6e1e5e299cd1eb87f47507a87d648fef744f", 0xe2}, {&(0x7f0000000900)="7e649f5f02a3b1b616d129b618b4068d03998abfa9e3a1a2b2ba7ce83cf722c3ed5b1467d8c0b58518eb63d50f4ce1f4667bc90bb738d23e4e6d8e00b445ec16e9d3b052cb823b3aef3aa926576dd47b01461b29110987ae17253d818ec1e122bcc75f6c0c5cb41e948d912c888c9b0408ece8b195e4fe61fc41d5b3313cd8f35e0e4a7347a9c4bd863acc2d1828ab0fd32272a2e00e073ce0dad47712d3503a0dcbe914ba2287b0d42ed63060cb26b3c4a15036669b570107df47e36251621981928d348b5397ea2545e82b5100af5cd1426b204279bbff27286912773440c0461e930ee3b7d0f346aa", 0xea}, {&(0x7f0000000a00)="1dbd1e551961ac7e880dc8fb676cdf69af539405cc861ba09f4d91ee01cd727635d1e0943200b19a3cd99d4d64acd3e77e0b7094dd4cae14bf6ffc01", 0x3c}, {&(0x7f0000000a40)="7e8bb1bb5c58f2990f94417b35bd792fe1828686b657feeb9b", 0x19}], 0x8, &(0x7f0000002d40)=[@assoc={0x18, 0x117, 0x4, 0x4f6e}, @assoc={0x18, 0x117, 0x4, 0xfffffff7}, @iv={0xb0, 0x117, 0x2, 0x9b, "5786f27296aa229274e394e34b2731a9c5e26e3d1be2f06ad30efa57dd99427747680ae3dc877990f4e690b53ca1f7b281583d64ec3602c730007102b34818274afee3ec6d975b54e983444bcc72d5112654e7cf7df4f12bdcd7a73ae5df1fe0afc90b489aaece821ba1186e7bdbd44708ff7ddfa3b4011ad3e458fcde4905a862957ca84e4261ff78870742f914bbcef5b47aff10c8df20bce0d0"}, @iv={0x40, 0x117, 0x2, 0x28, "6996203c6f98cac973487bf5a5cffac0983457ac3b0191e0683eaa1c8a5dfc4edd6e11d51eca813e"}, @assoc={0x18, 0x117, 0x4, 0x8000}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0xffff}], 0x168, 0xc1}], 0x2, 0x0) syz_mount_image$ntfs(&(0x7f0000000400)='ntfs\x00', &(0x7f0000000440)='./file0\x00', 0x900, 0x0, 0x0, 0x0, &(0x7f0000000c40)={[{@show_sys_files_no='show_sys_files=no'}, {@errors_continue='errors=continue'}, {@umask={'umask'}}, {@uid={'uid'}}, {@errors_recover='errors=recover'}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@fmask={'fmask'}}]}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r1, 0x29, 0x1, 0x0, &(0x7f00000000c0)) preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000000)=""/183, 0xb7}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000002ec0)=""/4096, 0x1000}, {&(0x7f0000000180)=""/17, 0x11}, {&(0x7f00000001c0)=""/246, 0xf6}, {&(0x7f00000002c0)=""/47, 0x2f}], 0x6, 0x40) 22:37:28 executing program 5: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/b\xfb\x0f/usb/00\xcf\xff\xff\xff#\x00', 0x8, 0x20a040) 22:37:28 executing program 4 (fault-call:2 fault-nth:84): r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:28 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, 0x0, 0x0) 22:37:28 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) listen(r0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x40, 0x80000) shutdown(r1, 0x24863cbaa3b640be) [ 269.402945] FAULT_INJECTION: forcing a failure. [ 269.402945] name fail_page_alloc, interval 1, probability 0, space 0, times 0 22:37:28 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, 0x0, 0x0) 22:37:28 executing program 5: syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x1, 0x0, &(0x7f00000000c0)) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000080)=0x68) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) recvmsg$can_bcm(r3, &(0x7f0000000300)={&(0x7f0000000100)=@can={0x1d, 0x0}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/168, 0xa8}, {&(0x7f0000000240)=""/94, 0x5e}], 0x2}, 0x2) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000340)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, r4}, 0x14) 22:37:28 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0xb0000, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x1bb) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000180)={r1}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={r1, 0x4, 0x10}, &(0x7f0000000180)=0xc) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r5, 0x29, 0x1, 0x0, &(0x7f00000000c0)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0xffffffff, {{0x2, 0x4e24, @broadcast}}}, 0x88) r6 = socket$alg(0x26, 0x5, 0x0) sendfile(r5, r6, &(0x7f0000000040)=0x100000000, 0x80000001) r7 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 269.535052] CPU: 1 PID: 11593 Comm: syz-executor.4 Not tainted 4.14.156-syzkaller #0 [ 269.542981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 269.552341] Call Trace: [ 269.554943] dump_stack+0x142/0x197 [ 269.558589] should_fail.cold+0x10f/0x159 [ 269.562743] ? __might_sleep+0x93/0xb0 [ 269.566649] __alloc_pages_nodemask+0x1d6/0x7a0 [ 269.571327] ? __alloc_pages_slowpath+0x2930/0x2930 [ 269.576357] alloc_pages_current+0xec/0x1e0 [ 269.580693] pte_alloc_one+0x1a/0x100 [ 269.584494] __pte_alloc+0x2a/0x2d0 [ 269.588159] copy_page_range+0x1299/0x1de0 [ 269.592422] ? save_trace+0x290/0x290 [ 269.596250] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 269.601016] copy_process.part.0+0x4765/0x6a00 [ 269.605618] ? __cleanup_sighand+0x50/0x50 [ 269.609858] ? lock_downgrade+0x740/0x740 [ 269.614013] _do_fork+0x19e/0xce0 [ 269.617475] ? fork_idle+0x280/0x280 [ 269.621196] ? fput+0xd4/0x150 [ 269.624393] ? SyS_write+0x15e/0x230 [ 269.628111] SyS_clone+0x37/0x50 [ 269.631479] ? sys_vfork+0x30/0x30 [ 269.635026] do_syscall_64+0x1e8/0x640 [ 269.638918] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 269.643878] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 269.649066] RIP: 0033:0x45a679 [ 269.652256] RSP: 002b:00007f7ce7ebfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 269.660051] RAX: ffffffffffffffda RBX: 00007f7ce7ebfc90 RCX: 000000000045a679 [ 269.667324] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 269.674594] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 22:37:28 executing program 2: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x400, 0x40000) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0xbf8, 0x8, 0x37c, 0xeece, 0x80000000, 0x728, 0xf8}, 0x1c) r1 = socket$inet6(0xa, 0x40000080806, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r2, 0x29, 0x1, 0x0, &(0x7f00000000c0)) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r3, 0x29, 0x1, 0x0, &(0x7f00000000c0)) listen(r3, 0x0) shutdown(r1, 0x0) 22:37:28 executing program 0: prctl$PR_SET_THP_DISABLE(0x29, 0x1) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) syz_mount_image$ntfs(&(0x7f0000000400)='ntfs\x00', &(0x7f0000000440)='./file0\x00', 0x900, 0x0, 0x0, 0x0, &(0x7f0000000c40)={[{@show_sys_files_no='show_sys_files=no'}, {@errors_continue='errors=continue'}, {@umask={'umask'}}, {@uid={'uid'}}, {@errors_recover='errors=recover'}, {@show_sys_files_no='no\x00\x00\x00\xf4\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@fmask={'fmask'}}]}) [ 269.681870] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7ce7ec06d4 [ 269.689138] R13: 00000000004c0d71 R14: 00000000004d3d68 R15: 0000000000000004 22:37:28 executing program 4 (fault-call:2 fault-nth:85): r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:28 executing program 5: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/b\x00\x00/\\\x81b/00#/00#\x00', 0x40000000909, 0x204000) 22:37:28 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='\xff\x00\x00\x00\x00\x80\x04\xfblo\x00', 0x100000001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x4, 0x100) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r5 = fcntl$dupfd(r4, 0x0, r3) write$FUSE_ATTR(r5, &(0x7f0000000280)={0x78}, 0x78) getdents64(r5, &(0x7f00000001c0)=""/234, 0xea) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000100)={0x0, @reserved}) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='G\b\x00', 0x2b8483, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r7, 0x110, 0x4, &(0x7f0000000080), 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x10024000, 0x0, 0x0, 0x0, 0x0) r8 = syz_open_pts(0xffffffffffffffff, 0x100) ioctl$TIOCNOTTY(r8, 0x5422) 22:37:28 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, 0x0, 0x0) 22:37:28 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x8) listen(r0, 0x0) shutdown(r0, 0x0) 22:37:28 executing program 5: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x381c00, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v2={0x2000000, [{0x200, 0x100}, {0x240, 0x6}]}, 0x14, 0x1) syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x10000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000100)={0xfffffffb, 0x8000, 0x8, {0x0, 0x989680}, 0x13, 0x401}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r4 = fcntl$dupfd(r3, 0x0, r2) write$FUSE_ATTR(r4, &(0x7f0000000280)={0x78}, 0x78) openat$cgroup_ro(r4, &(0x7f0000000180)='cpuacct.usage_percpu\x00', 0x0, 0x0) 22:37:28 executing program 0: socket$bt_hidp(0x1f, 0x3, 0x6) syz_mount_image$ntfs(&(0x7f0000000400)='ntfs\x00', &(0x7f0000000440)='./file0\x00', 0x900, 0x0, 0x0, 0x0, &(0x7f0000000c40)={[{@show_sys_files_no='show_sys_files=no'}, {@errors_continue='errors=continue'}, {@umask={'umask'}}, {@uid={'uid'}}, {@errors_recover='errors=recover'}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@fmask={'fmask'}}]}) [ 269.837851] FAULT_INJECTION: forcing a failure. [ 269.837851] name failslab, interval 1, probability 0, space 0, times 0 22:37:28 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000080)={0x0, 0x861, 0x9, 0x1}, 0x10) [ 269.913959] CPU: 1 PID: 11643 Comm: syz-executor.4 Not tainted 4.14.156-syzkaller #0 [ 269.921890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 269.931251] Call Trace: [ 269.933853] dump_stack+0x142/0x197 [ 269.937498] should_fail.cold+0x10f/0x159 [ 269.941659] should_failslab+0xdb/0x130 [ 269.945635] kmem_cache_alloc+0x2d7/0x780 [ 269.949791] ptlock_alloc+0x20/0x70 [ 269.953417] pte_alloc_one+0x60/0x100 [ 269.953430] __pte_alloc+0x2a/0x2d0 22:37:28 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000080)={0x0, 0x0, 0x9, 0x1}, 0x10) [ 269.953444] copy_page_range+0x1299/0x1de0 [ 269.953454] ? save_trace+0x290/0x290 [ 269.953479] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 269.960877] copy_process.part.0+0x4765/0x6a00 [ 269.960909] ? __cleanup_sighand+0x50/0x50 [ 269.960922] ? lock_downgrade+0x740/0x740 [ 269.960936] _do_fork+0x19e/0xce0 [ 269.960948] ? fork_idle+0x280/0x280 [ 269.990077] ? fput+0xd4/0x150 [ 269.990089] ? SyS_write+0x15e/0x230 [ 269.990106] SyS_clone+0x37/0x50 [ 269.990112] ? sys_vfork+0x30/0x30 [ 269.990129] do_syscall_64+0x1e8/0x640 22:37:28 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1}, 0x10) [ 269.990137] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 269.990157] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 270.007605] RIP: 0033:0x45a679 [ 270.024644] RSP: 002b:00007f7ce7ebfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 270.032361] RAX: ffffffffffffffda RBX: 00007f7ce7ebfc90 RCX: 000000000045a679 [ 270.039640] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 270.046909] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 270.054187] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7ce7ec06d4 [ 270.061479] R13: 00000000004c0d71 R14: 00000000004d3d68 R15: 0000000000000004 22:37:29 executing program 4 (fault-call:2 fault-nth:86): r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:29 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000080), 0x10) 22:37:29 executing program 0: r0 = syz_open_procfs(0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000300)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r2) setresuid(r1, 0x0, r2) syz_mount_image$ntfs(&(0x7f0000000400)='ntfs\x00', &(0x7f0000000440)='./file0\x00', 0x900, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@show_sys_files_no='show_sys_files=no'}, {@errors_continue='errors=continue'}, {@umask={'umask'}}, {@uid={'uid'}}, {@errors_recover='errors=recover'}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@uid={'uid', 0x3d, r2}}, {@fmask={'fmask'}}]}) r3 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xffffffffffffba83, 0x100000) ioctl$SNDRV_CTL_IOCTL_PVERSION(r3, 0x80045500, &(0x7f0000000040)) 22:37:29 executing program 5: syz_open_dev$usbfs(&(0x7f0000000840)='/dev|\xd3u\x00b/00#/00#\x00', 0x40000000909, 0x0) [ 270.206300] FAULT_INJECTION: forcing a failure. [ 270.206300] name failslab, interval 1, probability 0, space 0, times 0 [ 270.269496] CPU: 1 PID: 11681 Comm: syz-executor.4 Not tainted 4.14.156-syzkaller #0 [ 270.277426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 270.277432] Call Trace: [ 270.277461] dump_stack+0x142/0x197 [ 270.293010] should_fail.cold+0x10f/0x159 [ 270.297161] should_failslab+0xdb/0x130 [ 270.297174] kmem_cache_alloc+0x2d7/0x780 [ 270.297194] ptlock_alloc+0x20/0x70 [ 270.308932] pte_alloc_one+0x60/0x100 [ 270.312740] __pte_alloc+0x2a/0x2d0 [ 270.316374] copy_page_range+0x1299/0x1de0 [ 270.320611] ? save_trace+0x290/0x290 [ 270.320645] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 270.320661] copy_process.part.0+0x4765/0x6a00 [ 270.320689] ? __cleanup_sighand+0x50/0x50 [ 270.329209] ? lock_downgrade+0x740/0x740 [ 270.329229] _do_fork+0x19e/0xce0 [ 270.329242] ? fork_idle+0x280/0x280 [ 270.349446] ? fput+0xd4/0x150 [ 270.352652] ? SyS_write+0x15e/0x230 [ 270.356378] SyS_clone+0x37/0x50 [ 270.359746] ? sys_vfork+0x30/0x30 [ 270.363296] do_syscall_64+0x1e8/0x640 [ 270.367306] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 270.372164] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 270.377351] RIP: 0033:0x45a679 [ 270.380523] RSP: 002b:00007f7ce7ebfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 270.388332] RAX: ffffffffffffffda RBX: 00007f7ce7ebfc90 RCX: 000000000045a679 [ 270.395595] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 270.402865] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 270.410122] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7ce7ec06d4 [ 270.417602] R13: 00000000004c0d71 R14: 00000000004d3d68 R15: 0000000000000004 22:37:29 executing program 3: syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x5, 0x48000) ioctl$IMCTRLREQ(r2, 0x80044945, &(0x7f0000000080)={0x4204, 0xfffffffb, 0x4}) r3 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000cb1000/0x2000)=nil, 0x2000, 0x1000012, 0x30, r4, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:29 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) listen(r0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r1, 0x1, 0xb, &(0x7f0000000000)=0x6, 0x4) shutdown(r0, 0x0) 22:37:29 executing program 5: syz_init_net_socket$ax25(0x3, 0x2, 0xc4) syz_open_dev$usbfs(&(0x7f0000000840)='\xac #o\x01\x027\xde/0\xb0#/00#\x00\x00\x93\xb0\x00', 0x41000000906, 0x23d6019f9a4d471d) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r2 = fcntl$dupfd(r1, 0x0, r0) write$FUSE_ATTR(r2, &(0x7f0000000280)={0x78}, 0x78) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f0000000000), 0x4) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r5 = fcntl$dupfd(r4, 0x0, r3) write$FUSE_ATTR(r5, &(0x7f0000000280)={0x78}, 0x78) ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000040)) 22:37:29 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = geteuid() fstat(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000340)=0xe8) syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x6, 0x1, &(0x7f0000000180)=[{&(0x7f00000000c0)="ae2f48506d547f2938a9b3abbd94fba2eaffe4107f4f806b79bfffb10bc8f0c96ca9f25c266361e412a267e43b434ed7fb0c4e1f42f968530c100f4f2451525c3defc38ff5697a3d1d742ccfd3eb33335e3b1e36ff323150471ef099593474079e2f1d9c4e4586a29b431dd69602ce7229092a023792e7120f44a1cddb03f8500e49c150e8beeb6fd024ad7c56fa693873fd6ac19ae100b0367cbe2fc35152aa629db1574e86c0bae65b8a6a271daa51136e3ca11310", 0xb6, 0xcf4}], 0x800, &(0x7f0000000380)={[{@check_relaxed='check=relaxed'}, {@nocompress='nocompress'}, {@map_off='map=off'}, {@mode={'mode', 0x3d, 0x1}}, {@nocompress='nocompress'}, {@map_acorn='map=acorn'}, {@sbsector={'sbsector', 0x3d, 0x2}}, {@sbsector={'sbsector', 0x3d, 0x80000000}}, {@unhide='unhide'}, {@check_relaxed='check=relaxed'}], [{@euid_lt={'euid<', r1}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/usbmon#\x00'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@fowner_gt={'fowner>', r2}}, {@fowner_gt={'fowner>', r3}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/usbmon#\x00'}}]}) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:29 executing program 4 (fault-call:2 fault-nth:87): r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:29 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.events\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000040)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) getgroups(0x1, &(0x7f00000002c0)=[r1]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) getgroups(0x1, &(0x7f00000002c0)=[r2]) syz_mount_image$ntfs(&(0x7f0000000400)='ntfs\x00', &(0x7f0000000440)='./file0\x00', 0x900, 0x0, 0x0, 0x0, &(0x7f0000000280)={[{@show_sys_files_no='show_sys_files=no'}, {@gid={'gid', 0x3d, r1}}, {@umask={'umask'}}, {@uid={'uid'}}, {@errors_recover='errors=recover'}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@gid={'gid', 0x3d, r2}}]}) [ 270.719555] FAULT_INJECTION: forcing a failure. [ 270.719555] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 270.756808] CPU: 1 PID: 11712 Comm: syz-executor.4 Not tainted 4.14.156-syzkaller #0 [ 270.764737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 270.764743] Call Trace: [ 270.764771] dump_stack+0x142/0x197 [ 270.764791] should_fail.cold+0x10f/0x159 [ 270.784458] ? __might_sleep+0x93/0xb0 [ 270.788349] __alloc_pages_nodemask+0x1d6/0x7a0 [ 270.793006] ? __alloc_pages_slowpath+0x2930/0x2930 [ 270.798009] ? kasan_slab_alloc+0xf/0x20 [ 270.802061] alloc_pages_current+0xec/0x1e0 [ 270.806369] pte_alloc_one+0x1a/0x100 [ 270.810156] __pte_alloc+0x2a/0x2d0 [ 270.813783] copy_page_range+0x1299/0x1de0 [ 270.818003] ? save_trace+0x290/0x290 [ 270.821800] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 270.826542] copy_process.part.0+0x4765/0x6a00 [ 270.831122] ? __cleanup_sighand+0x50/0x50 [ 270.835341] ? lock_downgrade+0x740/0x740 [ 270.839474] _do_fork+0x19e/0xce0 [ 270.842912] ? fork_idle+0x280/0x280 [ 270.846625] ? fput+0xd4/0x150 [ 270.849800] ? SyS_write+0x15e/0x230 [ 270.853500] SyS_clone+0x37/0x50 [ 270.856863] ? sys_vfork+0x30/0x30 [ 270.860394] do_syscall_64+0x1e8/0x640 [ 270.864265] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 270.869099] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 270.874314] RIP: 0033:0x45a679 [ 270.877500] RSP: 002b:00007f7ce7ebfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 270.885190] RAX: ffffffffffffffda RBX: 00007f7ce7ebfc90 RCX: 000000000045a679 [ 270.892444] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 270.899698] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 270.906949] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7ce7ec06d4 22:37:29 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) listen(r0, 0x0) shutdown(r0, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xffff, 0x600000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, 0xfffffffffffffffe) getpeername$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @remote}, &(0x7f0000000080)=0x10) 22:37:29 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r6 = fcntl$dupfd(r5, 0x0, r4) write$FUSE_ATTR(r6, &(0x7f0000000280)={0x78}, 0x78) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r9 = fcntl$dupfd(r8, 0x0, r7) write$FUSE_ATTR(r9, &(0x7f0000000280)={0x78}, 0x78) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000040)={0x1, r9}) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 270.914208] R13: 00000000004c0d71 R14: 00000000004d3d68 R15: 0000000000000004 22:37:29 executing program 1 (fault-call:4 fault-nth:0): socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000080), 0x10) 22:37:29 executing program 5: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000300)='/dev/qat_adf_ctl\x00', 0x80, 0x0) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000340)) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r2, 0x641e) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000280)={0x78}, 0xfffffffffffffe94) connect$pppoe(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, {0x2, @broadcast, 'sit\x10\x00\x00\x00\x00\x00\x00\n\x00'}}, 0x1e) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r4, 0x29, 0x1, 0x0, &(0x7f00000000c0)) preadv(r4, &(0x7f0000000140)=[{&(0x7f0000000880)=""/4096, 0x1000}], 0x1, 0x3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x1bb) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000180)={r5}, 0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000380)={r5, 0xb58, 0x1, 0x6}, &(0x7f00000003c0)=0x10) r6 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r7 = fcntl$dupfd(r6, 0x0, r3) write$FUSE_ATTR(r7, &(0x7f0000000280)={0x1b5, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}}, 0x78) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r10 = fcntl$dupfd(r9, 0x0, r8) write$FUSE_ATTR(r10, &(0x7f0000000280)={0x78}, 0x78) ioctl$KVM_SET_SIGNAL_MASK(r10, 0x4004ae8b, &(0x7f0000000180)={0xd6, "ccf9370ccd601497db3ccf37a16a4ebab5fb3d3e62781d9b9a8b513fdd4df47cdd2e263180a7bcdc930e21c65570f3a185d879192f734809aae7f4e51b5babbf7db9310489c8a7b660b08f91ebb1b83650554156fb57138d9a7ad7ea7d2865923be0ef145dca5ad4c91c5dd0345c3db4896f24982482a3b65554286fae314460405485a20050ca60c5736e42802ac810cb5763fdb1ee412239eeca3364e959e7d8e18ca1a443193dfa6403dce9a31a3374d16c847bcc29970d695a6e40cb91903972374991704f49036d0bdb66f61c7dfdad80ee2e64"}) ioctl$VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000040)={0xe0b, 0xb, 0x1}) 22:37:29 executing program 4 (fault-call:2 fault-nth:88): r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:29 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) listen(r0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x6, 0x8600) setsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000040)=0x6, 0x4) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r2, 0x29, 0x1, 0x0, &(0x7f00000000c0)) r3 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x2, 0x40000) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f00000000c0)={r3, 0x0, 0x1f, 0xe79, 0x91}) shutdown(r0, 0x0) 22:37:30 executing program 3 (fault-call:1 fault-nth:0): r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:37:30 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000040)={0x2, 0x4, 0x2f2, 0x101, 0x6f7}, 0x14) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000080), 0x10) 22:37:30 executing program 0: syz_mount_image$ntfs(&(0x7f0000000400)='ntfs\x00', &(0x7f0000000440)='./file0\x00', 0x900, 0x0, 0x0, 0x0, &(0x7f0000000c40)={[{@show_sys_files_no='show_sys_files=no'}, {@errors_continue='errors=continue'}, {@umask={'umask'}}, {@uid={'uid'}}, {@errors_recover='errors=recover'}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@fmask={'fmask'}}]}) r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) recvmsg$can_raw(r0, &(0x7f0000000600)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000480)=[{&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/96, 0x60}, {&(0x7f0000000140)=""/195, 0xc3}, {&(0x7f0000000240)=""/229, 0xe5}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)=""/4096, 0x1000}, {&(0x7f0000000340)=""/111, 0x6f}, {&(0x7f00000003c0)=""/23, 0x17}], 0x8, &(0x7f0000000500)=""/244, 0xf4}, 0x1) [ 271.148521] QAT: Invalid ioctl [ 271.167839] Unknown ioctl 25630 [ 271.168949] FAULT_INJECTION: forcing a failure. [ 271.168949] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 271.195745] FAULT_INJECTION: forcing a failure. [ 271.195745] name failslab, interval 1, probability 0, space 0, times 0 [ 271.209048] CPU: 1 PID: 11758 Comm: syz-executor.4 Not tainted 4.14.156-syzkaller #0 [ 271.216953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 271.216961] Call Trace: [ 271.228913] dump_stack+0x142/0x197 [ 271.232549] should_fail.cold+0x10f/0x159 [ 271.232566] should_failslab+0xdb/0x130 [ 271.232576] kmem_cache_alloc+0x2d7/0x780 22:37:30 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x0) listen(r0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000140)={0x0, {{0xa, 0x4e22, 0xfffff000, @rand_addr="ef8fb1a545d9345f0755ca7e546eae92", 0x7fff}}, 0x1, 0x4, [{{0xa, 0x4e21, 0xfffffffc, @local, 0xd8e}}, {{0xa, 0x4e24, 0x3, @loopback, 0x4}}, {{0xa, 0x4e24, 0x7f, @dev={0xfe, 0x80, [], 0x1e}, 0x8}}, {{0xa, 0x4e20, 0x100, @loopback, 0xbb}}]}, 0x290) shutdown(r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r2, 0x400, 0x70bd26, 0x25dfdbff, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x6, 0x7ff, 0x2, 0x9}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x40040804) [ 271.240691] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 271.240709] copy_process.part.0+0x4450/0x6a00 [ 271.240740] ? __cleanup_sighand+0x50/0x50 [ 271.240753] ? lock_downgrade+0x740/0x740 [ 271.263305] _do_fork+0x19e/0xce0 [ 271.266770] ? fork_idle+0x280/0x280 [ 271.270497] ? fput+0xd4/0x150 [ 271.273698] ? SyS_write+0x15e/0x230 [ 271.277429] SyS_clone+0x37/0x50 [ 271.280793] ? sys_vfork+0x30/0x30 [ 271.284342] do_syscall_64+0x1e8/0x640 [ 271.288234] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 271.293095] entry_SYSCALL_64_after_hwframe+0x42/0xb7 22:37:30 executing program 2: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) write$P9_RRENAME(r0, &(0x7f0000000040)={0x7, 0x15, 0x1}, 0x7) r1 = socket$inet6(0xa, 0x40000080806, 0x0) listen(r1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r2, 0x29, 0x1, 0x0, &(0x7f00000000c0)) shutdown(r1, 0x0) 22:37:30 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000080), 0x10) [ 271.298289] RIP: 0033:0x45a679 [ 271.301481] RSP: 002b:00007f7ce7ebfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 271.309246] RAX: ffffffffffffffda RBX: 00007f7ce7ebfc90 RCX: 000000000045a679 [ 271.316519] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 271.323797] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 271.331069] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7ce7ec06d4 [ 271.331077] R13: 00000000004c0d71 R14: 00000000004d3d68 R15: 0000000000000004 22:37:30 executing program 4 (fault-call:2 fault-nth:89): r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 271.354747] CPU: 0 PID: 11755 Comm: syz-executor.3 Not tainted 4.14.156-syzkaller #0 [ 271.362692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 271.372062] Call Trace: [ 271.374671] dump_stack+0x142/0x197 [ 271.378313] should_fail.cold+0x10f/0x159 [ 271.378530] FAULT_INJECTION: forcing a failure. [ 271.378530] name failslab, interval 1, probability 0, space 0, times 0 [ 271.382479] ? __might_sleep+0x93/0xb0 [ 271.382495] __alloc_pages_nodemask+0x1d6/0x7a0 22:37:30 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r4 = fcntl$dupfd(r3, 0x0, r2) write$FUSE_ATTR(r4, &(0x7f0000000280)={0x78}, 0x78) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000040)=0xe8) ioctl$SIOCAX25GETUID(r4, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, r5}) r6 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r7, 0x0, 0x2, &(0x7f0000000080), 0x10) [ 271.382505] ? __might_fault+0x110/0x1d0 [ 271.382518] ? __alloc_pages_slowpath+0x2930/0x2930 [ 271.382539] alloc_pages_current+0xec/0x1e0 [ 271.382550] ? check_ctrlrecip+0x91/0x290 [ 271.382564] __get_free_pages+0xf/0x40 [ 271.382572] proc_control+0x138/0x6a0 [ 271.382589] ? get_pid_task+0x98/0x140 [ 271.431360] ? snoop_urb.part.0+0x200/0x200 [ 271.435700] usbdev_do_ioctl+0x1881/0x2a60 [ 271.439940] ? lock_downgrade+0x740/0x740 [ 271.444093] ? proc_submiturb_compat+0x150/0x150 [ 271.448853] ? __might_sleep+0x93/0xb0 22:37:30 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r5 = fcntl$dupfd(r4, 0x0, r3) write$FUSE_ATTR(r5, &(0x7f0000000280)={0x78}, 0x78) ioctl$EVIOCGPROP(r5, 0x80404509, &(0x7f00000000c0)=""/117) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r6, 0x0, 0x2, &(0x7f0000000080), 0x10) [ 271.452732] ? __fget+0x210/0x370 [ 271.456182] usbdev_ioctl+0x26/0x30 [ 271.459806] ? usbdev_compat_ioctl+0x30/0x30 [ 271.464220] do_vfs_ioctl+0x7ae/0x1060 [ 271.468118] ? selinux_file_mprotect+0x5d0/0x5d0 [ 271.472881] ? lock_downgrade+0x740/0x740 [ 271.477042] ? ioctl_preallocate+0x1c0/0x1c0 [ 271.481462] ? __fget+0x237/0x370 [ 271.484917] ? security_file_ioctl+0x89/0xb0 [ 271.489324] SyS_ioctl+0x8f/0xc0 [ 271.492698] ? do_vfs_ioctl+0x1060/0x1060 [ 271.496858] do_syscall_64+0x1e8/0x640 [ 271.500749] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 271.505605] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 271.510792] RIP: 0033:0x45a679 [ 271.513972] RSP: 002b:00007f7469dabc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 271.521675] RAX: ffffffffffffffda RBX: 00007f7469dabc90 RCX: 000000000045a679 [ 271.528944] RDX: 0000000020000080 RSI: 00000000c0185500 RDI: 0000000000000003 [ 271.536223] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 271.543500] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7469dac6d4 [ 271.550771] R13: 00000000004c592b R14: 00000000004daff8 R15: 0000000000000004 [ 271.562676] CPU: 1 PID: 11777 Comm: syz-executor.4 Not tainted 4.14.156-syzkaller #0 [ 271.570607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 271.570612] Call Trace: [ 271.570629] dump_stack+0x142/0x197 [ 271.570644] should_fail.cold+0x10f/0x159 [ 271.570659] should_failslab+0xdb/0x130 [ 271.570668] kmem_cache_alloc+0x2d7/0x780 [ 271.570685] ptlock_alloc+0x20/0x70 [ 271.570696] pte_alloc_one+0x60/0x100 [ 271.570705] __pte_alloc+0x2a/0x2d0 [ 271.570716] copy_page_range+0x1299/0x1de0 [ 271.570726] ? save_trace+0x290/0x290 [ 271.570751] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 271.570765] copy_process.part.0+0x4765/0x6a00 [ 271.570794] ? __cleanup_sighand+0x50/0x50 [ 271.570803] ? lock_downgrade+0x740/0x740 [ 271.570816] _do_fork+0x19e/0xce0 [ 271.570838] ? fork_idle+0x280/0x280 [ 271.570851] ? fput+0xd4/0x150 [ 271.570860] ? SyS_write+0x15e/0x230 [ 271.570872] SyS_clone+0x37/0x50 [ 271.570879] ? sys_vfork+0x30/0x30 [ 271.570892] do_syscall_64+0x1e8/0x640 [ 271.570901] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 271.570918] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 271.570926] RIP: 0033:0x45a679 [ 271.570931] RSP: 002b:00007f7ce7ebfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 271.570942] RAX: ffffffffffffffda RBX: 00007f7ce7ebfc90 RCX: 000000000045a679 [ 271.570948] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 271.570953] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 22:37:30 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r2 = fcntl$dupfd(r1, 0x0, r0) write$FUSE_ATTR(r2, &(0x7f0000000280)={0x78}, 0x78) ioctl$KVM_PPC_GET_PVINFO(r2, 0x4080aea1, &(0x7f0000000000)=""/32) syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x0) 22:37:30 executing program 1: ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000040)=0x9) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r4 = fcntl$dupfd(r3, 0x0, r2) write$FUSE_ATTR(r4, &(0x7f0000000280)={0x78}, 0x78) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r7 = fcntl$dupfd(r6, 0x0, r5) write$FUSE_ATTR(r7, &(0x7f0000000280)={0x78}, 0x78) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x80000000) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r9, 0x0, 0x2, &(0x7f0000000080), 0x10) 22:37:30 executing program 4 (fault-call:2 fault-nth:90): r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:30 executing program 3 (fault-call:1 fault-nth:1): r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:37:30 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r4 = fcntl$dupfd(r3, 0x0, r2) write$FUSE_ATTR(r4, &(0x7f0000000280)={0x78}, 0x78) ioctl$VIDIOC_OVERLAY(r4, 0x4004560e, &(0x7f0000000340)=0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r5, 0x29, 0x1, 0x0, &(0x7f00000000c0)) socket$isdn(0x22, 0x3, 0x21) ioctl$sock_inet_SIOCGIFPFLAGS(r5, 0x8935, &(0x7f0000000000)={'ip6gretap0\x00', 0x40}) getsockopt$inet6_int(r1, 0x29, 0x1, 0x0, &(0x7f00000000c0)) listen(r1, 0xfff) semctl$GETZCNT(0x0, 0x3, 0xf, &(0x7f0000000100)=""/229) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x42c00) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r6, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00082abd7000fddbdf25060000000800050009120000080004000000000c00020008000700370d000000"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4000010) shutdown(r0, 0x0) [ 271.570959] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7ce7ec06d4 [ 271.570965] R13: 00000000004c0d71 R14: 00000000004d3d68 R15: 0000000000000004 [ 271.684402] Unknown ioctl 25630 22:37:30 executing program 0: syz_mount_image$ntfs(&(0x7f0000000400)='ntfs\x00', &(0x7f0000000440)='./file0\x00', 0x900, 0x0, 0x0, 0x0, &(0x7f0000000c40)={[{@show_sys_files_no='show_sys_files=no'}, {@errors_continue='errors=continue'}, {@umask={'umask'}}, {@uid={'uid'}}, {@errors_recover='errors=recover'}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@fmask={'fmask'}}]}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r2 = fcntl$dupfd(r1, 0x0, r0) write$FUSE_ATTR(r2, &(0x7f0000000280)={0x78}, 0x78) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000300)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r5) setresuid(r4, 0x0, r5) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000000)={{{@in6=@rand_addr="9a6ad7e90a9ae1502ed11ff2300351ef", @in6=@dev={0xfe, 0x80, [], 0x13}, 0x4e22, 0x800, 0x4e23, 0x5, 0xa, 0x40, 0x20, 0x3a, 0x0, r5}, {0x53d, 0x6, 0x9, 0x9, 0x6, 0xffffffffffffff46, 0x40, 0x5}, {0x10001, 0xffff, 0xed}, 0x8000, 0x6e6bb5, 0x2, 0x0, 0x2, 0x1}, {{@in6=@mcast1, 0x4d6, 0x2b}, 0x0, @in6=@mcast2, 0x3504, 0x0, 0x1, 0x8, 0x6, 0x200, 0x47}}, 0xe8) 22:37:30 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000080), 0x10) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x48) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) write$FUSE_ATTR(r6, &(0x7f0000000280)={0x78}, 0x78) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f0000000140)={0x8, 0x120, 0xfa00, {0x1, {0x1, 0x800, "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", 0x0, 0x2, 0x9, 0x75, 0x91, 0x81, 0x20}, r7}}, 0x128) [ 271.815738] FAULT_INJECTION: forcing a failure. [ 271.815738] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 271.896876] FAULT_INJECTION: forcing a failure. [ 271.896876] name failslab, interval 1, probability 0, space 0, times 0 [ 271.922103] CPU: 1 PID: 11800 Comm: syz-executor.4 Not tainted 4.14.156-syzkaller #0 [ 271.930036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 271.940346] Call Trace: [ 271.940371] dump_stack+0x142/0x197 [ 271.940391] should_fail.cold+0x10f/0x159 [ 271.940406] ? __might_sleep+0x93/0xb0 [ 271.946604] __alloc_pages_nodemask+0x1d6/0x7a0 [ 271.959274] ? __alloc_pages_slowpath+0x2930/0x2930 [ 271.964294] ? kasan_slab_alloc+0xf/0x20 [ 271.968369] alloc_pages_current+0xec/0x1e0 [ 271.972690] pte_alloc_one+0x1a/0x100 [ 271.976480] __pte_alloc+0x2a/0x2d0 [ 271.980102] copy_page_range+0x1299/0x1de0 [ 271.984334] ? save_trace+0x290/0x290 [ 271.988143] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 271.992909] copy_process.part.0+0x4765/0x6a00 [ 271.997518] ? __cleanup_sighand+0x50/0x50 [ 272.001754] ? lock_downgrade+0x740/0x740 [ 272.005889] _do_fork+0x19e/0xce0 [ 272.009327] ? fork_idle+0x280/0x280 [ 272.013025] ? fput+0xd4/0x150 [ 272.016213] ? SyS_write+0x15e/0x230 [ 272.019915] SyS_clone+0x37/0x50 [ 272.023264] ? sys_vfork+0x30/0x30 [ 272.026791] do_syscall_64+0x1e8/0x640 [ 272.030664] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 272.035497] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 272.040673] RIP: 0033:0x45a679 22:37:30 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) listen(r0, 0x0) shutdown(r0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10) [ 272.043848] RSP: 002b:00007f7ce7ebfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 272.051552] RAX: ffffffffffffffda RBX: 00007f7ce7ebfc90 RCX: 000000000045a679 [ 272.058804] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 272.066055] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 272.073306] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7ce7ec06d4 [ 272.080568] R13: 00000000004c0d71 R14: 00000000004d3d68 R15: 0000000000000004 [ 272.087838] CPU: 0 PID: 11809 Comm: syz-executor.3 Not tainted 4.14.156-syzkaller #0 [ 272.095731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 272.105092] Call Trace: [ 272.105113] dump_stack+0x142/0x197 [ 272.105129] should_fail.cold+0x10f/0x159 [ 272.111327] should_failslab+0xdb/0x130 [ 272.111339] kmem_cache_alloc_trace+0x2e9/0x790 [ 272.111352] ? lock_downgrade+0x740/0x740 [ 272.111369] usb_control_msg+0x9a/0x490 [ 272.111380] ? usb_start_wait_urb+0x290/0x290 [ 272.111390] ? wait_for_completion+0x420/0x420 [ 272.111406] proc_control+0x2cf/0x6a0 [ 272.128551] ? snoop_urb.part.0+0x200/0x200 [ 272.128575] usbdev_do_ioctl+0x1881/0x2a60 [ 272.137019] ? lock_downgrade+0x740/0x740 [ 272.137038] ? proc_submiturb_compat+0x150/0x150 [ 272.137061] ? __might_sleep+0x93/0xb0 [ 272.145437] ? __fget+0x210/0x370 [ 272.145457] usbdev_ioctl+0x26/0x30 [ 272.145470] ? usbdev_compat_ioctl+0x30/0x30 [ 272.162877] do_vfs_ioctl+0x7ae/0x1060 [ 272.162895] ? selinux_file_mprotect+0x5d0/0x5d0 [ 272.162908] ? lock_downgrade+0x740/0x740 [ 272.173846] ? ioctl_preallocate+0x1c0/0x1c0 22:37:31 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r2 = fcntl$dupfd(r1, 0x0, r0) write$FUSE_ATTR(r2, &(0x7f0000000280)={0x78}, 0x78) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000000)={0x3000, 0x103000}) syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r3, 0x29, 0x1, 0x0, &(0x7f00000000c0)) write$binfmt_aout(r3, &(0x7f0000000880)={{0x108, 0x6c, 0x81, 0x4d, 0x332, 0x2, 0x2e9, 0x9}, "a5c546e16e67033121b32591d102217224eb365774e09a59e510482ce9152decbac781776452bd0ebf8a930f0294593b208c2e7523249acfc7d0611d01be51653e26bf5345db24225e2ca36aa42df500afd46116e0e6803d88cd7c2abf7cea2bfddf9e939e294c20a8cf3be95f92b6631584409ae5af56dad92c75c1", [[], [], [], [], []]}, 0x59c) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r4, 0x29, 0x1, 0x0, &(0x7f00000000c0)) splice(0xffffffffffffffff, &(0x7f0000000040)=0x8001, r4, &(0x7f0000000080), 0x4, 0x6446105ca334862e) [ 272.173862] ? __fget+0x237/0x370 [ 272.173880] ? security_file_ioctl+0x89/0xb0 [ 272.182147] SyS_ioctl+0x8f/0xc0 [ 272.191183] ? do_vfs_ioctl+0x1060/0x1060 [ 272.191200] do_syscall_64+0x1e8/0x640 [ 272.191210] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 272.191231] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 272.191239] RIP: 0033:0x45a679 [ 272.191246] RSP: 002b:00007f7469dabc78 EFLAGS: 00000246 [ 272.199075] ORIG_RAX: 0000000000000010 [ 272.199081] RAX: ffffffffffffffda RBX: 00007f7469dabc90 RCX: 000000000045a679 22:37:31 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000080), 0x10) syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x8, 0x20000) 22:37:31 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f00000000c0)={@host}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x5100, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r2, 0x29, 0x1, 0x0, &(0x7f00000000c0)) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r3, 0x29, 0x1, 0x0, &(0x7f00000000c0)) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback, 0x9}, 0x1c) getsockopt$inet6_int(r4, 0x29, 0x1, 0x0, &(0x7f00000000c0)) r5 = dup(r1) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000040)={'veth0_to_hsr\x00', 0x3}) r6 = socket$inet6(0xa, 0x6, 0xf8) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r7, 0x29, 0x1, 0x0, &(0x7f00000000c0)) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r8, 0x29, 0x1, 0x0, &(0x7f00000000c0)) recvmmsg(r8, &(0x7f0000000340), 0x0, 0x2000, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@ipv4={[], [], @empty}, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000240)={{{@in=@rand_addr=0xfffffffa, @in6=@mcast2, 0x4e23, 0x0, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x88, 0x0, r9}, {0x5, 0x6, 0x1ff, 0x6, 0x8, 0x6, 0xfffffffffffffff9, 0x2}, {0x3d, 0x9, 0x400, 0x1}, 0x7fff, 0x6e6bb0, 0x0, 0x1, 0x38f3ba8322d1bc23, 0x2}, {{@in6=@dev={0xfe, 0x80, [], 0x1d}, 0x4d2, 0x6c}, 0x57105be9fb3fd8d8, @in=@multicast1, 0x3507, 0x4, 0x1, 0x7, 0x81, 0x18f, 0xfffffffd}}, 0xe8) listen(r6, 0x0) shutdown(r6, 0x0) [ 272.199088] RDX: 0000000020000080 RSI: 00000000c0185500 RDI: 0000000000000003 [ 272.199094] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 272.199100] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7469dac6d4 [ 272.199106] R13: 00000000004c592b R14: 00000000004daff8 R15: 0000000000000004 [ 272.301597] __ntfs_error: 42 callbacks suppressed [ 272.301605] ntfs: (device loop0): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. 22:37:31 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) write$P9_RWRITE(0xffffffffffffffff, &(0x7f00000000c0)={0xb, 0x77, 0x2, 0xffffffff}, 0xb) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) fallocate(r3, 0x17, 0x6, 0x5) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, &(0x7f0000000080), 0x10) 22:37:31 executing program 5: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x0) [ 272.348032] ntfs: (device loop0): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 272.373167] ntfs: (device loop0): read_ntfs_boot_sector(): Could not find a valid backup boot sector. [ 272.386254] ntfs: (device loop0): ntfs_fill_super(): Not an NTFS volume. 22:37:31 executing program 0: syz_mount_image$ntfs(&(0x7f0000000400)='ntfs\x00', &(0x7f0000000440)='./file0\x00', 0x900, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYBLOB=',errors=recover,show_sys_files=no,mft_zone_multiplier=0x0000000000000000,mft_zone_multiplier=0x0000000000000000,fmask=00000000000000000000000,\x00']) 22:37:31 executing program 4 (fault-call:2 fault-nth:91): r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:31 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c) listen(r0, 0x0) shutdown(r0, 0x0) 22:37:31 executing program 5: syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x0) 22:37:31 executing program 3 (fault-call:1 fault-nth:2): r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:37:31 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r5 = fcntl$dupfd(r4, 0x0, r3) write$FUSE_ATTR(r5, &(0x7f0000000280)={0x78}, 0x78) ioctl$VFIO_GET_API_VERSION(r5, 0x3b64) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r6, 0x0, 0x2, &(0x7f0000000080), 0x10) 22:37:31 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x0) ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000000000)={0x57, "a99442df8ced766a19ffb8cdb9a820d076c0164f317527a0aa4b65b44ff6e20f", 0x6, 0x6aad731a620ccc30}) 22:37:31 executing program 2: openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x1, 0xb, 0x1e, "5bd79b40e579278ddfcdbcbec27da38e1c53d90fd4e86ecce20287763485cfa5024506b6178c917eb36fedc4d7d7cee90d9ac57b96e6f4e1b6bfe4694737ee8b", "2e27a6cb611c8a5802ed74e713cce5c6eff2ee3efd47f82ee7e961af09c0cd9210d2d53d476b16ef576934bbe67206f869c4377f61be23bf9ca2ea742624be45", "82e02787853eb8a2b7d8000cbfd24290ca9a7cfb3a219d7a7d0cb22504aa72fc", [0x8000000, 0x5]}) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='highspeed\x00', 0xa) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) [ 272.600224] FAULT_INJECTION: forcing a failure. [ 272.600224] name failslab, interval 1, probability 0, space 0, times 0 [ 272.617735] ntfs: (device loop0): parse_options(): Invalid uid option argument: $¦;'áJûº5 QW]îœùEžq‡a$ÏÂHdSËE"–÷>̼ç¢GÚ‚h˜W IV"ß&)„¦Ô$Ke`)qxMø¶òÌcdZoBŸ –Åm/¤"+.˺ãØgˆ©KPâÙ»nï ´VƒªUŠ®Ø[ýž« [ 272.617735] fØJvä_ö [ 272.633266] FAULT_INJECTION: forcing a failure. [ 272.633266] name failslab, interval 1, probability 0, space 0, times 0 [ 272.668352] CPU: 1 PID: 11866 Comm: syz-executor.3 Not tainted 4.14.156-syzkaller #0 [ 272.676276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 272.676284] Call Trace: [ 272.676304] dump_stack+0x142/0x197 [ 272.676324] should_fail.cold+0x10f/0x159 [ 272.676342] should_failslab+0xdb/0x130 [ 272.700000] __kmalloc+0x2f0/0x7a0 [ 272.703566] ? rcu_read_lock_sched_held+0x110/0x130 [ 272.708771] ? kmem_cache_alloc_trace+0x623/0x790 [ 272.713623] ? usb_alloc_urb+0x24/0x50 [ 272.717516] usb_alloc_urb+0x24/0x50 [ 272.721238] usb_control_msg+0x1ba/0x490 [ 272.725303] ? usb_start_wait_urb+0x290/0x290 [ 272.729806] ? wait_for_completion+0x420/0x420 [ 272.734394] proc_control+0x2cf/0x6a0 [ 272.738201] ? snoop_urb.part.0+0x200/0x200 [ 272.742531] usbdev_do_ioctl+0x1881/0x2a60 [ 272.746769] ? lock_downgrade+0x740/0x740 [ 272.750924] ? proc_submiturb_compat+0x150/0x150 [ 272.755695] ? __might_sleep+0x93/0xb0 [ 272.759586] ? __fget+0x210/0x370 [ 272.763047] usbdev_ioctl+0x26/0x30 [ 272.766677] ? usbdev_compat_ioctl+0x30/0x30 [ 272.771099] do_vfs_ioctl+0x7ae/0x1060 [ 272.771117] ? selinux_file_mprotect+0x5d0/0x5d0 [ 272.771131] ? lock_downgrade+0x740/0x740 [ 272.771142] ? ioctl_preallocate+0x1c0/0x1c0 [ 272.771154] ? __fget+0x237/0x370 [ 272.771171] ? security_file_ioctl+0x89/0xb0 [ 272.771182] SyS_ioctl+0x8f/0xc0 [ 272.779801] ? do_vfs_ioctl+0x1060/0x1060 [ 272.779817] do_syscall_64+0x1e8/0x640 [ 272.779826] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 272.779845] entry_SYSCALL_64_after_hwframe+0x42/0xb7 22:37:31 executing program 0: prctl$PR_CAPBSET_DROP(0x18, 0xa) syz_mount_image$ntfs(&(0x7f0000000400)='ntfs\x00', &(0x7f0000000440)='./file0\x00', 0x900, 0x0, 0x0, 0x0, &(0x7f0000000c40)={[{@show_sys_files_no='show_sys_files=no'}, {@errors_continue='errors=continue'}, {@umask={'umask'}}, {@uid={'uid'}}, {@errors_recover='errors=recover'}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@fmask={'fmask'}}]}) 22:37:31 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x408000, 0x0) syz_open_dev$usbfs(&(0x7f0000000840)='3\xae\xde#\x80\x00', 0x40000000909, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x240) [ 272.779855] RIP: 0033:0x45a679 [ 272.821208] RSP: 002b:00007f7469dabc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 272.821222] RAX: ffffffffffffffda RBX: 00007f7469dabc90 RCX: 000000000045a679 [ 272.821227] RDX: 0000000020000080 RSI: 00000000c0185500 RDI: 0000000000000003 [ 272.821233] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 272.821239] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7469dac6d4 [ 272.821245] R13: 00000000004c592b R14: 00000000004daff8 R15: 0000000000000004 [ 272.858614] CPU: 1 PID: 11868 Comm: syz-executor.4 Not tainted 4.14.156-syzkaller #0 [ 272.873644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 272.882995] Call Trace: [ 272.883015] dump_stack+0x142/0x197 [ 272.883033] should_fail.cold+0x10f/0x159 [ 272.883050] should_failslab+0xdb/0x130 [ 272.883062] kmem_cache_alloc+0x2d7/0x780 [ 272.891700] ntfs: (device loop0): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 272.893439] ptlock_alloc+0x20/0x70 [ 272.893465] pte_alloc_one+0x60/0x100 [ 272.893479] __pte_alloc+0x2a/0x2d0 [ 272.900079] ntfs: (device loop0): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 272.901599] copy_page_range+0x1299/0x1de0 [ 272.901615] ? save_trace+0x290/0x290 [ 272.922767] ntfs: (device loop0): read_ntfs_boot_sector(): Could not find a valid backup boot sector. [ 272.930993] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 272.931011] copy_process.part.0+0x4765/0x6a00 [ 272.935304] ntfs: (device loop0): ntfs_fill_super(): Not an NTFS volume. [ 272.939042] ? __cleanup_sighand+0x50/0x50 [ 272.953116] ? lock_downgrade+0x740/0x740 [ 272.953133] _do_fork+0x19e/0xce0 [ 272.953148] ? fork_idle+0x280/0x280 [ 272.953162] ? fput+0xd4/0x150 [ 272.953170] ? SyS_write+0x15e/0x230 [ 272.953183] SyS_clone+0x37/0x50 [ 272.964565] ? sys_vfork+0x30/0x30 [ 272.964582] do_syscall_64+0x1e8/0x640 [ 272.964591] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 272.964613] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 272.964621] RIP: 0033:0x45a679 [ 272.964626] RSP: 002b:00007f7ce7ebfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 22:37:31 executing program 0: syz_mount_image$ntfs(&(0x7f0000000400)='ntfs\x00', &(0x7f0000000440)='./file0\x00', 0x900, 0xfffffffffffffedb, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYBLOB=',errors=recover,show_sys_files=no,mft_zone_multiplier=0x0000000000000000,mft_zone_multiplier=0x0000000000000000,fmask=00000000000000000000000,\x00']) 22:37:32 executing program 3 (fault-call:1 fault-nth:3): r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) [ 273.018579] RAX: ffffffffffffffda RBX: 00007f7ce7ebfc90 RCX: 000000000045a679 [ 273.025834] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 273.033091] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 273.040344] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7ce7ec06d4 [ 273.047595] R13: 00000000004c0d71 R14: 00000000004d3d68 R15: 0000000000000004 22:37:32 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000080), 0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) getsockopt$inet6_int(r4, 0x29, 0x1, 0x0, &(0x7f00000000c0)) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r7 = fcntl$dupfd(r6, 0x0, r5) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r8, 0x0) recvmmsg(r8, &(0x7f0000001300), 0x40000a2, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) getsockopt$bt_BT_SECURITY(r8, 0x112, 0x4, &(0x7f0000000040), 0x2) write$FUSE_ATTR(r7, &(0x7f0000000280)={0x78}, 0x78) accept4$llc(r7, 0x0, &(0x7f0000000800), 0x100c00) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)) 22:37:32 executing program 4 (fault-call:2 fault-nth:92): r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:32 executing program 0: syz_mount_image$ntfs(&(0x7f0000000400)='ntfs\x00', &(0x7f0000000440)='./file0\x00', 0x903, 0x0, 0x0, 0x0, &(0x7f0000000c40)={[{@show_sys_files_no='show_sys_files=no'}, {@nls={'nls', 0x3d, 'cp949'}}, {@umask={'umask'}}, {@uid={'uid'}}, {@nls={'nls', 0x3d, 'cp855'}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@fmask={'fmask'}}]}) 22:37:32 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x1, 0x0, &(0x7f00000000c0)) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)=0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r4, 0x29, 0x1, 0x0, &(0x7f00000000c0)) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r7 = fcntl$dupfd(r6, 0x0, r5) write$FUSE_ATTR(r7, &(0x7f0000000280)={0x78}, 0x78) ioctl$GIO_FONT(r7, 0x4b60, &(0x7f00000003c0)=""/74) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) r9 = getuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) getgroups(0x1, &(0x7f00000002c0)=[r10]) r11 = getegid() r12 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8001, 0x1c0) ioctl$RTC_ALM_READ(r12, 0x80247008, &(0x7f0000000380)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) getgroups(0x1, &(0x7f00000002c0)=[r13]) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)={{}, {0x1, 0x4}, [{0x2, 0x4, r1}, {0x2, 0x4, r2}, {0x2, 0x0, r3}, {0x2, 0x4}, {0x2, 0x0, r8}, {0x2, 0x4}, {0x2, 0x3, r9}], {0x4, 0x3}, [{0x8, 0x4595f774d8816c7f, r10}, {0x8, 0x0, r11}, {0x8, 0x4, r13}, {0x8, 0x1, 0xffffffffffffffff}], {0x10, 0x4}, {0x20, 0x1}}, 0x7c, 0x2) [ 273.245058] FAULT_INJECTION: forcing a failure. [ 273.245058] name failslab, interval 1, probability 0, space 0, times 0 [ 273.261419] FAULT_INJECTION: forcing a failure. [ 273.261419] name failslab, interval 1, probability 0, space 0, times 0 [ 273.295578] CPU: 1 PID: 11900 Comm: syz-executor.3 Not tainted 4.14.156-syzkaller #0 [ 273.303495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 273.312848] Call Trace: [ 273.312878] dump_stack+0x142/0x197 [ 273.312900] should_fail.cold+0x10f/0x159 [ 273.312922] should_failslab+0xdb/0x130 [ 273.312936] __kmalloc+0x2f0/0x7a0 [ 273.327311] ? _raw_spin_unlock_irq+0x28/0x90 [ 273.335317] ? trace_hardirqs_on_caller+0x400/0x590 [ 273.340335] ? usb_hcd_submit_urb+0x5ff/0x1e00 [ 273.344927] usb_hcd_submit_urb+0x5ff/0x1e00 [ 273.348690] ntfs: (device loop0): parse_options(): Unrecognized mount option . [ 273.349348] ? do_syscall_64+0x1e8/0x640 [ 273.349362] ? __kprobes_text_end+0x10fba0/0x10fba0 [ 273.349378] ? SyS_ioctl+0x30/0xc0 [ 273.369302] ? do_syscall_64+0x170/0x640 [ 273.373367] ? usb_create_hcd+0x40/0x40 [ 273.377339] ? __lock_acquire+0x5f7/0x4620 [ 273.381649] ? get_page_from_freelist+0x10f3/0x2370 [ 273.386655] ? kernel_poison_pages+0x143/0x260 [ 273.391241] usb_submit_urb+0x5c5/0x1100 [ 273.395289] ? __lockdep_init_map+0x540/0x570 [ 273.399784] usb_start_wait_urb+0x119/0x290 [ 273.404247] ? sg_clean+0x230/0x230 [ 273.407889] ? usb_init_urb+0x71/0x90 [ 273.411684] usb_control_msg+0x30b/0x490 [ 273.415738] ? usb_start_wait_urb+0x290/0x290 [ 273.420231] ? wait_for_completion+0x420/0x420 [ 273.424975] proc_control+0x2cf/0x6a0 [ 273.428785] ? snoop_urb.part.0+0x200/0x200 [ 273.433112] usbdev_do_ioctl+0x1881/0x2a60 [ 273.437345] ? lock_downgrade+0x740/0x740 [ 273.441485] ? proc_submiturb_compat+0x150/0x150 [ 273.446243] ? __might_sleep+0x93/0xb0 [ 273.450120] ? __fget+0x210/0x370 [ 273.453565] usbdev_ioctl+0x26/0x30 [ 273.457189] ? usbdev_compat_ioctl+0x30/0x30 [ 273.461594] do_vfs_ioctl+0x7ae/0x1060 [ 273.465470] ? selinux_file_mprotect+0x5d0/0x5d0 [ 273.470212] ? lock_downgrade+0x740/0x740 [ 273.474345] ? ioctl_preallocate+0x1c0/0x1c0 [ 273.478745] ? __fget+0x237/0x370 [ 273.482194] ? security_file_ioctl+0x89/0xb0 [ 273.486599] SyS_ioctl+0x8f/0xc0 [ 273.489957] ? do_vfs_ioctl+0x1060/0x1060 [ 273.494097] do_syscall_64+0x1e8/0x640 [ 273.497973] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 273.502810] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 273.507984] RIP: 0033:0x45a679 [ 273.511158] RSP: 002b:00007f7469dabc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 273.518895] RAX: ffffffffffffffda RBX: 00007f7469dabc90 RCX: 000000000045a679 [ 273.526161] RDX: 0000000020000080 RSI: 00000000c0185500 RDI: 0000000000000003 [ 273.533415] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 273.540667] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7469dac6d4 [ 273.547923] R13: 00000000004c592b R14: 00000000004daff8 R15: 0000000000000004 [ 273.555204] CPU: 0 PID: 11903 Comm: syz-executor.4 Not tainted 4.14.156-syzkaller #0 [ 273.563094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 273.572451] Call Trace: [ 273.575051] dump_stack+0x142/0x197 [ 273.578686] should_fail.cold+0x10f/0x159 [ 273.582846] should_failslab+0xdb/0x130 [ 273.586826] kmem_cache_alloc+0x2d7/0x780 [ 273.590985] ptlock_alloc+0x20/0x70 [ 273.594614] pte_alloc_one+0x60/0x100 [ 273.598417] __pte_alloc+0x2a/0x2d0 [ 273.602049] copy_page_range+0x1299/0x1de0 [ 273.606284] ? save_trace+0x290/0x290 [ 273.610114] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 273.614876] copy_process.part.0+0x4765/0x6a00 [ 273.619481] ? __cleanup_sighand+0x50/0x50 [ 273.623716] ? lock_downgrade+0x740/0x740 [ 273.627866] _do_fork+0x19e/0xce0 [ 273.631321] ? fork_idle+0x280/0x280 [ 273.635040] ? fput+0xd4/0x150 [ 273.638241] ? SyS_write+0x15e/0x230 [ 273.641957] SyS_clone+0x37/0x50 [ 273.645319] ? sys_vfork+0x30/0x30 [ 273.648867] do_syscall_64+0x1e8/0x640 [ 273.652757] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 273.657612] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 273.662796] RIP: 0033:0x45a679 [ 273.665979] RSP: 002b:00007f7ce7ebfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 273.673689] RAX: ffffffffffffffda RBX: 00007f7ce7ebfc90 RCX: 000000000045a679 [ 273.680961] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 273.688229] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 22:37:32 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x0) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000080)=0x7) getsockname$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x10) 22:37:32 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$l2tp(0x18, 0x1, 0x1) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f0000000040), 0x4) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000080), 0x10) [ 273.695497] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7ce7ec06d4 [ 273.702767] R13: 00000000004c0d71 R14: 00000000004d3d68 R15: 0000000000000004 22:37:32 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp6\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x10000, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x2000, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0), 0x0, 0x8) close(r4) splice(r3, 0x0, r4, 0x0, 0x10000, 0x0) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, 0x0) getsockname$packet(r5, &(0x7f0000001240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001280)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x10, r6, 0x0) r7 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) r8 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r7, r8, &(0x7f0000000240)=0x202, 0x4000000000dc) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)) sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="7d63821696aac9d11df19b952b604600000000000000778c00b1", @ANYRES16=r9, @ANYBLOB="050c27bd7000ffdbdf2503000000e7401191a1d7da378753f18bb8db0c21d74b8c1994cb573ff0c5320e3fe397bd8a7c25799573fdffffffffffffff16ed2d05dfcd8089ed7cfcc53c2c4c19daee0a2449ee45439a1b546b1aba6dcc98"], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYRESOCT=0x0, @ANYRES16=r9, @ANYBLOB="000829bd7000fddbdf25030000000c00050020000000000000000c00030007000000000000000c00040008000000001e08184400080001000000000000000c0008006c000000000000000c000200f52c2f740000ffffffff060000a666414e000000000000050100000000000000"], 0x3}, 0x1, 0x0, 0x0, 0x40000}, 0x24010855) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r10, 0x40086602, 0x400007) fsetxattr(r10, 0x0, &(0x7f0000000540)='em0/ppp1\xc5em0\x00', 0xd, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r9, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, [{0x8, 0x1, r10}, {0x8, 0x1, r5}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000085}, 0x100) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50d72800", @ANYRES16=r9, @ANYBLOB="00012bbd7000ffdbdf25020000000800010000000000080001000000000008000100000000000c00040001000000000000000c00040006000000000000000c0003000600000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x20000080}, 0x4) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x5038000c}, 0xc, &(0x7f00000005c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="200026bd7000fbdbdf25010000000c0002000050ff7e7940a63080020000000000000c00050004000000000000000c2005000900000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2004}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r9, 0xd00, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0xcfb0f845cfb78ac8}, 0xc0000c5) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r11, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r11, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendfile(r11, r0, 0x0, 0x7ffff000) 22:37:32 executing program 0: prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000000)="5f4061457909706349bc7776da955b35806c6de34957974aaad8254135b0f0c9f40a21f287b4db2cc6083788de084275edfafb13f9c9ae9e5da729e1632547b42dd35dd6e1bedd664fce84c2aa83c9fadeec3e0c0e679520b9b3dc079e69012c7773393f4c7ee7f49eb32e518c994c04f985aca29c9133c5f2563b617755d2a2bc638b0b2bd9", 0x86) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/dlm-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x2040400) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) semget$private(0x0, 0x0, 0x0) semop(0x0, &(0x7f0000000240), 0x0) semctl$GETZCNT(0x0, 0x1, 0xf, &(0x7f0000000600)=""/4096) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000440)={0xffff, 0x0, 0x10000, 0x6}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, 0x0, 0x0) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) syz_open_dev$dspn(&(0x7f0000000200)='/dev/dsp#\x00', 0x8, 0x58b380) socket(0x10, 0x3, 0x0) ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, &(0x7f00000003c0)) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000140)=[{}, {}, {}, {}], &(0x7f0000000280)=0x20) r2 = syz_open_dev$radio(&(0x7f0000000180)='/dev/radio#\x00', 0x3, 0x2) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f00000001c0), 0x4) syz_mount_image$ntfs(&(0x7f0000000400)='ntfs\x00', &(0x7f0000000440)='./file0\x00', 0x900, 0x0, 0x0, 0x0, &(0x7f0000000c40)={[{@show_sys_files_no='show_sys_files=no'}, {@errors_continue='errors=continue'}, {@umask={'umask'}}, {@uid={'uid'}}, {@errors_recover='errors=recover'}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@fmask={'fmask'}}]}) 22:37:32 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) setsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x11, &(0x7f0000000040)=0x1ff, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000080), 0x10) 22:37:32 executing program 4 (fault-call:2 fault-nth:93): r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:32 executing program 5: syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x28, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'team0\x00'}}]}]}, 0x28}}, 0x0) write$FUSE_ATTR(r4, &(0x7f0000000280)={0x78}, 0x78) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x0, 0x20}, 0xc) r7 = fcntl$dupfd(r1, 0x0, r0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r10 = fcntl$dupfd(r9, 0x0, r8) write$FUSE_ATTR(r10, &(0x7f0000000280)={0x78}, 0x78) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r10, 0x12, 0x1, 0x7, &(0x7f0000000100)=[0x0], 0x1}, 0x20) write$FUSE_ATTR(r7, &(0x7f0000000280)={0x78}, 0x78) ioctl$KDSKBLED(r7, 0x4b65, 0x0) connect$vsock_stream(r7, &(0x7f0000000000)={0x28, 0x0, 0xffffffff}, 0x10) ioperm(0x7, 0x1, 0x1) 22:37:32 executing program 3 (fault-call:1 fault-nth:4): r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) [ 273.930692] FAULT_INJECTION: forcing a failure. [ 273.930692] name failslab, interval 1, probability 0, space 0, times 0 [ 273.968953] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 [ 274.004369] CPU: 0 PID: 11935 Comm: syz-executor.4 Not tainted 4.14.156-syzkaller #0 [ 274.012288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 274.021651] Call Trace: [ 274.024254] dump_stack+0x142/0x197 [ 274.027921] should_fail.cold+0x10f/0x159 [ 274.032079] should_failslab+0xdb/0x130 [ 274.036063] kmem_cache_alloc+0x2d7/0x780 [ 274.040210] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 274.045141] copy_process.part.0+0x4450/0x6a00 [ 274.045171] ? __cleanup_sighand+0x50/0x50 [ 274.053964] ? lock_downgrade+0x740/0x740 [ 274.053983] _do_fork+0x19e/0xce0 [ 274.053998] ? fork_idle+0x280/0x280 [ 274.065372] ? fput+0xd4/0x150 [ 274.068566] ? SyS_write+0x15e/0x230 [ 274.072286] SyS_clone+0x37/0x50 [ 274.075662] ? sys_vfork+0x30/0x30 [ 274.079208] do_syscall_64+0x1e8/0x640 [ 274.083099] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 274.087948] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 274.087959] RIP: 0033:0x45a679 [ 274.096322] RSP: 002b:00007f7ce7ebfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 22:37:33 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) ioctl$USBDEVFS_DROP_PRIVILEGES(r3, 0x4004551e, &(0x7f0000000000)=0x200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:37:33 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r5 = fcntl$dupfd(r4, 0x0, r3) write$FUSE_ATTR(r5, &(0x7f0000000280)={0x78}, 0x78) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x1bb) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000180)={r6}, 0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000040)={r6, 0x100, 0xdfbfca3732837520, 0x100000000, 0x240000000000000}, &(0x7f00000000c0)=0x18) uname(&(0x7f0000000100)=""/67) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r7, 0x0, 0x2, &(0x7f0000000080), 0x10) [ 274.104055] RAX: ffffffffffffffda RBX: 00007f7ce7ebfc90 RCX: 000000000045a679 [ 274.111318] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 274.111325] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 274.111331] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7ce7ec06d4 [ 274.111337] R13: 00000000004c0d71 R14: 00000000004d3d68 R15: 0000000000000004 22:37:33 executing program 4 (fault-call:2 fault-nth:94): r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:33 executing program 5: r0 = open(&(0x7f0000000040)='./file0\x00', 0x800, 0x20) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000080), &(0x7f00000000c0)=0x4) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)) wait4(0x0, &(0x7f0000000140), 0x1000000, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000500)=0x5, 0x4) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000680)='./file0\x00', 0x0, 0x2001001, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount(&(0x7f0000000100)=@filename='./file0/file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x201000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x7080, 0x0) mount(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x0, 0x5010, 0x0) r3 = socket(0x9, 0x2, 0x1f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) fcntl$addseals(r3, 0x409, 0x0) rename(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00') dup2(r1, r2) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x69f3bfea, 0x8000) [ 274.150397] bond0: Releasing backup interface bond_slave_1 [ 274.163821] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 [ 274.184816] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 22:37:33 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000180)=@urb_type_interrupt={0x1, {0x7, 0x1}, 0x6, 0x20, &(0x7f0000000100)="badbd4ef75c19b561442e1b42d", 0xd, 0xd26d, 0x544, 0x0, 0x10001, 0x7fffffff, &(0x7f0000000140)="b278cf9f4b621952011648e4ce4b39f759835d53756512204cbda1fbe9d152a1973e168f482554759843"}) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) r4 = accept4$tipc(r3, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80800) fcntl$setflags(r4, 0x2, 0x1) 22:37:33 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r5 = fcntl$dupfd(r4, 0x0, r3) write$FUSE_ATTR(r5, &(0x7f0000000280)={0x78}, 0x78) ioctl$BLKIOOPT(r5, 0x1279, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0xfb40) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f0000000240)='/dev/vhci\x00') userfaultfd(0x3c2b4efcfe354faf) set_robust_list(&(0x7f0000000200)={&(0x7f0000000140)={&(0x7f0000000100)}, 0x6d266369, &(0x7f00000001c0)={&(0x7f0000000180)}}, 0x18) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$caif_stream(0x25, 0x1, 0x4) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r6, 0x0, 0x2, &(0x7f0000000080), 0x10) [ 274.252348] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 274.279256] FAULT_INJECTION: forcing a failure. [ 274.279256] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 274.366860] CPU: 1 PID: 11962 Comm: syz-executor.4 Not tainted 4.14.156-syzkaller #0 [ 274.374789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 274.384144] Call Trace: [ 274.386731] dump_stack+0x142/0x197 [ 274.390389] should_fail.cold+0x10f/0x159 [ 274.394555] ? __might_sleep+0x93/0xb0 [ 274.398450] __alloc_pages_nodemask+0x1d6/0x7a0 [ 274.403129] ? __alloc_pages_slowpath+0x2930/0x2930 [ 274.408150] ? kasan_slab_alloc+0xf/0x20 [ 274.412362] alloc_pages_current+0xec/0x1e0 [ 274.416801] pte_alloc_one+0x1a/0x100 [ 274.420612] __pte_alloc+0x2a/0x2d0 [ 274.424253] copy_page_range+0x1299/0x1de0 [ 274.428505] ? save_trace+0x290/0x290 [ 274.432329] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 274.437093] copy_process.part.0+0x4765/0x6a00 [ 274.441699] ? __cleanup_sighand+0x50/0x50 [ 274.445937] ? lock_downgrade+0x740/0x740 [ 274.450093] _do_fork+0x19e/0xce0 [ 274.453551] ? fork_idle+0x280/0x280 [ 274.457267] ? fput+0xd4/0x150 [ 274.460465] ? SyS_write+0x15e/0x230 [ 274.464185] SyS_clone+0x37/0x50 [ 274.467552] ? sys_vfork+0x30/0x30 [ 274.471096] do_syscall_64+0x1e8/0x640 [ 274.474986] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 274.479841] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 274.485035] RIP: 0033:0x45a679 [ 274.488223] RSP: 002b:00007f7ce7ebfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 274.495927] RAX: ffffffffffffffda RBX: 00007f7ce7ebfc90 RCX: 000000000045a679 [ 274.503192] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 274.510459] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 22:37:33 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp6\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x10000, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x2000, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0), 0x0, 0x8) close(r4) splice(r3, 0x0, r4, 0x0, 0x10000, 0x0) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, 0x0) getsockname$packet(r5, &(0x7f0000001240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001280)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x10, r6, 0x0) r7 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) r8 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r7, r8, &(0x7f0000000240)=0x202, 0x4000000000dc) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)) sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="7d63821696aac9d11df19b952b604600000000000000778c00b1", @ANYRES16=r9, @ANYBLOB="050c27bd7000ffdbdf2503000000e7401191a1d7da378753f18bb8db0c21d74b8c1994cb573ff0c5320e3fe397bd8a7c25799573fdffffffffffffff16ed2d05dfcd8089ed7cfcc53c2c4c19daee0a2449ee45439a1b546b1aba6dcc98"], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYRESOCT=0x0, @ANYRES16=r9, @ANYBLOB="000829bd7000fddbdf25030000000c00050020000000000000000c00030007000000000000000c00040008000000001e08184400080001000000000000000c0008006c000000000000000c000200f52c2f740000ffffffff060000a666414e000000000000050100000000000000"], 0x3}, 0x1, 0x0, 0x0, 0x40000}, 0x24010855) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r10, 0x40086602, 0x400007) fsetxattr(r10, 0x0, &(0x7f0000000540)='em0/ppp1\xc5em0\x00', 0xd, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r9, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, [{0x8, 0x1, r10}, {0x8, 0x1, r5}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000085}, 0x100) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50d72800", @ANYRES16=r9, @ANYBLOB="00012bbd7000ffdbdf25020000000800010000000000080001000000000008000100000000000c00040001000000000000000c00040006000000000000000c0003000600000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x20000080}, 0x4) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x5038000c}, 0xc, &(0x7f00000005c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="200026bd7000fbdbdf25010000000c0002000050ff7e7940a63080020000000000000c00050004000000000000000c2005000900000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2004}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r9, 0xd00, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0xcfb0f845cfb78ac8}, 0xc0000c5) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r11, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r11, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendfile(r11, r0, 0x0, 0x7ffff000) 22:37:33 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x4000, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000040)=ANY=[@ANYBLOB="a56d050008000000c0f3e2ddaec879ed"]) 22:37:33 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r2 = fcntl$dupfd(r1, 0x0, r0) write$FUSE_ATTR(r2, &(0x7f0000000280)={0x78}, 0x78) ioctl$UI_SET_RELBIT(r2, 0x40045566, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x6, 0x8a403) r4 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x1, 0x82000) ioctl$UI_SET_KEYBIT(r4, 0x40045565, 0x1fd) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) [ 274.517725] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7ce7ec06d4 [ 274.524998] R13: 00000000004c0d71 R14: 00000000004d3d68 R15: 0000000000000004 [ 274.557709] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 22:37:33 executing program 5: write$smack_current(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00'], 0x1) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x200000) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x100, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f00000004c0)=0xffffff02) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r6}) bind$packet(r3, &(0x7f0000000140)={0x11, 0x15, r6, 0x1, 0x9}, 0x14) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f00000000c0)=0x8, 0x4) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x530, 0x7}) 22:37:33 executing program 0: eventfd(0x8000) syz_mount_image$ntfs(&(0x7f0000000400)='ntfs\x00', &(0x7f0000000440)='./file0\x00', 0x900, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@show_sys_files_no='show_sys_files=no'}, {@errors_continue='errors=continue'}, {@dmask={'dmask', 0x3d, 0x8001}}, {@uid={'uid'}}, {@nls={'nls', 0x3d, 'maccroatian'}}, {@show_sys_files_no='G\xca(\xb6_s|s>fi.es=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@show_sys_files_yes='Yho\xe5\xff\xff\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 '}, {@errors_recover='errors=recover'}]}) 22:37:33 executing program 4 (fault-call:2 fault-nth:95): r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:33 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x200, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000008880), 0x62a, 0x0, 0x0) getrusage(0xfffffffffffffffe, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = fcntl$getown(0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000001c0)={0x3, 0xfffffffffffffe53, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0xdf}, 0x0, 0x4, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setattr(r7, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x8001, 0x3}, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000800), &(0x7f0000000840)=0x30) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1005, 0x0) r8 = syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x1, 0x0) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r8, &(0x7f0000000440)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, r9, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffce0}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xd47}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2b}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40840}, 0x5000) sendmsg$IPVS_CMD_GET_INFO(r6, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)={0xb0, r9, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7ff}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x5}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0xd}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x483e9bc51120a9d4}, 0x80) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], &(0x7f000095dffc)=0x1) r10 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r10, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r11) 22:37:33 executing program 2: prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000000)="5f4061457909706349bc7776da955b35806c6de34957974aaad8254135b0f0c9f40a21f287b4db2cc6083788de084275edfafb13f9c9ae9e5da729e1632547b42dd35dd6e1bedd664fce84c2aa83c9fadeec3e0c0e679520b9b3dc079e69012c7773393f4c7ee7f49eb32e518c994c04f985aca29c9133c5f2563b617755d2a2bc638b0b2bd9", 0x86) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/dlm-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x2040400) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) semget$private(0x0, 0x0, 0x0) semop(0x0, &(0x7f0000000240), 0x0) semctl$GETZCNT(0x0, 0x1, 0xf, &(0x7f0000000600)=""/4096) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000440)={0xffff, 0x0, 0x10000, 0x6}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, 0x0, 0x0) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) syz_open_dev$dspn(&(0x7f0000000200)='/dev/dsp#\x00', 0x8, 0x58b380) socket(0x10, 0x3, 0x0) ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, &(0x7f00000003c0)) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000140)=[{}, {}, {}, {}], &(0x7f0000000280)=0x20) r2 = syz_open_dev$radio(&(0x7f0000000180)='/dev/radio#\x00', 0x3, 0x2) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f00000001c0), 0x4) syz_mount_image$ntfs(&(0x7f0000000400)='ntfs\x00', &(0x7f0000000440)='./file0\x00', 0x900, 0x0, 0x0, 0x0, &(0x7f0000000c40)={[{@show_sys_files_no='show_sys_files=no'}, {@errors_continue='errors=continue'}, {@umask={'umask'}}, {@uid={'uid'}}, {@errors_recover='errors=recover'}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@fmask={'fmask'}}]}) 22:37:33 executing program 0: syz_mount_image$ntfs(&(0x7f0000000400)='ntfs\x00', &(0x7f0000000440)='./file0\x00', 0x900, 0x0, 0x0, 0x0, &(0x7f0000000c40)={[{@errors_continue='\xf2!\x00'}, {@errors_continue='errors=continue'}, {@umask={'umask'}}, {@uid={'uid'}}, {@errors_recover='errors=recover'}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0xffffffffffffffff}}, {@fmask={'fmask'}}]}) 22:37:33 executing program 5: syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40200000909, 0x20000) 22:37:33 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r5 = fcntl$dupfd(r4, 0x0, r3) write$FUSE_ATTR(r5, &(0x7f0000000280)={0x78, 0x0, 0x4, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}}, 0x78) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffb) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r6, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, 0x0, 0x4107, 0x0, {0x4c, 0x18, {0x80, @link='syz0\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x905}, 0x20000080) write$FUSE_ATTR(r2, &(0x7f0000000280)={0x78}, 0x78) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000000)=""/103) 22:37:33 executing program 5: syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) [ 274.833112] FAULT_INJECTION: forcing a failure. [ 274.833112] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 274.878948] bond0: Releasing backup interface bond_slave_1 [ 274.886728] CPU: 1 PID: 12012 Comm: syz-executor.4 Not tainted 4.14.156-syzkaller #0 [ 274.894639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 274.894646] Call Trace: [ 274.894668] dump_stack+0x142/0x197 [ 274.894689] should_fail.cold+0x10f/0x159 [ 274.894710] ? __might_sleep+0x93/0xb0 [ 274.894728] __alloc_pages_nodemask+0x1d6/0x7a0 [ 274.894744] ? __alloc_pages_slowpath+0x2930/0x2930 [ 274.894757] ? kasan_slab_alloc+0xf/0x20 [ 274.894778] alloc_pages_current+0xec/0x1e0 [ 274.894791] pte_alloc_one+0x1a/0x100 [ 274.894802] __pte_alloc+0x2a/0x2d0 [ 274.912711] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 [ 274.914478] copy_page_range+0x1299/0x1de0 [ 274.928221] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 [ 274.932070] ? save_trace+0x290/0x290 [ 274.964926] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 274.969700] copy_process.part.0+0x4765/0x6a00 [ 274.974307] ? __cleanup_sighand+0x50/0x50 [ 274.978535] ? lock_downgrade+0x740/0x740 [ 274.982694] _do_fork+0x19e/0xce0 [ 274.986151] ? fork_idle+0x280/0x280 [ 274.989863] ? fput+0xd4/0x150 [ 274.993053] ? SyS_write+0x15e/0x230 [ 274.996765] SyS_clone+0x37/0x50 [ 275.000123] ? sys_vfork+0x30/0x30 [ 275.003667] do_syscall_64+0x1e8/0x640 [ 275.007543] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 275.012382] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 275.017577] RIP: 0033:0x45a679 [ 275.020761] RSP: 002b:00007f7ce7ebfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 275.028486] RAX: ffffffffffffffda RBX: 00007f7ce7ebfc90 RCX: 000000000045a679 [ 275.035750] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 275.043269] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 275.050535] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7ce7ec06d4 [ 275.057792] R13: 00000000004c0d71 R14: 00000000004d3d68 R15: 0000000000000004 22:37:34 executing program 5: syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000680)='/dev/vcs\x00', 0x0, 0x0) ioctl$SIOCX25SCALLUSERDATA(r1, 0x89e5, &(0x7f00000006c0)={0x37, "25482e5b647223c2d9510fe6df384aea6f4671aa7cb009592c36350d4216a517e610654486b68ec74e5e4a2a9259c2996f17bee7f3d6096a86f2457b85c5a4648f6e2b1369f4e21d3214059d4872c99d3093c2b643eea08c50231d24b1d4fcc390d25020f57591d5ec24f762097be678fb47d3cbff98944bbc99927aa0090683"}) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r0) r4 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x4b, 0x40000) ioctl$BLKRAGET(r4, 0x1263, &(0x7f0000000100)) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r7 = fcntl$dupfd(r6, 0x0, r5) write$FUSE_ATTR(r7, &(0x7f0000000280)={0x78}, 0x78) bind$llc(r7, &(0x7f0000000040)={0x1a, 0x301, 0x8, 0x1, 0x20, 0x5a, @broadcast}, 0x10) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}}}, 0x78) ioctl$DRM_IOCTL_GET_MAGIC(r3, 0x80046402, &(0x7f0000000000)=0x6) 22:37:34 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) getgid() getgroups(0x0, &(0x7f00000002c0)) syz_mount_image$ntfs(&(0x7f0000000400)='ntfs\x00', &(0x7f0000000240)='./file0\x00', 0x900, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@show_sys_files_no='show_sys_files=no'}, {@errors_continue='errors=continue'}, {@umask={'umask'}}, {@uid={'uid'}}, {@gid={'gid', 0x3d, r0}}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@mft_zone_multiplier={'/ftZ\xc7\rneLX\x00\x00\x00ier\x00'}}, {@fmask={'fmask'}}], [{@dont_hash='dont_hash'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'errors=continue'}}, {@context={'context', 0x3d, 'staff_u'}}]}) 22:37:34 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0xa7, 0x4401) ioctl$VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f00000000c0)={0x6, 0xff69d4096fe1a611, 0x4, 0x20000400, {}, {0x4, 0x0, 0x10, 0x5, 0x0, 0x20, "13932a41"}, 0x400, 0x3, @userptr=0x944, 0x4}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, &(0x7f0000000080), 0x10) 22:37:34 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) accept$unix(r3, &(0x7f0000000000)=@abs, &(0x7f00000000c0)=0x6e) 22:37:34 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x1, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000e96000/0x1000)=nil, 0x1000, 0x1000000, 0x110, r0, 0x96951000) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000478000/0x2000)=nil, 0x2000, 0x0, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4, 0x0, 0x0, 0x10000000002) [ 275.345208] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 [ 275.389127] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 22:37:34 executing program 4 (fault-call:2 fault-nth:96): r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:34 executing program 5: syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x1, 0x0, &(0x7f00000000c0)) fchdir(r0) 22:37:34 executing program 0: openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000040)='security.evm\x00', &(0x7f0000000080)=@v2={0x0, 0x0, 0x9, 0x8, 0x43, "e0c2e0d89f2fd630052f7c0788c99e2798e5388524db0dfef4985f4baa06d1cb18e055984c0d57332ded281afae97c1ddd701d92fe45bfee437fa9c718c8b1a53d8c93"}, 0x4d, 0x2) syz_mount_image$ntfs(&(0x7f0000000400)='ntfs\x00', &(0x7f0000000440)='./file0\x00', 0x900, 0x0, 0x0, 0x0, &(0x7f0000000c40)={[{@show_sys_files_no='show_sys_files=no'}, {@errors_continue='errors=continue'}, {@umask={'umask'}}, {@uid={'uid'}}, {@errors_recover='errors=recover'}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@fmask={'fmask'}}]}) 22:37:34 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x1, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000e96000/0x1000)=nil, 0x1000, 0x1000000, 0x110, r0, 0x96951000) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000478000/0x2000)=nil, 0x2000, 0x0, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4, 0x0, 0x0, 0x10000000002) 22:37:34 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r6 = fcntl$dupfd(r5, 0x0, r4) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r9 = fcntl$dupfd(r8, 0x0, r7) write$FUSE_ATTR(r9, &(0x7f0000000280)={0x78}, 0x78) getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f0000000300)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@dev}}, &(0x7f0000000200)=0xe8) write$FUSE_ATTR(r6, &(0x7f0000000280)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0xfffffffc, r10}}}, 0x78) ioctl$VIDIOC_S_TUNER(r6, 0x4054561e, &(0x7f0000000180)={0x4, "02727ec4c3e6242028ef36977158136f738ea70c5845abf83ee6960690c701fa", 0x2, 0x40, 0xfbc8, 0x7, 0x4, 0x0, 0x48, 0x7fffffff}) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r12 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/`\t\x00\x00Fhci\x00', 0xad4f82) r13 = fcntl$dupfd(r12, 0x0, r11) write$FUSE_ATTR(r13, &(0x7f0000000280)={0x78}, 0x78) ioctl$KDGKBLED(r13, 0x4b64, &(0x7f0000000100)) r14 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r14, 0x5380) getsockopt$inet6_int(r3, 0x29, 0x1, 0x0, &(0x7f00000000c0)) getsockopt$inet6_udp_int(r3, 0x11, 0xa, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fcntl$addseals(r0, 0x409, 0x2) r15 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r16 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r16, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r16, 0x29, 0x1, 0x0, &(0x7f00000000c0)) dup(r16) setsockopt$bt_hci_HCI_FILTER(r15, 0x0, 0x2, &(0x7f0000000080), 0x10) 22:37:34 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x4000, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000040)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:v4l_device_t:s0\x00', 0x22, 0x1) r1 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r4 = fcntl$dupfd(r3, 0x0, r2) write$FUSE_ATTR(r4, &(0x7f0000000280)={0x78}, 0x78) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x5}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000180)={0x8, 0x4207, 0x2, 0x5, r5}, &(0x7f00000001c0)=0x10) [ 275.656101] FAULT_INJECTION: forcing a failure. [ 275.656101] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 275.675604] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 22:37:34 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r2 = fcntl$dupfd(r1, 0x0, r0) write$FUSE_ATTR(r2, &(0x7f0000000280)={0x78}, 0x78) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r4, &(0x7f00000000c0)={0xf97cff8c, 0x8, 'SE Linux', "1200000006c46f0006000000070000003c9f0300000000000000c208000000000000000100000000676800000000000000000000007fffffff00000008d8a613"}, 0xfe66) [ 275.737502] CPU: 1 PID: 12078 Comm: syz-executor.4 Not tainted 4.14.156-syzkaller #0 [ 275.745435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 275.755661] Call Trace: [ 275.755683] dump_stack+0x142/0x197 [ 275.755700] should_fail.cold+0x10f/0x159 [ 275.755711] ? __might_sleep+0x93/0xb0 [ 275.755726] __alloc_pages_nodemask+0x1d6/0x7a0 [ 275.755738] ? __alloc_pages_slowpath+0x2930/0x2930 [ 275.755753] ? kasan_slab_alloc+0xf/0x20 [ 275.779630] alloc_pages_current+0xec/0x1e0 [ 275.779654] pte_alloc_one+0x1a/0x100 [ 275.791809] __pte_alloc+0x2a/0x2d0 [ 275.795447] copy_page_range+0x1299/0x1de0 [ 275.799686] ? save_trace+0x290/0x290 [ 275.803514] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 275.808271] copy_process.part.0+0x4765/0x6a00 [ 275.812855] ? __cleanup_sighand+0x50/0x50 [ 275.817081] ? lock_downgrade+0x740/0x740 [ 275.821221] _do_fork+0x19e/0xce0 [ 275.824707] ? fork_idle+0x280/0x280 [ 275.828415] ? fput+0xd4/0x150 [ 275.831591] ? SyS_write+0x15e/0x230 [ 275.835295] SyS_clone+0x37/0x50 [ 275.838647] ? sys_vfork+0x30/0x30 [ 275.842182] do_syscall_64+0x1e8/0x640 [ 275.846053] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 275.850882] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 275.856056] RIP: 0033:0x45a679 [ 275.859230] RSP: 002b:00007f7ce7ebfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 275.866920] RAX: ffffffffffffffda RBX: 00007f7ce7ebfc90 RCX: 000000000045a679 [ 275.874170] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 22:37:34 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000080), 0x10) [ 275.881427] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 275.888694] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7ce7ec06d4 [ 275.895943] R13: 00000000004c0d71 R14: 00000000004d3d68 R15: 0000000000000004 [ 275.912107] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) 22:37:34 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0xfffe, 0x6c79, 0x6f, 0xfffffffe, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) [ 275.976898] SELinux: failed to load policy 22:37:34 executing program 1: socket$bt_rfcomm(0x1f, 0x3, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000080), 0x10) 22:37:35 executing program 2: syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x1, 0x0, &(0x7f00000000c0)) fchdir(r0) [ 276.041226] vhci_hcd: invalid port number 121 [ 276.059934] vhci_hcd: default hub control req: 0000 vfffe i0079 l111 22:37:35 executing program 2: openat$apparmor_task_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'veth0_to_bridge\x00'}, 0x18) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xec}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) r1 = syz_open_dev$admmidi(&(0x7f0000000200)='/dev/admmidi#\x00', 0x401, 0x10000) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f0000000300)={0x0, @capture={0x0, 0x0, {0x3f, 0x4}}}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendto$inet(r0, &(0x7f0000000640)="3232ce2774e7a3797748648df71c7b4542839e347be35844e42ad67454cd5e140e0ab73493d6b69216", 0x29, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendto$inet(r0, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r4 = fcntl$dupfd(r3, 0x0, r2) write$FUSE_ATTR(r4, &(0x7f0000000280)={0x78}, 0x78) ioctl$KDSIGACCEPT(r4, 0x4b4e, 0xfff) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) openat$vcs(0xffffffffffffff9c, 0x0, 0x2080, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000180), 0x8) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SIOCX25GFACILITIES(r5, 0x89e2, &(0x7f0000000240)) [ 276.248523] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0 22:37:35 executing program 4 (fault-call:2 fault-nth:97): r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:35 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) semctl$GETALL(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000040)=""/48) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000080), 0x10) 22:37:35 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r3, 0x29, 0x1, 0x0, &(0x7f00000000c0)) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}}}, &(0x7f0000000480)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) getgroups(0x1, &(0x7f00000002c0)=[r5]) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r6, 0x29, 0x1, 0x0, &(0x7f00000000c0)) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r7, 0x29, 0x1, 0x0, &(0x7f00000000c0)) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r8, 0x29, 0x1, 0x0, &(0x7f00000000c0)) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r10 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r11 = fcntl$dupfd(r10, 0x0, r9) write$FUSE_ATTR(r11, &(0x7f0000000280)={0x78}, 0x78) r12 = accept$packet(r11, &(0x7f0000001180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000011c0)=0x14) r13 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r13, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r13, 0x29, 0x1, 0x0, &(0x7f00000000c0)) r14 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r14, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r14, 0x29, 0x1, 0x0, &(0x7f00000000c0)) r15 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r16 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r17 = fcntl$dupfd(r16, 0x0, r15) write$FUSE_ATTR(r17, &(0x7f0000000280)={0x78}, 0x78) r18 = accept4$rose(r17, 0x0, &(0x7f0000001200), 0x2a4071e9022c690c) r19 = socket$rxrpc(0x21, 0x2, 0xa) r20 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r20, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r20, 0x29, 0x1, 0x0, &(0x7f00000000c0)) r21 = getpgrp(0xffffffffffffffff) r22 = geteuid() r23 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r23, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r23, 0x29, 0x1, 0x0, &(0x7f00000000c0)) getsockopt$sock_cred(r23, 0x1, 0x11, &(0x7f00000027c0)={0x0, 0x0, 0x0}, &(0x7f0000002800)=0xc) r25 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r25, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r25, 0x29, 0x1, 0x0, &(0x7f00000000c0)) r26 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002840)='/dev/dsp\x00', 0x20800, 0x0) r27 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000002880)='/dev/qat_adf_ctl\x00', 0xa201, 0x0) r28 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r28, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r28, 0x29, 0x1, 0x0, &(0x7f00000000c0)) r29 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r29, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r29, 0x29, 0x1, 0x0, &(0x7f00000000c0)) r30 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000028c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000029c0)=[{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000080)=[{&(0x7f0000000100)="70c6faee56dd1772553470ec3f02c1ab9c65b52036d94c145cd1d66683f0f065906f0e43681f1ccb394637a6bacc98dcc6d5390888da85508b2ce464e45a235b67b2886727a8c098a6c49a6e736d603bff28", 0x52}, {&(0x7f0000000180)="245c473dcd984283cdb1e950a761c5fa55526507f99433102305e84765ee7b98acca350de89a12f62a1130a59879f9931f83fd0770bd00e25b556765cfe6f6cab87c6fdff5cd48e45f5c40691b95d46e56066cc88b21c01eb6c9324bb7e32ad8bbbd6d951ca2110f8feadb463361868ed5261c7cb8c7f57972c88986b9a140b9e036f34aefed35dbc3d8b7bfbb092a2ac92586557631039219ed77c18af9b76b05a76c69d5a98b9ad9f40e7bef31fda4d72af79223e9bf8ed212eb028ad6c23db232c14451", 0xc5}, {&(0x7f0000000300)="f79f61fc6945334640c09422754fb623b8f41aa74055733ee20ee26c2462cf6f4dfa9a66a7c9e6963b285dee17cd172de1ce87cd1dba1bc16b0c204ef06ad3f8177b05037a305b0dec7709e092f18ea703732bbd39303396813c", 0x5a}], 0x3, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {r2, r4, r5}}}], 0x20, 0x800}, {&(0x7f0000000500)=@abs={0xb233608cdf956a15, 0x0, 0x4e21}, 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000000580)="3ec5736e1675d2e2c4ea93ebfd0490cdcecbc4c30b5f72b2e6a79c7ec0bc5ba9aa3068d8efd015e2a882b100a03615687e99aa73e9bb5134e9d07c344d61f70396b358c09e7e2b626211ee74cf19b590c281eb5c087af9a0912234637b21a6f9d2079427677ea124fe243eec10d11aa2f678947743b807844892d8ce5e26d35c304a0e661b4e6eabaef587718050bd96c003b806c786dbcc87201f488003195dd75e026b927777c6728419bbfbc3dfd22e2b64c7073d6dd586498f63ad0e2b76244f84f46c0e0d179d08c14b24fae58ab108dc5e", 0xd4}, {&(0x7f0000000680)="6a87fcb8324fc2d25f8bebc5cb20c30b1ded1b013bb9dd7241e0c3f4ca09e5b0e1c4e21f3c2a92400ae4f3a34c3c4ffdc06130383759918d4094834b76fe6976b4e7ab7230fd20a9e393d544b2cedce3cd9f86b15e055e02eec608e3d9d7ef8202f007acffff1d9c21ebbe681953c28db496ef2c5226dda330daddfcf9b8d6177a04ea8620c3487992a395bb00372385c04e992c7b4a0bcc08d7cd93a7f0b53ccb21b00baff5e159b51551ac0be661204bbbdd03d3f884507c182fde8ea52a57a27d15509685906b6481af42acfecb031409710ae636e145f8ad1e0871cd063ef60c1378082dfffd", 0xe8}, {&(0x7f0000000780)="e57c6f6eb64899bcf6ae16584702622fcd4ed9a1f50b09a78e42a889fa59c1283bea3587fef169f01b553f2868ae831e4391b3b42c9689723ac2dc81411e332d17ec3962881ac06ad4ef4dfe0bde2fb63ad0e0710d", 0x55}, {&(0x7f0000000880)="0d1aa5f8fe03f5ea366b2d73b2d73db68ceac5181bbf5fb1e580c48480f50db55d6bbb4cad810cf6a84d1f13d0f8bb52025434d5a1528ade4b0664b7078c6b4926ff0ab2b1e2f64d4c126e8bb8db6498d584255415475d6859c65fa9d56b68ea18ec37a5b576383fa583770598e44ed2b1ace60a4ad84fbfc495c63796091c38125035ef88e62f", 0x87}, {&(0x7f0000000940)="0cd18cbab36c8a20b03a212ee56d0b4b26f76c94373dd48507dcdb18ff41456ff06f2b3d1b4b0089da48a2f3c288cc283576f2feda718b55d4e9b4784c7095e99d484ca40190180f92661fba5d7a2f02701053861188399c5959863f0c868ad5082a7a9f1ba32d3586bb536f4a98f51f29a6380e634fce81fe79752f2e", 0x7d}, {&(0x7f00000009c0)="dfee89ab0826d231148a83b00cd1485e9d16de39d3f6e9dbad9777a7ab257c0644d0a16e110ef116482e8d8d4400c1b132d0f594dada8e2ce775df85462d2b8756617769bca381809098f3466642c44a7ce43fa087d6c8d2a4ce38a81da21a28a3437675f219491d4a39947b7f1b197d72fa0889ebfbd1b1ca832b3596b7d9185854eb2df8488a392dd82063c42b6aa753244b91a4398d4e6829cdc5c3a06d426eabb8ba2e63", 0xa6}, {&(0x7f0000000a80)="d3e4b2e593e936252c3a4ced27fbf56a33fdb7446f93b28a56c2aedcdd4583da2466cda72bff3b13f4eacab952279e9ffecaa1699f262dce74245df81c6f6f7d9e51335e15f857dc472187b294ac5b35830547c42f15648ddfeed1cb59fee4da467bd75efb038447d5fa925297687bbb0fe445d847bb7ee59c07482aef4b29041546fbc5eeb72fba70672be04bd1ce9889", 0x91}, {&(0x7f0000000b40)="5cedfa14baeab6ffaecadc2bf2540f3c80fe0cf96361dcf0cabe26788f9ce8319cadf2be2ebc7c5613c18eebbf8d97590323dfac2338832b5084056af8bba0722768389142f2c3dbed4f05876bd5b614e2be3dcf5fe057771f4895ecdfbb17b1103ed9320c00b0297abeb2a27d712a2d1c67ccec441720a54650f0c5464a1df28b16603cbd10881e9fd3e100b40b4d7709045aea215fdee7ef2d7a73620b953e96a80c0c9fae9d364472d7d9c12cb00e75eb4d253b085b9bcca176", 0xbb}, {&(0x7f0000000c00)="5175a384e8c707843cd2b21d86a3d776c8d091574ada80dec94356afd2ce8fbec848f4e4a0cc9479fb236ba6fbe1dbca41bf084a2c8e392219d1648ba4828b55538250c4bf5a350f83cf0d815789ecf99759b07b16a14cc84e05cd30c856a02182c4e727defa820f6a02c3fcd3b1fb3fa8ba7afa4b089c688f7340ee6e26636738bdd60967b04d9149921c67cd34f886ffa134d99b0886d7cd9e6a1a377b67f11ce44069149e47c99dfbf89fd92edf262159755ababd", 0xb6}], 0x9, 0x0, 0x0, 0x200088c0}, {&(0x7f0000000d80)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001100)=[{&(0x7f0000000e00)="642ceaa20450225cafd64e582772295b5394c6cfc0a83efc30583153d7c392db01a686f0517cb85af9ddf537bf54ec334a310c9ce45ed9aa1401537263cda888baa18fbb376444e2a09c2fbba688da89f7345c66f34730f794b65f334d4a0a46faab7c34e1e63518a0b3961a3540d30943d4bfb3687aa7a1077bbdc2177b69b6da8f33bdc66f1409f6901e94a803b10a0ed278807dc76b6fb3f4156101", 0x9d}, {&(0x7f0000000ec0)="e2954018f076f8e0e70fe5927ebe69f3846c5e2c277406c4d81779719563eaff5781b9415b8e2fed55f33cd67c68474529cf762d9de34c63780023b967b91f1768cac857bd076818e87aee039a488038220e728092f026f02e48e7e55abef4cf93e5fa35f1a2449acb4d0822ead3f6d7093ae2ff84c38df2bc8f2dc6777008153b0eab78dfff81700830085bcd9576345972d1b30db849a49e10fe9b7e0f45b179944eff28fbbf1667258a721137afa83dc6ee06c53cbf", 0xb7}, {&(0x7f0000000800)}, {&(0x7f0000000f80)="d4034dec03ca9bfd9c543c9742549677c021e307265c8ba9cc335a53a90f32e7d7b72063f9263457ed626fa98bb88f7535010c8e5157044f1eb9ef89d45962ea57d68099cd9bc075626738042cf038cda8661f92acd700203aa3871a0a29b6f70a63eb7ed9c0e17dec3460fae89b487f16bb74eb501813f1d7a5d03a1e4142a3ac319de54b513b14c4c146e5876a267c648cd013a87383d1b85270b55009614389b7a69b89472f569b57d7", 0xab}, {&(0x7f0000001040)="7902c18c29c719e59c6aca3d4d20a21aa68d050a713efa56c73feed82c39852c29bf164936f4613005ee3ab93fe1b5b78f4d1bf8f60e7f019dfb52c35908581b378ae3ab700a3c5e880b31841a5aae220e6262d513d42768f357e7996e055259a289d43056e2b2d38a433b988495c9962c5a099b22898d17ae0762272c3849e1ce86d30a01516f960b9331977770fdfd1b5d", 0x92}], 0x5, &(0x7f0000002ac0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="20000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32=r8, @ANYRES32=r12, @ANYBLOB="3000000000000000010000000100000083d6cd9540bf3b2dc8fd3c39f1262273de4d408995e3b4e3eaddf10ac81b1970a68ebf5ce1cc5633944f2a0226ecc313b922d73320b807142b1bf25f70a4b2c54970c183aec410574844472fd5385f2a6d97625be2690d4eb08f2a9261a014e0585080e30400000000000000a1cb68f872e36127d987b5701c89f8f00e66073b3e5e7b2daabd460c789b737523df6fc4c1ccad03cbe41006aee6e1b2859c206f99a1d95be5397339dd0d24755c", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r13, @ANYRES32=r0, @ANYRES32=r14, @ANYRES32=r18, @ANYRES32=r1, @ANYRES32], 0x68}, {&(0x7f00000012c0)=@file={0x2406419701346ac9, './file0\x00'}, 0x6e, &(0x7f0000002740)=[{&(0x7f0000001340)="57ba93905442bddee54866212c19746404d289243e1405abdab8a2ad582e1f04bd5d1636f968de263f9b1f762f03c60c151e951199012e1e31c66aebb41d689162f2a12c37a8c0ff81355c644a16a931f7b7", 0x52}, {&(0x7f00000013c0)="f07f039cf6067be6c21764f29cfa67adc3e2b32ef25c1665dee75b45f57178bfb1145c8235757fc4ab70f85a673b8dea4750dbecda95a9be98f34eb07ae67551295f04e7579f6a60e6e34833a66de8003bf2a3ab87b0c873c4f10cbbac7f743577ffc4278c46f3c9e90ca7267440d18ab58d590cb2cf764c82048386f40cb85ef29e094cae3267db295de3c2d3658eb5beecdb75afb1f5d693cd8f3a584908ee5aad05e2d3010549b6049bd0d39f24317ad60dc4cd77f928075d73334e23ddc44345ce04fcc6eace58e14f", 0xcb}, {&(0x7f00000014c0)="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", 0x1000}, {&(0x7f00000024c0)="d2dc8c1941a13d79f73e92db7e9ddc3de06e29d8baa433532a7b1c2340e04e5f8593935d0678771161fc2adcb16fe712b042d85bba6deaec2fa837085a2da954ab6ee0668cd32b3737c30d8e81e13b7e906da67f3f768d011bed33cbc059876b51e48f5e128ceb492098b204544c939159833049d6bbf0f5feb744ff07c80c67bc26ffd3907377f9c1943968ead13383f5b17d1a2c486be1a1e572500285ca9c9ca87e8094dff0e36211658d2bede5ae685bdae1d1afdb64de60848ca0b544c7781d97f92fd3c539bafeac98a046301aeadddc9d65e5775f27b3baccb0524cf8e16e56f4b3b1601ae06e20d635", 0xed}, {&(0x7f00000025c0)="c690716acbb37a924b6ece22f5136c58c16738d3691d6377e7d4889636142b84ab1062e71d721ad99ebbfffafc6c90b96ff2e60f88fc66581c4717b3efb1bcba73", 0x41}, {&(0x7f0000002640)="1f9edd6f4fa823febcfa8f0e22becda366b792e157947e0caa87b23c26f792caef878881a61f86d2a23ce480eec7ec8972cf407c026c80783886e50dcc03e8fe18641549015e65dda33a3aa11e4545402ea4da04f21ce792b86a9556410ad1e6dd6eab4f348d5869f54385c413f8f6a98a132c05df7b6723d26a0b271e25cef56c4528550b02e77cda73b2c112c0e69bbe34616aa6a2dbeb9d02f686f0f05592eea433e8c6a779607bc48a2eae5315c98772835b7130ce1b09c5e968f2530a7259c584276c6e8aabcc0eb7c8b878cd0ac1597afa0c2db70ac8cafd02755513a1200ff52f3e69a4", 0xe7}], 0x6, &(0x7f0000002900)=[@rights={{0x1c, 0x1, 0x1, [r19, r20, r0]}}, @cred={{0x1c, 0x1, 0x2, {r21, r22, r24}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r25, r0, r26, r27, r1, r1, r28]}}, @rights={{0x18, 0x1, 0x1, [r29, r30]}}], 0x88, 0x84}], 0x4, 0x5) r31 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r32 = fcntl$dupfd(r31, 0x0, r1) write$FUSE_ATTR(r32, &(0x7f0000000280)={0x78}, 0x78) ioctl$USBDEVFS_GET_SPEED(r32, 0x551f) r33 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r34 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r35 = fcntl$dupfd(r34, 0x0, r33) write$FUSE_ATTR(r35, &(0x7f0000000280)={0x78}, 0x78) ioctl$NBD_CLEAR_SOCK(r35, 0xab04) 22:37:35 executing program 0: syz_mount_image$ntfs(&(0x7f0000000400)='ntfs\x00', &(0x7f0000000440)='./file0\x00', 0x900, 0x0, 0x0, 0x0, &(0x7f0000000c40)={[{@show_sys_files_no='show_sys_files=no'}, {@errors_continue='errors=continue'}, {@umask={'umask'}}, {@uid={'uid'}}, {@errors_recover='errors=recover'}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@fmask={'fmask'}}]}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r2 = fcntl$dupfd(r1, 0x0, r0) write$FUSE_ATTR(r2, &(0x7f0000000280)={0x78}, 0x78) ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) 22:37:35 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) r4 = syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r8) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="99b500", @ANYRES16=r9, @ANYBLOB="0fe400000000000000000100000000000000014100000003001700000000000000006574683a726f736530000000"], 0x3}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r7, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000810}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c061008", @ANYRES16=r9, @ANYBLOB="000326bd7016fbdbdf25010000f3ff00000007410000001000187fffffff6574683a6e7230000651325fa2f14308b257bfec4fbd00764224bb9f357bd5dde047b137b162ee34768fa9e931a2e32e04a3f809ccca7b6196e5c825df043e46884d295fdf877b64bb3bec76f7375f1f087aced2deb0d6c7aba5d9b30d65fe4d0e252024ecc639629e4de4b44651a8cc1f8fc2d93869b68522166be73983e9df4cb713f2e8c972162bed4a47bd42915abff065521ab0236e2112de45f76114b08f1c9468919b3833dc3d494b9df577e2"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x400c0) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa00010}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r9, 0x1, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x4) preadv(r4, 0x0, 0x0, 0x0) r10 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmat(r10, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r11 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000500)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_G_FBUF(r11, 0x8030560a, &(0x7f0000000640)={0x20, 0x40, &(0x7f0000000540)="ef46fbc59b0f8fc05de8cc1473691c0a6b78f61fe7d7bb8289ce8bec33f2d9fd65d048beaa477110995bbb1fc09ad9ac048292500ac56d88e897002e6ad91f21bea4d597edd7a8b7db21cb4ef0037ed1365b97b23270e8b35748728ba0d21f1e5684bc7655f00fa5ebfa58d637b6ad749b92df82f55158016396d5f3cf94b24c93bd59e94e9ac1472d88b5cc551aa9dc0ffb011a7ba5ad63025a1664d8c5d1038acd8b7462dc90999f4f327609ca33015b061edca4b1e6adacdb68b88bb446b6a7fd94de91fe92db7f564bf1c3380fc734619e89e29d507767a9c342f86988c4a43af24f97d87b1292cd5123e72e3e39383b22677f", {0xfffffbff, 0x25, 0x18119a471c1d0c, 0x8, 0x8, 0x75c, 0x2, 0x8}}) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r13 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r14 = fcntl$dupfd(r13, 0x0, r12) write$FUSE_ATTR(r14, &(0x7f0000000280)={0x78}, 0x78) getpeername$unix(r14, &(0x7f0000000340), &(0x7f00000003c0)=0x6e) shmctl$IPC_STAT(r10, 0x2, &(0x7f0000000100)=""/90) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000300)=0xe8) r16 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r16, &(0x7f0000000240)={0x9, @remote={[], 0x3}}, 0x12) setreuid(0x0, 0x0) setresuid(r15, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) [ 276.610631] FAULT_INJECTION: forcing a failure. [ 276.610631] name failslab, interval 1, probability 0, space 0, times 0 [ 276.652279] CPU: 0 PID: 12126 Comm: syz-executor.4 Not tainted 4.14.156-syzkaller #0 [ 276.655931] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 [ 276.660212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 276.676036] Call Trace: [ 276.678634] dump_stack+0x142/0x197 [ 276.682270] should_fail.cold+0x10f/0x159 [ 276.686426] should_failslab+0xdb/0x130 [ 276.690408] kmem_cache_alloc+0x2d7/0x780 [ 276.694566] ptlock_alloc+0x20/0x70 [ 276.698206] pte_alloc_one+0x60/0x100 [ 276.702097] __pte_alloc+0x2a/0x2d0 [ 276.705724] copy_page_range+0x1299/0x1de0 [ 276.709960] ? save_trace+0x290/0x290 [ 276.713785] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 276.718551] copy_process.part.0+0x4765/0x6a00 [ 276.723152] ? __cleanup_sighand+0x50/0x50 [ 276.727395] ? lock_downgrade+0x740/0x740 [ 276.731557] _do_fork+0x19e/0xce0 [ 276.735019] ? fork_idle+0x280/0x280 [ 276.738735] ? fput+0xd4/0x150 [ 276.741930] ? SyS_write+0x15e/0x230 [ 276.745650] SyS_clone+0x37/0x50 [ 276.749013] ? sys_vfork+0x30/0x30 22:37:35 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x10000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000000c0)=0x1, r4, 0x0, 0x2, 0x4}}, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r5, 0x0, 0x2, &(0x7f0000000080), 0x10) 22:37:35 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x4, 0x0, 0x2, 0x20, 0x36, 0xff, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) r1 = getgid() setfsgid(r1) 22:37:35 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x200040, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x4e20, @multicast2}}, 0x0, 0x6, 0x0, "5678cc82f7890facf84a9d4e217bdb87322afd01c3fb50ab62e8d0b81da8036b2ba237d791552b04e230eb87c464c759131b628064458e47811c5cf2cdaedf34dd2022e570d185e53c3a29404d3aafb9"}, 0xd8) pread64(r0, &(0x7f0000000000)=""/168, 0xa8, 0x10000) [ 276.752552] do_syscall_64+0x1e8/0x640 [ 276.752563] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 276.752584] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 276.752594] RIP: 0033:0x45a679 [ 276.761289] RSP: 002b:00007f7ce7ebfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 276.761301] RAX: ffffffffffffffda RBX: 00007f7ce7ebfc90 RCX: 000000000045a679 [ 276.761307] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 276.761313] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 22:37:35 executing program 5: munlockall() r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x1f, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x2400, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) write$P9_RATTACH(r0, &(0x7f0000000080)={0x14, 0x69, 0x2, {0x0, 0x2, 0x40005}}, 0x14) r2 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x4000) ioctl$USBDEVFS_REAPURB(r2, 0x4008550c, &(0x7f0000000000)) [ 276.761319] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7ce7ec06d4 [ 276.761324] R13: 00000000004c0d71 R14: 00000000004d3d68 R15: 0000000000000004 22:37:35 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000080), 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r6 = fcntl$dupfd(r5, 0x0, r4) write$FUSE_ATTR(r6, &(0x7f0000000280)={0x78}, 0x78) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@gettclass={0x28, 0x2a, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xe}, {0x0, 0x10}, {0x1, 0xfff7}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r10 = fcntl$dupfd(r9, 0x0, r8) write$FUSE_ATTR(r10, &(0x7f0000000100)={0x78}, 0x78) ioctl$KDSETMODE(r10, 0x4b3a, 0x3) ioctl$NBD_SET_BLKSIZE(r7, 0xab01, 0x3) [ 276.877321] vhci_hcd: invalid port number 32 [ 276.895317] vhci_hcd: default hub control req: 0400 v0002 i0020 l54 22:37:35 executing program 5: syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r2 = fcntl$dupfd(r1, 0x0, r0) write$FUSE_ATTR(r2, &(0x7f0000000280)={0x78}, 0x78) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000000)) [ 276.935292] vhci_hcd: invalid port number 32 [ 276.953930] vhci_hcd: default hub control req: 0400 v0002 i0020 l54 22:37:36 executing program 2: openat$apparmor_task_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'veth0_to_bridge\x00'}, 0x18) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xec}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) r1 = syz_open_dev$admmidi(&(0x7f0000000200)='/dev/admmidi#\x00', 0x401, 0x10000) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f0000000300)={0x0, @capture={0x0, 0x0, {0x3f, 0x4}}}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendto$inet(r0, &(0x7f0000000640)="3232ce2774e7a3797748648df71c7b4542839e347be35844e42ad67454cd5e140e0ab73493d6b69216", 0x29, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendto$inet(r0, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r4 = fcntl$dupfd(r3, 0x0, r2) write$FUSE_ATTR(r4, &(0x7f0000000280)={0x78}, 0x78) ioctl$KDSIGACCEPT(r4, 0x4b4e, 0xfff) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) openat$vcs(0xffffffffffffff9c, 0x0, 0x2080, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000180), 0x8) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SIOCX25GFACILITIES(r5, 0x89e2, &(0x7f0000000240)) 22:37:36 executing program 4 (fault-call:2 fault-nth:98): r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:36 executing program 0: syz_mount_image$ntfs(&(0x7f0000000400)='ntfs\x00', &(0x7f0000000440)='./file0\x00', 0x900, 0x0, 0x0, 0x6af466a3f0813a46, &(0x7f0000000000)=ANY=[@ANYBLOB="73686f775f7379735f66696c65733d6e6f2c6572726f72733d636f6e74696e75652c756d61736b3d30303030303030303030303030303030303030303030302c7569643d35d24904f60d883bafb62ec776a92de062e082c42c2a", @ANYRESHEX=0x0, @ANYBLOB=',errors=recover,show_sys_files=no,mft_zone_multiplier=0x0000000000000000,mft_zone_multiplier=0x0000000000000000,fmask=00000000000000000000000,\x00']) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r2 = fcntl$dupfd(r1, 0x0, r0) write$FUSE_ATTR(r2, &(0x7f0000000280)={0x78}, 0x78) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) r3 = inotify_init() fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f0000000100)) 22:37:36 executing program 5: syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, &(0x7f0000000040)={0xc0af, 0x101}) 22:37:36 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f00000000c0)='./file0\x00', 0x7fffffff, 0x8, &(0x7f00000013c0)=[{&(0x7f0000000100)="fa19ec", 0x3, 0x2}, {&(0x7f0000000140), 0x0, 0x4}, {&(0x7f0000000180)="5c8dffe3ea38d1eef52da1ee5f067c675d6e3aba42d0f53af43b793db284a94860880f05b1fe58fb6a8045aa90785f9a4b1d92c2bf0071da8494242d183963058d220e1af7e0ed3cec304ba7c48b1919c716fc46957d8ff54044b6a43e60abdb495b77b8d56f9d299bb759a3f8ca3c6f07cf47fb9376", 0x76, 0x3}, {&(0x7f0000000200)="2182021c70231e6967e9fe5be4ebc61f63dd7fb7eb4af580d5c4a286dc251844f1c8a8b88407486985c7f5", 0x2b, 0x101}, {&(0x7f0000000240)="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", 0x1000, 0x9}, {&(0x7f0000001240)="fc4661918188b67983ba56ba651ec1ff3de2162dd491ea73ffdb6b1f6536bcac7ec46939d950c0e122c37088ed834694f9c1735e5bfef04d84bb65473674ef44d07beb88da9e243e46acd7f63153846e605c6bf7428991a39da53cfbde8163ff72c55fc31dedb8e6097a9a4379925476d0c5225ad7defbd2fda9b2b726c7bc01cb99d68cb8c22efe082ea8a38f5a7cd598432200b375eca7175812b4acaeb0ca7e2f8c", 0xa3, 0x800}, {&(0x7f0000001300)="d2e7c428bad24166265868390bf5d329a157db9fc0272983976411ec84d551eb42e99cf51e125a9fedc09d35a9286f2b2a11d917318bee597eb8ab092aefe88fa94855f07890153713085a1f37e6df05243a58b98412743f240a4615cf16f0b5323e4db8992a2f8fead7dfa2efd05123609dbe85b2cdcd", 0x77, 0x1}, {&(0x7f0000001380)="a526e1cd362742de", 0x8, 0x9}], 0x2000000, &(0x7f0000001480)={[{@resize_auto='resize=auto'}, {@jqfmt_vfsold='jqfmt=vfsold'}, {@grpjquota='grpjquota'}, {@user_xattr='user_xattr'}, {@noattrs='noattrs'}, {@errors_continue='errors=continue'}, {@hash_tea='hash=tea'}, {@jqfmt_vfsold='jqfmt=vfsold'}, {@nolargeio='nolargeio'}], [{@smackfsroot={'smackfsroot', 0x3d, 'md5sum*self$$'}}, {@fsmagic={'fsmagic', 0x3d, 0x3f}}, {@dont_hash='dont_hash'}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@smackfsroot={'smackfsroot', 0x3d, 'system'}}]}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) futex(&(0x7f0000000140), 0x4, 0x2, &(0x7f0000001580), &(0x7f00000015c0), 0x0) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000080), 0x10) 22:37:36 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x0) [ 277.371203] REISERFS warning (device loop1): super-6504 reiserfs_getopt: the option "grpjquota" requires an argument [ 277.371203] [ 277.439941] FAULT_INJECTION: forcing a failure. [ 277.439941] name failslab, interval 1, probability 0, space 0, times 0 22:37:36 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r2 = fcntl$dupfd(r1, 0x0, r0) write$FUSE_ATTR(r2, &(0x7f0000000280)={0x78}, 0x78) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r2, 0xc1205531, &(0x7f0000000140)={0x2, 0x80000000, 0xb3c, 0xbf, [], [], [], 0x2, 0xe05, 0xfffffffb, 0x9, "c36ad1b577a37635e842b4747545401a"}) syz_mount_image$ntfs(&(0x7f0000000400)='ntfs\x00', &(0x7f0000000440)='./file0\x00', 0x900, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='show_sys_files=no,errors=continue,umask=00000000000000000000000,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c6572726f72733d7265636f7665722c73686f775f7379735f66696c65733d6e6f2c6d66745f7a6f6e655f6d756c7469706c6965723d3078303030303030303030303030303030302c6d66745f7a6f6e655f6d756c7469706c6965723d3078303030303030303030303030303030302c666d61736b3d30303030303030303030303030303030303030303030302c006dfff7c2cce230ddb7ca779ee8d9f77a64640094d4fff53681fdba8a9465bf8590536e553f50383aa50657d5de103e140b34b33a025856fbc632dd8a6c44db3611248ae9cd94"]) [ 277.544565] CPU: 0 PID: 12192 Comm: syz-executor.4 Not tainted 4.14.156-syzkaller #0 [ 277.552510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 277.561904] Call Trace: [ 277.564510] dump_stack+0x142/0x197 [ 277.568161] should_fail.cold+0x10f/0x159 [ 277.572322] should_failslab+0xdb/0x130 [ 277.576300] kmem_cache_alloc+0x2d7/0x780 [ 277.580455] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 277.585240] copy_process.part.0+0x4450/0x6a00 [ 277.589843] ? __cleanup_sighand+0x50/0x50 [ 277.594102] ? lock_downgrade+0x740/0x740 [ 277.598256] _do_fork+0x19e/0xce0 [ 277.601716] ? fork_idle+0x280/0x280 [ 277.605435] ? fput+0xd4/0x150 [ 277.608627] ? SyS_write+0x15e/0x230 [ 277.612345] SyS_clone+0x37/0x50 [ 277.615708] ? sys_vfork+0x30/0x30 [ 277.619256] do_syscall_64+0x1e8/0x640 [ 277.623151] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 277.628012] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 277.633207] RIP: 0033:0x45a679 [ 277.636401] RSP: 002b:00007f7ce7ebfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 22:37:36 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000080), 0x10) inotify_init() [ 277.644111] RAX: ffffffffffffffda RBX: 00007f7ce7ebfc90 RCX: 000000000045a679 [ 277.651375] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 277.651382] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 277.651388] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7ce7ec06d4 [ 277.651394] R13: 00000000004c0d71 R14: 00000000004d3d68 R15: 0000000000000004 22:37:36 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40004000909, 0x7a1569234259cb07) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000040)={0x6}) 22:37:36 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x101001, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x1, 0x0, &(0x7f00000000c0)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r1, 0x29, 0x1, 0x0, &(0x7f00000000c0)) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r2, 0x29, 0x1, 0x0, &(0x7f00000000c0)) r3 = fcntl$dupfd(r2, 0x406, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, &(0x7f0000000080), 0x10) [ 277.835548] __ntfs_error: 31 callbacks suppressed [ 277.835557] ntfs: (device loop0): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. 22:37:36 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x1, 0x0, &(0x7f00000000c0)) r1 = accept$inet6(r0, &(0x7f0000000580)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000005c0)=0x1c) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x84280, 0x0) setsockopt$inet6_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000600)="b2251cba4a0ea5ef88daf93354c86edc3ff81ab12a4600f2ca5fab8ae2a9c0c7abbf5a517d72f2b843d270860604f9f0d425839f48e43c", 0x37) syz_open_dev$usbfs(&(0x7f0000000840)='/\x05\x00\x00\x00\x00\x00\x00\x00usb\x02\x00', 0x40000000909, 0x0) [ 277.889765] ntfs: (device loop0): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 277.932955] ntfs: (device loop0): read_ntfs_boot_sector(): Could not find a valid backup boot sector. 22:37:36 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r3, 0x29, 0x1, 0x0, &(0x7f00000000c0)) write$binfmt_elf32(r3, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x1, 0xff, 0x1, 0x6, 0x2, 0x6, 0x2, 0x77, 0x38, 0xd6, 0x800, 0x5, 0x20, 0x1, 0x81, 0xffff, 0x7f}, [{0x3, 0x5, 0x3, 0x1, 0x7, 0x9, 0x802000, 0xb1}, {0x60000000, 0x1, 0x7f, 0x8, 0x3ff, 0x20, 0x4, 0x80000000}], "0be3e4ebcd8376b0d9b3460ff1f519105557a3856fa126f39a74424ff182f6b41aa87cbc78448eb8d98e87ca493bf899c30cce3682698c3bcac0425dc192b1428bf8462cfde3fe70fcada1ac01ca1f6492b5cbf493482c7e6a127cb0db3b863fd6b5fa4d48b21d264c586ba15dd59e1a5d7560488804fafa2598b38689ad6645ab98d50a94f21c48d454a904079e2b43be36b6d7313b477619a792cd7f0a0537c0f257c6872bed9fb183a7f17f69ea9af62d5ee4ec9caf56b45c1fdcbd49832410a12ea52f73d1edbdad9926bd49662ed4b139960601d4f0a64200e423a46ec2dc3f731d1c0483", [[], [], []]}, 0x45f) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, &(0x7f0000000080), 0x10) [ 277.998270] ntfs: (device loop0): ntfs_fill_super(): Not an NTFS volume. 22:37:36 executing program 2: openat$apparmor_task_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'veth0_to_bridge\x00'}, 0x18) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xec}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) r1 = syz_open_dev$admmidi(&(0x7f0000000200)='/dev/admmidi#\x00', 0x401, 0x10000) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f0000000300)={0x0, @capture={0x0, 0x0, {0x3f, 0x4}}}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendto$inet(r0, &(0x7f0000000640)="3232ce2774e7a3797748648df71c7b4542839e347be35844e42ad67454cd5e140e0ab73493d6b69216", 0x29, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendto$inet(r0, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r4 = fcntl$dupfd(r3, 0x0, r2) write$FUSE_ATTR(r4, &(0x7f0000000280)={0x78}, 0x78) ioctl$KDSIGACCEPT(r4, 0x4b4e, 0xfff) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) openat$vcs(0xffffffffffffff9c, 0x0, 0x2080, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000180), 0x8) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SIOCX25GFACILITIES(r5, 0x89e2, &(0x7f0000000240)) 22:37:37 executing program 4 (fault-call:2 fault-nth:99): r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:37 executing program 5: syz_open_dev$usbfs(&(0x7f0000000840)='/d=\xe3B\x8d\xf6J\x8b\xedsb/00#/0\x10#\x00', 0x3fc, 0x400000) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x7fffffff) 22:37:37 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r1, 0x29, 0x1, 0x0, &(0x7f00000000c0)) r2 = fcntl$dupfd(r1, 0x406, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000080), 0x10) [ 278.127987] FAULT_INJECTION: forcing a failure. [ 278.127987] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 278.174709] CPU: 1 PID: 12235 Comm: syz-executor.4 Not tainted 4.14.156-syzkaller #0 [ 278.182653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 278.192038] Call Trace: [ 278.194643] dump_stack+0x142/0x197 [ 278.198404] should_fail.cold+0x10f/0x159 [ 278.202563] ? __might_sleep+0x93/0xb0 [ 278.206489] __alloc_pages_nodemask+0x1d6/0x7a0 [ 278.211172] ? __alloc_pages_slowpath+0x2930/0x2930 [ 278.216227] ? kasan_slab_alloc+0xf/0x20 [ 278.220305] alloc_pages_current+0xec/0x1e0 [ 278.224654] pte_alloc_one+0x1a/0x100 [ 278.228465] __pte_alloc+0x2a/0x2d0 [ 278.232099] copy_page_range+0x1299/0x1de0 [ 278.236336] ? save_trace+0x290/0x290 [ 278.240159] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 278.244918] copy_process.part.0+0x4765/0x6a00 [ 278.249524] ? __cleanup_sighand+0x50/0x50 [ 278.253777] ? lock_downgrade+0x740/0x740 [ 278.257937] _do_fork+0x19e/0xce0 [ 278.261393] ? fork_idle+0x280/0x280 [ 278.265109] ? fput+0xd4/0x150 [ 278.268314] ? SyS_write+0x15e/0x230 [ 278.272028] SyS_clone+0x37/0x50 [ 278.275405] ? sys_vfork+0x30/0x30 [ 278.278947] do_syscall_64+0x1e8/0x640 [ 278.282830] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 278.287678] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 278.292858] RIP: 0033:0x45a679 [ 278.296056] RSP: 002b:00007f7ce7ebfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 278.304194] RAX: ffffffffffffffda RBX: 00007f7ce7ebfc90 RCX: 000000000045a679 [ 278.311453] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 22:37:37 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x404200, 0x0) statx(r0, &(0x7f0000000040)='./file0\x00', 0x1000, 0x444, &(0x7f0000000080)) syz_mount_image$ntfs(&(0x7f0000000400)='ntfs\x00', &(0x7f0000000440)='./file0\x00', 0x900, 0x0, 0x0, 0x0, &(0x7f0000000c40)={[{@show_sys_files_no='show_sys_files=no'}, {@errors_continue='errors=continue'}, {@umask={'umask'}}, {@uid={'uid'}}, {@errors_recover='errors=recover'}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@fmask={'fmask'}}]}) [ 278.318716] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 278.326064] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7ce7ec06d4 [ 278.333322] R13: 00000000004c0d71 R14: 00000000004d3d68 R15: 0000000000000004 22:37:37 executing program 5: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bur/usb/00#/00#\x00', 0x40000000909, 0x0) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0xf, r0, 0x0) keyctl$assume_authority(0x10, r0) 22:37:37 executing program 5: syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x0) personality(0x8000000) [ 278.430311] ntfs: (device loop0): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 278.469402] ntfs: (device loop0): read_ntfs_boot_sector(): Primary boot sector is invalid. 22:37:37 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r2 = fcntl$dupfd(r1, 0x0, r0) write$FUSE_ATTR(r2, &(0x7f0000000280)={0x78}, 0x78) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x0, @local, 0x4e24, 0x4, 'lc\x00', 0xa, 0x6, 0x41}, 0x2c) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r6, 0x0, 0x2, &(0x7f0000000080), 0x10) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r9 = fcntl$dupfd(r8, 0x0, r7) write$FUSE_ATTR(r9, &(0x7f0000000280)={0x78}, 0x78) ioctl$SG_GET_KEEP_ORPHAN(r9, 0x2288, &(0x7f0000000000)) [ 278.489143] ntfs: (device loop0): read_ntfs_boot_sector(): Could not find a valid backup boot sector. [ 278.525283] ntfs: (device loop0): ntfs_fill_super(): Not an NTFS volume. 22:37:37 executing program 5: syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) mmap$usbmon(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x810, 0xffffffffffffffff, 0x7) r2 = fcntl$dupfd(r1, 0x0, r0) write$FUSE_ATTR(r2, &(0x7f0000000280)={0x78}, 0x78) ioctl$SIOCRSGCAUSE(r2, 0x89e0, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000000)={0x68}, 0x1) 22:37:37 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000040)) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000080), 0x10) [ 278.621918] ntfs: (device loop0): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 278.650127] ntfs: (device loop0): read_ntfs_boot_sector(): Primary boot sector is invalid. 22:37:37 executing program 0: syz_mount_image$ntfs(&(0x7f0000000400)='ntfs\x00', &(0x7f0000000440)='./file0\x00', 0x900, 0x0, 0x0, 0x0, &(0x7f0000000c40)={[{@show_sys_files_no='show_sys_files=no'}, {@errors_continue='errors=continue'}, {@umask={'umask'}}, {@uid={'uid'}}, {@errors_recover='errors=recover'}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@fmask={'fmask'}}]}) r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000000)={0x9, @remote}, &(0x7f0000000040)=0x12, 0x80000) recvmsg(r0, &(0x7f00000002c0)={&(0x7f0000000080)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000100)=""/105, 0x69}], 0x1, &(0x7f00000001c0)=""/210, 0xd2}, 0x2) 22:37:37 executing program 5: syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rfcomm\x00') preadv(r0, &(0x7f0000003740)=[{&(0x7f00000016c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'batadv0\x00'}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000140)) sendmmsg(r1, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000600)="cb", 0x1ca}], 0x1}}], 0x1cb, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) r3 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0xf, r3, 0x0) add_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'\x00', 0x3}, &(0x7f0000000080)="8ee37ec26704131761741a831abcea7304ab37d897f504238327fe4e381aa43ad8a64a56a6cf628ab8c9eeb200699dd4d7439fa71509a14a71a716f0cc4cb664d846c7545c40e3b2c50b245f6251a6fa93583ef7ee4a059558aa1ea00b758cd6831f00000051d24a8059a49defda36b7e4c793619739d1120ac71568", 0x7c, r3) 22:37:38 executing program 2: openat$apparmor_task_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'veth0_to_bridge\x00'}, 0x18) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xec}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) r1 = syz_open_dev$admmidi(&(0x7f0000000200)='/dev/admmidi#\x00', 0x401, 0x10000) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f0000000300)={0x0, @capture={0x0, 0x0, {0x3f, 0x4}}}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendto$inet(r0, &(0x7f0000000640)="3232ce2774e7a3797748648df71c7b4542839e347be35844e42ad67454cd5e140e0ab73493d6b69216", 0x29, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendto$inet(r0, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r4 = fcntl$dupfd(r3, 0x0, r2) write$FUSE_ATTR(r4, &(0x7f0000000280)={0x78}, 0x78) ioctl$KDSIGACCEPT(r4, 0x4b4e, 0xfff) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) openat$vcs(0xffffffffffffff9c, 0x0, 0x2080, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000180), 0x8) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SIOCX25GFACILITIES(r5, 0x89e2, &(0x7f0000000240)) 22:37:38 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) flock(r3, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r7 = fcntl$dupfd(r6, 0x0, r5) write$FUSE_ATTR(r7, &(0x7f0000000280)={0x78}, 0x78) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f0000000100)='/dev/fuse\x00') setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, &(0x7f0000000080), 0x10) 22:37:38 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x8, 0x8012, r0, 0xffffd000) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x82002, 0x0) ioctl$VIDIOC_OVERLAY(r1, 0x4004560e, &(0x7f0000000080)=0x7fff) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:38 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000040)={'syz0', "743aae97a54e1af1194941f78ca4b21d693e4f973ad5296e11e26dab6aadad7a3440832d21a35dbdd0f0242ce0e2ccce20f739c78e739e6dccbcdaf9e47d15bc332b77c2f6bbedba52c7cb88862f7dd9ef8c9b95b886a9971cfe157e0cac03ab26e6c7ad37bebc2a5865d536b7a9dc191b4a0dcc9e6b5b6814176d0e3028f3c9f20dbca50b62332625cf2431d2be4a2470186dd86b4d2591bf4a39c8f144dbe687e0c8052bb04796d983f1468e64fd5bd37efc49ef748c353aa570b7c47721341c7226f0196da9f01556800e8aedf826857dd877cb8f9b8b72191021d51c31d99179c054"}, 0xe8) 22:37:38 executing program 5: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) select(0x40, &(0x7f0000000000)={0x100, 0x2, 0x1f, 0x1, 0x4, 0x1, 0x7fffffff, 0x21}, &(0x7f0000000040)={0x3, 0x1, 0x2, 0x486, 0x0, 0x5, 0x8001, 0x2bdc00000}, &(0x7f0000000080)={0x1, 0x9, 0x468, 0x9, 0x0, 0x0, 0x800, 0x10001}, &(0x7f0000000100)={r0, r1/1000+10000}) syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x0) 22:37:38 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f00000000c0)={&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000280)=""/11, 0xfffffeff}) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x20000, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f0000000240)={0xe0, &(0x7f0000000140)="6cbddde93cbbc1a305ab33a9fce6d6d864845c0d3d498df368e0faa06ff87b904235412f2ff0b6b177f18bffcf4f3948fef7b6f6318b7716fdc1035a9feeb6a67721fe496391fb2ff244073551499c902fd357157b99b1f7378dd7ea23b78d96f77643ee59904ea07672e6ba83458eedb1bc20a827e23d0f91542620dbc2dc2838551f244b63e06f4fbe3798f6d5de26d420683443129026d6c91f970cebf3ce3679f67dbd9e9b537acf28fbeb3e47aac75480a99857bc978713feccc8a216f182b2282275dbcc75349c8d18cdccae68e4d6a0a4db4b3feae7aca461f3b47ddf"}) 22:37:38 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) r4 = syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r8) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="99b500", @ANYRES16=r9, @ANYBLOB="0fe400000000000000000100000000000000014100000003001700000000000000006574683a726f736530000000"], 0x3}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r7, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000810}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c061008", @ANYRES16=r9, @ANYBLOB="000326bd7016fbdbdf25010000f3ff00000007410000001000187fffffff6574683a6e7230000651325fa2f14308b257bfec4fbd00764224bb9f357bd5dde047b137b162ee34768fa9e931a2e32e04a3f809ccca7b6196e5c825df043e46884d295fdf877b64bb3bec76f7375f1f087aced2deb0d6c7aba5d9b30d65fe4d0e252024ecc639629e4de4b44651a8cc1f8fc2d93869b68522166be73983e9df4cb713f2e8c972162bed4a47bd42915abff065521ab0236e2112de45f76114b08f1c9468919b3833dc3d494b9df577e2"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x400c0) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa00010}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r9, 0x1, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x4) preadv(r4, 0x0, 0x0, 0x0) r10 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmat(r10, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r11 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000500)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_G_FBUF(r11, 0x8030560a, &(0x7f0000000640)={0x20, 0x40, &(0x7f0000000540)="ef46fbc59b0f8fc05de8cc1473691c0a6b78f61fe7d7bb8289ce8bec33f2d9fd65d048beaa477110995bbb1fc09ad9ac048292500ac56d88e897002e6ad91f21bea4d597edd7a8b7db21cb4ef0037ed1365b97b23270e8b35748728ba0d21f1e5684bc7655f00fa5ebfa58d637b6ad749b92df82f55158016396d5f3cf94b24c93bd59e94e9ac1472d88b5cc551aa9dc0ffb011a7ba5ad63025a1664d8c5d1038acd8b7462dc90999f4f327609ca33015b061edca4b1e6adacdb68b88bb446b6a7fd94de91fe92db7f564bf1c3380fc734619e89e29d507767a9c342f86988c4a43af24f97d87b1292cd5123e72e3e39383b22677f", {0xfffffbff, 0x25, 0x18119a471c1d0c, 0x8, 0x8, 0x75c, 0x2, 0x8}}) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r13 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r14 = fcntl$dupfd(r13, 0x0, r12) write$FUSE_ATTR(r14, &(0x7f0000000280)={0x78}, 0x78) getpeername$unix(r14, &(0x7f0000000340), &(0x7f00000003c0)=0x6e) shmctl$IPC_STAT(r10, 0x2, &(0x7f0000000100)=""/90) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000300)=0xe8) r16 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r16, &(0x7f0000000240)={0x9, @remote={[], 0x3}}, 0x12) setreuid(0x0, 0x0) setresuid(r15, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:37:38 executing program 5: syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x1, 0x0, &(0x7f00000000c0)) r1 = dup3(r0, 0xffffffffffffffff, 0x80000) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r2, 0x29, 0x1, 0x0, &(0x7f00000000c0)) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000000)={r2}) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) ioctl$TIOCCBRK(r3, 0x5428) 22:37:38 executing program 4: r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r1, 0x29, 0x1, 0x0, &(0x7f00000000c0)) getsockopt$inet6_mreq(r1, 0x29, 0x23, &(0x7f0000000140)={@initdev, 0x0}, &(0x7f0000000180)=0x14) connect$packet(r0, &(0x7f00000001c0)={0x11, 0x19, r2, 0x1, 0xf8, 0x6, @dev={[], 0x23}}, 0x14) r3 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r3, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 279.669439] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 22:37:38 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x5, 0x9cfdc3a79cbee370) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r1, 0x29, 0x1, 0x0, &(0x7f00000000c0)) r2 = fcntl$getown(r1, 0x9) fcntl$setown(r0, 0x8, r2) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r5 = fcntl$dupfd(r4, 0x0, r3) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x13, 0xffffffffffffffff, 0x4) write$FUSE_ATTR(r5, &(0x7f0000000280)={0x78}, 0x78) r6 = semget$private(0x0, 0xa2c928c6c78c9708, 0x400) semctl$SEM_INFO(r6, 0x578551dfd18f1ef9, 0x13, &(0x7f0000000180)=""/124) ioctl$SG_GET_LOW_DMA(r5, 0x227a, &(0x7f0000000080)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x3bf, @remote, 0xd023}, @in6={0xa, 0x4e20, 0x10000, @loopback}], 0x38) fsetxattr$security_capability(r3, &(0x7f0000000100)='security.capability\x00', &(0x7f0000000140)=@v1={0x1000000, [{0x9, 0x5}]}, 0xc, 0x1) socket(0x1, 0x9fee71e83c71b2e8, 0xff) syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x0) 22:37:38 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) r4 = syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r8) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="99b500", @ANYRES16=r9, @ANYBLOB="0fe400000000000000000100000000000000014100000003001700000000000000006574683a726f736530000000"], 0x3}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r7, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000810}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c061008", @ANYRES16=r9, @ANYBLOB="000326bd7016fbdbdf25010000f3ff00000007410000001000187fffffff6574683a6e7230000651325fa2f14308b257bfec4fbd00764224bb9f357bd5dde047b137b162ee34768fa9e931a2e32e04a3f809ccca7b6196e5c825df043e46884d295fdf877b64bb3bec76f7375f1f087aced2deb0d6c7aba5d9b30d65fe4d0e252024ecc639629e4de4b44651a8cc1f8fc2d93869b68522166be73983e9df4cb713f2e8c972162bed4a47bd42915abff065521ab0236e2112de45f76114b08f1c9468919b3833dc3d494b9df577e2"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x400c0) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa00010}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r9, 0x1, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x4) preadv(r4, 0x0, 0x0, 0x0) r10 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmat(r10, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r11 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000500)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_G_FBUF(r11, 0x8030560a, &(0x7f0000000640)={0x20, 0x40, &(0x7f0000000540)="ef46fbc59b0f8fc05de8cc1473691c0a6b78f61fe7d7bb8289ce8bec33f2d9fd65d048beaa477110995bbb1fc09ad9ac048292500ac56d88e897002e6ad91f21bea4d597edd7a8b7db21cb4ef0037ed1365b97b23270e8b35748728ba0d21f1e5684bc7655f00fa5ebfa58d637b6ad749b92df82f55158016396d5f3cf94b24c93bd59e94e9ac1472d88b5cc551aa9dc0ffb011a7ba5ad63025a1664d8c5d1038acd8b7462dc90999f4f327609ca33015b061edca4b1e6adacdb68b88bb446b6a7fd94de91fe92db7f564bf1c3380fc734619e89e29d507767a9c342f86988c4a43af24f97d87b1292cd5123e72e3e39383b22677f", {0xfffffbff, 0x25, 0x18119a471c1d0c, 0x8, 0x8, 0x75c, 0x2, 0x8}}) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r13 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r14 = fcntl$dupfd(r13, 0x0, r12) write$FUSE_ATTR(r14, &(0x7f0000000280)={0x78}, 0x78) getpeername$unix(r14, &(0x7f0000000340), &(0x7f00000003c0)=0x6e) shmctl$IPC_STAT(r10, 0x2, &(0x7f0000000100)=""/90) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000300)=0xe8) r16 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r16, &(0x7f0000000240)={0x9, @remote={[], 0x3}}, 0x12) setreuid(0x0, 0x0) setresuid(r15, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:37:38 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x1, 0x8012, r0, 0x1000) clone(0x0, 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) 22:37:38 executing program 5: syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x200, 0x0) [ 279.876021] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 22:37:38 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) r4 = syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r8) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="99b500", @ANYRES16=r9, @ANYBLOB="0fe400000000000000000100000000000000014100000003001700000000000000006574683a726f736530000000"], 0x3}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r7, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000810}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c061008", @ANYRES16=r9, @ANYBLOB="000326bd7016fbdbdf25010000f3ff00000007410000001000187fffffff6574683a6e7230000651325fa2f14308b257bfec4fbd00764224bb9f357bd5dde047b137b162ee34768fa9e931a2e32e04a3f809ccca7b6196e5c825df043e46884d295fdf877b64bb3bec76f7375f1f087aced2deb0d6c7aba5d9b30d65fe4d0e252024ecc639629e4de4b44651a8cc1f8fc2d93869b68522166be73983e9df4cb713f2e8c972162bed4a47bd42915abff065521ab0236e2112de45f76114b08f1c9468919b3833dc3d494b9df577e2"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x400c0) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa00010}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r9, 0x1, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x4) preadv(r4, 0x0, 0x0, 0x0) r10 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmat(r10, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r11 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000500)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_G_FBUF(r11, 0x8030560a, &(0x7f0000000640)={0x20, 0x40, &(0x7f0000000540)="ef46fbc59b0f8fc05de8cc1473691c0a6b78f61fe7d7bb8289ce8bec33f2d9fd65d048beaa477110995bbb1fc09ad9ac048292500ac56d88e897002e6ad91f21bea4d597edd7a8b7db21cb4ef0037ed1365b97b23270e8b35748728ba0d21f1e5684bc7655f00fa5ebfa58d637b6ad749b92df82f55158016396d5f3cf94b24c93bd59e94e9ac1472d88b5cc551aa9dc0ffb011a7ba5ad63025a1664d8c5d1038acd8b7462dc90999f4f327609ca33015b061edca4b1e6adacdb68b88bb446b6a7fd94de91fe92db7f564bf1c3380fc734619e89e29d507767a9c342f86988c4a43af24f97d87b1292cd5123e72e3e39383b22677f", {0xfffffbff, 0x25, 0x18119a471c1d0c, 0x8, 0x8, 0x75c, 0x2, 0x8}}) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r13 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r14 = fcntl$dupfd(r13, 0x0, r12) write$FUSE_ATTR(r14, &(0x7f0000000280)={0x78}, 0x78) getpeername$unix(r14, &(0x7f0000000340), &(0x7f00000003c0)=0x6e) shmctl$IPC_STAT(r10, 0x2, &(0x7f0000000100)=""/90) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000300)=0xe8) r16 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r16, &(0x7f0000000240)={0x9, @remote={[], 0x3}}, 0x12) setreuid(0x0, 0x0) setresuid(r15, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:37:39 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r2 = fcntl$dupfd(r1, 0x0, r0) write$FUSE_ATTR(r2, &(0x7f0000000280)={0x78}, 0x78) ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f0000000000)) syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x0) 22:37:39 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) r4 = syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r8) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="99b500", @ANYRES16=r9, @ANYBLOB="0fe400000000000000000100000000000000014100000003001700000000000000006574683a726f736530000000"], 0x3}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r7, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000810}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c061008", @ANYRES16=r9, @ANYBLOB="000326bd7016fbdbdf25010000f3ff00000007410000001000187fffffff6574683a6e7230000651325fa2f14308b257bfec4fbd00764224bb9f357bd5dde047b137b162ee34768fa9e931a2e32e04a3f809ccca7b6196e5c825df043e46884d295fdf877b64bb3bec76f7375f1f087aced2deb0d6c7aba5d9b30d65fe4d0e252024ecc639629e4de4b44651a8cc1f8fc2d93869b68522166be73983e9df4cb713f2e8c972162bed4a47bd42915abff065521ab0236e2112de45f76114b08f1c9468919b3833dc3d494b9df577e2"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x400c0) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa00010}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r9, 0x1, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x4) preadv(r4, 0x0, 0x0, 0x0) r10 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmat(r10, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r11 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000500)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_G_FBUF(r11, 0x8030560a, &(0x7f0000000640)={0x20, 0x40, &(0x7f0000000540)="ef46fbc59b0f8fc05de8cc1473691c0a6b78f61fe7d7bb8289ce8bec33f2d9fd65d048beaa477110995bbb1fc09ad9ac048292500ac56d88e897002e6ad91f21bea4d597edd7a8b7db21cb4ef0037ed1365b97b23270e8b35748728ba0d21f1e5684bc7655f00fa5ebfa58d637b6ad749b92df82f55158016396d5f3cf94b24c93bd59e94e9ac1472d88b5cc551aa9dc0ffb011a7ba5ad63025a1664d8c5d1038acd8b7462dc90999f4f327609ca33015b061edca4b1e6adacdb68b88bb446b6a7fd94de91fe92db7f564bf1c3380fc734619e89e29d507767a9c342f86988c4a43af24f97d87b1292cd5123e72e3e39383b22677f", {0xfffffbff, 0x25, 0x18119a471c1d0c, 0x8, 0x8, 0x75c, 0x2, 0x8}}) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r13 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r14 = fcntl$dupfd(r13, 0x0, r12) write$FUSE_ATTR(r14, &(0x7f0000000280)={0x78}, 0x78) getpeername$unix(r14, &(0x7f0000000340), &(0x7f00000003c0)=0x6e) shmctl$IPC_STAT(r10, 0x2, &(0x7f0000000100)=""/90) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in=@empty}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000300)=0xe8) r15 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r15, &(0x7f0000000240)={0x9, @remote={[], 0x3}}, 0x12) setreuid(0x0, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) [ 280.076216] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 22:37:39 executing program 4: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x40, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r6 = fcntl$dupfd(r5, 0x0, r4) write$FUSE_ATTR(r6, &(0x7f0000000280)={0x78}, 0x78) ioctl$VIDIOC_TRY_ENCODER_CMD(r6, 0xc028564e, &(0x7f0000000200)={0x5d98b4b7bbad72cb, 0x0, [0x2bec5f64, 0x6, 0x80, 0x0, 0x2, 0x0, 0xf2a, 0x101]}) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={0x0, 0x7fffffff}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, [], 0x2b}, 0x4}}, 0x6, 0x2, 0x4, 0x3f, 0x10}, &(0x7f0000000140)=0x98) ioctl$sock_bt_hci(r4, 0x400448e2, &(0x7f0000000300)="2c765632a6d0ce266e6e3d5fb6c3ce0210b8b2bc077de9a834ce2dc44a18b4080be53c5cd8987c924527906b2d49e1402065172bdf56846d54358fc5a91705a62fa5fc660e2b5a50336d21ef0f1b75b8f26710c5c5b7fc3e400a77a56e042a8030f613605b37b12e8f3cf48e7d0f4fa695e31d531fdff5ac1b1663836fd2ac1d787b88081ae2d7da89025aeaf7f6fcaf809cf2") setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000180)={r7, 0x20}, 0x8) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r10 = fcntl$dupfd(r9, 0x0, r8) write$FUSE_ATTR(r10, &(0x7f0000000280)={0x78}, 0x78) connect$rds(r10, &(0x7f0000000240)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r11 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r11, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 280.185872] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 22:37:39 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xa, 0x3, 0x6, 0x100000, r1}) 22:37:39 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) r4 = syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r8) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="99b500", @ANYRES16=r9, @ANYBLOB="0fe400000000000000000100000000000000014100000003001700000000000000006574683a726f736530000000"], 0x3}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r7, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000810}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c061008", @ANYRES16=r9, @ANYBLOB="000326bd7016fbdbdf25010000f3ff00000007410000001000187fffffff6574683a6e7230000651325fa2f14308b257bfec4fbd00764224bb9f357bd5dde047b137b162ee34768fa9e931a2e32e04a3f809ccca7b6196e5c825df043e46884d295fdf877b64bb3bec76f7375f1f087aced2deb0d6c7aba5d9b30d65fe4d0e252024ecc639629e4de4b44651a8cc1f8fc2d93869b68522166be73983e9df4cb713f2e8c972162bed4a47bd42915abff065521ab0236e2112de45f76114b08f1c9468919b3833dc3d494b9df577e2"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x400c0) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa00010}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r9, 0x1, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x4) preadv(r4, 0x0, 0x0, 0x0) r10 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmat(r10, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r11 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000500)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_G_FBUF(r11, 0x8030560a, &(0x7f0000000640)={0x20, 0x40, &(0x7f0000000540)="ef46fbc59b0f8fc05de8cc1473691c0a6b78f61fe7d7bb8289ce8bec33f2d9fd65d048beaa477110995bbb1fc09ad9ac048292500ac56d88e897002e6ad91f21bea4d597edd7a8b7db21cb4ef0037ed1365b97b23270e8b35748728ba0d21f1e5684bc7655f00fa5ebfa58d637b6ad749b92df82f55158016396d5f3cf94b24c93bd59e94e9ac1472d88b5cc551aa9dc0ffb011a7ba5ad63025a1664d8c5d1038acd8b7462dc90999f4f327609ca33015b061edca4b1e6adacdb68b88bb446b6a7fd94de91fe92db7f564bf1c3380fc734619e89e29d507767a9c342f86988c4a43af24f97d87b1292cd5123e72e3e39383b22677f", {0xfffffbff, 0x25, 0x18119a471c1d0c, 0x8, 0x8, 0x75c, 0x2, 0x8}}) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r13 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r14 = fcntl$dupfd(r13, 0x0, r12) write$FUSE_ATTR(r14, &(0x7f0000000280)={0x78}, 0x78) getpeername$unix(r14, &(0x7f0000000340), &(0x7f00000003c0)=0x6e) shmctl$IPC_STAT(r10, 0x2, &(0x7f0000000100)=""/90) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in=@empty}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000300)=0xe8) r15 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r15, &(0x7f0000000240)={0x9, @remote={[], 0x3}}, 0x12) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:37:39 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0xa2903) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x400, 0x0) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000080)=0x2) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 280.369757] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 22:37:39 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) r4 = syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r8) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="99b500", @ANYRES16=r9, @ANYBLOB="0fe400000000000000000100000000000000014100000003001700000000000000006574683a726f736530000000"], 0x3}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r7, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000810}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c061008", @ANYRES16=r9, @ANYBLOB="000326bd7016fbdbdf25010000f3ff00000007410000001000187fffffff6574683a6e7230000651325fa2f14308b257bfec4fbd00764224bb9f357bd5dde047b137b162ee34768fa9e931a2e32e04a3f809ccca7b6196e5c825df043e46884d295fdf877b64bb3bec76f7375f1f087aced2deb0d6c7aba5d9b30d65fe4d0e252024ecc639629e4de4b44651a8cc1f8fc2d93869b68522166be73983e9df4cb713f2e8c972162bed4a47bd42915abff065521ab0236e2112de45f76114b08f1c9468919b3833dc3d494b9df577e2"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x400c0) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa00010}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r9, 0x1, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x4) preadv(r4, 0x0, 0x0, 0x0) r10 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmat(r10, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r11 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000500)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_G_FBUF(r11, 0x8030560a, &(0x7f0000000640)={0x20, 0x40, &(0x7f0000000540)="ef46fbc59b0f8fc05de8cc1473691c0a6b78f61fe7d7bb8289ce8bec33f2d9fd65d048beaa477110995bbb1fc09ad9ac048292500ac56d88e897002e6ad91f21bea4d597edd7a8b7db21cb4ef0037ed1365b97b23270e8b35748728ba0d21f1e5684bc7655f00fa5ebfa58d637b6ad749b92df82f55158016396d5f3cf94b24c93bd59e94e9ac1472d88b5cc551aa9dc0ffb011a7ba5ad63025a1664d8c5d1038acd8b7462dc90999f4f327609ca33015b061edca4b1e6adacdb68b88bb446b6a7fd94de91fe92db7f564bf1c3380fc734619e89e29d507767a9c342f86988c4a43af24f97d87b1292cd5123e72e3e39383b22677f", {0xfffffbff, 0x25, 0x18119a471c1d0c, 0x8, 0x8, 0x75c, 0x2, 0x8}}) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r13 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r14 = fcntl$dupfd(r13, 0x0, r12) write$FUSE_ATTR(r14, &(0x7f0000000280)={0x78}, 0x78) getpeername$unix(r14, &(0x7f0000000340), &(0x7f00000003c0)=0x6e) shmctl$IPC_STAT(r10, 0x2, &(0x7f0000000100)=""/90) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in=@empty}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000300)=0xe8) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:37:39 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000380)=0x8c010a) [ 280.491220] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 22:37:39 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) r4 = syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r8) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="99b500", @ANYRES16=r9, @ANYBLOB="0fe400000000000000000100000000000000014100000003001700000000000000006574683a726f736530000000"], 0x3}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r7, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000810}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c061008", @ANYRES16=r9, @ANYBLOB="000326bd7016fbdbdf25010000f3ff00000007410000001000187fffffff6574683a6e7230000651325fa2f14308b257bfec4fbd00764224bb9f357bd5dde047b137b162ee34768fa9e931a2e32e04a3f809ccca7b6196e5c825df043e46884d295fdf877b64bb3bec76f7375f1f087aced2deb0d6c7aba5d9b30d65fe4d0e252024ecc639629e4de4b44651a8cc1f8fc2d93869b68522166be73983e9df4cb713f2e8c972162bed4a47bd42915abff065521ab0236e2112de45f76114b08f1c9468919b3833dc3d494b9df577e2"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x400c0) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa00010}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r9, 0x1, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x4) preadv(r4, 0x0, 0x0, 0x0) r10 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmat(r10, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r11 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000500)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_G_FBUF(r11, 0x8030560a, &(0x7f0000000640)={0x20, 0x40, &(0x7f0000000540)="ef46fbc59b0f8fc05de8cc1473691c0a6b78f61fe7d7bb8289ce8bec33f2d9fd65d048beaa477110995bbb1fc09ad9ac048292500ac56d88e897002e6ad91f21bea4d597edd7a8b7db21cb4ef0037ed1365b97b23270e8b35748728ba0d21f1e5684bc7655f00fa5ebfa58d637b6ad749b92df82f55158016396d5f3cf94b24c93bd59e94e9ac1472d88b5cc551aa9dc0ffb011a7ba5ad63025a1664d8c5d1038acd8b7462dc90999f4f327609ca33015b061edca4b1e6adacdb68b88bb446b6a7fd94de91fe92db7f564bf1c3380fc734619e89e29d507767a9c342f86988c4a43af24f97d87b1292cd5123e72e3e39383b22677f", {0xfffffbff, 0x25, 0x18119a471c1d0c, 0x8, 0x8, 0x75c, 0x2, 0x8}}) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r13 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r14 = fcntl$dupfd(r13, 0x0, r12) write$FUSE_ATTR(r14, &(0x7f0000000280)={0x78}, 0x78) getpeername$unix(r14, &(0x7f0000000340), &(0x7f00000003c0)=0x6e) shmctl$IPC_STAT(r10, 0x2, &(0x7f0000000100)=""/90) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in=@empty}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000300)=0xe8) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:37:39 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r2, 0x29, 0x1, 0x0, &(0x7f00000000c0)) r3 = fcntl$dupfd(r1, 0x0, r0) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x101000, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r7 = fcntl$dupfd(r6, 0x0, r5) write$FUSE_ATTR(r7, &(0x7f0000000280)={0x78}, 0x78) ioctl$VIDIOC_S_CROP(r7, 0x4014563c, &(0x7f0000000040)={0x8, {0x3f, 0x7, 0xa1c, 0x7}}) ioctl$KVM_GET_IRQCHIP(r4, 0xc208ae62, &(0x7f0000000500)={0x0, 0x0, @ioapic}) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x10002, 0x0) 22:37:39 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x20060000, 0x0, 0x0, 0x0, 0x0) [ 280.667980] Unknown ioctl -1039618462 [ 280.683801] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 [ 280.686050] Unknown ioctl -1039618462 22:37:39 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) r4 = syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r8) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="99b500", @ANYRES16=r9, @ANYBLOB="0fe400000000000000000100000000000000014100000003001700000000000000006574683a726f736530000000"], 0x3}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r7, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000810}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c061008", @ANYRES16=r9, @ANYBLOB="000326bd7016fbdbdf25010000f3ff00000007410000001000187fffffff6574683a6e7230000651325fa2f14308b257bfec4fbd00764224bb9f357bd5dde047b137b162ee34768fa9e931a2e32e04a3f809ccca7b6196e5c825df043e46884d295fdf877b64bb3bec76f7375f1f087aced2deb0d6c7aba5d9b30d65fe4d0e252024ecc639629e4de4b44651a8cc1f8fc2d93869b68522166be73983e9df4cb713f2e8c972162bed4a47bd42915abff065521ab0236e2112de45f76114b08f1c9468919b3833dc3d494b9df577e2"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x400c0) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa00010}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r9, 0x1, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x4) preadv(r4, 0x0, 0x0, 0x0) r10 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmat(r10, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r11 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000500)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_G_FBUF(r11, 0x8030560a, &(0x7f0000000640)={0x20, 0x40, &(0x7f0000000540)="ef46fbc59b0f8fc05de8cc1473691c0a6b78f61fe7d7bb8289ce8bec33f2d9fd65d048beaa477110995bbb1fc09ad9ac048292500ac56d88e897002e6ad91f21bea4d597edd7a8b7db21cb4ef0037ed1365b97b23270e8b35748728ba0d21f1e5684bc7655f00fa5ebfa58d637b6ad749b92df82f55158016396d5f3cf94b24c93bd59e94e9ac1472d88b5cc551aa9dc0ffb011a7ba5ad63025a1664d8c5d1038acd8b7462dc90999f4f327609ca33015b061edca4b1e6adacdb68b88bb446b6a7fd94de91fe92db7f564bf1c3380fc734619e89e29d507767a9c342f86988c4a43af24f97d87b1292cd5123e72e3e39383b22677f", {0xfffffbff, 0x25, 0x18119a471c1d0c, 0x8, 0x8, 0x75c, 0x2, 0x8}}) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r13 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r14 = fcntl$dupfd(r13, 0x0, r12) write$FUSE_ATTR(r14, &(0x7f0000000280)={0x78}, 0x78) getpeername$unix(r14, &(0x7f0000000340), &(0x7f00000003c0)=0x6e) shmctl$IPC_STAT(r10, 0x2, &(0x7f0000000100)=""/90) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:37:39 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) recvfrom$packet(r3, &(0x7f0000000080), 0x0, 0x140, 0x0, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)=""/198, 0xc6}, {&(0x7f0000000300)=""/84, 0x54}, {&(0x7f0000000380)=""/66, 0x42}, {&(0x7f0000000400)=""/206, 0xce}], 0x4, &(0x7f0000000b00)=""/102, 0x66}, 0x80000000}, {{&(0x7f0000000580)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000600)=""/173, 0xad}, {&(0x7f00000006c0)=""/154, 0x9a}, {&(0x7f0000000880)=""/239, 0xef}, {&(0x7f0000000780)=""/108, 0x6c}], 0x4, &(0x7f0000000980)=""/249, 0xf9}, 0x7}], 0x2, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000)=0x649, &(0x7f0000000040)=0x2) syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x0) 22:37:39 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SVE_SET_VL(0x32, 0x39d49) [ 280.833629] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 22:37:39 executing program 5: syz_open_dev$usbfs(&(0x7f0000000000)='/des/usb/00#J00#\x00', 0x40000000909, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000040)) 22:37:39 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x100, 0x4000) write$P9_RREAD(r1, &(0x7f0000000080)={0x31, 0x75, 0x2, {0x26, "b3dcef360ab366ef0f919c4041e987cf83cc4dc4b1d3834fcf56a6499ef38cbdb5bffc3517ea"}}, 0x31) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:39 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000080), 0x10) r4 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x597, 0x913a4e4833d1303) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, 0x0, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x143042, 0x0) fcntl$lock(r6, 0x25, &(0x7f0000027000)) ftruncate(r6, 0x0) recvfrom$ax25(r6, &(0x7f0000000280)=""/97, 0x61, 0x10000, &(0x7f0000000300)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x3}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r7 = open(&(0x7f0000000000)='./bus\x00', 0x143042, 0x0) r8 = syz_genetlink_get_family_id$team(&(0x7f00000003c0)='team\x00') r9 = open(&(0x7f0000000000)='./bus\x00', 0x143042, 0x0) fcntl$lock(r9, 0x25, &(0x7f0000027000)) ftruncate(r9, 0x0) getsockopt$inet6_mreq(r9, 0x29, 0x14, &(0x7f0000000400)={@dev, 0x0}, &(0x7f0000000440)=0x14) r11 = socket(0x11, 0x800000003, 0x0) bind(r11, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r11, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000002400e577a885ddb05cc582f24186cf0d", @ANYRES32=r12, @ANYBLOB="00000000ffffffff0000000008000100687462"], 0x3}}, 0x0) getsockname$packet(r6, &(0x7f0000006d80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000006dc0)=0x14) r14 = socket(0x11, 0x800000003, 0x0) bind(r14, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r14, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000002400e577a885ddb05cc582f24186cf0d", @ANYRES32=r15, @ANYBLOB="00000000ffffffff0000000008000100687462"], 0x3}}, 0x0) r16 = socket(0x11, 0x800000003, 0x0) bind(r16, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r16, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000002400e577a885ddb05cc582f24186cf0d", @ANYRES32=r17, @ANYBLOB="00000000ffffffff0000000008000100687462"], 0x3}}, 0x0) r18 = socket(0x11, 0x800000003, 0x0) bind(r18, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r18, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000002400e577a885ddb05cc582f24186cf0d", @ANYRES32=r19, @ANYBLOB="00000000ffffffff000000000800010053faa7"], 0x3}}, 0x0) r20 = socket(0x11, 0x800000003, 0x0) bind(r20, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r20, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000002400e577a885ddb05cc582f24186cf0d", @ANYRES32=r21, @ANYBLOB="00000000ffffffff0000000008000100687462"], 0x3}}, 0x0) getpeername$packet(r6, &(0x7f0000006e00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000006e40)=0x14) r23 = socket(0x11, 0x800000003, 0x0) bind(r23, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r14, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0xffffffffffffff8b) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="48dfffff2300e577a887ddb05cc582f24186cf0d", @ANYRES32=r24, @ANYBLOB="00000000ffffffff0000000008000100687462"], 0x3}}, 0x0) r25 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r25, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xffeff034}, {0x80000006}]}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r25, 0x8933, &(0x7f00000073c0)={'team0\x00', 0x0}) accept$packet(0xffffffffffffffff, &(0x7f0000007500)={0x11, 0x0, 0x0}, &(0x7f0000007540)=0x14) r28 = socket(0x11, 0x800000003, 0x0) bind(r28, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r28, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000002400e577a885ddb05cc582f24186cf0d", @ANYRES32=r29, @ANYBLOB="00000000ffffffff0000000008000100687462"], 0x3}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000008400)={{{@in=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@initdev}}, &(0x7f0000008500)=0xe8) r31 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r31, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r31, 0x1, 0x6, &(0x7f0000000080)=0x4, 0x4) connect$inet(r31, &(0x7f0000000380)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r31, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) r32 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r33 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r34 = fcntl$dupfd(r33, 0x0, r32) write$FUSE_ATTR(r34, &(0x7f0000000280)={0x78}, 0x78) getsockopt$inet_IP_XFRM_POLICY(r34, 0x0, 0x11, &(0x7f0000008540)={{{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@multicast2}}, &(0x7f0000000180)=0x71) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000008680)={@mcast1, 0x0}, &(0x7f00000086c0)=0x14) accept$packet(0xffffffffffffffff, &(0x7f0000008700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000008740)=0x14) r38 = socket(0x11, 0x800000003, 0x0) bind(r38, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r38, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000002400e577a885d908efc008a5ddcedbe074f7b05cc582f24186cf0d", @ANYRES32=r39, @ANYBLOB="00000000ffffffff0000000008000100687462"], 0x3}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000008800)={@dev, 0x0}, &(0x7f0000008840)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000008880)={{{@in=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@loopback}}, &(0x7f0000008980)=0xe8) r42 = socket(0x11, 0x800000003, 0x0) bind(r42, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r42, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000002400e577a885ddb05cc582f24186cf0d", @ANYRES32=r43, @ANYBLOB="00000000ffffffff0000000008000100687462"], 0x3}}, 0x0) accept$packet(r6, &(0x7f00000089c0)={0x11, 0x0, 0x0}, &(0x7f0000008a00)=0x14) r45 = socket(0x11, 0x800000003, 0x0) bind(r45, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r45, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000002400e577a885ddb05cc582f24186cf0d", @ANYRES32=r46, @ANYBLOB="00000000ffffffff0000000008000100687462"], 0x3}}, 0x0) r47 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r47, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xffeff034}, {0x80000006}]}, 0x10) getpeername$packet(r47, &(0x7f0000009ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000009f00)=0x14) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000009f40)={0x0, @multicast2, @empty}, &(0x7f0000009f80)=0xc) r50 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r50, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xffeff034}, {0x80000006}]}, 0x10) accept$packet(r50, &(0x7f000000a000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f000000a040)=0x14) r52 = socket(0x11, 0x800000003, 0x0) bind(r52, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r52, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r54 = socket(0x11, 0x800000003, 0x0) bind(r54, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r54, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000002400e577a885ddb05cc582f24186cf0d", @ANYRES32=r55, @ANYBLOB="00000000ffffffff0000000008000100687462"], 0x3}}, 0x0) r56 = open(&(0x7f0000000000)='./bus\x00', 0x143042, 0x0) ftruncate(r56, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r56, 0x29, 0x22, &(0x7f000000a080)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast2}}, &(0x7f000000a180)=0xe8) sendmsg$TEAM_CMD_OPTIONS_GET(r7, &(0x7f000000ae00)={&(0x7f0000000380), 0xc, &(0x7f000000adc0)={&(0x7f000000a1c0)={0xbe8, r8, 0x100, 0x70bd28, 0x25dfdbff, {}, [{{0x8, 0x1, r10}, {0x7c, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0xd5}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r12}, {0x264, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x20}}}, {0x38, 0x1, @notify_peers_interval={{0x41, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x80000001}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x84, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x54, 0x4, [{0xff20, 0x80, 0x8, 0xc1}, {0x6, 0x3, 0x4, 0x10000}, {0x0, 0x8, 0x1, 0xfff}, {0x5, 0x7, 0x1, 0x8000}, {0x5, 0x3, 0x80, 0x101}, {0x7, 0xff, 0xe0, 0x80}, {0x5, 0x1, 0x3, 0x9}, {0x3, 0x40, 0x8, 0xffffffff}, {0x1, 0x7, 0x4a, 0xa23c}, {0x2, 0x1f, 0x1, 0x7c72}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r15}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r17}}}]}}, {{0x1bc, 0x1, r19}, {0xbc, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r21}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x8c}}}]}}, {{0x8, 0x1, r22}, {0x230, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0xfffff800}}, {0x8}}}, {0x7c, 0x1, @bpf_hash_func={{0x223, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x4c, 0x4, [{0x5, 0x1, 0x0, 0x200}, {0x101, 0xe6, 0x20, 0x40}, {0xfff, 0x2, 0x9, 0x1}, {0x66aa, 0xbd, 0x20, 0x1f}, {0x7, 0x9, 0x8, 0x200}, {0x0, 0x80, 0x9b, 0x10001}, {0x2721, 0x80, 0xfd, 0x2}, {0x5, 0xf0, 0xb1, 0xd6a}, {0x7f, 0xc, 0x2, 0xffffff7f}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x400}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0xe1}}, {0x8, 0x6, r24}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xffffffe0}}, {0x8, 0x6, r26}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r27}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r29}}, {0x8}}}]}}, {{0x0, 0x1, r30}, {0xfc, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r35}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r36}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0xe0}}, {0x8, 0x6, r37}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8, 0x1, r39}, {0xb0, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r40}}}]}}, {{0x8, 0x1, r41}, {0x17c, 0x2, [{0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x2c, 0x4, [{0x5, 0x81, 0x8, 0x450}, {0x2, 0x0, 0x7, 0x4fe8}, {0xbe, 0x3f, 0x7, 0xaf4}, {0x9, 0x5, 0x4, 0x1}, {0x1ff, 0x28, 0x81, 0xcb3}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r43}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r44}}}]}}, {{0x8, 0x1, r46}, {0x194, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x6f}}, {0x8, 0x6, r48}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x8000}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r49}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x24, 0x4, [{0x81, 0xff, 0x7}, {0x180, 0x80, 0x3, 0xffffffe1}, {0x100, 0x3, 0x0, 0x7}, {0x0, 0x8, 0x1f, 0x1}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8}}}]}}, {{0x8, 0x1, r51}, {0x44, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r53}}}]}}, {{0x8, 0x1, r55}, {0xb8, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r57}}}]}}]}, 0xbe8}, 0x1, 0x0, 0x0, 0x44}, 0x8000) r58 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r58, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r58, 0x29, 0x1, 0x0, &(0x7f00000000c0)) getsockopt$inet6_mreq(r58, 0x29, 0x1c, &(0x7f0000000100)={@local, 0x0}, &(0x7f0000000140)=0x14) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000005740)={{{@in6=@empty, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@loopback}}, &(0x7f0000005840)=0xe8) r61 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r62 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r63 = fcntl$dupfd(r62, 0x0, r61) write$FUSE_ATTR(r63, &(0x7f0000000280)={0x78}, 0x78) accept4$packet(r63, &(0x7f0000005940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000005980)=0x14, 0x0) r65 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r65, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f00000004c0)=0xff67) ioctl$sock_SIOCGIFINDEX(r65, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r66}) r67 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r67, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r67, 0x29, 0x1, 0x0, &(0x7f00000000c0)) getsockopt$inet6_IPV6_XFRM_POLICY(r67, 0x29, 0x23, &(0x7f00000059c0)={{{@in=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@empty}}, &(0x7f0000005ac0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000005b00)={{{@in, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@local}}, &(0x7f0000005c00)=0xe8) r70 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r70, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f00000004c0)=0xff67) ioctl$sock_SIOCGIFINDEX(r70, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r71}) getpeername$packet(0xffffffffffffffff, &(0x7f0000005c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000005c80)=0x14) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000005d80)={0x0, @remote, @initdev}, &(0x7f0000005dc0)=0xc) r74 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r74, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r74, 0x29, 0x1, 0x0, &(0x7f00000000c0)) r75 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r75, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r76 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r76, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r76, 0x29, 0x1, 0x0, &(0x7f00000000c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r76, 0x29, 0x22, &(0x7f0000000500)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000200)=0xe8) ioctl$sock_SIOCGIFINDEX(r75, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r77}) ioctl$ifreq_SIOCGIFINDEX_team(r74, 0x8933, &(0x7f0000009780)={'team0\x00', r77}) getsockname$packet(0xffffffffffffffff, &(0x7f00000097c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000009800)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000009d00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000010}, 0xc, &(0x7f0000009cc0)={&(0x7f0000009840)={0x458, r8, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8, 0x1, r59}, {0x40, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r60}}}]}}, {{0x8, 0x1, r64}, {0x220, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x80000001}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x9c6}}, {0x8, 0x6, r66}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x1ff}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r68}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r69}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r71}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r72}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r73}}}]}}, {{0x8, 0x1, r78}, {0x1cc, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x80}}, {0x8, 0x6, r79}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x2c, 0x4, [{0x80, 0x7, 0xd1, 0xfffffc00}, {0x1, 0x4, 0x0, 0x10000}, {0xfff8, 0x6, 0x0, 0x1c00000}, {0x7ff, 0x2, 0x5c, 0x7}, {0x5, 0x80, 0xe1}]}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0xfffffffd}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0xfffff801}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x38c}}}]}}]}, 0x458}, 0x1, 0x0, 0x0, 0x4048020}, 0xc0) 22:37:39 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) r4 = syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r8) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="99b500", @ANYRES16=r9, @ANYBLOB="0fe400000000000000000100000000000000014100000003001700000000000000006574683a726f736530000000"], 0x3}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r7, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000810}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c061008", @ANYRES16=r9, @ANYBLOB="000326bd7016fbdbdf25010000f3ff00000007410000001000187fffffff6574683a6e7230000651325fa2f14308b257bfec4fbd00764224bb9f357bd5dde047b137b162ee34768fa9e931a2e32e04a3f809ccca7b6196e5c825df043e46884d295fdf877b64bb3bec76f7375f1f087aced2deb0d6c7aba5d9b30d65fe4d0e252024ecc639629e4de4b44651a8cc1f8fc2d93869b68522166be73983e9df4cb713f2e8c972162bed4a47bd42915abff065521ab0236e2112de45f76114b08f1c9468919b3833dc3d494b9df577e2"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x400c0) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa00010}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r9, 0x1, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x4) preadv(r4, 0x0, 0x0, 0x0) r10 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmat(r10, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r11 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000500)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_G_FBUF(r11, 0x8030560a, &(0x7f0000000640)={0x20, 0x40, &(0x7f0000000540)="ef46fbc59b0f8fc05de8cc1473691c0a6b78f61fe7d7bb8289ce8bec33f2d9fd65d048beaa477110995bbb1fc09ad9ac048292500ac56d88e897002e6ad91f21bea4d597edd7a8b7db21cb4ef0037ed1365b97b23270e8b35748728ba0d21f1e5684bc7655f00fa5ebfa58d637b6ad749b92df82f55158016396d5f3cf94b24c93bd59e94e9ac1472d88b5cc551aa9dc0ffb011a7ba5ad63025a1664d8c5d1038acd8b7462dc90999f4f327609ca33015b061edca4b1e6adacdb68b88bb446b6a7fd94de91fe92db7f564bf1c3380fc734619e89e29d507767a9c342f86988c4a43af24f97d87b1292cd5123e72e3e39383b22677f", {0xfffffbff, 0x25, 0x18119a471c1d0c, 0x8, 0x8, 0x75c, 0x2, 0x8}}) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r13 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r14 = fcntl$dupfd(r13, 0x0, r12) write$FUSE_ATTR(r14, &(0x7f0000000280)={0x78}, 0x78) getpeername$unix(r14, &(0x7f0000000340), &(0x7f00000003c0)=0x6e) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:37:39 executing program 5: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x4000802, 0x1}) syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x22880, 0x0) ioctl$KDSKBLED(r1, 0x4b65, 0x5) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback, 0x9}, 0x1c) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/\xe5\xff\xff\xff\xff\xff\xff\xff\x00', 0x840f02) r4 = fcntl$dupfd(r3, 0x0, r2) sysfs$3(0x3) write$FUSE_ATTR(r4, &(0x7f0000000280)={0x78, 0xfffffffffffffff5, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x78) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000100)={0x3ff, 0xfc01, 0x9, 0x8001}, 0x8) getsockopt$inet6_int(r2, 0x29, 0x1, 0x0, &(0x7f00000000c0)) signalfd(r2, &(0x7f00000000c0)={0x8}, 0x8) ioctl$TCSBRKP(r0, 0x5425, 0xe4) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x0, 0x0) r7 = syz_open_procfs(0x0, 0x0) preadv(r7, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000300)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) fstat(r2, &(0x7f0000000380)) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r11 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r12 = fcntl$dupfd(r11, 0x0, r10) write$FUSE_ATTR(r12, &(0x7f0000000280)={0x78, 0x0, 0x0, {0xfffffffffffffffd, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffff}}}, 0x78) getsockopt$inet_IP_XFRM_POLICY(r12, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000000600)=0xe8) setreuid(r9, r13) setresuid(r8, 0x0, r9) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ATTR(r6, &(0x7f0000000300)={0x78, 0x0, 0x8, {0x5, 0x0, 0x0, {0x1, 0x296, 0x4, 0x6, 0xfffffffffffffff9, 0x0, 0x8, 0x6, 0x8001, 0x6, 0x7fffffff, r8, r14, 0x5, 0x7}}}, 0x78) r15 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r16 = fcntl$dupfd(r15, 0x0, r5) write$FUSE_ATTR(r16, &(0x7f0000000280)={0x78}, 0x78) ioctl$PIO_FONTRESET(r16, 0x4b6d, 0x0) 22:37:40 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) set_robust_list(&(0x7f0000000140)={&(0x7f0000000080)={&(0x7f0000000040)}, 0x79e, &(0x7f0000000100)={&(0x7f00000000c0)}}, 0x18) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 281.024687] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 22:37:40 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) r4 = syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r8) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="99b500", @ANYRES16=r9, @ANYBLOB="0fe400000000000000000100000000000000014100000003001700000000000000006574683a726f736530000000"], 0x3}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r7, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000810}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c061008", @ANYRES16=r9, @ANYBLOB="000326bd7016fbdbdf25010000f3ff00000007410000001000187fffffff6574683a6e7230000651325fa2f14308b257bfec4fbd00764224bb9f357bd5dde047b137b162ee34768fa9e931a2e32e04a3f809ccca7b6196e5c825df043e46884d295fdf877b64bb3bec76f7375f1f087aced2deb0d6c7aba5d9b30d65fe4d0e252024ecc639629e4de4b44651a8cc1f8fc2d93869b68522166be73983e9df4cb713f2e8c972162bed4a47bd42915abff065521ab0236e2112de45f76114b08f1c9468919b3833dc3d494b9df577e2"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x400c0) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa00010}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r9, 0x1, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x4) preadv(r4, 0x0, 0x0, 0x0) r10 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmat(r10, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r11 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000500)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_G_FBUF(r11, 0x8030560a, &(0x7f0000000640)={0x20, 0x40, &(0x7f0000000540)="ef46fbc59b0f8fc05de8cc1473691c0a6b78f61fe7d7bb8289ce8bec33f2d9fd65d048beaa477110995bbb1fc09ad9ac048292500ac56d88e897002e6ad91f21bea4d597edd7a8b7db21cb4ef0037ed1365b97b23270e8b35748728ba0d21f1e5684bc7655f00fa5ebfa58d637b6ad749b92df82f55158016396d5f3cf94b24c93bd59e94e9ac1472d88b5cc551aa9dc0ffb011a7ba5ad63025a1664d8c5d1038acd8b7462dc90999f4f327609ca33015b061edca4b1e6adacdb68b88bb446b6a7fd94de91fe92db7f564bf1c3380fc734619e89e29d507767a9c342f86988c4a43af24f97d87b1292cd5123e72e3e39383b22677f", {0xfffffbff, 0x25, 0x18119a471c1d0c, 0x8, 0x8, 0x75c, 0x2, 0x8}}) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r13 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r14 = fcntl$dupfd(r13, 0x0, r12) write$FUSE_ATTR(r14, &(0x7f0000000280)={0x78}, 0x78) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:37:40 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000080), 0x10) [ 281.114926] Unknown ioctl 19301 [ 281.156776] Unknown ioctl 19301 [ 281.162567] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 22:37:40 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) r4 = syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r8) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="99b500", @ANYRES16=r9, @ANYBLOB="0fe400000000000000000100000000000000014100000003001700000000000000006574683a726f736530000000"], 0x3}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r7, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000810}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c061008", @ANYRES16=r9, @ANYBLOB="000326bd7016fbdbdf25010000f3ff00000007410000001000187fffffff6574683a6e7230000651325fa2f14308b257bfec4fbd00764224bb9f357bd5dde047b137b162ee34768fa9e931a2e32e04a3f809ccca7b6196e5c825df043e46884d295fdf877b64bb3bec76f7375f1f087aced2deb0d6c7aba5d9b30d65fe4d0e252024ecc639629e4de4b44651a8cc1f8fc2d93869b68522166be73983e9df4cb713f2e8c972162bed4a47bd42915abff065521ab0236e2112de45f76114b08f1c9468919b3833dc3d494b9df577e2"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x400c0) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa00010}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r9, 0x1, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x4) preadv(r4, 0x0, 0x0, 0x0) r10 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmat(r10, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r11 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000500)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_G_FBUF(r11, 0x8030560a, &(0x7f0000000640)={0x20, 0x40, &(0x7f0000000540)="ef46fbc59b0f8fc05de8cc1473691c0a6b78f61fe7d7bb8289ce8bec33f2d9fd65d048beaa477110995bbb1fc09ad9ac048292500ac56d88e897002e6ad91f21bea4d597edd7a8b7db21cb4ef0037ed1365b97b23270e8b35748728ba0d21f1e5684bc7655f00fa5ebfa58d637b6ad749b92df82f55158016396d5f3cf94b24c93bd59e94e9ac1472d88b5cc551aa9dc0ffb011a7ba5ad63025a1664d8c5d1038acd8b7462dc90999f4f327609ca33015b061edca4b1e6adacdb68b88bb446b6a7fd94de91fe92db7f564bf1c3380fc734619e89e29d507767a9c342f86988c4a43af24f97d87b1292cd5123e72e3e39383b22677f", {0xfffffbff, 0x25, 0x18119a471c1d0c, 0x8, 0x8, 0x75c, 0x2, 0x8}}) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r13 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) fcntl$dupfd(r13, 0x0, r12) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:37:40 executing program 5: syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x2, 0x70, 0x4, 0x7, 0x81, 0x3f, 0x0, 0xc4, 0xc41f7791334e921d, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, @perf_bp={&(0x7f0000000040), 0x1}, 0x80, 0x9, 0x401, 0x1, 0x4, 0x5, 0x1}) 22:37:40 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000080), 0x3b3) [ 281.315134] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 22:37:40 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) r4 = syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r8) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="99b500", @ANYRES16=r9, @ANYBLOB="0fe400000000000000000100000000000000014100000003001700000000000000006574683a726f736530000000"], 0x3}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r7, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000810}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c061008", @ANYRES16=r9, @ANYBLOB="000326bd7016fbdbdf25010000f3ff00000007410000001000187fffffff6574683a6e7230000651325fa2f14308b257bfec4fbd00764224bb9f357bd5dde047b137b162ee34768fa9e931a2e32e04a3f809ccca7b6196e5c825df043e46884d295fdf877b64bb3bec76f7375f1f087aced2deb0d6c7aba5d9b30d65fe4d0e252024ecc639629e4de4b44651a8cc1f8fc2d93869b68522166be73983e9df4cb713f2e8c972162bed4a47bd42915abff065521ab0236e2112de45f76114b08f1c9468919b3833dc3d494b9df577e2"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x400c0) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa00010}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r9, 0x1, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x4) preadv(r4, 0x0, 0x0, 0x0) r10 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmat(r10, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r11 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000500)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_G_FBUF(r11, 0x8030560a, &(0x7f0000000640)={0x20, 0x40, &(0x7f0000000540)="ef46fbc59b0f8fc05de8cc1473691c0a6b78f61fe7d7bb8289ce8bec33f2d9fd65d048beaa477110995bbb1fc09ad9ac048292500ac56d88e897002e6ad91f21bea4d597edd7a8b7db21cb4ef0037ed1365b97b23270e8b35748728ba0d21f1e5684bc7655f00fa5ebfa58d637b6ad749b92df82f55158016396d5f3cf94b24c93bd59e94e9ac1472d88b5cc551aa9dc0ffb011a7ba5ad63025a1664d8c5d1038acd8b7462dc90999f4f327609ca33015b061edca4b1e6adacdb68b88bb446b6a7fd94de91fe92db7f564bf1c3380fc734619e89e29d507767a9c342f86988c4a43af24f97d87b1292cd5123e72e3e39383b22677f", {0xfffffbff, 0x25, 0x18119a471c1d0c, 0x8, 0x8, 0x75c, 0x2, 0x8}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) [ 281.363522] Unknown ioctl 1074275339 22:37:40 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r5 = fcntl$dupfd(r4, 0x0, r3) write$FUSE_ATTR(r5, &(0x7f0000000280)={0x78}, 0x78) ioctl$DRM_IOCTL_RES_CTX(r5, 0xc0106426, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, &(0x7f0000000140)={r6, 0x6}) write$vhci(r2, &(0x7f0000000300)=@HCI_EVENT_PKT={0x4, "01ad95a6b3cea496ee0b4a4f20462b9ac79c6417121881a2bccc1b1be5ed25b24efb6e8e75667a1a5124e45766ab376910922432a89ca8d4086ae15bf825c990df158fc679cc5860ad4575f619d0bc63cdb46b1ebef20432f2d95ef3702c14914cc79c5fa5d466ab062d3f466ea86350b051f834baf146c6301ba9718739862384278efcc86b36bf025615e0eff27503181a3b39790dd9ae544f8378a684174908da06c81980192cf78b72e9234bc9addd5b46565e36ac2ccb3e46283e46547d3ac390f45dab094f0bb459958930ea318b480d"}, 0xd4) r7 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) openat$smack_task_current(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/attr/current\x00', 0x2, 0x0) getcwd(&(0x7f0000000180)=""/11, 0xb) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r8, 0x0, 0x2, &(0x7f0000000080), 0x10) 22:37:40 executing program 5: syz_open_dev$usbfs(&(0x7f0000000840)='/!\xff\xd1E\x00\x00\x00\x00\x00\x00\x17/00#/00#\x00', 0x40000000909, 0x200000) [ 281.393837] Unknown ioctl 1074275339 22:37:40 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r2 = fcntl$dupfd(r1, 0x0, r0) write$FUSE_ATTR(r2, &(0x7f0000000280)={0x78}, 0x78) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r3, 0x29, 0x1, 0x0, &(0x7f00000000c0)) ioctl$sock_bt_cmtp_CMTPCONNADD(r2, 0x400443c8, &(0x7f0000000000)={r3, 0x6}) syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x0) 22:37:40 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x1bb) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000180)={r3}, 0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000040)={r3, 0x9, 0x9}, 0x8) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, &(0x7f0000000080), 0x10) [ 281.527844] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 22:37:40 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) r4 = syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r8) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="99b500", @ANYRES16=r9, @ANYBLOB="0fe400000000000000000100000000000000014100000003001700000000000000006574683a726f736530000000"], 0x3}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r7, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000810}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c061008", @ANYRES16=r9, @ANYBLOB="000326bd7016fbdbdf25010000f3ff00000007410000001000187fffffff6574683a6e7230000651325fa2f14308b257bfec4fbd00764224bb9f357bd5dde047b137b162ee34768fa9e931a2e32e04a3f809ccca7b6196e5c825df043e46884d295fdf877b64bb3bec76f7375f1f087aced2deb0d6c7aba5d9b30d65fe4d0e252024ecc639629e4de4b44651a8cc1f8fc2d93869b68522166be73983e9df4cb713f2e8c972162bed4a47bd42915abff065521ab0236e2112de45f76114b08f1c9468919b3833dc3d494b9df577e2"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x400c0) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa00010}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r9, 0x1, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x4) preadv(r4, 0x0, 0x0, 0x0) r10 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmat(r10, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r11 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000500)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_G_FBUF(r11, 0x8030560a, &(0x7f0000000640)={0x20, 0x40, &(0x7f0000000540)="ef46fbc59b0f8fc05de8cc1473691c0a6b78f61fe7d7bb8289ce8bec33f2d9fd65d048beaa477110995bbb1fc09ad9ac048292500ac56d88e897002e6ad91f21bea4d597edd7a8b7db21cb4ef0037ed1365b97b23270e8b35748728ba0d21f1e5684bc7655f00fa5ebfa58d637b6ad749b92df82f55158016396d5f3cf94b24c93bd59e94e9ac1472d88b5cc551aa9dc0ffb011a7ba5ad63025a1664d8c5d1038acd8b7462dc90999f4f327609ca33015b061edca4b1e6adacdb68b88bb446b6a7fd94de91fe92db7f564bf1c3380fc734619e89e29d507767a9c342f86988c4a43af24f97d87b1292cd5123e72e3e39383b22677f", {0xfffffbff, 0x25, 0x18119a471c1d0c, 0x8, 0x8, 0x75c, 0x2, 0x8}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:37:40 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x8, &(0x7f0000000100), &(0x7f0000000140)=0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0xe60602) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0xfffffffffffffffc, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, r4}}}, 0xe1) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) ioctl$KVM_DEASSIGN_DEV_IRQ(r3, 0x4040ae75, &(0x7f0000000180)={0xc52, 0x1, 0x1ff, 0x100}) r5 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r6 = fcntl$dupfd(r5, 0x0, 0xffffffffffffffff) write$FUSE_ATTR(r6, &(0x7f0000000280)={0x78}, 0x78) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r6, 0x80845663, &(0x7f0000000040)={0x0, @reserved}) clone(0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r9 = fcntl$dupfd(r8, 0x0, r7) write$FUSE_ATTR(r9, &(0x7f0000000280)={0x78}, 0x78) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) getgroups(0x1, &(0x7f0000000240)=[r10]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) getgroups(0x1, &(0x7f00000002c0)=[r11]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) getgroups(0x1, &(0x7f00000002c0)=[r12]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) getgroups(0x1, &(0x7f00000002c0)=[r13]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) getgroups(0x1, &(0x7f00000002c0)=[r14]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) getgroups(0x1, &(0x7f00000002c0)=[r15]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) getgroups(0x1, &(0x7f00000002c0)=[r16]) getgroups(0x9, &(0x7f0000000200)=[r10, r11, 0xffffffffffffffff, 0x0, r12, r13, r14, r15, r16]) ioctl$TUNSETGROUP(r9, 0x400454ce, r17) 22:37:40 executing program 5: syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x2, 0x20000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r2 = fcntl$dupfd(r1, 0x0, r0) write$FUSE_ATTR(r2, &(0x7f0000000280)={0x78}, 0x78) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000000c0)=0x1) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setfsgid(r3) 22:37:40 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000080), 0x10) [ 281.692767] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 22:37:40 executing program 4: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x8ec00, 0x0) ioctl$VIDIOC_S_JPEGCOMP(r0, 0x408c563e, &(0x7f0000000100)={0x401, 0xd, 0x33, "4c63064fb1087a47bd990a885918e659ec2b9bee5f38029bcd266568f5d80d48a57b428cc238e751b9d8f831dd72325c62ad454db71b64303cc70e04", 0x16, "0b9b4e6131ec08d01ced782a3e650cac28845e6bd711b82c97f57cc1497b7c745edb82a7c7adf7ad98ac615295e027618c5ffc56e7ab24f2eed94acd"}) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x3d6, 0x2000) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000cb1000/0x1000)=nil, 0x1000}, 0x3}) 22:37:40 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f0000000040)='\x88vboxnet0vboxnet1mime_type[%vboxnet1\x00') r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x200, 0x0) getsockopt$inet_udp_int(r3, 0x11, 0xa, &(0x7f0000000100), &(0x7f0000000140)=0x4) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, &(0x7f0000000080), 0x10) 22:37:40 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) r4 = syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r8) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="99b500", @ANYRES16=r9, @ANYBLOB="0fe400000000000000000100000000000000014100000003001700000000000000006574683a726f736530000000"], 0x3}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r7, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000810}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c061008", @ANYRES16=r9, @ANYBLOB="000326bd7016fbdbdf25010000f3ff00000007410000001000187fffffff6574683a6e7230000651325fa2f14308b257bfec4fbd00764224bb9f357bd5dde047b137b162ee34768fa9e931a2e32e04a3f809ccca7b6196e5c825df043e46884d295fdf877b64bb3bec76f7375f1f087aced2deb0d6c7aba5d9b30d65fe4d0e252024ecc639629e4de4b44651a8cc1f8fc2d93869b68522166be73983e9df4cb713f2e8c972162bed4a47bd42915abff065521ab0236e2112de45f76114b08f1c9468919b3833dc3d494b9df577e2"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x400c0) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa00010}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r9, 0x1, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x4) preadv(r4, 0x0, 0x0, 0x0) r10 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmat(r10, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r11 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000500)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_G_FBUF(r11, 0x8030560a, &(0x7f0000000640)={0x20, 0x40, &(0x7f0000000540)="ef46fbc59b0f8fc05de8cc1473691c0a6b78f61fe7d7bb8289ce8bec33f2d9fd65d048beaa477110995bbb1fc09ad9ac048292500ac56d88e897002e6ad91f21bea4d597edd7a8b7db21cb4ef0037ed1365b97b23270e8b35748728ba0d21f1e5684bc7655f00fa5ebfa58d637b6ad749b92df82f55158016396d5f3cf94b24c93bd59e94e9ac1472d88b5cc551aa9dc0ffb011a7ba5ad63025a1664d8c5d1038acd8b7462dc90999f4f327609ca33015b061edca4b1e6adacdb68b88bb446b6a7fd94de91fe92db7f564bf1c3380fc734619e89e29d507767a9c342f86988c4a43af24f97d87b1292cd5123e72e3e39383b22677f", {0xfffffbff, 0x25, 0x18119a471c1d0c, 0x8, 0x8, 0x75c, 0x2, 0x8}}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:37:40 executing program 5: syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb\x0f00#/00#\x00', 0x40000000909, 0x2000) 22:37:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000240)="66ba4300b801380000ef0f22dc66b8a1008ec0c4e21db7eb5766baa000b093ee362e0f01ef65d9f9ea00480000aa00b98e0400000f32", 0x36}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)=0x6f, 0x4) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x2}) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000080)='security.selinux\x00', 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x0) 22:37:40 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000040)={0x0, 0x401}, 0x10) [ 281.872285] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 22:37:40 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x8e2716c228148622, 0x0) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x1e) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:40 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) r4 = syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r8) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="99b500", @ANYRES16=r9, @ANYBLOB="0fe400000000000000000100000000000000014100000003001700000000000000006574683a726f736530000000"], 0x3}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r7, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000810}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c061008", @ANYRES16=r9, @ANYBLOB="000326bd7016fbdbdf25010000f3ff00000007410000001000187fffffff6574683a6e7230000651325fa2f14308b257bfec4fbd00764224bb9f357bd5dde047b137b162ee34768fa9e931a2e32e04a3f809ccca7b6196e5c825df043e46884d295fdf877b64bb3bec76f7375f1f087aced2deb0d6c7aba5d9b30d65fe4d0e252024ecc639629e4de4b44651a8cc1f8fc2d93869b68522166be73983e9df4cb713f2e8c972162bed4a47bd42915abff065521ab0236e2112de45f76114b08f1c9468919b3833dc3d494b9df577e2"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x400c0) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa00010}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r9, 0x1, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x4) preadv(r4, 0x0, 0x0, 0x0) r10 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmat(r10, &(0x7f0000ffc000/0x4000)=nil, 0x2000) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000500)='/dev/video1\x00', 0x2, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:37:41 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) r4 = syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r8) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="99b500", @ANYRES16=r9, @ANYBLOB="0fe400000000000000000100000000000000014100000003001700000000000000006574683a726f736530000000"], 0x3}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r7, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000810}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c061008", @ANYRES16=r9, @ANYBLOB="000326bd7016fbdbdf25010000f3ff00000007410000001000187fffffff6574683a6e7230000651325fa2f14308b257bfec4fbd00764224bb9f357bd5dde047b137b162ee34768fa9e931a2e32e04a3f809ccca7b6196e5c825df043e46884d295fdf877b64bb3bec76f7375f1f087aced2deb0d6c7aba5d9b30d65fe4d0e252024ecc639629e4de4b44651a8cc1f8fc2d93869b68522166be73983e9df4cb713f2e8c972162bed4a47bd42915abff065521ab0236e2112de45f76114b08f1c9468919b3833dc3d494b9df577e2"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x400c0) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa00010}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r9, 0x1, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x4) preadv(r4, 0x0, 0x0, 0x0) r10 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmat(r10, &(0x7f0000ffc000/0x4000)=nil, 0x2000) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) [ 282.048261] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 22:37:41 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-control\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r2, 0x100, 0x70bd26, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x7) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x30, r4, 0x1, 0x70bd26, 0x25dfdbfd, {{}, 0x0, 0x4107, 0x0, {0x14, 0x18, {0x96, @bearer=@udp='udp:syz2\x00'}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0xee0dc8346933e3a1}, 0x10) r5 = socket(0x4, 0x6, 0xf8) setsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, &(0x7f00000001c0)=0x40, 0x4) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f00000000c0)=0x7) 22:37:41 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x8000000000007ff) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r3, 0x29, 0x1, 0x0, &(0x7f00000000c0)) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x3ff, @rand_addr="f94731676bc74e0118bf4d038b566dd1", 0x5}, 0x1c) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r5, 0x29, 0x1, 0x0, &(0x7f00000000c0)) write$binfmt_script(r5, &(0x7f0000000280)={'#! ', './file0', [{}, {0x20, 'cpuset'}, {}, {0x20, ']\'\x0e{'}], 0xa, "e2747c1cce401eada5ff7dbd213bf21f27a6f2016ec599c9fd68a812fb8b04e9200d2474840b74ed2be9119dfb792960289157f1189e2d981f236a450e054931ec7e54dc86920bb2776223bd12205d0a6d0270a5752074265d0f9af534578384cd7d31aee80bb5e626056a009f14dd2381bf176f8c6f0bf89514e10245adcccb94a5e72a21e9f505668f9c5983276d9ca9af"}, 0xab) setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, &(0x7f0000000080), 0x10) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x100, 0x0) write$sndseq(r6, &(0x7f00000001c0)=[{0x0, 0x90, 0x2, 0x2, @tick=0xa81, {0x7f, 0xf6}, {0x2, 0x4}, @ext={0x65, &(0x7f0000000140)="a433c053f66f6462ee16baf937294e9dcff40abd0c550cc7881d8ecc3f9ed4f9a96ff3b0caf499e6f457fc52e2e942d06ca0035c9728feff8d6913bac725c43e9df3156e9523bbd539cabbb8fcf0197a7798e03ef6beb218460a8fb5f93e8ad012f58ff2b5"}}, {0x0, 0x1, 0xfe, 0x37, @tick, {0x5, 0x40}, {0x5, 0x8}, @addr={0x7, 0x1}}, {0x22, 0xc1, 0x3c, 0x9, @tick=0x356, {0x38}, {0x3, 0x9}, @connect={{0x6}, {0x1f, 0x81}}}], 0x90) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_opts(r7, 0x29, 0x39, &(0x7f0000000340)=@fragment={0x88, 0x0, 0x7, 0x1, 0x0, 0x4, 0x67}, 0x8) 22:37:41 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r2 = fcntl$dupfd(r1, 0x0, r0) write$FUSE_ATTR(r2, &(0x7f0000000280)={0x78}, 0x78) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000000)=r3) [ 282.219168] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 22:37:41 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) r4 = syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r8) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="99b500", @ANYRES16=r9, @ANYBLOB="0fe400000000000000000100000000000000014100000003001700000000000000006574683a726f736530000000"], 0x3}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r7, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000810}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c061008", @ANYRES16=r9, @ANYBLOB="000326bd7016fbdbdf25010000f3ff00000007410000001000187fffffff6574683a6e7230000651325fa2f14308b257bfec4fbd00764224bb9f357bd5dde047b137b162ee34768fa9e931a2e32e04a3f809ccca7b6196e5c825df043e46884d295fdf877b64bb3bec76f7375f1f087aced2deb0d6c7aba5d9b30d65fe4d0e252024ecc639629e4de4b44651a8cc1f8fc2d93869b68522166be73983e9df4cb713f2e8c972162bed4a47bd42915abff065521ab0236e2112de45f76114b08f1c9468919b3833dc3d494b9df577e2"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x400c0) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa00010}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r9, 0x1, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x4) preadv(r4, 0x0, 0x0, 0x0) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:37:41 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000080), 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r6 = fcntl$dupfd(r5, 0x0, r4) write$FUSE_ATTR(r6, &(0x7f0000000280)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3f80000000000000}}}, 0x11b) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x1bb) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000180)={r7}, 0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000000040)={r7, 0x5}, &(0x7f00000000c0)=0x8) 22:37:41 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) msgget(0x3, 0xa2) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) recvmsg$can_bcm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/116, 0x74}, {&(0x7f00000000c0)=""/224, 0xe0}, {&(0x7f00000001c0)=""/88, 0x58}, {&(0x7f0000000240)=""/114, 0x72}], 0x4, &(0x7f0000000300)=""/74, 0x4a}, 0x63) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r4, 0x29, 0x1, 0x0, &(0x7f00000000c0)) ioctl$sock_inet_SIOCGIFNETMASK(r4, 0x891b, &(0x7f00000003c0)={'veth0_to_bridge\x00', {0x2, 0x4e22, @remote}}) recvmmsg(r3, &(0x7f0000003e40)=[{{&(0x7f0000000400)=@x25={0x9, @remote}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000480)=""/38, 0x26}, {&(0x7f00000004c0)=""/213, 0xd5}, {&(0x7f00000005c0)=""/69, 0x45}, {&(0x7f0000000640)=""/92, 0x5c}, {&(0x7f00000006c0)}, {&(0x7f0000000700)=""/107, 0x6b}], 0x6}, 0x80}, {{&(0x7f0000000800)=@xdp, 0x80, &(0x7f0000001c00)=[{&(0x7f0000000880)=""/133, 0x85}, {&(0x7f0000000940)=""/175, 0xaf}, {&(0x7f0000000a00)=""/129, 0x81}, {&(0x7f0000000ac0)=""/150, 0x96}, {&(0x7f0000000b80)=""/116, 0x74}, {&(0x7f0000000c00)=""/4096, 0x1000}], 0x6}}, {{&(0x7f0000001c80)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000001d00)=""/4096, 0x1000}, {&(0x7f0000002d00)=""/50, 0x32}, {&(0x7f0000002d40)=""/132, 0x84}], 0x3, &(0x7f0000002e40)=""/4096, 0x1000}, 0x40}], 0x3, 0x2, &(0x7f0000003f00)={0x77359400}) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 282.369251] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 22:37:41 executing program 5: syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x1, 0x0, &(0x7f00000000c0)) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) ptrace$setsig(0x4203, r1, 0x4, &(0x7f0000000040)={0x2, 0xffffff95, 0x3}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000140)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r4 = fcntl$dupfd(r3, 0x0, r2) write$FUSE_ATTR(r4, &(0x7f0000000280)={0x78}, 0x78) syz_open_dev$dmmidi(&(0x7f00000001c0)='/dev/dmmidi#\x00', 0x6, 0x20082) setxattr$trusted_overlay_nlink(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='trusted.overlay.nlink\x00', &(0x7f0000000300)={'U-', 0x7}, 0x28, 0x1) ioctl$VIDIOC_QUERYMENU(r4, 0xc02c5625, &(0x7f0000000100)={0x5, 0x5, @value=0x7ff}) 22:37:41 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) r4 = syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r8) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="99b500", @ANYRES16=r9, @ANYBLOB="0fe400000000000000000100000000000000014100000003001700000000000000006574683a726f736530000000"], 0x3}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r7, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000810}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c061008", @ANYRES16=r9, @ANYBLOB="000326bd7016fbdbdf25010000f3ff00000007410000001000187fffffff6574683a6e7230000651325fa2f14308b257bfec4fbd00764224bb9f357bd5dde047b137b162ee34768fa9e931a2e32e04a3f809ccca7b6196e5c825df043e46884d295fdf877b64bb3bec76f7375f1f087aced2deb0d6c7aba5d9b30d65fe4d0e252024ecc639629e4de4b44651a8cc1f8fc2d93869b68522166be73983e9df4cb713f2e8c972162bed4a47bd42915abff065521ab0236e2112de45f76114b08f1c9468919b3833dc3d494b9df577e2"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x400c0) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa00010}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r9, 0x1, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x4) preadv(r4, 0x0, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) [ 282.570941] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 22:37:41 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000040)={0xcdb5, 0x3, "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"}) syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x80000) 22:37:41 executing program 4: lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x2) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000200)) r1 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x8, 0x109000) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000000c0)={0xc, 0x8, 0xfa00, {0x0}}, 0xfffffe04) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x80000000001, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote}, r3}}, 0x171) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f00000001c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000180), 0x2, {0xa, 0x4e22, 0xfffff43f, @ipv4={[], [], @broadcast}}, r3}}, 0x38) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x4, 0xeff9, 0x6e1}) 22:37:41 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="99b500", @ANYRES16=r8, @ANYBLOB="0fe400000000000000000100000000000000014100000003001700000000000000006574683a726f736530000000"], 0x3}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r6, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000810}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c061008", @ANYRES16=r8, @ANYBLOB="000326bd7016fbdbdf25010000f3ff00000007410000001000187fffffff6574683a6e7230000651325fa2f14308b257bfec4fbd00764224bb9f357bd5dde047b137b162ee34768fa9e931a2e32e04a3f809ccca7b6196e5c825df043e46884d295fdf877b64bb3bec76f7375f1f087aced2deb0d6c7aba5d9b30d65fe4d0e252024ecc639629e4de4b44651a8cc1f8fc2d93869b68522166be73983e9df4cb713f2e8c972162bed4a47bd42915abff065521ab0236e2112de45f76114b08f1c9468919b3833dc3d494b9df577e2"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x400c0) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa00010}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r8, 0x1, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x4) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:37:41 executing program 5: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xbb06, 0x0) 22:37:41 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x8000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x800000100) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f00000000c0)={0xc, 0x8, 0xfa00, {0x0}}, 0xfffffe04) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x80000000001, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote}, r6}}, 0x171) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000240)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x1, @mcast1, 0x3}, r6}}, 0x30) r7 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r8 = fcntl$dupfd(r7, 0x0, r4) write$FUSE_ATTR(r8, &(0x7f0000000280)={0x78}, 0x78) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r9, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r9, 0x29, 0x1, 0x0, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_DEL(r8, 0x2, r9) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r12 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r13 = fcntl$dupfd(r12, 0x0, r11) write$FUSE_ATTR(r13, &(0x7f0000000280)={0x78}, 0x78) r14 = accept$netrom(r13, &(0x7f0000000100)={{}, [@default, @rose, @netrom, @remote, @remote, @remote, @default]}, &(0x7f0000000180)=0x48) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r14, 0x8983, &(0x7f00000001c0)) setsockopt$bt_hci_HCI_FILTER(r10, 0x0, 0x2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}, 0x10) [ 282.724339] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 22:37:41 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="99b500", @ANYRES16=r8, @ANYBLOB="0fe400000000000000000100000000000000014100000003001700000000000000006574683a726f736530000000"], 0x3}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r6, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000810}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c061008", @ANYRES16=r8, @ANYBLOB="000326bd7016fbdbdf25010000f3ff00000007410000001000187fffffff6574683a6e7230000651325fa2f14308b257bfec4fbd00764224bb9f357bd5dde047b137b162ee34768fa9e931a2e32e04a3f809ccca7b6196e5c825df043e46884d295fdf877b64bb3bec76f7375f1f087aced2deb0d6c7aba5d9b30d65fe4d0e252024ecc639629e4de4b44651a8cc1f8fc2d93869b68522166be73983e9df4cb713f2e8c972162bed4a47bd42915abff065521ab0236e2112de45f76114b08f1c9468919b3833dc3d494b9df577e2"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x400c0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:37:41 executing program 5: syz_open_dev$usbfs(&(0x7f0000000840)='\x04\x00', 0x40000000909, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x20000, 0x0) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000040)={0x8, 0x400, 0x27527a4e, 0x40, 0x4}) setxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x2) 22:37:41 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) mlockall(0xf6c5697d137bec96) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 282.871454] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 22:37:41 executing program 5: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0xa080, 0x0) fchdir(r0) 22:37:41 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="99b500", @ANYRES16=r8, @ANYBLOB="0fe400000000000000000100000000000000014100000003001700000000000000006574683a726f736530000000"], 0x3}}, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:37:41 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000080), 0x10) 22:37:41 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000340)='/dev/vcsa#\x00', 0x5, 0x4000) ioctl$CAPI_SET_FLAGS(r0, 0x80044324, &(0x7f0000000380)=0x1) r1 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x100) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x7, 'dummy0\x00', {0x3}, 0x8}) r3 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0xc0d80) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) r5 = syz_open_dev$admmidi(&(0x7f00000003c0)='/dev/admmidi#\x00', 0xfff, 0x80000) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000400)={0x48, 0xaa, 0x3, "283ffa61dec61989631c30b85b5456affddc00ae631543b8d92529e9381f851ea34609bed194e74f75095bb5bd8ca4c2382148403600381a9d826823fdc81cceb93464817eb7cb6f"}) write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000200)={0x9, 0xfffffffffffffe72, 0xfa00, {r4, 0x1, "2ad2df", "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"}}, 0x110) ioctl$USBDEVFS_GET_CAPABILITIES(r1, 0x8004551a, &(0x7f0000000080)) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000040)={'nr0\x00', {0x2, 0x4e22, @broadcast}}) 22:37:41 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x5}}}, &(0x7f0000000100)=0x84) [ 283.060495] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 22:37:42 executing program 1: socketpair$unix(0x1, 0x4266c58a7fd924e7, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r4, 0x29, 0x1, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000009, 0x110, r4, 0x77f49000) r5 = fcntl$dupfd(r3, 0x0, r2) write$FUSE_ATTR(r5, &(0x7f0000000280)={0x78}, 0x78) ioctl$SIOCX25CALLACCPTAPPRV(r5, 0x89e8) r6 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r6, 0x0, 0x2, &(0x7f0000000080)={0xffffffff, 0x0, 0x20}, 0x10) 22:37:42 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:37:42 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0xa42503) r5 = fcntl$dupfd(r4, 0x0, r3) write$FUSE_ATTR(r5, &(0x7f0000000280)={0x78}, 0x78) ioctl$TIOCSCTTY(r5, 0x540e, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r6, 0x0, 0x2, &(0x7f0000000080), 0x10) [ 283.284769] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 22:37:42 executing program 4: syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1, 0x0, &(0x7f00000000c0)=0x180) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r2, 0x29, 0x1, 0x0, &(0x7f00000000c0)) getsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000040), &(0x7f0000000100)=0x4) getsockopt$inet6_int(r1, 0x29, 0x1, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) clone(0xc520acdec1003f2e, 0x0, 0x0, 0x0, 0x0) 22:37:42 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:37:42 executing program 5: syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) ioctl$UI_SET_PHYS(r3, 0x4008556c, &(0x7f0000000100)='syz0\x00') r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r6 = fcntl$dupfd(r5, 0x0, r4) write$FUSE_ATTR(r6, &(0x7f0000000280)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x78) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x5, 0x0, 0x6, 0x2}]}) r7 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r8 = fcntl$dupfd(r7, 0x0, r0) write$FUSE_ATTR(r8, &(0x7f0000000280)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}}, 0x78) ioctl$PPPIOCSFLAGS(r8, 0x40047459, &(0x7f0000000000)=0x80020) 22:37:42 executing program 1: socketpair$unix(0x1, 0x47c4ae663a601704, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000080)={0x0, 0x0, 0x401, 0x1}, 0x10) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000040)=0x3, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000100)={0x80000000}) 22:37:42 executing program 5: open$dir(&(0x7f0000000000)='./file0\x00', 0x200400, 0x100) [ 283.417554] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 [ 283.432482] IPVS: ftp: loaded support on port[0] = 21 22:37:42 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) creat(&(0x7f0000000280)='./file0\x00', 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:37:42 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x401, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = getpid() r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x1, 0x0, 0x9}, 0x0) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f00000000c0)=r3) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r5, 0x0, 0x2, &(0x7f0000000080), 0x10) [ 283.614944] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 22:37:42 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:37:42 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000040)=""/137, 0x89) [ 283.762530] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 22:37:42 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r5, r4) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:37:42 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x3000) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:42 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000080), 0x10) r4 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x73c, 0x13180) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f00000000c0)={0xc, 0x8, 0xfa00, {0x0}}, 0xfffffe04) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x80000000001, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote}, r6}}, 0x171) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r4, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {&(0x7f00000000c0), 0x3, {0xa, 0x4e21, 0x3, @mcast1, 0xab}, r6}}, 0x38) 22:37:42 executing program 5: bind$x25(0xffffffffffffffff, &(0x7f0000000000)={0x9, @remote={[], 0x0}}, 0x12) syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r2 = fcntl$dupfd(r1, 0x0, r0) write$FUSE_ATTR(r2, &(0x7f0000000280)={0x78}, 0x78) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00'/13, @ANYRES32=0x0], &(0x7f000095dffc)=0x1bb) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r8 = fcntl$dupfd(r7, 0x0, r6) write$FUSE_ATTR(r8, &(0x7f0000000280)={0x78}, 0x78) setsockopt$packet_buf(r8, 0x107, 0x6, &(0x7f00000001c0)="5ca9f906e8b62376762dfdd0aa0779e1029daebeeb1fb7d24617ab3def05bb51a0e34ccd42a92135c8516cb3743fe74fe3746aed617683d1c7763f2315f4393dcca47de9188c4789a1a0a5475becae8d58c4858d7431a958048c8a62d919ec418cde3c177b962fccf974612a0d17a99e50da4b8adf0a6960e7ed2407df22df", 0x7f) r9 = fcntl$dupfd(r5, 0x0, r4) write$FUSE_ATTR(r9, &(0x7f0000000280)={0x78}, 0x78) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r11 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r12 = fcntl$dupfd(r11, 0x0, r10) write$FUSE_ATTR(r12, &(0x7f0000000280)={0x78}, 0x78) ioctl$SG_GET_TIMEOUT(r12, 0x2202, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000180)={r3}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000040)={0x3e1f, 0x208, 0x8, 0x1000, r3}, &(0x7f0000000080)=0x10) 22:37:42 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r5, r4) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) [ 283.909874] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 22:37:42 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x60) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000000080)=0x2) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:42 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x605, r0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x3, 0x1}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000080), 0x10) [ 284.027049] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 22:37:43 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r5, r4) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:37:43 executing program 5: syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x4, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r2 = fcntl$dupfd(r1, 0x0, r0) write$FUSE_ATTR(r2, &(0x7f0000000280)={0x78}, 0x78) connect$ax25(r2, &(0x7f0000000000)={{0x3, @null, 0x6}, [@default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 22:37:43 executing program 1: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x404000, 0x0) write$P9_RLERROR(r0, &(0x7f00000000c0)={0xf, 0x7, 0x2, {0x6, 'cgroup'}}, 0xf) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) semctl$GETNCNT(0x0, 0x4, 0xe, &(0x7f0000000100)=""/132) setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, &(0x7f0000000080), 0x10) 22:37:43 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r1, 0x29, 0x1, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x1000000, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 284.197999] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 22:37:43 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:37:43 executing program 5: syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x7ff, 0x440020) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xfff, 0x1) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000040)={0xfffffff7, 0x0, [], {0x0, @reserved}}) 22:37:43 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) ioctl$MON_IOCQ_URB_LEN(r2, 0x9201) getsockopt$inet6_int(r3, 0x29, 0x1, 0x0, &(0x7f00000000c0)) write(r3, &(0x7f00000000c0)="bfa64c9737d35ec8bd61e4abfeaae6942ef23b64f5fe48babc161598cef7a02228c2584c4b9c50e5c3f5cd8799cc7413cb1a437c6a9f9c07487d5418119f1e11448f599601de842f193457fca77d05215bb7d3d362913d4f7f1ad73f1cb204b98b0cd4b74e85909d5b34a1417bdb37b8348b7b29f0e99a87d32f999825150b01ca262d0423bb7127232fc1547a88e3f5ac81013bd1a240a4e715b4dcadc56033b323b36204e261da4542d19c03decbf8f372f3b9858716395feaed008171b9a7148848", 0xc3) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000040)=0x7, 0x4) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, &(0x7f0000000080)={0x0, 0x0, 0x40000}, 0x10) 22:37:43 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x9, 0x40) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000080)=0x400) 22:37:43 executing program 5: times(&(0x7f0000000000)) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={0xffffffffffffffff}) getpeername$tipc(r1, &(0x7f0000000140), &(0x7f0000000180)=0x10) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000080)={'nat\x00', 0x4, [{}, {}, {}, {}]}, 0x68) syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x105200) [ 284.385954] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 22:37:43 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:37:43 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x9) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000080), 0x10) 22:37:43 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x200040, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000080)={{0x6, 0x7}, {0xd1}, 0x7ff, 0x4, 0x1}) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) write$FUSE_IOCTL(r1, &(0x7f0000000100)={0x20, 0x0, 0x4, {0x4, 0x2, 0x2, 0x1}}, 0x20) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:43 executing program 5: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x7fff, 0x301902) [ 284.569301] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 22:37:43 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:37:43 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000080), 0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r4, 0x29, 0x1, 0x0, &(0x7f00000000c0)) write(r4, &(0x7f00000000c0)="1f67814515a5bd0fae9d0fe3ab48baed653cdf9d803474d9deb02ab661a722d2bdf5937f1dfda2585452ce7161b7ecddcc4a25eaf1214b102b98788ec292fea0f8de798665f5d6b685e0d173e737356a9e137f453ff82bbe81d1431de69e7b3f883d6df92613cb0b45b0f1772d2ce98364efda40b964bd2000438ef5e7f5a77b1934b6b0a017d37824d0203b70e8a3a68e2c02b8457814d90488e408550b84410331f259e2897d131163b4af126859b0a96641fa48f97ad6a62dbe9b66417f3221fd9ee457862b5917e23d5b0ffc434aa1db4c4aadd223f24572becbea5e", 0xde) 22:37:43 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x509a1300, 0x0, 0x0, 0x0, 0x0) 22:37:43 executing program 5: syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x121102, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f00000000c0)=0x5) bind$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x40}, 0x4}}, 0x10) [ 284.770564] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 22:37:43 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) syz_open_procfs(0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:37:43 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000080), 0xffffffffffffff56) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r6 = fcntl$dupfd(r5, 0x0, r4) write$FUSE_ATTR(r6, &(0x7f0000000280)={0x78}, 0x78) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x200, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) 22:37:43 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r0) 22:37:43 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = open(&(0x7f0000000000)='./file0\x00', 0x82200, 0x9) write$selinux_attr(r1, &(0x7f0000000040)='system_u:object_r:inetd_exec_t:s0\x00', 0x22) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r4 = fcntl$dupfd(r3, 0x0, r2) write$FUSE_ATTR(r4, &(0x7f0000000280)={0x78}, 0x78) write$apparmor_current(r4, &(0x7f0000000080)=@hat={'changehat ', 0x1, 0x5e, ['@:\x00', 'security))\x00', 'wlan0keyring\x00', 'system_u:object_r:inetd_exec_t:s0\x00', '/dev/bus/usb/00#/00#\x00', 'procbdev\x00', 'ppp0\\wlan1\x00', '.bdev\x00', '\x00']}, 0x8a) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x19a, &(0x7f00000001c0), 0x2, &(0x7f0000000200)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3}}], 0x18}, 0x20000000) syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x0) [ 284.937600] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 22:37:43 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) syz_open_procfs(0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:37:44 executing program 5: syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x0) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000000)) 22:37:44 executing program 4: syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x1, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf875c31739fd4bb3, 0x8012, r0, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000140)='trusted.overlay.origin\x00', &(0x7f0000000180)='y\x00', 0x2, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x100000, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, &(0x7f0000000040)=ANY=[@ANYBLOB="06000000000000000000000000000000000000b7c1b469175be1fa0000000000"]) ioctl$TIOCLINUX6(r4, 0x541c, &(0x7f0000000080)={0x6, 0x6}) clone(0x40000000, 0x0, 0x0, 0x0, 0x0) [ 285.108135] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 22:37:44 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) syz_open_procfs(0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:37:44 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r2 = fcntl$dupfd(r1, 0x0, r0) write$FUSE_ATTR(r2, &(0x7f0000000280)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1}}}, 0x78) ioctl$VIDIOC_S_EDID(r2, 0xc0285629, &(0x7f0000000040)={0x0, 0x4, 0xfffffffc, [], &(0x7f0000000000)=0xeb}) syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x0) [ 285.307233] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 22:37:44 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x9467, 0x4200) splice(0xffffffffffffffff, &(0x7f0000000040)=0x9f, r0, &(0x7f00000000c0)=0xf24a, 0x8000, 0x6) syz_open_dev$usbfs(&(0x7f0000000000)='/\xf1\xff\x00\x00#/00#\x00\x00\x00\x00\b\x00\x00\x04\x00', 0x40000000909, 0x10400) 22:37:44 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:37:44 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r2 = fcntl$dupfd(r1, 0x0, r0) write$FUSE_ATTR(r2, &(0x7f0000000280)={0x78}, 0x78) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x300, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10004000}, 0x40080b0) syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x1004000000090c, 0x4100) [ 285.442700] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 22:37:44 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) fcntl$dupfd(r2, 0x0, r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) [ 285.563230] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 22:37:44 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:37:44 executing program 1: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000280)=ANY=[@ANYBLOB="010032ee6976160779905873a2452933a3baf74a471f891e4db0e502689dca7a474d6bead9325079266de9bd0dc3561cf8c0744925c53f30441ca831b438779c7100e3f8b28986fa7f2241955c", @ANYRES32=0x0], &(0x7f000095dffc)=0x1bb) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = syz_open_dev$audion(&(0x7f0000000540)='/dev/audio#\x00', 0x7ff, 0xc80) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000580), &(0x7f00000005c0)=0x4) r4 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r4, &(0x7f0000000280)={0x78}, 0x78) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e21, @loopback}}}, &(0x7f0000000100)=0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="61ca85b3", @ANYRES32=0x0], &(0x7f000095dffc)=0x1bb) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000180)={r5}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000400)={r5, 0x30, &(0x7f00000003c0)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x16}}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x10}}, @in={0x2, 0x4e22, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000600), 0x4) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000180)={r6}, 0xfffffffffffffe63) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={r0, 0x3}, &(0x7f00000000c0)=0x8) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = semget$private(0x0, 0x2000000010a, 0x0) semop(r9, &(0x7f0000000080)=[{0x0, 0x2}, {0x1, 0x0, 0x1000}], 0x2) semop(r9, &(0x7f0000000140)=[{0x0, 0x0, 0x1000}], 0x1) semctl$GETNCNT(r9, 0x4, 0xe, &(0x7f00000001c0)=""/185) r10 = fcntl$dupfd(r8, 0x0, r7) flistxattr(r7, &(0x7f0000000480)=""/48, 0x30) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r11, 0x0, 0x2, &(0x7f0000000080), 0x10) r12 = syz_open_dev$amidi(&(0x7f00000004c0)='/dev/amidi#\x00', 0x9, 0x250200) setsockopt$inet_sctp6_SCTP_MAXSEG(r12, 0x84, 0xd, &(0x7f0000000500)=@assoc_id=r5, 0x4) 22:37:44 executing program 5: syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb//0#/00#\x00', 0x40000000909, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x1bb) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000180)={r0}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x8001, 0x8201, 0x8, 0xffffff7f, r0}, &(0x7f0000000040)=0x10) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x8000, 0x40) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000100)={0x5, 0x130, 0x401, 0x3f, 0x2, 0x200}) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f00000000c0)=0x1) [ 285.709576] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 22:37:44 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) [ 285.857480] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 22:37:45 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r1, 0x29, 0x1, 0x0, &(0x7f00000000c0)) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x1) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:45 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f00000004c0)=0xff67) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r1}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r1}, 0x10) syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x4000000090c, 0x0) 22:37:45 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$caif_stream(0x25, 0x1, 0x3) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000080), 0x10) 22:37:45 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:37:45 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cae000/0x4000)=nil, 0x4000, 0x1000000, 0x4140132, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:45 executing program 5: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x400b00) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000300)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r2) setresuid(r1, 0x0, r2) r3 = getuid() mount$9p_xen(&(0x7f0000000000)='syz\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x2240000, &(0x7f0000000100)={'trans=xen,', {[{@access_client='access=client'}, {@debug={'debug', 0x3d, 0x78}}, {@privport='privport'}, {@version_L='version=9p2000.L'}, {@mmap='mmap'}, {@msize={'msize', 0x3d, 0x3}}], [{@permit_directio='permit_directio'}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@smackfsroot={'smackfsroot', 0x3d, 'wlan0$'}}, {@euid_lt={'euid<', r1}}, {@fowner_lt={'fowner<', r3}}]}}) 22:37:45 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x1, 0x0, &(0x7f00000000c0)) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x9, 0x5, 0x3, 0x6, 0x401, 0x7fff, 0x4, 0x4, 0x7, 0xb5b2, 0x60a, 0x8, 0x5, 0x80000001, 0x9], 0x10000, 0x40000}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) accept$ax25(r2, &(0x7f0000000200)={{0x3, @netrom}, [@bcast, @netrom, @default, @bcast, @bcast, @default, @netrom]}, &(0x7f0000000280)=0x48) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$capi20(r2, &(0x7f0000000040)={0x10, 0x1ff, 0xc5, 0x82, 0x5, 0xffffff7f}, 0x10) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000080), 0x10) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000100)=0x7fff) [ 286.223582] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 22:37:45 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:37:45 executing program 5: syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x24b40) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000040)=""/101) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000280)={0x78}, 0x78) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect={0x4}) 22:37:45 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCCONS(r2, 0x541d) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3f}, 0x1c) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup2(r0, 0xffffffffffffffff) bind$bt_rfcomm(r4, &(0x7f0000001400)={0x1f, {0x3, 0x3f, 0x40, 0x20, 0x80, 0x9}, 0x5}, 0xa) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000080), 0x10) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r7 = fcntl$dupfd(r6, 0x0, r5) write$FUSE_ATTR(r7, &(0x7f0000000280)={0x78}, 0x78) setsockopt$bt_hci_HCI_DATA_DIR(r7, 0x0, 0x1, &(0x7f00000000c0)=0xffffdd7b, 0x4) 22:37:45 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:37:45 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r1, 0x29, 0x1, 0x0, &(0x7f00000000c0)) r2 = fcntl$dupfd(r0, 0x406, r1) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000000180)={0x0, 0xb89, &(0x7f0000000040)="bcb8fa00021a68f1b4092012f3214f17efea1110dfd2d27e293d32fcbf3e6506de330c094336c342b25ae7ded7b162ecc6e3b50cc72fd75b978c00d527cb78e09696da8dd2af2da5bb674f9189fe4f0f8c2ed3c0e56ded4d4be37d530fc215f8ef2ed3f8bbade1f719d1390582b3a0b6527b8691c2082d1f2d6ab8aafa2f0b5755a7722f49bc932e8b393f700b47b83a1d54", &(0x7f0000000100)="1fe1b45d114c3173da1e4795fafad563898785b961a4b988b8047c30c0784157a7a0fb9dcc87dfedd8613d1a1190d6ef856bdcd4ec6b1be45e91cf17132268d5cd32", 0x92, 0x42}) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:45 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:37:45 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/deC\x05\x00\x00\x00\x00\x00\x00#\x00', 0xae, 0x4bfd3522d87abbd4) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) clone(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x1, 0xb, 0x4) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000080), &(0x7f00000000c0)=0x4) openat$random(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x800, 0x0) 22:37:45 executing program 2: r0 = syz_open_dev$usbfs(0x0, 0x40000000909, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:37:45 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/\x01\x00', 0xfffffffffffffffc, 0x165001) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r1, 0x29, 0x34, 0x0, &(0x7f00000000c0)=0x90599ebfedf2083e) r2 = dup3(r1, r0, 0xc0000) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x2000008, 0x2010, r2, 0xe5a0d000) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:45 executing program 2: r0 = syz_open_dev$usbfs(0x0, 0x40000000909, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:37:45 executing program 5: syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r2 = fcntl$dupfd(r1, 0x0, r0) write$FUSE_ATTR(r2, &(0x7f0000000280)={0x78}, 0x78) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r5 = fcntl$dupfd(r4, 0x0, r3) write$FUSE_ATTR(r5, &(0x7f0000000280)={0x78}, 0x78) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x1bb) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000180)={r6}, 0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000000)={r6, 0x9, 0x9, 0x9}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000080)={0x1, 0xf, 0x400, 0x5, r7}, &(0x7f00000000c0)=0x10) 22:37:45 executing program 2: r0 = syz_open_dev$usbfs(0x0, 0x40000000909, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:37:45 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f0000000040)={0x8, &(0x7f0000000000)=[{0x4, 0x3f, 0x7, 0x5}, {0x1, 0x9, 0x3f, 0x1}, {0x400, 0x8f, 0xcb, 0x194}, {0x2, 0x0, 0x8, 0x5}, {0x6, 0x81, 0x2, 0x81}, {0x1877, 0xff, 0xfa, 0x3}, {0x401, 0x3a, 0x17, 0xfffffffe}, {0xa78, 0x28, 0x4c, 0x1}]}) syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x0) 22:37:45 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) [ 287.755286] device bridge_slave_1 left promiscuous mode [ 287.765274] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.793863] device bridge_slave_0 left promiscuous mode [ 287.799409] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.868656] device hsr_slave_1 left promiscuous mode [ 287.883537] device hsr_slave_0 left promiscuous mode [ 287.903421] team0 (unregistering): Port device team_slave_1 removed [ 287.921356] team0 (unregistering): Port device team_slave_0 removed [ 287.936928] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 287.949378] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 288.009147] bond0 (unregistering): Released all slaves [ 291.104683] IPVS: ftp: loaded support on port[0] = 21 [ 291.179225] chnl_net:caif_netlink_parms(): no params data found [ 291.213090] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.219564] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.226581] device bridge_slave_0 entered promiscuous mode [ 291.233613] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.239971] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.247381] device bridge_slave_1 entered promiscuous mode [ 291.264351] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 291.273608] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 291.289197] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 291.296422] team0: Port device team_slave_0 added [ 291.301867] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 291.308840] team0: Port device team_slave_1 added [ 291.314242] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 291.321924] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 291.339989] device hsr_slave_0 entered promiscuous mode [ 291.345757] device hsr_slave_1 entered promiscuous mode [ 291.352144] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 291.359204] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 291.373148] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.379508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.386203] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.392580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.421936] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 291.428030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.436665] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 291.445458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 291.453606] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.461026] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.470647] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 291.476764] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.485607] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 291.493708] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.500097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.510453] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 291.517983] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.524470] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.541365] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 291.549103] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 291.556888] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 291.565858] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 291.576105] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 291.587041] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 291.593418] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 291.600574] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 291.614549] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 291.622172] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 291.628912] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 291.639355] 8021q: adding VLAN 0 to HW filter on device batadv0 22:37:50 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:37:50 executing program 4: write$capi20_data(0xffffffffffffffff, &(0x7f0000000180)={{0x10, 0x0, 0x5, 0x186, 0x6, 0x400}, 0xdf, "97a797130b65a4c6c4a8ef6f6751972ec2b2ad7fc39f7f5dc690f9d82448021512738727869cd479e930c6a393c8455c32d7c5364bb6e86c5eec069cb222ca13183b39d18fe05537c58dd4161302ab8005b2d2256ffdd578b49114cae9e086c59205e7a5b9e7f7197c03301c0ba86f1b7cec3570e7fe7c8f4f4d743da14a7f1840ef714a711fee6161786d2c2664bdc6c44c653fd6b5458ad005c345a8423317acb40ea90b66e118e3a522e1b4795acf380ac8844638c1ead2701fc08f2a147f4bd182429dc142777788401ef6cac25dd9bb57c0719e36ccce12358c476461"}, 0xf1) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x5}}}, 0x78) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r6 = fcntl$dupfd(r5, 0x0, r4) write$FUSE_ATTR(r6, &(0x7f0000000280)={0x78}, 0x78) setsockopt$TIPC_CONN_TIMEOUT(r6, 0x10f, 0x82, &(0x7f0000000300)=0x1, 0x4) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0xc9ac649d0e9c3130) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r7, 0xc008551a, &(0x7f0000000100)={0xfff, 0xc, [0x2, 0x80000001, 0x800]}) clone(0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r8, 0x10e, 0x1, &(0x7f0000000140)=0x6, 0x4) 22:37:50 executing program 5: umount2(&(0x7f0000000080)='./file0\x00', 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x9e031936153815c6) r1 = getpid() r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r4 = fcntl$dupfd(r3, 0x0, r2) write$FUSE_ATTR(r4, &(0x7f0000000280)={0x78}, 0x78) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x1bb) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000180)={r5}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000200)={0x0, 0x3}, &(0x7f0000000240)=0xc) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000300)={r5, 0x92a, 0x200, 0x81, 0x0, 0x2, 0x1, 0x0, {r6, @in={{0x2, 0x4e23, @loopback}}, 0xcb3, 0x3ff, 0x2, 0x8, 0x480000}}, &(0x7f00000003c0)=0xb0) mq_notify(r0, &(0x7f0000000100)={0x0, 0x30, 0x9ee59b5deac3332b, @tid=r1}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='bridge0\x00', 0x10) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r10 = fcntl$dupfd(r9, 0x0, r8) write$FUSE_ATTR(r10, &(0x7f0000000280)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x78) write$P9_RMKNOD(r10, &(0x7f0000000140)={0x14, 0x13, 0x2, {0x2, 0x2}}, 0x14) connect$inet6(r7, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c) connect$l2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r7, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(0xffffffffffffffff, &(0x7f0000005fc0), 0x800000000000059, 0x0) syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000907, 0x20940) 22:37:50 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r2 = fcntl$dupfd(r1, 0x0, r0) write$FUSE_ATTR(r2, &(0x7f0000000280)={0x78}, 0x78) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r5 = fcntl$dupfd(r4, 0x0, r3) write$FUSE_ATTR(r5, &(0x7f0000000280)={0x78}, 0x78) ioctl$DRM_IOCTL_AGP_ALLOC(r5, 0xc0206434, &(0x7f0000000040)={0x678, 0x0, 0x10000, 0x3}) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f00000000c0)={0x5, r6, 0x0, 0x2}) r7 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x8041) ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:37:50 executing program 0: syz_mount_image$ntfs(&(0x7f0000000400)='ntfs\x00', &(0x7f0000000440)='./file0\x00', 0x900, 0x0, 0x0, 0x0, &(0x7f0000000c40)={[{@show_sys_files_no='show_sys_files=no'}, {@errors_continue='errors=continue'}, {@umask={'umask'}}, {@uid={'uid'}}, {@errors_recover='errors=recover'}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@fmask={'fmask'}}]}) r0 = pkey_alloc(0x0, 0x0) pkey_free(r0) 22:37:50 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x189000, 0x0) r3 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom(r3, &(0x7f0000000040)=""/17, 0x11, 0x10000, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0), 0x840e00) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r8 = fcntl$dupfd(r7, 0x0, r6) write$FUSE_ATTR(r8, &(0x7f0000000280)={0x78}, 0x78) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r8) fcntl$dupfd(r5, 0x0, r4) setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, &(0x7f0000000080)={0x0, 0x400000}, 0x10) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x80000, 0x0) 22:37:50 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) [ 291.780846] __ntfs_error: 10 callbacks suppressed [ 291.780856] ntfs: (device loop0): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. 22:37:50 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) [ 291.842989] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 [ 291.859150] ntfs: (device loop0): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 291.867689] audit: type=1400 audit(1575067070.769:68): avc: denied { setopt } for pid=12952 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 291.898036] ntfs: (device loop0): read_ntfs_boot_sector(): Could not find a valid backup boot sector. [ 291.909564] ntfs: (device loop0): ntfs_fill_super(): Not an NTFS volume. 22:37:50 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) fcntl$setstatus(r0, 0x4, 0x4000) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000ffe000/0x1000)=nil) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) 22:37:50 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r1, 0x0) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000080)) syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x3, 0x2) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000000c0)={0x3ff, 0xab0e, 0x2, 0xfffe}) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:50 executing program 5: syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) write$vhci(0xffffffffffffffff, &(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, "2913cf449fe72c1d4b"}, 0xa) r2 = fcntl$dupfd(r1, 0x0, r0) write$FUSE_ATTR(r2, &(0x7f0000000280)={0x78, 0x0, 0x0, {0x20000000000, 0x54}}, 0x78) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000000)={0x6, [0x7, 0x7, 0x4, 0x7, 0x5, 0x4]}, &(0x7f0000000040)=0x10) 22:37:50 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) [ 292.001055] ntfs: (device loop0): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 292.031448] ntfs: (device loop0): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 292.079516] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 [ 292.087227] ntfs: (device loop0): read_ntfs_boot_sector(): Could not find a valid backup boot sector. 22:37:51 executing program 5: syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r2 = fcntl$dupfd(r1, 0x0, r0) write$FUSE_ATTR(r2, &(0x7f0000000280)={0x78}, 0x78) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f0000000040)={r3, 0x1}) 22:37:51 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:37:51 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x800) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x7) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f00000000c0)={'ah\x00'}, &(0x7f0000000100)=0x1e) 22:37:51 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x8, 0x8012, r0, 0x2ae77000) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x8, 0x420000) write$FUSE_ATTR(r1, &(0x7f0000000080)={0x78, 0xfffffffffffffffe, 0x5, {0x9, 0x0, 0x0, {0x1, 0x7fffffff, 0x8, 0x2, 0xfffffffffffffc01, 0xfffffffffffffffd, 0x9, 0xffff9e09, 0x45, 0x4, 0x284, 0xffffffffffffffff, 0x0, 0x200, 0x3ff}}}, 0x78) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 292.127853] ntfs: (device loop0): ntfs_fill_super(): Not an NTFS volume. [ 292.163491] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 [ 292.170575] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready 22:37:51 executing program 5: syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f00000001c0)={'broute\x00', 0x0, 0x3, 0x7f, [], 0x4, &(0x7f0000000100)=[{}, {}, {}, {}], &(0x7f0000000140)=""/127}, &(0x7f0000000240)=0x78) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r2, 0x29, 0x1, 0x0, &(0x7f00000000c0)) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f0000000000)) getsockopt$inet6_int(r0, 0x29, 0x1, 0x0, &(0x7f00000000c0)) flock(r0, 0x2) 22:37:51 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000040)=0x78) r4 = fcntl$dupfd(r0, 0x406, r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f00000001c0)={0x0, 0x1, 0x23, "5cf0e2c6341ad6149d48070eba8d526539bf36290dcf8a64bd568a6816f1ce802b022b"}, 0x2b) r6 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffffff9, 0x630800) write$P9_RRENAME(r6, &(0x7f0000000180)={0x7, 0x15, 0x2}, 0x7) setsockopt$bt_hci_HCI_FILTER(r5, 0x0, 0x2, &(0x7f0000000080), 0x10) 22:37:51 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:37:51 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000240)={0x0, 0x1, &(0x7f0000000200)="05"}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f0000001300), 0x40000a2, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x200, 0x0) setsockopt(r5, 0x4, 0x0, &(0x7f0000000140)="641322da6895a09b1dee5b0f1dced2fddd4b2385d4fc5f58a17ce7d4ae9fce1d2eadb1efbc748f60ae0da3afbc826a052a6362979e2aaf559999e708ebd0284b9bd67e70d6ee5750d377365ec90d7e845ff44844262d96495caa9da0028e9d6701fa66c7ddf54d1691824c1e79fcadb9cde09fda70b4e1161c448eb63264c1539c2040418571bc754355c87982c7d7215b454146b16eb78b86f3484a9065fd162e1e0dcce1fecfe7d91be0ad105503f00b", 0xb1) r6 = accept4$bt_l2cap(r4, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x0) ioctl$sock_TIOCINQ(r6, 0x541b, &(0x7f00000000c0)) 22:37:51 executing program 0: r0 = geteuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) getgroups(0x1, &(0x7f00000002c0)=[r1]) syz_mount_image$ntfs(&(0x7f0000000400)='ntfs\x00', &(0x7f0000000440)='./file0\x00', 0x900, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@show_sys_files_no='show_sys_files=no'}, {@errors_continue='errors=continue'}, {@umask={'umask'}}, {@uid={'uid'}}, {@errors_recover='errors=recover'}, {@show_sys_files_no='show_sys_files=no'}, {@gid={'gid', 0x3d, r1}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@fmask={'fmask'}}], [{@hash='hash'}, {@context={'context', 0x3d, 'root'}}, {@euid_gt={'euid>', r0}}, {@obj_role={'obj_role'}}, {@fsmagic={'fsmagic', 0x3d, 0x40}}]}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f00000001c0)={&(0x7f0000000100)=[0x6, 0x8, 0xdc9, 0x4, 0x80000001, 0x1f, 0x2], 0x7, 0x4, 0x5, 0x9, 0x6, 0x9, {0x2efb, 0x258a, 0x3, 0x7, 0x20, 0x5, 0x6, 0x9, 0x8d, 0x40, 0x4, 0x8, 0x3, 0x40400000, "b8472bfc63a99daa39825fcab99444b20b8f49e3a5610f581e7a0ad10b38f4fe"}}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000005d00)={&(0x7f0000000040)=@newlink={0x5c, 0x10, 0xd07, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0x18, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @mcast1={0xff, 0x1, [0x9]}}]}}}, @IFLA_BROADCAST={0xc, 0x2, @local}, @IFLA_MASTER={0x8, 0xa, 0x33e0}]}, 0x5c}}, 0x0) r4 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r5 = fcntl$dupfd(r4, 0x0, r2) write$FUSE_ATTR(r5, &(0x7f0000000280)={0x78}, 0x78) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r5, 0x80845663, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x80000000, @empty, 0x4}, @in6={0xa, 0x4e20, 0x401, @empty, 0x5}], 0x38) 22:37:51 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) vmsplice(r0, &(0x7f0000001480)=[{&(0x7f0000000100)="dff6465e5d68cd6dc7aa04b4c20d3943e2d5d44b8a9e7a42d2c2177f01df86ed41692ebdc46e4783bb205dcc77eb28c09853cfc539785f6b0f5e326bcda46f80a9b432b8137f39f359262a3c5cd15fac7faa2b93a6", 0x55}, {&(0x7f0000000180)="4213744efe6fbba5d7eb6b7001dc490dc8526af47888bdcdf46684d51f5abf9ed6acb41da1b8df616126c636186aaac51665fc21b75bc6df0fe2603377d0f271e3b8feb1e7d8bf2445cc4da5116e42254237643ecb2f3da69301d83dce86fd177203c6c42dac73a7cc869daf75420c1f74062bd354e8d35cc95ea064667d462ecbc3492796ff2aa5b83c8f39d441c56d8570b511ad2f4bd16afe5f207f5ea0cfa950ed4f9e8716ab5d88eb6926f951f3fbc75e5bfd9baabd1d275cd8f4937d805d7b38557785a84537b61af06ba294bfeb0a1f", 0xd3}, {&(0x7f0000000300)="84fabb620d537dc6e75c27ad40e9ecd5a55b7c8664805ff13e148f095ba9dc2f06d2455a618d3eb3cf4fae1769afc7050d84b342944412b99ba9fceada6ac187400c4d4748d41dd017d06b765fb5895854541c6a61ac3d8d93b701e9a47c9c7e85bb8e1daad43bb3208d944344d40f9b13ca51cb2d24bb83444f15f1cf5eacee5beaa5371c9c44ed22661647359af669e3e483d464b8ba5042edb64520f7bc53249ecce16467d3a6c06c354249408bc718fc2ed8398f9b76a09c98b533b4f7311648baffe8452f74", 0xc8}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000001400)="baf7541ab1ab237ca8bfd505ed6b492f7ab2cb02c674efb536672113dd23900a20fa6e2e81bfe1f5ed94beaac70fa62375815af289dcb359ea32f20a9edbffc1f1a6b754452e8e44f0f8c67192831f201c56b1d2ad270f4f8d5f4344a98448f001a5cbee3c13aee73dddca28c8db3269c7804c4681982d011843ee0ad6869b", 0x7f}], 0x5, 0x8) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000040)) write$FUSE_ATTR(r2, &(0x7f0000000280)={0x78}, 0x78) ioctl$BLKRESETZONE(r2, 0x40101283, &(0x7f0000000000)={0xa00000000000, 0xff7}) 22:37:51 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x42002, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r2, 0x29, 0x1, 0x0, &(0x7f00000000c0)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000740)={{{@in6, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000840)=0xe8) sendmmsg$inet6(r1, &(0x7f0000001200)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x4, @remote, 0x67e1}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000000c0)="206dd81ebcd822c8fe688133bce1d8973de0dfd0ed732876c73ee566b19e4ae087520833ebedf84a3e8e86dd6f050ba3cfd93713633a3cfea66f177cc20d2dacdf9d78c67063e53b", 0x48}, {&(0x7f0000000140)="4a7a23f44e5f8be056221d2252f29a54a90a624d7b4537e1a21832ce2b446a8f46033fb26ab774e7c61b0ef31a645bc52481838ec8", 0x35}, {&(0x7f0000000180)="2c61d74cf89ad16f3534569efb29bdd77bf18407285224c1531a24d691be4d255b0551c909e029f877481140e7138216b5a969d36f3298fae22908bdedfe0eb6c87208aabcf4127b114ab806bcd1f4c39e71d0365ea12000da9712116ce20ef64e4caa1b1f111ce87dd5c1cf98cc79cbc84084924849bf4ec934a8c82c614ae4e915e45250b8627bd5852bd837684f396837fc9791425b840bb39e9a09b7a13a8053eec82dde47288feaf0e73a2cebb2f9ad5f79c76d1d414b530b8a0f32af54f14131973de83f6ae649d2a349223ff97c6ccafffd7e0b64df670f36fca90d46d3597e984f82", 0xe6}, {&(0x7f0000000280)="2d9d081f46b6367d979dd2dc1d4d065243a65692934c32b972e9dda12db158c17f26378eb07b45ea497830f0c4b5c986ad512391749f5b6aa90d351555ead84b3112829886ce213d923a6327a15686e38c17c679add82291278bdc6e384aadeabea5e25f831339cd6b956e25417d74c85e7b2293d7be213fe1846afb5db243ddd4f19442b6be5fb97918cb462dcadde560a8ab0a36fd69ea71892b7eb8530ef9aeb2d2e395d7c5ac6e31a3bd886cf0d937041e406c5f475586b4843a9f9e65a8a78b8913213ace7758329441651d674ec9608459fc4c0ff8570a3c1b6ca615d49cc8876a289c", 0xe6}, {&(0x7f0000000380)="979d1fe90ec9097ab71bc4b6fb5eb5558f93fd66ff3e21c040a674dc88de334682f5608e6866b085787e90724ee9226b90e8106aa32a75574e4a256bcb5f96f3afe88310452d1bceadd2162c28", 0x4d}, {&(0x7f0000000400)="2fb45640faff43aaa2a0831c54f67d87cb6027b0aa93e3ae7e8dc7d0677139706166a791319d8a233f817ded959f3ea01aa641c9fe6f2f6e4c6e92ef6a3f9aa5b78d09f7b1b3a91efd764c50ae", 0x4d}, {&(0x7f0000000480)="e8adbd201f055e01ab825290dc1a640b4321ac6f264225f6a190be8d4db3135444f85e16b33538016ba0d1f24c9f37b418ee97d0047d3b913ec1ef352ffdb825bc13265a9f78fdbab8f86c2218881b227351a55e4d9b3d0f98f851d2c7144f7ce95285dbbb70497c64f4e8b50d8547289fe8558265e44f3453ee8313f06395b2ec20d559ea0af2c05b495d15170931220eafd3a7b6f751a16cb2aa7b24489681e457552eacef7e80e15d7cd5c0bca0c78becd1c27b2b77ed72f6f55625a5ad814c2d3361", 0xc4}, {&(0x7f0000000580)="53e19e4991632750fc201be228af91c181b69ed47d06e408d6423d83f49883e0307ad115c9204e11277dbbd4f221bfef56a5db1e0d35548913d6a852bec03861fa418feaebab19e220f9fd02a7f96a367084430820b11aac9f6e6ac202f60ace3cbc1b3e97b0de", 0x67}, {&(0x7f0000000600)="b230a9c49df4dee4ca24e52b1a0bcc233e2f1545ccdcb6b4d198ad576fde3d8fb870d89e7d4dee4efbaf2a81d10234edba", 0x31}, {&(0x7f0000000640)="32fbe5bba22f4e3cb285d8a8680bd9eab51ffc4f488abf7ab9f478cb5d71c2733e1c5353945ae25a45ea493726bf73bf93b27d4a6f6b98e48e6163", 0x3b}], 0xa, &(0x7f0000000880)=[@dontfrag={{0x14, 0x29, 0x3e, 0x8001}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback, r3}}}, @tclass={{0x14, 0x29, 0x43, 0x7}}], 0x58}}, {{&(0x7f0000000900)={0xa, 0x4e20, 0x0, @local, 0x8}, 0x1c, &(0x7f0000000c00)=[{&(0x7f0000000940)="6c7880022ce174333fc25cf9afc8085bd44b0d02feb054acc3e8b0abe42df72fd70448c82321dcdca7481ecf94ed6aa5661465c38905c826185613efa2d61fbcc1b6250ebe276878108258369a70e35a5fbdf62fe9215a46dff26a59ea25cada7a6aa258631a720364d5f104e217f4be", 0x70}, {&(0x7f00000009c0)="7591f23a353b", 0x6}, {&(0x7f0000000a00)="0cdca89fa234d2212cfa469036468e872c1d13d5ac4da5f371601117687aa1cb196b7cbb4be4ab07992c37e26164b7f59b45c942715bece0b16282d5caf40adcbe5d1fce", 0x44}, {&(0x7f0000000a80)="7add7dd2a4f02b7bce8034daedf57280cbb9f7b43b7ef97738db1112add0cb90ec33adeef13aea7dbad4cd02f84c143ac25eb3e5ad64b16e7b9f6c1a65542d737a70c4b1e62f5f0996644cf96b039409c20b29853c974ef277840c221378a02ac305e60f1c90819ef4c48927d324af79ce354c3ee02173c70fa6653df1", 0x7d}, {&(0x7f0000000b00)="2d9bc49fe9e3fc2c236eb7a2b5800bedb9806df2eeb4dbba67a26b0d59810e3bcf01bc7ce7f3e3ed8f280d40c530a4862daaa63fcac6f86653f6fa8c837dd1b8e0a9c21b61c131e33bd9eb30117f7dd856a170938e7cf4ea2a67043434832382d36ec98ba736be293933040fbd284941696f385dc9ae7d4bb625f562bc36f612d61883fbef5285c93c1b84a92fe992fadcb0967345f3cc7aea33700d9da3a0e2355bfea09fcce2c10f4f71c97d8d54679fe4b4e7851edf4131eeefab0ac1f8e7ab193d3d7e7a02cbe73a52004bcda28e64089e24670e7d8084b1f012ce9d139bfd057f", 0xe3}], 0x5, &(0x7f0000000c80)=[@hopopts_2292={{0x90, 0x29, 0x36, {0x42, 0xe, [], [@generic={0x8f, 0x6c, "2855c50704a0337e6a706a036083530fa1df6f2bdc8c1cece821723f004c0c270e2d000e199bf4a032b011d56930aac6e1a48f11397f56693fcfa38fd2bd203c18c9796da94f8683e613e4c8fa4061a0f398e29442e571e833b8d5218611f8a7f2c8a48c977d09e9a311d42a"}, @jumbo={0xc2, 0x4, 0x100}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x6}}, @hoplimit={{0x14, 0x29, 0x34, 0xffffff80}}, @hopopts_2292={{0x78, 0x29, 0x36, {0x2f, 0xb, [], [@ra={0x5, 0x2, 0x6}, @calipso={0x7, 0x18, {0x10000, 0x4, 0x0, 0x273, [0xf1a, 0x400]}}, @hao={0xc9, 0x10, @loopback}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0x27}}, @calipso={0x7, 0x18, {0x4, 0x4, 0x81, 0x5677, [0xcd4, 0x0]}}]}}}, @dstopts={{0x20, 0x29, 0x37, {0x2b, 0x0, [], [@pad1]}}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x33, 0xa, 0x0, 0x7, 0x0, [@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev={0xfe, 0x80, [], 0x1a}, @remote, @loopback, @loopback]}}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x4, 0xa, 0x0, 0x3, 0x0, [@mcast1, @rand_addr="85e0e21cdee6a2cd9eb863ce53e99ba1", @empty, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1d}}, @rand_addr="21303781a388597652be3f82cf52171f"]}}}], 0x228}}, {{0x0, 0x0, &(0x7f0000000ec0), 0x0, &(0x7f0000000f00)=ANY=[@ANYBLOB="14000000aa8100000000290000000b00000000007fff0000"], 0x18}}, {{&(0x7f0000000f40)={0xa, 0x4e20, 0x2, @mcast1, 0x3}, 0x1c, &(0x7f0000001180)=[{&(0x7f0000000f80)="8f3db3ad28fdb65e0c0470f89e7fcb3ccdefa8a4e1a22c49542771b0034e883040209fc20f2eaef74c4bc2ad01b906f378285a9d3122961e1566e4b47b68c11da3c149d6a4c93c1255976984a29e75acbbab3c7bcadd6d1c021c21144bc843a7e1de8a89555ea3a2cb3929e545c5358cfad2d87568137883f11c098c658d3cc1fa0eed890b545f27cd02552036e10c757f70c62981a823543a52955a86d3ad49bee89d4fccc71588f1e12fee501bed853b2d74a9e8b1243ca0a2f6035be5e7c520f5ceea85055db7f239c6a41199c8afba945f14163e3e33c998b613f26e1b6547eb183417607c6acd57214f498b2a683583c80d4926cf47e8", 0xf9}, {&(0x7f0000001080)="d60f5e3b77c26f1f328bd3589c4cf26d7c3e6fe5469c64c1db280bd0f900a5a2a8af55356c78b68a4970b366c8aa90b180a7dd5bed605db78c889b5746d2cea8c1e6820034d9c94d3513b7d904864e186d508a472f9b683b9e4855d3905f800d9576c8fa47060bd06c4430d912cb2d8cafecdf5606debe13b11f004826ae74ea84e647635914862953a57f1c4b44d54069485712dabe3339ecc70885fec428ffabb835b37dc6b78014ca3c76eaa7689e74f48187c48a15b2b1062217540d7878d826f0c9fcf35f910f968abc4a3db5fe76dfc4710a7a178f4fd023c999cd7cdb369be5c86847716755341d92288353a8002cdd9239182a8b", 0xf8}], 0x2, &(0x7f00000011c0)}}], 0x4, 0x40) clone(0x0, 0x0, 0x0, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0xf, r4, 0x0) getsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000001300)=""/129, &(0x7f00000011c0)=0x81) keyctl$setperm(0x5, r4, 0x1001104) write$P9_RLINK(r1, &(0x7f0000000ec0)={0x7, 0x47, 0x1}, 0x7) 22:37:51 executing program 5: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000040), 0x21000000, &(0x7f00000000c0)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) accept$alg(r3, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x0) [ 292.667953] ntfs: (device loop0): parse_options(): Unrecognized mount option hash. [ 292.670568] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 [ 292.686705] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 22:37:51 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r5 = fcntl$dupfd(r4, 0x0, r3) write$FUSE_ATTR(r5, &(0x7f0000000280)={0x78}, 0x78) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r5, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40002000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r6, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'hsr0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4020000}, 0x8000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 22:37:51 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x31, 0x4) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:51 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) [ 292.823596] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 [ 292.831850] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 22:37:51 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:37:51 executing program 5: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00\xff\xff\x00', 0x2, 0x0) 22:37:51 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x800) write$P9_RLERRORu(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1a0000000701000d006d643573756d73656ceb7171cbd4484d5c"], 0x1a) 22:37:51 executing program 0: syz_mount_image$ntfs(&(0x7f0000000400)='ntfs\x00', &(0x7f0000000440)='./file0\x00', 0x8000000000000900, 0x0, 0x0, 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='show_sys_files=no,errors=continue,umask=00000000000000000000000,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c6572726f72733d7265636f7665722c73686f775f7379735f66696c65733d6e6f2c6d66745f7a6f6e655f6d756c7469706cffff723d30783030303030303030303072ff2bf451820275e36af77fecb4ba653030303030302c6d66745f7a6f6e655f6d756c7469706c6965723d3078303030303030303030303030303030302c666d61736b3d303030323030303030"]) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x8000, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x8f4, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7b0b}, 0x1c) 22:37:51 executing program 4: syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x400000, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x2, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:51 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r6 = fcntl$dupfd(r5, 0x0, r4) write$FUSE_ATTR(r6, &(0x7f0000000280)={0x78}, 0x78) ioctl$TIOCSSERIAL(r6, 0x541f, &(0x7f0000000180)={0xc7b, 0x2, 0x1, 0xc769, 0x6d, 0x7f00, 0x1, 0xc9d2, 0x4, 0x80, 0x80, 0xffff, 0x800, 0x400, &(0x7f00000000c0)=""/182, 0x7, 0xfff, 0xfff}) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000080), 0x10) 22:37:52 executing program 5: syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x100000001, 0x1) [ 293.027482] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 [ 293.036705] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 [ 293.045644] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 22:37:52 executing program 4: mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r0 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000200)="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", 0x86, 0xfffffffffffffffa) r1 = request_key(&(0x7f0000000140)='big_key\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)='+vboxnet1-@\x00', 0xffffffffffffffff) keyctl$reject(0x13, r0, 0x5, 0x7, r1) 22:37:52 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:37:52 executing program 0: umount2(&(0x7f0000000080)='./file0\x00', 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x9e031936153815c6) r1 = getpid() r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r4 = fcntl$dupfd(r3, 0x0, r2) write$FUSE_ATTR(r4, &(0x7f0000000280)={0x78}, 0x78) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x1bb) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000180)={r5}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000200)={0x0, 0x3}, &(0x7f0000000240)=0xc) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000300)={r5, 0x92a, 0x200, 0x81, 0x0, 0x2, 0x1, 0x0, {r6, @in={{0x2, 0x4e23, @loopback}}, 0xcb3, 0x3ff, 0x2, 0x8, 0x480000}}, &(0x7f00000003c0)=0xb0) mq_notify(r0, &(0x7f0000000100)={0x0, 0x30, 0x9ee59b5deac3332b, @tid=r1}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='bridge0\x00', 0x10) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r10 = fcntl$dupfd(r9, 0x0, r8) write$FUSE_ATTR(r10, &(0x7f0000000280)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x78) write$P9_RMKNOD(r10, &(0x7f0000000140)={0x14, 0x13, 0x2, {0x2, 0x2}}, 0x14) connect$inet6(r7, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c) connect$l2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r7, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(0xffffffffffffffff, &(0x7f0000005fc0), 0x800000000000059, 0x0) syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000907, 0x20940) 22:37:52 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1f) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) ioctl$DRM_IOCTL_MARK_BUFS(r3, 0x40206417, &(0x7f0000000000)={0x6, 0x76, 0x76, 0x0, 0x0, 0x7ff}) 22:37:52 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x800, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f00000000c0)={0x0, @aes128}) 22:37:52 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r5 = fcntl$dupfd(r4, 0x0, r3) write$FUSE_ATTR(r5, &(0x7f0000000280)={0x78}, 0x78) ioctl$TUNSETOFFLOAD(r5, 0x400454d0, 0x15) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x10000, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x800, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r8 = fcntl$dupfd(r7, 0x0, r6) write$FUSE_ATTR(r8, &(0x7f0000000280)={0x78}, 0x78) setsockopt$bt_hci_HCI_FILTER(r8, 0x0, 0x2, &(0x7f0000000080)={0x0, 0x100000, 0x0, 0xdb02}, 0x10) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x1}, 0x8) [ 293.241779] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 [ 293.251257] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 22:37:52 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r2 = fcntl$dupfd(r1, 0x0, r0) write$FUSE_ATTR(r2, &(0x7f0000000280)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}}, 0x78) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000000)={'ip_vti0\x00', 0x3}) syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x0) 22:37:52 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:37:52 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) fallocate(r0, 0x44, 0x6, 0x3) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f00000000c0)={{0xa, 0x5, 0x800, 0x1, 'syz1\x00', 0x8}, 0x4, 0x30, 0x2, r1, 0x6, 0x778, 'syz1\x00', &(0x7f0000000040)=['cpusetwlan0vmnet0vboxnet1]\x00', 'ppp0\x00', '/dev/usbmon#\x00', '/dev/usbmon#\x00', '($bdev\x00', 'em0eth0@lo@}))\x00'], 0x50, [], [0x3, 0x100, 0x6, 0x1ff]}) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x20cc02, 0x0) mmap(&(0x7f0000cb1000/0x4000)=nil, 0x4000, 0x4, 0x13, r0, 0x50825000) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 293.355147] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 22:37:52 executing program 0: umount2(&(0x7f0000000080)='./file0\x00', 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x9e031936153815c6) r1 = getpid() r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r4 = fcntl$dupfd(r3, 0x0, r2) write$FUSE_ATTR(r4, &(0x7f0000000280)={0x78}, 0x78) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x1bb) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000180)={r5}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000200)={0x0, 0x3}, &(0x7f0000000240)=0xc) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000300)={r5, 0x92a, 0x200, 0x81, 0x0, 0x2, 0x1, 0x0, {r6, @in={{0x2, 0x4e23, @loopback}}, 0xcb3, 0x3ff, 0x2, 0x8, 0x480000}}, &(0x7f00000003c0)=0xb0) mq_notify(r0, &(0x7f0000000100)={0x0, 0x30, 0x9ee59b5deac3332b, @tid=r1}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='bridge0\x00', 0x10) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r10 = fcntl$dupfd(r9, 0x0, r8) write$FUSE_ATTR(r10, &(0x7f0000000280)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x78) write$P9_RMKNOD(r10, &(0x7f0000000140)={0x14, 0x13, 0x2, {0x2, 0x2}}, 0x14) connect$inet6(r7, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c) connect$l2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r7, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(0xffffffffffffffff, &(0x7f0000005fc0), 0x800000000000059, 0x0) syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000907, 0x20940) 22:37:52 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x1, 0x0, &(0x7f00000000c0)) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000040)=0x30) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f0000000140)=""/112) r4 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r7 = fcntl$dupfd(r6, 0x0, r5) write$FUSE_ATTR(r7, &(0x7f0000000280)={0x78}, 0x78) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r7, 0x80045700, &(0x7f0000000100)) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) [ 293.459808] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 22:37:52 executing program 4: syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/relabel\x00', 0x2, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x2, 0x8012, r0, 0x0) clone(0x1000000, 0x0, 0x0, 0x0, 0x0) 22:37:52 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:37:52 executing program 5: syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x4000000090d, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x20010, r3, 0xffffffffffffff00) r4 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r5 = fcntl$dupfd(r4, 0x0, r0) write$FUSE_ATTR(r5, &(0x7f0000000280)={0x78, 0x0, 0xfffffffffffffffe, {0x0, 0x0, 0x0, {0x0, 0x0, 0x9}}}, 0x78) setsockopt$ax25_int(r5, 0x101, 0x2, &(0x7f0000000000)=0xfc0, 0x4) 22:37:52 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000300)=0x3) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x230) setreuid(0x0, r6) setresuid(r4, 0x0, r6) fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r4, r7) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000140)=0xe, 0x80000) timer_create(0x2, &(0x7f0000000180)={0x0, 0x36, 0x4, @thr={&(0x7f0000000500)="b139d6892b8e3738cde194a11f555f63a22c809c2e63ed3a65bee24b867e04893c40f76d089bcdb9c946393af5ff30526b8f77b7ca8837d05c79fe22a7ab49250fb966bd88bbec59bf9431ccaa325a9e7bd1f9071f97d5d7012ead204bf1147c498c226ae38f80edbce5e45560b6c1d4792a57e98da4ec452ac95d509ab72e00ac597ce5ae511a3a6690a253f84c16c787594d96b90545ebd63d5b41ebee6a28601b1660ff8d201800a5755e7a5ee3db9152a8d9f51935cfe0f5bb713b09adf176fec86340e1c6eefa30a936863321ed5834abe60bdab4252abd92ae3258c9dd7e19ccb7730a", &(0x7f0000000600)="760cdd8fcc7aa509f2130f24418183435e93cd7a8d3cb9025f713e74c35abd5a8039fc07750adf8cc3604406710122f09e69e3ec2dbf2f8393548fc31270cf1615f77e69161dfd9f0f9b1ce18a1403f8bc56dca8a161447bb3a4827af4a241dcd346256e0db6cf1476484de56dbe491538968c65304851570752ad37c05c751537d223d2c2aed16f47185639cf769810f7be8ed1b7f3e46a1671d0320fa51ad1089eac016d2ccca2300a972566f31e658bdb656ad0bf696db7ae227bd07a7c11517caf66d5f024798198261a27e3780299f08eb39bb6ffd740806bdf8b8d7919144efa5ac586f052"}}, &(0x7f00000001c0)=0x0) timer_gettime(r9, &(0x7f0000000200)) setsockopt$bt_hci_HCI_FILTER(r8, 0x0, 0x2, &(0x7f0000000080), 0x10) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r11 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r12 = fcntl$dupfd(r11, 0x0, r10) write$FUSE_ATTR(r12, &(0x7f0000000280)={0x78}, 0x78) r13 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r14 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r15 = fcntl$dupfd(r14, 0x0, r13) write$FUSE_ATTR(r15, &(0x7f0000000280)={0x78}, 0x78) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000700)=ANY=[@ANYBLOB="0139c086f368b96c38880047f2", @ANYRES32=0x0], &(0x7f000095dffc)=0x1bb) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000180)={r16}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r15, 0x84, 0x7c, &(0x7f00000002c0)={r16, 0x1, 0x400}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r12, 0x84, 0x6c, &(0x7f0000000380)={r17, 0x37, "bdcd27d43167c1a67c55856394f758fa48d1f84e1c3b48f55f534af93653a8866d78072dad0d3bfe693410de7daf2fd01ce544f55a31b0"}, &(0x7f00000003c0)=0x3f) [ 293.576258] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 [ 293.615148] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 22:37:52 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup2(0xffffffffffffffff, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:37:52 executing program 5: umount2(&(0x7f0000000080)='./file0\x00', 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x9e031936153815c6) r1 = getpid() r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r4 = fcntl$dupfd(r3, 0x0, r2) write$FUSE_ATTR(r4, &(0x7f0000000280)={0x78}, 0x78) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x1bb) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000180)={r5}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000200)={0x0, 0x3}, &(0x7f0000000240)=0xc) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000300)={r5, 0x92a, 0x200, 0x81, 0x0, 0x2, 0x1, 0x0, {r6, @in={{0x2, 0x4e23, @loopback}}, 0xcb3, 0x3ff, 0x2, 0x8, 0x480000}}, &(0x7f00000003c0)=0xb0) mq_notify(r0, &(0x7f0000000100)={0x0, 0x30, 0x9ee59b5deac3332b, @tid=r1}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='bridge0\x00', 0x10) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r10 = fcntl$dupfd(r9, 0x0, r8) write$FUSE_ATTR(r10, &(0x7f0000000280)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x78) write$P9_RMKNOD(r10, &(0x7f0000000140)={0x14, 0x13, 0x2, {0x2, 0x2}}, 0x14) connect$inet6(r7, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c) connect$l2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r7, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(0xffffffffffffffff, &(0x7f0000005fc0), 0x800000000000059, 0x0) syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000907, 0x20940) 22:37:52 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x100, 0x7, 0x202, 0x396, 0x8c, 0x3, 0x3800, 0x5, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x5, 0x0, 0xfffffff8, 0x7, r2}, &(0x7f0000000140)=0x10) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:52 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r1 = syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0x0, 0x2) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f00000001c0)={0x1, 'eql\x00', {}, 0x1}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r2, 0x400, 0x70bd28, 0x25dfdbfc, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x10001}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4004c}, 0xc00c) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r5 = fcntl$dupfd(r4, 0x0, r3) write$FUSE_ATTR(r5, &(0x7f0000000280)={0x78}, 0x78) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) lremovexattr(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)=@known='security.apparmor\x00') timerfd_settime(r5, 0x2, &(0x7f0000000400)={{0x0, 0x1c9c380}, {r6, r7+30000000}}, &(0x7f0000000440)) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) r8 = fcntl$getown(r0, 0x9) fcntl$setownex(r0, 0xf, &(0x7f0000000040)={0x1, r8}) r9 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) getdents64(r9, &(0x7f00000000c0)=""/227, 0xe3) pipe2(&(0x7f0000000500)={0xffffffffffffffff}, 0x100000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x1bb) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000180)={r11}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r10, 0x84, 0x72, &(0x7f0000000540)={r11}, 0xc) [ 293.756087] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 22:37:52 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000080), 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r6 = fcntl$dupfd(r5, 0x0, r4) write$FUSE_ATTR(r6, &(0x7f0000000100)={0x78, 0xfffffffffffffffe, 0xfffffffffffffffc, {0x0, 0x0, 0x0, {0x0, 0x1c1f, 0x0, 0x933, 0x0, 0xfffffffffffffffa, 0x0, 0x4, 0x800, 0x6, 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}}}, 0x78) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r8, 0x29, 0x1, 0x0, &(0x7f00000000c0)) getsockopt$inet6_mreq(r8, 0x29, 0x15, &(0x7f00000001c0)={@local, 0x0}, &(0x7f0000000200)=0x14) setsockopt$inet6_IPV6_PKTINFO(r7, 0x29, 0x32, &(0x7f0000000240)={@loopback, r9}, 0x14) ioctl$KDGKBENT(r6, 0x4b46, &(0x7f0000000040)={0x5, 0x0, 0x214b}) 22:37:52 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) r4 = syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r8) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="99b500", @ANYRES16=r9, @ANYBLOB="0fe400000000000000000100000000000000014100000003001700000000000000006574683a726f736530000000"], 0x3}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r7, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000810}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c061008", @ANYRES16=r9, @ANYBLOB="000326bd7016fbdbdf25010000f3ff00000007410000001000187fffffff6574683a6e7230000651325fa2f14308b257bfec4fbd00764224bb9f357bd5dde047b137b162ee34768fa9e931a2e32e04a3f809ccca7b6196e5c825df043e46884d295fdf877b64bb3bec76f7375f1f087aced2deb0d6c7aba5d9b30d65fe4d0e252024ecc639629e4de4b44651a8cc1f8fc2d93869b68522166be73983e9df4cb713f2e8c972162bed4a47bd42915abff065521ab0236e2112de45f76114b08f1c9468919b3833dc3d494b9df577e2"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x400c0) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa00010}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r9, 0x1, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x4) preadv(r4, 0x0, 0x0, 0x0) r10 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmat(r10, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r11 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000500)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_G_FBUF(r11, 0x8030560a, &(0x7f0000000640)={0x20, 0x40, &(0x7f0000000540)="ef46fbc59b0f8fc05de8cc1473691c0a6b78f61fe7d7bb8289ce8bec33f2d9fd65d048beaa477110995bbb1fc09ad9ac048292500ac56d88e897002e6ad91f21bea4d597edd7a8b7db21cb4ef0037ed1365b97b23270e8b35748728ba0d21f1e5684bc7655f00fa5ebfa58d637b6ad749b92df82f55158016396d5f3cf94b24c93bd59e94e9ac1472d88b5cc551aa9dc0ffb011a7ba5ad63025a1664d8c5d1038acd8b7462dc90999f4f327609ca33015b061edca4b1e6adacdb68b88bb446b6a7fd94de91fe92db7f564bf1c3380fc734619e89e29d507767a9c342f86988c4a43af24f97d87b1292cd5123e72e3e39383b22677f", {0xfffffbff, 0x25, 0x18119a471c1d0c, 0x8, 0x8, 0x75c, 0x2, 0x8}}) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r13 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r14 = fcntl$dupfd(r13, 0x0, r12) write$FUSE_ATTR(r14, &(0x7f0000000280)={0x78}, 0x78) getpeername$unix(r14, &(0x7f0000000340), &(0x7f00000003c0)=0x6e) shmctl$IPC_STAT(r10, 0x2, &(0x7f0000000100)=""/90) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in=@empty}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000300)=0xe8) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:37:52 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup2(0xffffffffffffffff, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:37:52 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) r4 = syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r8) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="99b500", @ANYRES16=r9, @ANYBLOB="0fe400000000000000000100000000000000014100000003001700000000000000006574683a726f736530000000"], 0x3}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r7, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000810}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c061008", @ANYRES16=r9, @ANYBLOB="000326bd7016fbdbdf25010000f3ff00000007410000001000187fffffff6574683a6e7230000651325fa2f14308b257bfec4fbd00764224bb9f357bd5dde047b137b162ee34768fa9e931a2e32e04a3f809ccca7b6196e5c825df043e46884d295fdf877b64bb3bec76f7375f1f087aced2deb0d6c7aba5d9b30d65fe4d0e252024ecc639629e4de4b44651a8cc1f8fc2d93869b68522166be73983e9df4cb713f2e8c972162bed4a47bd42915abff065521ab0236e2112de45f76114b08f1c9468919b3833dc3d494b9df577e2"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x400c0) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa00010}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r9, 0x1, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x4) preadv(r4, 0x0, 0x0, 0x0) r10 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmat(r10, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r11 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000500)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_G_FBUF(r11, 0x8030560a, &(0x7f0000000640)={0x20, 0x40, &(0x7f0000000540)="ef46fbc59b0f8fc05de8cc1473691c0a6b78f61fe7d7bb8289ce8bec33f2d9fd65d048beaa477110995bbb1fc09ad9ac048292500ac56d88e897002e6ad91f21bea4d597edd7a8b7db21cb4ef0037ed1365b97b23270e8b35748728ba0d21f1e5684bc7655f00fa5ebfa58d637b6ad749b92df82f55158016396d5f3cf94b24c93bd59e94e9ac1472d88b5cc551aa9dc0ffb011a7ba5ad63025a1664d8c5d1038acd8b7462dc90999f4f327609ca33015b061edca4b1e6adacdb68b88bb446b6a7fd94de91fe92db7f564bf1c3380fc734619e89e29d507767a9c342f86988c4a43af24f97d87b1292cd5123e72e3e39383b22677f", {0xfffffbff, 0x25, 0x18119a471c1d0c, 0x8, 0x8, 0x75c, 0x2, 0x8}}) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r13 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r14 = fcntl$dupfd(r13, 0x0, r12) write$FUSE_ATTR(r14, &(0x7f0000000280)={0x78}, 0x78) getpeername$unix(r14, &(0x7f0000000340), &(0x7f00000003c0)=0x6e) shmctl$IPC_STAT(r10, 0x2, &(0x7f0000000100)=""/90) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000300)=0xe8) r16 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r16, &(0x7f0000000240)={0x9, @remote={[], 0x3}}, 0x12) setreuid(0x0, 0x0) setresuid(r15, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:37:52 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/devu\x8cbmon#\x00', 0x7f, 0x212000) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 293.899225] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 [ 293.908655] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 22:37:52 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fsetxattr$security_smack_transmute(r2, &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000080)='TRUE', 0x4, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) [ 293.948939] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 22:37:52 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup2(0xffffffffffffffff, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:37:52 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) r4 = syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r8) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="99b500", @ANYRES16=r9, @ANYBLOB="0fe400000000000000000100000000000000014100000003001700000000000000006574683a726f736530000000"], 0x3}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r7, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000810}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c061008", @ANYRES16=r9, @ANYBLOB="000326bd7016fbdbdf25010000f3ff00000007410000001000187fffffff6574683a6e7230000651325fa2f14308b257bfec4fbd00764224bb9f357bd5dde047b137b162ee34768fa9e931a2e32e04a3f809ccca7b6196e5c825df043e46884d295fdf877b64bb3bec76f7375f1f087aced2deb0d6c7aba5d9b30d65fe4d0e252024ecc639629e4de4b44651a8cc1f8fc2d93869b68522166be73983e9df4cb713f2e8c972162bed4a47bd42915abff065521ab0236e2112de45f76114b08f1c9468919b3833dc3d494b9df577e2"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x400c0) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa00010}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r9, 0x1, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x4) preadv(r4, 0x0, 0x0, 0x0) r10 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmat(r10, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r11 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000500)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_G_FBUF(r11, 0x8030560a, &(0x7f0000000640)={0x20, 0x40, &(0x7f0000000540)="ef46fbc59b0f8fc05de8cc1473691c0a6b78f61fe7d7bb8289ce8bec33f2d9fd65d048beaa477110995bbb1fc09ad9ac048292500ac56d88e897002e6ad91f21bea4d597edd7a8b7db21cb4ef0037ed1365b97b23270e8b35748728ba0d21f1e5684bc7655f00fa5ebfa58d637b6ad749b92df82f55158016396d5f3cf94b24c93bd59e94e9ac1472d88b5cc551aa9dc0ffb011a7ba5ad63025a1664d8c5d1038acd8b7462dc90999f4f327609ca33015b061edca4b1e6adacdb68b88bb446b6a7fd94de91fe92db7f564bf1c3380fc734619e89e29d507767a9c342f86988c4a43af24f97d87b1292cd5123e72e3e39383b22677f", {0xfffffbff, 0x25, 0x18119a471c1d0c, 0x8, 0x8, 0x75c, 0x2, 0x8}}) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r13 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r14 = fcntl$dupfd(r13, 0x0, r12) write$FUSE_ATTR(r14, &(0x7f0000000280)={0x78}, 0x78) getpeername$unix(r14, &(0x7f0000000340), &(0x7f00000003c0)=0x6e) shmctl$IPC_STAT(r10, 0x2, &(0x7f0000000100)=""/90) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in=@empty}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000300)=0xe8) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) [ 293.990683] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 22:37:53 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r2 = fcntl$dupfd(r1, 0x0, r0) write$FUSE_ATTR(r2, &(0x7f0000000280)={0x78}, 0x78) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @rand_addr=0x10000}, 0x10) r3 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) [ 294.046584] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 22:37:53 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") syz_mount_image$gfs2(&(0x7f0000000180)='gfs2\x00', &(0x7f00000001c0)='./file0\x00', 0x100000000, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@statfs_percent={'statfs_percent'}}], [{@dont_measure='dont_measure'}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}) 22:37:53 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) clock_gettime(0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r6 = fcntl$dupfd(r5, 0x0, r4) mincore(&(0x7f0000ffb000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/143) write$FUSE_ATTR(r6, &(0x7f0000000280)={0x78, 0xfffffffffffffff5, 0xfffffffffffffffe, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5dd, 0x2}}}, 0x78) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f00000000c0)={0x95cd, 0x0, 0x10000, 0x40}) ioctl$DRM_IOCTL_AGP_ALLOC(r6, 0xc0206434, &(0x7f0000000100)={0x0, r7, 0x0, 0x9}) syz_open_dev$video4linux(&(0x7f0000000200)='/dev/v4l-subdev#\x00', 0x39dd, 0x92080) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000080), 0x10) [ 294.088267] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 [ 294.118650] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 22:37:53 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:37:53 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r1, 0x29, 0x1, 0x0, &(0x7f00000000c0)) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000740)={@rand_addr, 0x0}, &(0x7f0000000780)=0x14) connect$can_bcm(0xffffffffffffffff, &(0x7f00000007c0)={0x1d, r2}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00'}, 0x10) acct(&(0x7f00000001c0)='./file0\x00') mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x449881, 0x0) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) clone(0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x4000) accept$nfc_llcp(r4, &(0x7f0000000080), &(0x7f0000000100)=0x60) [ 294.179612] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 22:37:53 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) r4 = syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r8) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="99b500", @ANYRES16=r9, @ANYBLOB="0fe400000000000000000100000000000000014100000003001700000000000000006574683a726f736530000000"], 0x3}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r7, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000810}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c061008", @ANYRES16=r9, @ANYBLOB="000326bd7016fbdbdf25010000f3ff00000007410000001000187fffffff6574683a6e7230000651325fa2f14308b257bfec4fbd00764224bb9f357bd5dde047b137b162ee34768fa9e931a2e32e04a3f809ccca7b6196e5c825df043e46884d295fdf877b64bb3bec76f7375f1f087aced2deb0d6c7aba5d9b30d65fe4d0e252024ecc639629e4de4b44651a8cc1f8fc2d93869b68522166be73983e9df4cb713f2e8c972162bed4a47bd42915abff065521ab0236e2112de45f76114b08f1c9468919b3833dc3d494b9df577e2"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x400c0) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa00010}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r9, 0x1, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x4) preadv(r4, 0x0, 0x0, 0x0) r10 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmat(r10, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r11 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000500)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_G_FBUF(r11, 0x8030560a, &(0x7f0000000640)={0x20, 0x40, &(0x7f0000000540)="ef46fbc59b0f8fc05de8cc1473691c0a6b78f61fe7d7bb8289ce8bec33f2d9fd65d048beaa477110995bbb1fc09ad9ac048292500ac56d88e897002e6ad91f21bea4d597edd7a8b7db21cb4ef0037ed1365b97b23270e8b35748728ba0d21f1e5684bc7655f00fa5ebfa58d637b6ad749b92df82f55158016396d5f3cf94b24c93bd59e94e9ac1472d88b5cc551aa9dc0ffb011a7ba5ad63025a1664d8c5d1038acd8b7462dc90999f4f327609ca33015b061edca4b1e6adacdb68b88bb446b6a7fd94de91fe92db7f564bf1c3380fc734619e89e29d507767a9c342f86988c4a43af24f97d87b1292cd5123e72e3e39383b22677f", {0xfffffbff, 0x25, 0x18119a471c1d0c, 0x8, 0x8, 0x75c, 0x2, 0x8}}) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r13 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r14 = fcntl$dupfd(r13, 0x0, r12) write$FUSE_ATTR(r14, &(0x7f0000000280)={0x78}, 0x78) getpeername$unix(r14, &(0x7f0000000340), &(0x7f00000003c0)=0x6e) shmctl$IPC_STAT(r10, 0x2, &(0x7f0000000100)=""/90) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in=@empty}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000300)=0xe8) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:37:53 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r6 = fcntl$dupfd(r5, 0x0, r4) write$FUSE_ATTR(r6, &(0x7f0000000280)={0x78}, 0x78) ioctl$VIDIOC_QUERY_DV_TIMINGS(r6, 0x80845663, &(0x7f00000000c0)={0x0, @reserved}) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000080), 0x10) [ 294.259634] gfs2: invalid mount option: dont_measure [ 294.298280] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 [ 294.305982] gfs2: can't parse mount arguments 22:37:53 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:37:53 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000002c0)={0x2, 0x5, 0x1000}, 0x4) sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffe, 0x100000000}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0xfef0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000100)={'team0\x00'}) syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[]}}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x59, &(0x7f0000000540)={@initdev, @dev}, &(0x7f0000000580)=0xc) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002280)=ANY=[@ANYBLOB], 0x1}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x227}, 0x1, 0x0, 0x0, 0x8000}, 0x17c547851304815e) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB='8\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="080000000000000058e11200826740533aaa333e60", @ANYRES32=r11], 0x4}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r12 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r12, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r13, &(0x7f0000000140)=ANY=[], 0xfef0) getsockopt$inet_IP_XFRM_POLICY(r13, 0x0, 0x11, &(0x7f0000002a80)={{{@in6=@local, @in6=@mcast2}}, {{@in=@remote}, 0x0, @in6=@empty}}, &(0x7f0000002b80)=0xe8) perf_event_open(&(0x7f000001d000)={0x1, 0x386, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r14 = socket$alg(0x26, 0x5, 0x0) bind$alg(r14, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r15 = accept4(r14, 0x0, 0x0, 0x0) r16 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r15, r16, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r15, &(0x7f0000000140)={0x0, 0xff2d, &(0x7f00000000c0)={0x0}}, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r3, 0xc0945662, 0x0) pipe(&(0x7f00000001c0)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) [ 294.357211] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 22:37:53 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r2 = fcntl$dupfd(r1, 0x0, r0) write$FUSE_ATTR(r2, &(0x7f0000000280)={0x78}, 0x78) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r2, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {r3, 0x9, "5614ef", "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"}}, 0x110) r4 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x10, r4, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:53 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) r4 = syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r8) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="99b500", @ANYRES16=r9, @ANYBLOB="0fe400000000000000000100000000000000014100000003001700000000000000006574683a726f736530000000"], 0x3}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r7, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000810}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c061008", @ANYRES16=r9, @ANYBLOB="000326bd7016fbdbdf25010000f3ff00000007410000001000187fffffff6574683a6e7230000651325fa2f14308b257bfec4fbd00764224bb9f357bd5dde047b137b162ee34768fa9e931a2e32e04a3f809ccca7b6196e5c825df043e46884d295fdf877b64bb3bec76f7375f1f087aced2deb0d6c7aba5d9b30d65fe4d0e252024ecc639629e4de4b44651a8cc1f8fc2d93869b68522166be73983e9df4cb713f2e8c972162bed4a47bd42915abff065521ab0236e2112de45f76114b08f1c9468919b3833dc3d494b9df577e2"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x400c0) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa00010}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r9, 0x1, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x4) preadv(r4, 0x0, 0x0, 0x0) r10 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmat(r10, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r11 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000500)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_G_FBUF(r11, 0x8030560a, &(0x7f0000000640)={0x20, 0x40, &(0x7f0000000540)="ef46fbc59b0f8fc05de8cc1473691c0a6b78f61fe7d7bb8289ce8bec33f2d9fd65d048beaa477110995bbb1fc09ad9ac048292500ac56d88e897002e6ad91f21bea4d597edd7a8b7db21cb4ef0037ed1365b97b23270e8b35748728ba0d21f1e5684bc7655f00fa5ebfa58d637b6ad749b92df82f55158016396d5f3cf94b24c93bd59e94e9ac1472d88b5cc551aa9dc0ffb011a7ba5ad63025a1664d8c5d1038acd8b7462dc90999f4f327609ca33015b061edca4b1e6adacdb68b88bb446b6a7fd94de91fe92db7f564bf1c3380fc734619e89e29d507767a9c342f86988c4a43af24f97d87b1292cd5123e72e3e39383b22677f", {0xfffffbff, 0x25, 0x18119a471c1d0c, 0x8, 0x8, 0x75c, 0x2, 0x8}}) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r13 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r14 = fcntl$dupfd(r13, 0x0, r12) write$FUSE_ATTR(r14, &(0x7f0000000280)={0x78}, 0x78) getpeername$unix(r14, &(0x7f0000000340), &(0x7f00000003c0)=0x6e) shmctl$IPC_STAT(r10, 0x2, &(0x7f0000000100)=""/90) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in=@empty}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000300)=0xe8) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:37:53 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000200)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r3, 0x4008af23, &(0x7f0000000000)={0x1, 0xfffffc00}) r5 = fcntl$dupfd(r3, 0x406, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = creat(&(0x7f0000000280)='./file0\x00', 0x0) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0fe400000000000000000100000000000000014100000003001700000000000000006574683a726f736530000000"], 0x3}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r8, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000810}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r10, 0x300, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x4107, 0x0, {0x10, 0x18, {0x7fffffff, @bearer=@l2={'eth', 0x3a, 'nr0\x00'}}}}}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x400c0) sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800200c}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r10, 0x100, 0x70bd2c, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000810}, 0x20000010) 22:37:53 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r4 = fcntl$dupfd(r3, 0x0, r2) write$FUSE_ATTR(r4, &(0x7f0000000280)={0x78}, 0x78) ioctl$KVM_DEASSIGN_PCI_DEVICE(r4, 0x4040ae72, &(0x7f0000000040)={0xc541, 0xdff, 0xfff, 0x6, 0x8}) r5 = fcntl$dupfd(r1, 0x0, r0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r8 = fcntl$dupfd(r7, 0x0, r6) write$FUSE_ATTR(r8, &(0x7f0000000280)={0x78}, 0x78) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r8, 0x80045400, &(0x7f0000000080)) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 22:37:53 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) [ 294.527528] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 22:37:53 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fsetxattr$security_smack_transmute(r0, &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f00000000c0)='TRUE', 0x4, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000080), 0x10) [ 294.572315] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 22:37:53 executing program 4: syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x1, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x249fb000) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:53 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) r4 = syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r8) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="99b500", @ANYRES16=r9, @ANYBLOB="0fe400000000000000000100000000000000014100000003001700000000000000006574683a726f736530000000"], 0x3}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r7, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000810}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c061008", @ANYRES16=r9, @ANYBLOB="000326bd7016fbdbdf25010000f3ff00000007410000001000187fffffff6574683a6e7230000651325fa2f14308b257bfec4fbd00764224bb9f357bd5dde047b137b162ee34768fa9e931a2e32e04a3f809ccca7b6196e5c825df043e46884d295fdf877b64bb3bec76f7375f1f087aced2deb0d6c7aba5d9b30d65fe4d0e252024ecc639629e4de4b44651a8cc1f8fc2d93869b68522166be73983e9df4cb713f2e8c972162bed4a47bd42915abff065521ab0236e2112de45f76114b08f1c9468919b3833dc3d494b9df577e2"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x400c0) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa00010}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r9, 0x1, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x4) preadv(r4, 0x0, 0x0, 0x0) r10 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmat(r10, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r11 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000500)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_G_FBUF(r11, 0x8030560a, &(0x7f0000000640)={0x20, 0x40, &(0x7f0000000540)="ef46fbc59b0f8fc05de8cc1473691c0a6b78f61fe7d7bb8289ce8bec33f2d9fd65d048beaa477110995bbb1fc09ad9ac048292500ac56d88e897002e6ad91f21bea4d597edd7a8b7db21cb4ef0037ed1365b97b23270e8b35748728ba0d21f1e5684bc7655f00fa5ebfa58d637b6ad749b92df82f55158016396d5f3cf94b24c93bd59e94e9ac1472d88b5cc551aa9dc0ffb011a7ba5ad63025a1664d8c5d1038acd8b7462dc90999f4f327609ca33015b061edca4b1e6adacdb68b88bb446b6a7fd94de91fe92db7f564bf1c3380fc734619e89e29d507767a9c342f86988c4a43af24f97d87b1292cd5123e72e3e39383b22677f", {0xfffffbff, 0x25, 0x18119a471c1d0c, 0x8, 0x8, 0x75c, 0x2, 0x8}}) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r13 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r14 = fcntl$dupfd(r13, 0x0, r12) write$FUSE_ATTR(r14, &(0x7f0000000280)={0x78}, 0x78) getpeername$unix(r14, &(0x7f0000000340), &(0x7f00000003c0)=0x6e) shmctl$IPC_STAT(r10, 0x2, &(0x7f0000000100)=""/90) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:37:53 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:37:53 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) ioctl$USBDEVFS_REAPURBNDELAY(r3, 0x4008550d, &(0x7f0000000140)) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0xffff, 0x0, @rand_addr="04ebd9e9579c2d8bc6cfec3f0c4efc47", 0x9}, 0xfe42) getsockopt$inet6_int(r6, 0x29, 0x1, 0x0, &(0x7f00000000c0)) ioctl$EXT4_IOC_MIGRATE(r6, 0x6609) r7 = fcntl$dupfd(r5, 0x0, r4) write$FUSE_ATTR(r7, &(0x7f0000000280)={0x78}, 0x78) ioctl$USBDEVFS_DROP_PRIVILEGES(r7, 0x4004551e, &(0x7f0000000000)=0x3) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r10 = fcntl$dupfd(r9, 0x0, r8) write$FUSE_ATTR(r10, &(0x7f0000000280)={0x78}, 0x78) ioctl$VT_RESIZE(r10, 0x5609, &(0x7f0000000100)={0x400, 0x6, 0x4}) 22:37:53 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xd44fdef3ea024f78, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r5 = fcntl$dupfd(r4, 0x0, r3) write$FUSE_ATTR(r5, &(0x7f0000000280)={0x78}, 0x78) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r8 = fcntl$dupfd(r7, 0x0, r6) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r10 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r11 = fcntl$dupfd(r10, 0x0, r9) write$FUSE_ATTR(r11, &(0x7f0000000280)={0x78}, 0x78) setsockopt$inet_sctp6_SCTP_INITMSG(r11, 0x84, 0x2, &(0x7f0000000100)={0xfcc7, 0x8, 0x40, 0x1ff}, 0x8) write$FUSE_ATTR(r8, &(0x7f0000000280)={0x78}, 0x78) setsockopt$bt_hci_HCI_FILTER(r8, 0x0, 0x2, &(0x7f0000000080)={0x0, 0x0, 0x80000000, 0x26f}, 0x10) [ 294.935525] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 [ 294.943086] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 [ 294.978304] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 [ 295.031004] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 22:37:54 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:37:54 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x2000)=nil, 0x2000, 0x0, 0x8012, r0, 0x0) 22:37:54 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:37:54 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r4 = fcntl$dupfd(r3, 0x0, r2) write$FUSE_ATTR(r4, &(0x7f0000000280)={0x78}, 0x78) ioctl$EVIOCSMASK(r4, 0x40104593, &(0x7f0000000040)={0x12, 0xb1, &(0x7f00000000c0)="dfc3a36c7e9ffe7934e2ef7ce36304290f8c9d4c53e4ce2c1de784dbc8808689062af13e28b8d34d8699484ce637fc74badfc19163f28039495a667e128d03f8aeac2f6f4205d78178671cfad5c2becd61824ee5237d03704819bc53c4e2aab54d0da0fef0f38d4c7ba75dedc4779fe768c5a651ff8fcaa96520af95bb86b529721cd9c5f6184e389afb158b321c63d3f2abb0182fc042d10a114a55c51aa09568f9e8e1bdabbe2b237ea6f7ff38fabbf1"}) r5 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r6, 0x0, 0x2, &(0x7f0000000080), 0x10) 22:37:54 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) r4 = syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r8) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="99b500", @ANYRES16=r9, @ANYBLOB="0fe400000000000000000100000000000000014100000003001700000000000000006574683a726f736530000000"], 0x3}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r7, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000810}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c061008", @ANYRES16=r9, @ANYBLOB="000326bd7016fbdbdf25010000f3ff00000007410000001000187fffffff6574683a6e7230000651325fa2f14308b257bfec4fbd00764224bb9f357bd5dde047b137b162ee34768fa9e931a2e32e04a3f809ccca7b6196e5c825df043e46884d295fdf877b64bb3bec76f7375f1f087aced2deb0d6c7aba5d9b30d65fe4d0e252024ecc639629e4de4b44651a8cc1f8fc2d93869b68522166be73983e9df4cb713f2e8c972162bed4a47bd42915abff065521ab0236e2112de45f76114b08f1c9468919b3833dc3d494b9df577e2"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x400c0) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa00010}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r9, 0x1, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x4) preadv(r4, 0x0, 0x0, 0x0) r10 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmat(r10, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r11 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000500)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_G_FBUF(r11, 0x8030560a, &(0x7f0000000640)={0x20, 0x40, &(0x7f0000000540)="ef46fbc59b0f8fc05de8cc1473691c0a6b78f61fe7d7bb8289ce8bec33f2d9fd65d048beaa477110995bbb1fc09ad9ac048292500ac56d88e897002e6ad91f21bea4d597edd7a8b7db21cb4ef0037ed1365b97b23270e8b35748728ba0d21f1e5684bc7655f00fa5ebfa58d637b6ad749b92df82f55158016396d5f3cf94b24c93bd59e94e9ac1472d88b5cc551aa9dc0ffb011a7ba5ad63025a1664d8c5d1038acd8b7462dc90999f4f327609ca33015b061edca4b1e6adacdb68b88bb446b6a7fd94de91fe92db7f564bf1c3380fc734619e89e29d507767a9c342f86988c4a43af24f97d87b1292cd5123e72e3e39383b22677f", {0xfffffbff, 0x25, 0x18119a471c1d0c, 0x8, 0x8, 0x75c, 0x2, 0x8}}) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r13 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r14 = fcntl$dupfd(r13, 0x0, r12) write$FUSE_ATTR(r14, &(0x7f0000000280)={0x78}, 0x78) getpeername$unix(r14, &(0x7f0000000340), &(0x7f00000003c0)=0x6e) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:37:54 executing program 3: syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r2 = fcntl$dupfd(r1, 0x0, r0) write$FUSE_ATTR(r2, &(0x7f0000000280)={0x78}, 0x78) write$binfmt_elf64(r2, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0xa4, 0x81, 0x8, 0x6, 0x3, 0x3, 0x1, 0x393, 0x40, 0x12e, 0x5, 0x5, 0x38, 0x2, 0xfff, 0x7, 0x7}, [{0x1, 0x4601626, 0x80000000, 0x4, 0x7ff, 0x1, 0x6, 0x1}], "bedb380895df678c495df9860a8670ca88112837193d1415d736ef8b7dbe9cfd9d8ecab7d4176d42acd00cb69be67be3c16050f9b15ca83b28d1d024a6fbacfe414ff635f6b4343e9dcaff13664812328f14160567555e11ab11049b391f74b3d64d0fa81c263e1e417c13d34b16ee018dae451ff0022b9c2bc693791f81317d55ac4e85c2678ca40a49960a463f", [[], [], [], [], [], []]}, 0x706) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xd95a, 0x70, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e56822ceb60f02799e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x20) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000000)) 22:37:54 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) [ 295.413198] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 [ 295.423372] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 [ 295.430429] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 22:37:54 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r1, 0x29, 0x1, 0x0, &(0x7f00000000c0)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r4 = fcntl$dupfd(r3, 0x0, r2) write$FUSE_ATTR(r4, &(0x7f0000000280)={0x78}, 0x78) bind$ax25(r4, &(0x7f0000000100)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x3}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @null]}, 0x48) ioctl$BLKRRPART(r1, 0x125f, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)={'syz1', "53b68b38cd11ec65914c605e055c852d7ce0203c9f546579ab4b645631acf6ea412343bf1054252966966186c4c746e81ed3725f3111c3"}, 0x3b) r5 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0xc00) vmsplice(r5, &(0x7f00000005c0)=[{&(0x7f0000000480)}, {&(0x7f00000004c0)="375033a73adb268bf4df8bdf32ff889a22ac82e47f7ca0e1650979e49631cbf2321e291fce0431180ab689afc5700fe20aad5e8d1986274e0593b68d1764c294c679a3de619c0196a5b0d8b537030c87da45561143415c6ea3c157823f877705491e7eace8d3e17c136bbed196ce48f574ff2701e3099ff8dd0a4d5be0b2341059c490488355febfb8cd9611c47ef49e667df6cd8e729f85cd14cf5206799260c242e537a8d411e840469268686b1df4c9cef8b11885cf48e6bc867b65c6a4c6d4bbf5f105aca5ec89aecea7e39c4b21767de9ed438cbf73d984757cb9bc1b51213635cc69f2c4ca7eb918abd85a14639e47a93afa", 0xf5}], 0x2, 0x7) 22:37:54 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) r4 = syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r8) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="99b500", @ANYRES16=r9, @ANYBLOB="0fe400000000000000000100000000000000014100000003001700000000000000006574683a726f736530000000"], 0x3}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r7, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000810}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c061008", @ANYRES16=r9, @ANYBLOB="000326bd7016fbdbdf25010000f3ff00000007410000001000187fffffff6574683a6e7230000651325fa2f14308b257bfec4fbd00764224bb9f357bd5dde047b137b162ee34768fa9e931a2e32e04a3f809ccca7b6196e5c825df043e46884d295fdf877b64bb3bec76f7375f1f087aced2deb0d6c7aba5d9b30d65fe4d0e252024ecc639629e4de4b44651a8cc1f8fc2d93869b68522166be73983e9df4cb713f2e8c972162bed4a47bd42915abff065521ab0236e2112de45f76114b08f1c9468919b3833dc3d494b9df577e2"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x400c0) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa00010}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r9, 0x1, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x4) preadv(r4, 0x0, 0x0, 0x0) r10 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmat(r10, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r11 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000500)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_G_FBUF(r11, 0x8030560a, &(0x7f0000000640)={0x20, 0x40, &(0x7f0000000540)="ef46fbc59b0f8fc05de8cc1473691c0a6b78f61fe7d7bb8289ce8bec33f2d9fd65d048beaa477110995bbb1fc09ad9ac048292500ac56d88e897002e6ad91f21bea4d597edd7a8b7db21cb4ef0037ed1365b97b23270e8b35748728ba0d21f1e5684bc7655f00fa5ebfa58d637b6ad749b92df82f55158016396d5f3cf94b24c93bd59e94e9ac1472d88b5cc551aa9dc0ffb011a7ba5ad63025a1664d8c5d1038acd8b7462dc90999f4f327609ca33015b061edca4b1e6adacdb68b88bb446b6a7fd94de91fe92db7f564bf1c3380fc734619e89e29d507767a9c342f86988c4a43af24f97d87b1292cd5123e72e3e39383b22677f", {0xfffffbff, 0x25, 0x18119a471c1d0c, 0x8, 0x8, 0x75c, 0x2, 0x8}}) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r13 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r14 = fcntl$dupfd(r13, 0x0, r12) write$FUSE_ATTR(r14, &(0x7f0000000280)={0x78}, 0x78) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:37:54 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/d\xff\x00', 0x2, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000080)) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x29841900, 0x0, 0x0, 0x0, 0x0) 22:37:54 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:37:54 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r1, 0x29, 0x1, 0x0, &(0x7f00000000c0)) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000040)) syz_emit_ethernet(0x2e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaae28c228d25d55a22e000000002f9078ac141400ac14ffaa4404000000009078ac14ffaab8d220ac17290f55b0c471cc97f107564531efb57aef8df3533462c03b18ef17680b26730874b26d3223c0120f9916c79dd5b30d41e4764bf1f5e32e07110abc66d75089bdb15f4e59643d7f000000000000000000"], 0x0) [ 295.561636] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 22:37:54 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r2, 0x29, 0x3, 0x0, &(0x7f00000000c0)=0xfffffffffffffddf) r3 = fcntl$dupfd(r2, 0x80c, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) ioctl$PPPIOCSFLAGS(r3, 0x40047459, &(0x7f0000000000)=0x2000000) ioctl$BLKPG(r3, 0x1269, &(0x7f0000000040)={0x6, 0x5cc, 0xb7, &(0x7f0000000180)="cb6123a3f2355635517ecb3279b9a6ac9f2d346a06b908497b9b5b5403a98ed6509f61c0e2bab362bba5158952ca385cfc9ae124af94ca04a40e554747e3f2ab13dc8189711ddf0c1cbb5e82ca4075f13ca09c09052c1a5148502509387530df6234478b85b2c745f7cc28a4c67ff83e1b696366bdd79f55ba81a0128e1cfd9475d3ab831035d8ce3819549b2e89d74a7345280733594fe37b2fedbfee9bd202f08d9d756fa0f1f84e5a8d7c59851f9cc37c41118e8c12"}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x14, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) connect$unix(r3, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) 22:37:54 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:37:54 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1005, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000100)) r1 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r1, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) recvmsg(r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0xb) [ 295.647028] vhci_hcd: default hub control req: 0a00 v0000 i0000 l0 [ 295.657058] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 [ 295.667416] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 22:37:54 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) r4 = syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r8) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="99b500", @ANYRES16=r9, @ANYBLOB="0fe400000000000000000100000000000000014100000003001700000000000000006574683a726f736530000000"], 0x3}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r7, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000810}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c061008", @ANYRES16=r9, @ANYBLOB="000326bd7016fbdbdf25010000f3ff00000007410000001000187fffffff6574683a6e7230000651325fa2f14308b257bfec4fbd00764224bb9f357bd5dde047b137b162ee34768fa9e931a2e32e04a3f809ccca7b6196e5c825df043e46884d295fdf877b64bb3bec76f7375f1f087aced2deb0d6c7aba5d9b30d65fe4d0e252024ecc639629e4de4b44651a8cc1f8fc2d93869b68522166be73983e9df4cb713f2e8c972162bed4a47bd42915abff065521ab0236e2112de45f76114b08f1c9468919b3833dc3d494b9df577e2"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x400c0) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa00010}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r9, 0x1, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x4) preadv(r4, 0x0, 0x0, 0x0) r10 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmat(r10, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r11 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000500)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_G_FBUF(r11, 0x8030560a, &(0x7f0000000640)={0x20, 0x40, &(0x7f0000000540)="ef46fbc59b0f8fc05de8cc1473691c0a6b78f61fe7d7bb8289ce8bec33f2d9fd65d048beaa477110995bbb1fc09ad9ac048292500ac56d88e897002e6ad91f21bea4d597edd7a8b7db21cb4ef0037ed1365b97b23270e8b35748728ba0d21f1e5684bc7655f00fa5ebfa58d637b6ad749b92df82f55158016396d5f3cf94b24c93bd59e94e9ac1472d88b5cc551aa9dc0ffb011a7ba5ad63025a1664d8c5d1038acd8b7462dc90999f4f327609ca33015b061edca4b1e6adacdb68b88bb446b6a7fd94de91fe92db7f564bf1c3380fc734619e89e29d507767a9c342f86988c4a43af24f97d87b1292cd5123e72e3e39383b22677f", {0xfffffbff, 0x25, 0x18119a471c1d0c, 0x8, 0x8, 0x75c, 0x2, 0x8}}) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r13 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) fcntl$dupfd(r13, 0x0, r12) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) [ 295.795747] vhci_hcd: default hub control req: 0014 v0000 i0000 l120 [ 295.815066] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 22:37:54 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000040)) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:54 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) [ 295.841467] vhci_hcd: default hub control req: 0014 v0000 i0000 l120 22:37:54 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$USBDEVFS_GET_SPEED(r1, 0x551f) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r2, 0x11, 0x1, 0x8, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r5 = fcntl$dupfd(r4, 0x0, r3) write$FUSE_ATTR(r5, &(0x7f0000000280)={0x78}, 0x78) ioctl$PIO_CMAP(r5, 0x4b71, &(0x7f0000000140)={0x9, 0x3, 0x8, 0x401, 0x4, 0xe9}) [ 295.895647] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 22:37:54 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) r4 = syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r8) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="99b500", @ANYRES16=r9, @ANYBLOB="0fe400000000000000000100000000000000014100000003001700000000000000006574683a726f736530000000"], 0x3}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r7, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000810}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c061008", @ANYRES16=r9, @ANYBLOB="000326bd7016fbdbdf25010000f3ff00000007410000001000187fffffff6574683a6e7230000651325fa2f14308b257bfec4fbd00764224bb9f357bd5dde047b137b162ee34768fa9e931a2e32e04a3f809ccca7b6196e5c825df043e46884d295fdf877b64bb3bec76f7375f1f087aced2deb0d6c7aba5d9b30d65fe4d0e252024ecc639629e4de4b44651a8cc1f8fc2d93869b68522166be73983e9df4cb713f2e8c972162bed4a47bd42915abff065521ab0236e2112de45f76114b08f1c9468919b3833dc3d494b9df577e2"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x400c0) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa00010}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r9, 0x1, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x4) preadv(r4, 0x0, 0x0, 0x0) r10 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmat(r10, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r11 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000500)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_G_FBUF(r11, 0x8030560a, &(0x7f0000000640)={0x20, 0x40, &(0x7f0000000540)="ef46fbc59b0f8fc05de8cc1473691c0a6b78f61fe7d7bb8289ce8bec33f2d9fd65d048beaa477110995bbb1fc09ad9ac048292500ac56d88e897002e6ad91f21bea4d597edd7a8b7db21cb4ef0037ed1365b97b23270e8b35748728ba0d21f1e5684bc7655f00fa5ebfa58d637b6ad749b92df82f55158016396d5f3cf94b24c93bd59e94e9ac1472d88b5cc551aa9dc0ffb011a7ba5ad63025a1664d8c5d1038acd8b7462dc90999f4f327609ca33015b061edca4b1e6adacdb68b88bb446b6a7fd94de91fe92db7f564bf1c3380fc734619e89e29d507767a9c342f86988c4a43af24f97d87b1292cd5123e72e3e39383b22677f", {0xfffffbff, 0x25, 0x18119a471c1d0c, 0x8, 0x8, 0x75c, 0x2, 0x8}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:37:54 executing program 5: r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = fanotify_init(0x0, 0x0) fanotify_mark(r3, 0x2000000000000011, 0x2, r2, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) r4 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x1, 0x2) write$P9_RWSTAT(r4, &(0x7f0000000080)={0x7, 0x7f, 0x2}, 0x7) sendfile(r0, r1, 0x0, 0x7fffffa7) [ 295.997072] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 [ 296.006004] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 22:37:54 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x6547c2069bb07bc0, 0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') ioctl$SIOCAX25ADDFWD(r3, 0x89ea, &(0x7f0000000040)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast}) 22:37:55 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) [ 296.054157] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 [ 296.062564] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 22:37:55 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) r4 = syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r8) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="99b500", @ANYRES16=r9, @ANYBLOB="0fe400000000000000000100000000000000014100000003001700000000000000006574683a726f736530000000"], 0x3}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r7, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000810}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c061008", @ANYRES16=r9, @ANYBLOB="000326bd7016fbdbdf25010000f3ff00000007410000001000187fffffff6574683a6e7230000651325fa2f14308b257bfec4fbd00764224bb9f357bd5dde047b137b162ee34768fa9e931a2e32e04a3f809ccca7b6196e5c825df043e46884d295fdf877b64bb3bec76f7375f1f087aced2deb0d6c7aba5d9b30d65fe4d0e252024ecc639629e4de4b44651a8cc1f8fc2d93869b68522166be73983e9df4cb713f2e8c972162bed4a47bd42915abff065521ab0236e2112de45f76114b08f1c9468919b3833dc3d494b9df577e2"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x400c0) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa00010}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r9, 0x1, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x4) preadv(r4, 0x0, 0x0, 0x0) r10 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmat(r10, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r11 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000500)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_G_FBUF(r11, 0x8030560a, &(0x7f0000000640)={0x20, 0x40, &(0x7f0000000540)="ef46fbc59b0f8fc05de8cc1473691c0a6b78f61fe7d7bb8289ce8bec33f2d9fd65d048beaa477110995bbb1fc09ad9ac048292500ac56d88e897002e6ad91f21bea4d597edd7a8b7db21cb4ef0037ed1365b97b23270e8b35748728ba0d21f1e5684bc7655f00fa5ebfa58d637b6ad749b92df82f55158016396d5f3cf94b24c93bd59e94e9ac1472d88b5cc551aa9dc0ffb011a7ba5ad63025a1664d8c5d1038acd8b7462dc90999f4f327609ca33015b061edca4b1e6adacdb68b88bb446b6a7fd94de91fe92db7f564bf1c3380fc734619e89e29d507767a9c342f86988c4a43af24f97d87b1292cd5123e72e3e39383b22677f", {0xfffffbff, 0x25, 0x18119a471c1d0c, 0x8, 0x8, 0x75c, 0x2, 0x8}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:37:55 executing program 3: syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r2 = fcntl$dupfd(r1, 0x0, r0) write$FUSE_ATTR(r2, &(0x7f0000000280)={0x78}, 0x78) r3 = dup(r1) setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000040)={0x1, 0x3, 0x6a, 0x2}, 0x6) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000000)) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f00000000c0)={0xff, 0x2, "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"}) 22:37:55 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r1, 0x29, 0x1, 0x0, &(0x7f00000000c0)) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000040)='vlan0\x00') socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 22:37:55 executing program 2: syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) [ 296.190894] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 22:37:55 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x100) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f00000000c0)=0x8) [ 296.298307] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 22:37:55 executing program 2: syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:37:55 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) r4 = syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r8) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="99b500", @ANYRES16=r9, @ANYBLOB="0fe400000000000000000100000000000000014100000003001700000000000000006574683a726f736530000000"], 0x3}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r7, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000810}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c061008", @ANYRES16=r9, @ANYBLOB="000326bd7016fbdbdf25010000f3ff00000007410000001000187fffffff6574683a6e7230000651325fa2f14308b257bfec4fbd00764224bb9f357bd5dde047b137b162ee34768fa9e931a2e32e04a3f809ccca7b6196e5c825df043e46884d295fdf877b64bb3bec76f7375f1f087aced2deb0d6c7aba5d9b30d65fe4d0e252024ecc639629e4de4b44651a8cc1f8fc2d93869b68522166be73983e9df4cb713f2e8c972162bed4a47bd42915abff065521ab0236e2112de45f76114b08f1c9468919b3833dc3d494b9df577e2"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x400c0) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa00010}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r9, 0x1, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x4) preadv(r4, 0x0, 0x0, 0x0) r10 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmat(r10, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r11 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000500)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_G_FBUF(r11, 0x8030560a, &(0x7f0000000640)={0x20, 0x40, &(0x7f0000000540)="ef46fbc59b0f8fc05de8cc1473691c0a6b78f61fe7d7bb8289ce8bec33f2d9fd65d048beaa477110995bbb1fc09ad9ac048292500ac56d88e897002e6ad91f21bea4d597edd7a8b7db21cb4ef0037ed1365b97b23270e8b35748728ba0d21f1e5684bc7655f00fa5ebfa58d637b6ad749b92df82f55158016396d5f3cf94b24c93bd59e94e9ac1472d88b5cc551aa9dc0ffb011a7ba5ad63025a1664d8c5d1038acd8b7462dc90999f4f327609ca33015b061edca4b1e6adacdb68b88bb446b6a7fd94de91fe92db7f564bf1c3380fc734619e89e29d507767a9c342f86988c4a43af24f97d87b1292cd5123e72e3e39383b22677f", {0xfffffbff, 0x25, 0x18119a471c1d0c, 0x8, 0x8, 0x75c, 0x2, 0x8}}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:37:55 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x1a) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 296.436972] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 22:37:55 executing program 2: syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) [ 296.492470] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 [ 296.501597] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 22:37:55 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000100)='./file1\x00') ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000700)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000000)='./file1/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='overlay\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1']) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) accept(r1, 0x0, 0x0) fsetxattr$security_ima(r1, 0x0, 0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000008b80)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x20200, 0x0) chdir(&(0x7f0000000180)='./file0\x00') socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) r2 = semget$private(0x0, 0x0, 0xea70940c4315047e) semop(r2, &(0x7f0000000340)=[{0x4, 0x4}, {0x4, 0x40, 0x1800}, {0x2, 0x7, 0x1000}, {0x4, 0x2, 0x1000}], 0x1) lstat(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r3) syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') link(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00') openat$null(0xffffffffffffff9c, &(0x7f0000000800)='/dev/null\x00', 0x183080, 0x0) 22:37:55 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x0, 0x20000) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) socket$nl_route(0x10, 0x3, 0x0) 22:37:55 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) r4 = syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r8) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="99b500", @ANYRES16=r9, @ANYBLOB="0fe400000000000000000100000000000000014100000003001700000000000000006574683a726f736530000000"], 0x3}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r7, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000810}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c061008", @ANYRES16=r9, @ANYBLOB="000326bd7016fbdbdf25010000f3ff00000007410000001000187fffffff6574683a6e7230000651325fa2f14308b257bfec4fbd00764224bb9f357bd5dde047b137b162ee34768fa9e931a2e32e04a3f809ccca7b6196e5c825df043e46884d295fdf877b64bb3bec76f7375f1f087aced2deb0d6c7aba5d9b30d65fe4d0e252024ecc639629e4de4b44651a8cc1f8fc2d93869b68522166be73983e9df4cb713f2e8c972162bed4a47bd42915abff065521ab0236e2112de45f76114b08f1c9468919b3833dc3d494b9df577e2"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x400c0) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa00010}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r9, 0x1, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x4) preadv(r4, 0x0, 0x0, 0x0) r10 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmat(r10, &(0x7f0000ffc000/0x4000)=nil, 0x2000) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000500)='/dev/video1\x00', 0x2, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) [ 296.896144] kauditd_printk_skb: 9 callbacks suppressed [ 296.896154] audit: type=1804 audit(1575067075.809:73): pid=13447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir528377404/syzkaller.vVdziF/350/file0" dev="sda1" ino=17184 res=1 22:37:55 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) 22:37:55 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r6 = fcntl$dupfd(r5, 0x0, r4) write$FUSE_ATTR(r6, &(0x7f0000000280)={0x78}, 0x78) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r6, 0x4010ae74, &(0x7f0000000100)={0x80000000, 0xbf6, 0x8}) ioctl$DRM_IOCTL_GET_UNIQUE(r3, 0xc0106401, &(0x7f0000000080)={0x1f, &(0x7f0000000040)=""/31}) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 297.013070] audit: type=1804 audit(1575067075.849:74): pid=13448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.5" name="/root/syzkaller-testdir528377404/syzkaller.vVdziF/350/file0" dev="sda1" ino=17184 res=1 22:37:56 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) [ 297.075713] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 22:37:56 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) r4 = syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r8) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="99b500", @ANYRES16=r9, @ANYBLOB="0fe400000000000000000100000000000000014100000003001700000000000000006574683a726f736530000000"], 0x3}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r7, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000810}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c061008", @ANYRES16=r9, @ANYBLOB="000326bd7016fbdbdf25010000f3ff00000007410000001000187fffffff6574683a6e7230000651325fa2f14308b257bfec4fbd00764224bb9f357bd5dde047b137b162ee34768fa9e931a2e32e04a3f809ccca7b6196e5c825df043e46884d295fdf877b64bb3bec76f7375f1f087aced2deb0d6c7aba5d9b30d65fe4d0e252024ecc639629e4de4b44651a8cc1f8fc2d93869b68522166be73983e9df4cb713f2e8c972162bed4a47bd42915abff065521ab0236e2112de45f76114b08f1c9468919b3833dc3d494b9df577e2"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x400c0) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa00010}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r9, 0x1, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x4) preadv(r4, 0x0, 0x0, 0x0) r10 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmat(r10, &(0x7f0000ffc000/0x4000)=nil, 0x2000) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:37:56 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r1, 0x29, 0x1, 0x0, &(0x7f00000000c0)) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r2, 0x29, 0x1, 0x0, &(0x7f00000000c0)) r3 = dup3(r1, r2, 0x80000) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f0000000000)={0x5c0790fd780c856, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x3, 'wlc\x00', 0x6, 0x7fffffff, 0x65}, 0x2c) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r6 = fcntl$dupfd(r5, 0x0, r4) write$FUSE_ATTR(r6, &(0x7f0000000280)={0x78}, 0x78) ioctl$PPPIOCGNPMODE(r6, 0xc008744c, &(0x7f0000000040)={0x80fb}) 22:37:56 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x80000000, 0x381000) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x80, &(0x7f0000000100)=0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r2, 0x29, 0x1, 0x0, &(0x7f00000000c0)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r5 = fcntl$dupfd(r4, 0x0, r3) write$FUSE_ATTR(r5, &(0x7f0000000280)={0x78}, 0x78) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r8 = fcntl$dupfd(r7, 0x0, r6) write$FUSE_ATTR(r8, &(0x7f0000000280)={0x78}, 0x78) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r10 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r11 = fcntl$dupfd(r10, 0x0, r9) write$FUSE_ATTR(r11, &(0x7f0000000280)={0x78}, 0x78) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r11, 0x84, 0x4, &(0x7f0000000480), &(0x7f00000004c0)=0x4) connect$unix(r8, &(0x7f0000000400)=@abs={0x1, 0x0, 0x4e21}, 0x6e) io_submit(r1, 0x2, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x5, r0, &(0x7f0000000180)="082df1fd8fedb917e070b3cffe599566650c57ce49df8e77cce2ecfdf5beb20f03f02b1e6cd394c039b41db81b1fa52a2cfb5d58af22784d75bc9f8c64d70ede5d7ebfba7598d944c67c09ceca50b950596677c89fefff2e2a3320f537e89f2cb02428e8cb89e7f954fc9ffe1035a65f61f47f469079a6f4f7c14d110cb6c47e3c84150dbc2075dc8d889d68f950961b81d9a7317fb4802d9e1fb9de2725c95336bfc5d1", 0xa4, 0x1, 0x0, 0x0, r0}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3, 0x8, r2, &(0x7f0000000280)="77a34ae6f1e6a4288ea4e06477180581c6ae0880304b4f4ae2acf4761b53e145bc0ac77951c9582e8f66b1b33af0ff5ffea6dd7bff4030a5fa33b2c75be1b1060124d63b01ebf671f17a8147429ead0abcf383a0482997d0671fa6b6433a77d2b36033090a1ce79c789857d5a23052a793fd840303cac242aa881065b8b7672e4ea6efc61779b2bcdb5d01e6f42bd39a75666b647d94d2bc658df306f74acaf06e5e90a5af9b574848e032a864e7cbba34ed549b22f24c91e67256b11c96ed7e839e3385713b3a581b6975d579f1e0ee", 0xd0, 0x7, 0x0, 0x2, r5}]) r12 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x111cc1, 0x0) ioctl$RTC_IRQP_SET(r12, 0x4008700c, 0x113a) r13 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x400, 0x0) ioctl$NBD_SET_FLAGS(r13, 0xab0a, 0xfffffffffffffffa) setsockopt$inet6_tcp_TCP_CONGESTION(r13, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x9) ioctl$sock_inet_tcp_SIOCOUTQNSD(r13, 0x894b, &(0x7f00000000c0)) 22:37:56 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) [ 297.262035] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 [ 297.268708] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 [ 297.319393] IPVS: set_ctl: invalid protocol: 51286 172.30.0.4:20003 22:37:56 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) r4 = syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r8) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="99b500", @ANYRES16=r9, @ANYBLOB="0fe400000000000000000100000000000000014100000003001700000000000000006574683a726f736530000000"], 0x3}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r7, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000810}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c061008", @ANYRES16=r9, @ANYBLOB="000326bd7016fbdbdf25010000f3ff00000007410000001000187fffffff6574683a6e7230000651325fa2f14308b257bfec4fbd00764224bb9f357bd5dde047b137b162ee34768fa9e931a2e32e04a3f809ccca7b6196e5c825df043e46884d295fdf877b64bb3bec76f7375f1f087aced2deb0d6c7aba5d9b30d65fe4d0e252024ecc639629e4de4b44651a8cc1f8fc2d93869b68522166be73983e9df4cb713f2e8c972162bed4a47bd42915abff065521ab0236e2112de45f76114b08f1c9468919b3833dc3d494b9df577e2"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x400c0) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa00010}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r9, 0x1, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x4) preadv(r4, 0x0, 0x0, 0x0) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) [ 297.376145] vhci_hcd: default hub control req: 0a00 v0000 i0000 l0 [ 297.393307] IPVS: set_ctl: invalid protocol: 51286 172.30.0.4:20003 22:37:56 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x80000) flock(0xffffffffffffffff, 0xa) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r1, 0x29, 0x1, 0x0, &(0x7f00000000c0)) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={'veth1\x00', {0x2, 0x4e20, @rand_addr=0x18af}}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:37:56 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) open(0x0, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003c80), 0x38e, 0x0, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000340)={@remote}, &(0x7f0000000700)=0xc) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002440)=[{{&(0x7f0000000100)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000001a40)=[{&(0x7f0000000440)="f4f337b6b6db8f5b98c3fee0969fce56fd9fe6c807b9e84156aa0562d8b325515293e9e29887eb7aa9889f47c5a936bbee29c5629c0b79f3", 0x38}, {&(0x7f0000000240)="f4b6e907030bde240880121d45d65a41a53ea7605e80556104730ad0f3d41d959d78e2c8", 0x24}, {&(0x7f0000000780)="9862618128fae4ddc89ba66b93884b5cb1a5761651b338e0312b637bf57a74006ef64033755b841e168f18fb671e456103bf6603968479d941cf032450233af235a7c7587ee3b87c1ba259cea65adebd4e1b8590364bc6ce82f1af11d195118676e5ff8a0feb09f67ea83266c488d1493be0833a23aa6c50ae4263727b04175b438d4134e97113b38570619ce19445cb8782f515357699311a2009972791f2899b05e08ba6007cc2996eb63964e70dce4c72dfa5f38a7fa9a7b571e1d277db922ebe713c86181ee61e32257eb81fb4a07dd6389e185ac85d7303f5141016d0d5a0e10a6bb88bced2d38d1d60aee1d4fbcc2d37645933", 0xf6}, {&(0x7f0000000880)="208edd5c9d4e6dc2213ef5b5321a39768a91b0987f42285231256062bf9ab234c53b8c349a41349e08507c7929665d3283be4d5e8e01607a177ee07b3a04bbd905b8dd5e0329be54efdd2795dea3fded901a36adfc0b6c32156605580d114c73527b372332e4fef20c79a261fadbc600a36acf95ed8a4b3c393d235f18bcafc15f8be762a4c7f522c0cae959f7d0558512c2", 0x92}, {&(0x7f0000000340)}, {&(0x7f0000000940)="22a43b7370eb36363e7259e7d33e3473708c427041e02e01193bc65a5aa1702790f297ef14e5cd75e75b2f4152c80f6a1ce13c942661d93be3638db2b8a9ce19b65ab31f89f89548f2a7c30b586466e17107d137bdc065eb74f8d8794d47e69b4775a9cee66149077a61c312a87356258a52e96dc550696d2668fb2a9b255195466117ac193bde588ac3c7faad1b69fb399b6673e29c46f3a3cf94978f003cebd9e71abe0fbf6f8e95a46922cb5599db0df1631e604a09edf9417c6db27ee437d23eda5af205a805cab489c3616ed3d1122589", 0xd3}, {&(0x7f0000000a40)="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", 0xff0}], 0x7, &(0x7f0000001c40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @broadcast}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1f}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffffb}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xff}}], 0x80}}, {{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000001d00)="6e86192b3fadbbb74663e482d44f10dd67341f5360ba5284fd02713f7393ffbbb664acdf32eae6ac83347a80645a84e5c1041e2d9e37ad21c232856c810913be9ca0a483d1f86851488a8109ec20d2153c34d0ebaaf97c2215f984a769fce1ba9128afcb76f1b1a5224c5f8754fc2313b7528cd1fbd4ccffb73e57511470c097fd2bf6582d0fa521430979fd513febd07b1405ef1a8f14", 0x97}, {&(0x7f0000001dc0)="6b657b5f784f6a8d3f204d59a2db49760c5472cd325e2b65871fb2a15899555c4cad9fe97dffcbacdb", 0x29}, {&(0x7f0000001e00)="2a3dbd05bf4cb07e2438073d32b019040ce1216e3dbe7d201d687924b842ed2e39add49f48894b79020b40e24e62889419def1e7438794b52d60ce5ef7d4f32317afd3fe9a452e2745686dd1825b16c692c8b3bf", 0x54}, {&(0x7f0000002600)="f3be3bb62ed6d05e87404d89b26a3faf0ad980e0bdcbfdb620167ff5d72cf58a5e05f3768ca65a27cf5e3d9cd0d468653b28c5cbffde164378915a68846452e01daebdff4676ee664474e74956d984a14d8471d919efa4f603850de69d9170b3eedbe69e274a57ad14306bfa6609b9d7f590d97c9e", 0x75}], 0x4, &(0x7f0000001f40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @loopback}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x50}}, {{&(0x7f0000001fc0)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000002200)=[{0x0}, {&(0x7f0000002180)="6209ed67941216fdf598146857a68b5a81019042838b95e9512b2b0641e40e569df37b073c12353fc2b9014cb0a30d5830", 0x31}, {&(0x7f00000021c0)="857bc0bd4d221353bcdbb9b4ffc9fc825e79ab2508b87a902028f0b971dee8b8180b46629feb2882", 0x28}], 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="0514b91d869267f6c5a00560c4a02f2cdc5a502e4a0e397a33e1a82fdb666a045ffa40e5b05796288e78bc193c1e4015fcdf77a0e475cdd39401705fd995ffb35bf1ffec02eefe0b0ed72609000000d6f535cc07effe72a116002e6dafc8fd3e24bf2adce242c778ed14cae3bf14661590557ab7f81a2fd9e50d3f69a095bfd6e4026f3e04bb453c1b5200b46000"/155], 0xc}}], 0x3, 0x140060c4) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x24000) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000000)) io_setup(0x8, &(0x7f00000004c0)=0x0) io_submit(r5, 0xc2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) 22:37:56 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:37:56 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) r4 = syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r8) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="99b500", @ANYRES16=r9, @ANYBLOB="0fe400000000000000000100000000000000014100000003001700000000000000006574683a726f736530000000"], 0x3}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r7, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000810}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c061008", @ANYRES16=r9, @ANYBLOB="000326bd7016fbdbdf25010000f3ff00000007410000001000187fffffff6574683a6e7230000651325fa2f14308b257bfec4fbd00764224bb9f357bd5dde047b137b162ee34768fa9e931a2e32e04a3f809ccca7b6196e5c825df043e46884d295fdf877b64bb3bec76f7375f1f087aced2deb0d6c7aba5d9b30d65fe4d0e252024ecc639629e4de4b44651a8cc1f8fc2d93869b68522166be73983e9df4cb713f2e8c972162bed4a47bd42915abff065521ab0236e2112de45f76114b08f1c9468919b3833dc3d494b9df577e2"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x400c0) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa00010}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r9, 0x1, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x4) preadv(r4, 0x0, 0x0, 0x0) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) [ 297.589762] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 22:37:56 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x2b, 0x0, 0x0, 0x17b, 0x0, &(0x7f00000000c0)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddeb07117c15508537e2acf1b26fa6cac5d2104185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f48bb552f7da6e9c10558253be1d47b2020000002d045a7c44e17c5c0f195adae1d81349bbc12d70c34bda63a1f4f89ccf0e097d2a4c8e27deb7ad24d06ed19e6d78f9a7951c65bb2bf889b868925abb4b0fb137e485edad2f7b3ed142a0e8f52d9caa0ab9a42b3d5af32f02e53a83db130ab70e1c0031100589706d8910bfca3193de30386a0fe461143cc3348f3f7b38ff5ce9582c294d0ad7d8916cb5724065439d34dd44655b8568dfa17af6acf482f700875a4b725ec61ebab4789a726928520084f8b65f1862fc9ee764e1a5433b71c5389cf8acd7e2ed8c2625cbe5cd567870cfeac7ba9c901f20d1938dce8d42ca5604b7f26954c50b03dd0acadd7074608b805626e0952f0f1eaa15b71435186f6435aaa56b9549e5c1e24a8000"/379}) 22:37:56 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 297.693102] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 22:37:56 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) r4 = syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r8) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="99b500", @ANYRES16=r9, @ANYBLOB="0fe400000000000000000100000000000000014100000003001700000000000000006574683a726f736530000000"], 0x3}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r7, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000810}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c061008", @ANYRES16=r9, @ANYBLOB="000326bd7016fbdbdf25010000f3ff00000007410000001000187fffffff6574683a6e7230000651325fa2f14308b257bfec4fbd00764224bb9f357bd5dde047b137b162ee34768fa9e931a2e32e04a3f809ccca7b6196e5c825df043e46884d295fdf877b64bb3bec76f7375f1f087aced2deb0d6c7aba5d9b30d65fe4d0e252024ecc639629e4de4b44651a8cc1f8fc2d93869b68522166be73983e9df4cb713f2e8c972162bed4a47bd42915abff065521ab0236e2112de45f76114b08f1c9468919b3833dc3d494b9df577e2"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x400c0) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa00010}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r9, 0x1, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x4) preadv(r4, 0x0, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) [ 297.756594] vhci_hcd: default hub control req: 002b v0000 i0000 l379 [ 297.774719] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 22:37:56 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:37:56 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x9, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f0000000100)={0x5, 0x10, 0xfa00, {&(0x7f0000000300), 0xffffffffffffffff, 0x1}}, 0x18) r4 = fcntl$dupfd(r2, 0x0, r1) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r7 = fcntl$dupfd(r6, 0x0, r5) write$FUSE_ATTR(r7, &(0x7f0000000280)={0x78}, 0x78) ioctl$NS_GET_OWNER_UID(r7, 0xb704, &(0x7f0000000140)=0x0) write$FUSE_ATTR(r4, &(0x7f0000000280)={0x78, 0x0, 0x0, {0x0, 0x3, 0x0, {0xfffffffffffffffe, 0x8000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x9, 0xfffffffe}}}, 0xffffffffffffff36) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0x3, &(0x7f0000000000)=0x3, 0x4) [ 297.941192] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 22:37:56 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r2 = fcntl$dupfd(r1, 0x0, r0) write$FUSE_ATTR(r2, &(0x7f0000000280)={0x78}, 0x78) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r5 = fcntl$dupfd(r4, 0x0, r3) write$FUSE_ATTR(r5, &(0x7f0000000280)={0x78}, 0x78) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x1bb) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000180)={r6}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000040)={r6, @in={{0x2, 0x4e20, @empty}}}, &(0x7f0000000100)=0x84) setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000140)={r7, 0x4}, 0x8) r8 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r8, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r10 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r11 = fcntl$dupfd(r10, 0x0, r9) write$FUSE_ATTR(r11, &(0x7f0000000280)={0x78}, 0x78) ioctl$VIDIOC_LOG_STATUS(r11, 0x5646, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:56 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) open(0x0, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003c80), 0x38e, 0x0, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000340)={@remote}, &(0x7f0000000700)=0xc) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002440)=[{{&(0x7f0000000100)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000001a40)=[{&(0x7f0000000440)="f4f337b6b6db8f5b98c3fee0969fce56fd9fe6c807b9e84156aa0562d8b325515293e9e29887eb7aa9889f47c5a936bbee29c5629c0b79f3", 0x38}, {&(0x7f0000000240)="f4b6e907030bde240880121d45d65a41a53ea7605e80556104730ad0f3d41d959d78e2c8", 0x24}, {&(0x7f0000000780)="9862618128fae4ddc89ba66b93884b5cb1a5761651b338e0312b637bf57a74006ef64033755b841e168f18fb671e456103bf6603968479d941cf032450233af235a7c7587ee3b87c1ba259cea65adebd4e1b8590364bc6ce82f1af11d195118676e5ff8a0feb09f67ea83266c488d1493be0833a23aa6c50ae4263727b04175b438d4134e97113b38570619ce19445cb8782f515357699311a2009972791f2899b05e08ba6007cc2996eb63964e70dce4c72dfa5f38a7fa9a7b571e1d277db922ebe713c86181ee61e32257eb81fb4a07dd6389e185ac85d7303f5141016d0d5a0e10a6bb88bced2d38d1d60aee1d4fbcc2d37645933", 0xf6}, {&(0x7f0000000880)="208edd5c9d4e6dc2213ef5b5321a39768a91b0987f42285231256062bf9ab234c53b8c349a41349e08507c7929665d3283be4d5e8e01607a177ee07b3a04bbd905b8dd5e0329be54efdd2795dea3fded901a36adfc0b6c32156605580d114c73527b372332e4fef20c79a261fadbc600a36acf95ed8a4b3c393d235f18bcafc15f8be762a4c7f522c0cae959f7d0558512c2", 0x92}, {&(0x7f0000000340)}, {&(0x7f0000000940)="22a43b7370eb36363e7259e7d33e3473708c427041e02e01193bc65a5aa1702790f297ef14e5cd75e75b2f4152c80f6a1ce13c942661d93be3638db2b8a9ce19b65ab31f89f89548f2a7c30b586466e17107d137bdc065eb74f8d8794d47e69b4775a9cee66149077a61c312a87356258a52e96dc550696d2668fb2a9b255195466117ac193bde588ac3c7faad1b69fb399b6673e29c46f3a3cf94978f003cebd9e71abe0fbf6f8e95a46922cb5599db0df1631e604a09edf9417c6db27ee437d23eda5af205a805cab489c3616ed3d1122589", 0xd3}, {&(0x7f0000000a40)="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", 0xff0}], 0x7, &(0x7f0000001c40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @broadcast}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1f}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffffb}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xff}}], 0x80}}, {{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000001d00)="6e86192b3fadbbb74663e482d44f10dd67341f5360ba5284fd02713f7393ffbbb664acdf32eae6ac83347a80645a84e5c1041e2d9e37ad21c232856c810913be9ca0a483d1f86851488a8109ec20d2153c34d0ebaaf97c2215f984a769fce1ba9128afcb76f1b1a5224c5f8754fc2313b7528cd1fbd4ccffb73e57511470c097fd2bf6582d0fa521430979fd513febd07b1405ef1a8f14", 0x97}, {&(0x7f0000001dc0)="6b657b5f784f6a8d3f204d59a2db49760c5472cd325e2b65871fb2a15899555c4cad9fe97dffcbacdb", 0x29}, {&(0x7f0000001e00)="2a3dbd05bf4cb07e2438073d32b019040ce1216e3dbe7d201d687924b842ed2e39add49f48894b79020b40e24e62889419def1e7438794b52d60ce5ef7d4f32317afd3fe9a452e2745686dd1825b16c692c8b3bf", 0x54}, {&(0x7f0000002600)="f3be3bb62ed6d05e87404d89b26a3faf0ad980e0bdcbfdb620167ff5d72cf58a5e05f3768ca65a27cf5e3d9cd0d468653b28c5cbffde164378915a68846452e01daebdff4676ee664474e74956d984a14d8471d919efa4f603850de69d9170b3eedbe69e274a57ad14306bfa6609b9d7f590d97c9e", 0x75}], 0x4, &(0x7f0000001f40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @loopback}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x50}}, {{&(0x7f0000001fc0)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000002200)=[{0x0}, {&(0x7f0000002180)="6209ed67941216fdf598146857a68b5a81019042838b95e9512b2b0641e40e569df37b073c12353fc2b9014cb0a30d5830", 0x31}, {&(0x7f00000021c0)="857bc0bd4d221353bcdbb9b4ffc9fc825e79ab2508b87a902028f0b971dee8b8180b46629feb2882", 0x28}], 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="0514b91d869267f6c5a00560c4a02f2cdc5a502e4a0e397a33e1a82fdb666a045ffa40e5b05796288e78bc193c1e4015fcdf77a0e475cdd39401705fd995ffb35bf1ffec02eefe0b0ed72609000000d6f535cc07effe72a116002e6dafc8fd3e24bf2adce242c778ed14cae3bf14661590557ab7f81a2fd9e50d3f69a095bfd6e4026f3e04bb453c1b5200b46000"/155], 0xc}}], 0x3, 0x140060c4) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x24000) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000000)) io_setup(0x8, &(0x7f00000004c0)=0x0) io_submit(r5, 0xc2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) 22:37:56 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)}) 22:37:56 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="99b500", @ANYRES16=r8, @ANYBLOB="0fe400000000000000000100000000000000014100000003001700000000000000006574683a726f736530000000"], 0x3}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r6, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000810}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c061008", @ANYRES16=r8, @ANYBLOB="000326bd7016fbdbdf25010000f3ff00000007410000001000187fffffff6574683a6e7230000651325fa2f14308b257bfec4fbd00764224bb9f357bd5dde047b137b162ee34768fa9e931a2e32e04a3f809ccca7b6196e5c825df043e46884d295fdf877b64bb3bec76f7375f1f087aced2deb0d6c7aba5d9b30d65fe4d0e252024ecc639629e4de4b44651a8cc1f8fc2d93869b68522166be73983e9df4cb713f2e8c972162bed4a47bd42915abff065521ab0236e2112de45f76114b08f1c9468919b3833dc3d494b9df577e2"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x400c0) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa00010}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r8, 0x1, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x4) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) [ 298.004113] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 [ 298.021111] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 298.027477] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 22:37:57 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x40000, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) [ 298.162381] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 298.169157] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 22:37:57 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)}) 22:37:57 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="99b500", @ANYRES16=r8, @ANYBLOB="0fe400000000000000000100000000000000014100000003001700000000000000006574683a726f736530000000"], 0x3}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r6, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000810}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c061008", @ANYRES16=r8, @ANYBLOB="000326bd7016fbdbdf25010000f3ff00000007410000001000187fffffff6574683a6e7230000651325fa2f14308b257bfec4fbd00764224bb9f357bd5dde047b137b162ee34768fa9e931a2e32e04a3f809ccca7b6196e5c825df043e46884d295fdf877b64bb3bec76f7375f1f087aced2deb0d6c7aba5d9b30d65fe4d0e252024ecc639629e4de4b44651a8cc1f8fc2d93869b68522166be73983e9df4cb713f2e8c972162bed4a47bd42915abff065521ab0236e2112de45f76114b08f1c9468919b3833dc3d494b9df577e2"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x400c0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:37:57 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) open(0x0, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003c80), 0x38e, 0x0, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000340)={@remote}, &(0x7f0000000700)=0xc) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002440)=[{{&(0x7f0000000100)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000001a40)=[{&(0x7f0000000440)="f4f337b6b6db8f5b98c3fee0969fce56fd9fe6c807b9e84156aa0562d8b325515293e9e29887eb7aa9889f47c5a936bbee29c5629c0b79f3", 0x38}, {&(0x7f0000000240)="f4b6e907030bde240880121d45d65a41a53ea7605e80556104730ad0f3d41d959d78e2c8", 0x24}, {&(0x7f0000000780)="9862618128fae4ddc89ba66b93884b5cb1a5761651b338e0312b637bf57a74006ef64033755b841e168f18fb671e456103bf6603968479d941cf032450233af235a7c7587ee3b87c1ba259cea65adebd4e1b8590364bc6ce82f1af11d195118676e5ff8a0feb09f67ea83266c488d1493be0833a23aa6c50ae4263727b04175b438d4134e97113b38570619ce19445cb8782f515357699311a2009972791f2899b05e08ba6007cc2996eb63964e70dce4c72dfa5f38a7fa9a7b571e1d277db922ebe713c86181ee61e32257eb81fb4a07dd6389e185ac85d7303f5141016d0d5a0e10a6bb88bced2d38d1d60aee1d4fbcc2d37645933", 0xf6}, {&(0x7f0000000880)="208edd5c9d4e6dc2213ef5b5321a39768a91b0987f42285231256062bf9ab234c53b8c349a41349e08507c7929665d3283be4d5e8e01607a177ee07b3a04bbd905b8dd5e0329be54efdd2795dea3fded901a36adfc0b6c32156605580d114c73527b372332e4fef20c79a261fadbc600a36acf95ed8a4b3c393d235f18bcafc15f8be762a4c7f522c0cae959f7d0558512c2", 0x92}, {&(0x7f0000000340)}, {&(0x7f0000000940)="22a43b7370eb36363e7259e7d33e3473708c427041e02e01193bc65a5aa1702790f297ef14e5cd75e75b2f4152c80f6a1ce13c942661d93be3638db2b8a9ce19b65ab31f89f89548f2a7c30b586466e17107d137bdc065eb74f8d8794d47e69b4775a9cee66149077a61c312a87356258a52e96dc550696d2668fb2a9b255195466117ac193bde588ac3c7faad1b69fb399b6673e29c46f3a3cf94978f003cebd9e71abe0fbf6f8e95a46922cb5599db0df1631e604a09edf9417c6db27ee437d23eda5af205a805cab489c3616ed3d1122589", 0xd3}, {&(0x7f0000000a40)="f354b9fa3b2988465ad6bfeaa237ab4f58e4744e82e5dd410d5d4152f9c042605f8c73129342780f355a533472b9c6098b46ad52c0147edadb826507aeef75029179ccb38dd04551e7f8e0eddf51d526f9899c31db90d03aa142b1fc2f16a6d85610ed3bbbe85245d1048a9775f80e6ea787564333a5432978c16ccc94f101d32877b019009271834dffa42c50f0dc7406684a307791a810440e4a6bbedefd321ea85b6b2fcb344128f9186f491ba6256539549f6083cfa2b52866eff508b68a4b1bac02bdafe035a371c32c160c62df6f45d5f5f4f94e9aee209f23a6f2aa01a42d9ef4e59cf4bcf60e91b0b17cef4c696811c05de8ed829f10d8f7b8b8f52f665aba92b0593f11d0bea23fbfe40f1d9e25691f0093379a92ce283b22c5698f4e4af1eef0e3e0b8070d00ab228eadcdac9bc6b035f35b35bff7b9df1cd55e8efead07773b190b4e2f609528f6a5ef9313c45c77591baf006e78cc703e4fec6b7ec27a4bc256cfaa8a442aa1aa7eefbc66691a20c8c1272ef1d31080d6ad3a193b760c4616a030184c1dfcdf3c7f2837129ad098ec3ec6e4f3d942146d301ede8e412ea58b1801d0a037a53980a3ab721a79d89dbdf8db9f5e0a35ad96aaf4e208c8c706580a52e85810db8579ee9efe7cf3dfb85a2216c1a7aa43fbe9d6714e53671e4e433ce0eae164ca6e09083cb17c05f0b19d59f31a4748f7fe7501e65c73d1643b5b823a82c801288410f4974eba2a22b440cbc33a4a6b2415225c2a02c16dba01ae00d023747ae8e64be135f825f2b414b9467cbcc6f9711f0b6c979ac6ed183363b3d79208fed114d1217d6459b336cad9a9ecdd6054eacc3b09d7e3e8ccbe97a1e16109d62e626ea7e99f4450f310fc319f97dc08cb962361ecdf4e49da7cad6241d05d884508833a9cb6c560e9c8cc5a947b0b9ab125abcfb182b9b1df4e5d693290aeddd4c72166435718672a730a355b53a3125233d44f267b028307b59385103eaca3e9a2aba5a4199c695f0cfaac9c33caaac5dc70777bc2c7752d0ddf4acba663c04bd793ebc64b77b69e9895e0eb4c25f82ccf884d063a5a5ad871207dd19b1c135fb840191c274b96c771c4bf2b24efab2ef11d8dc77ee36a662ce063200066ac0e983b21853b99489662aefbfd9bbe43149d8fd9f5e3da25c3e79ab0ae0272ca57a9229cfab90003d7ad751c503677a3e0f689cdc751e4bf1346e72418bbbd9b0394a9b04b27750952ecbf2bd97cf3d8ff6a84341079ed8f41e100df11589fea0976b9b10fba8bea108ab1a1be768f5542242458982ab573676103e666e3aa6c2fda1c50bf45957e0d56a7781832fe26a944057152aed5dae27636600406dee73df4dd533ee3e26c9d287d54ad3f3080b46a7858e0bd541276a6229bddb47fe8a6a418f09fb2d46146c6fa1d10b09a3c036044c40aa5dab9e54324ade1bced5d9d654f2cf97955d432752f195871fa26490c4eeb0efe30145dcec9ce12137dff86b46a0b2cc6fbd74a1e87037ae1a811f009821293d38e0166e5a6eadbe77d230e82a79715a75fdf167584f4a3c84abbc1551f2482572dd2671309f856d2ff78cb65067d64160b0ee1c786b2e7530628c018b705da4de9e3c3539ac0fcfcf06ec1e5b56669099ee043559b475ccd1e985c28822649aa80780243ed6578507e8e2756f646d5fd8369aa323aadd34344ff56fb152527a22e623da5f889da22082d8918ebef1096fec9eadea7d5f7e10fa97e6055ca328d2cbce84b8abe250bc8758837a4150fa61e3dda4301b716e94f310d5274ca725863b4b0a32f2cadbf8d6e0324c6871b220d052cef787f0185ce3f9072b575a8fbfc5c89c5fb3f580414e4c8f4b2f304ab688f20577b6602ddbd42dbf72be5cef43c29e4296853a9dda2f3e884f5495d0a892d9afbc5913601dfaaf296cfadd27001375137f2568fbfdca973026f3c4bceedf4432bd2341d457e2e69e9f3cefc4781723bc22ba7b34eff14c1fc3a3c4074968045714e985cba40040b51beaa4a432e62c7dd064949cf9876427ec57ddf4aad5826785f3e9bf0f35f84b124be98babc96af9156526990df479300ac604d9dab804ffcd1d105cdfb07970e4cfc69fe2540abebbeb92e96cc182037126585bd783d479aec4935b5600a9aad903d40c419859fde29689ac0557f0c29a2331008d6710a571c485eace637b209951836f1fcef7b624f7d86df6c0c336ec6f4588a689a840719a87f8885c84e414d93b159bdde3643f2581b82c564e7f4e7ca98a35682f0de477903441aa5532d48ffee38c46f70bea9a74d235e7d0f42c3c826284533ad80504bc78ae626b6c1ed7d3a7be24bc30dfae4489b4505e2d4f52095f81ecb90c3c5a5895b5fef1d430ecd0fcf75fc65eb5c2a7fdadd4f87b2e9d451aa2344d84cd1a912938a59cb61a347d50c1c146b2f70b6119a69bfc48b2e88d5a3c99e5e36443ea56fb9a0604a0586ae36806ed4e9bccdcef63bbced4c75b60507de699546321a874d2f2940a35d5b1005367a8134006599b343876191f4663ac42dc3b7d98cfcacdfc0ac7b214fcad53e6b131603e1f66a67d96f509ef9a6af34bbe7cd2338465f9589eb6c8939f881854650e50fc63fb347fe0e00f2565c39cf97982237fa09416bb4d2b65bbe5923fb570626200af43991b21dca1ab46421fb3df05ee93eab2c1c63eff0c5b76bc42385cef8a8c0a950dc6eae1a69b5f229a30b03a23e73fcc206dd20fc0db9c314d22203f4f9166f822b4f4873128c6cd899fd10f82b7d932c5e84d0e65660bb4452e2757bcaa26169ee3dfd5c3a9def15c2015f403e648efb8fc8d3a8b8592bd05615046089ddf78ca5837a9c9a8746fb44b7c6e0228118880ffa470dacf6bffa336aa6469b907ce91fc371a705203da5bd5e5df3e1739b568d13c738854f8c20f75bdd550e2bf58d8b2654ac27829c6780beba10e7d5e6c4656f707e9d9a62a4d57566d28bdd66dd2cada9237fefbeb6f9c38debd259fbf4145298bb90309620535436764b9f95c997eac0fc598fcf62f96d615e426869a11fc965275f33ea561eebb953ad67c48b9928975eb6b910f52cbe0ad612513f31d5a5bcef68fc664be681414695978f7e876ac515e3d752666a5412e13c731ab39cd1a275bc127aa49c086dcea2d2cbb68adc9312a91f86e389858ff5cc156aeb4f14f4bf4ab8d86bf80dc56c3a23ac294094aba79ed8ef24ee21a6c7252e6653ec95a1bdab68971671411db13c4d01f3665e81f9f680476a1e7842f21845a21073798ed34b4df54ac2d2ca8d64978436bf4dd852670e2530e995b9139a4cd164462c869fb2ae31d3e7ef93a4ccb4a3dcff225dbcf354a069823e0aad04a664b40c55ee4c80daffc4ed7444c2eb38f2af379bb329aff66a5a4e170b0f02484c74894366e14b23640dcd0d83653f38d3d17a8f1a032005e21f1105b9dc8cf4c75a1484952197af3b963c7da3199c5105862fe3a5af46c43635e37ea379419ed8fa325a2121d43dfa4ebd717b32ec30acac65ba9cbd2a213376e28d67570c4dffe71a7acc58ca14e3aa68587e38b67565475afe2f5e743ce17b76fbb004e037e5b2076190b86161edc146f1169fde94b192a23509b44917403013813a482fcf7960773644d85ab2c5994c93f40d957aaf914d71d5c9713a63b84c211209f1f29313ff92f690ac93de7b46edf542f192d977e7c0c92126f8a9768badcfb525e53cb3d747300ab3b34ed3d42885a63d808f84777dfdf46dbe80bd234a682535878e80c2fed439793c1662b52c6c1a3bf7d6d89bdef08e64e88be5cc871d6a3a26fc3941eb0db79e82a9b89478d745b9f3d1f408bea8141156653559c9697672974519d9c89e36dfdce5898919f5ef19d6686fe5f2567bb0a39ff4bb1fd0bd9b55d2cb76cbe2fbf0147752629be014bfd1d89810b2d88212db0a1068722e9089f5a73bec16ee975bda88c8fdb842469b70b56c1dcc777490b3c8581659d35213f8484e6445aac5c6c4bcdd39814fdc1bfa86043c0b49eef7e1964e1fdc89c0220065ffa5423120824aa55cc6118e4d2c9e1bd4a7aa3a94699bb7cd9decb51b7057e5c60c887e7489bd0e1ab7a85f0b0327d8a3115941268bfa1d6d4c161b9eecdf9103fd055148426308428fedd7ccbdb9be4ece9a513c489e6cfff76e4006660d5c1c04227da23c96bb72d45f2bea1fde02fc5b9fa8000b3eec2cf69f25dceb1ea7de49f70b29ef101a53aa9d8c54ae65467db58df24e2c4a3734a09528f838654bf2b34bd4a19f15b06c023e840ff66e274c5a90cf0201d33489571b786d09872ced1da5d470314d71468d0c8ccbe28e7cd71e92c6345c91106b47a13283e4736ae8c63fee4bb18b0185ca918cbf83bfa5ad090002d4e7fa3b9e6aa0d85c2a1ae2a07f08641302db8bffa69d153f368847bffdd5a0a65c63c51c5877156f841250223538639bf6565dfebfb48c94b021ea88fb153cc88bcaee219bf1f18fdb7d8750d956319bd950946a004023b0189b70df74d3cfc283a61b5564a2f6c9bf50cdbde1c42afdcf261ab2ededb13199408443ddcd43a39be60c4620a31551d05c91da448ba95bb45a12c0557c46625d7aa21e5c47eb78e76fcd3d9d12c3c1dc3de6097b89c66c8b43aded600daf64f00e3de6d0a3d939892afa7cf41fa9bf36f3a7683868476e85ab8bc9012e613160db7b34abc5bae5c79782ca0ff683ff6228a8559fbdc8a611411a99853c914b5a4ce350db1dba9fee5080bca59a4f2715568b1b79ebfcf3e95e4c9e394bb5982e02b2f353588b76ee0cebf472d52e9e34dec433d6ec6dfc81e52cc3d59abdb1df3a7f6eefacacf34fbeaf735792069f8cf8704ecda5db038d48a727a3ebcd0c8a6182c35b2244297c6f9eb446890146b17e9a1621a6f3510c2902e267f2f02367db2474681b58949987f3b79fa30821887e0690cc5b41cd61aa00c3ef7faf1878a9ffa33385b23456d1c75ed7701a3242ee7da024ad902edcf0b25d2b75df807b9b8bb4a3ccc60e0bf743a45ca01416714c2b42094d4616cf459dcfdb1f0ac99d39f00207e06853ac71d88268270b4c5007b9c52bb6eea9f5e2ea2c689c4b3265a9a55de2910cf5f14875bb2fae35c9b1a53f969cafbe59b49ebd82fb2aaa46953ca2e6ab48edfdc61de8a3b9b2b8be1f5af0d09927c8bdc35f537900ffa0112db1b5e2c59d20c98d91517365071ea1244a2246addef85d7f50447905e3528a5f31a6794ed07ac2fdc8e611c87b48f8276c0201ccbf364705086f45515bc838cff83d98ebc24c50b5d2465a597c627435b8fe5aadcbb74febf685b26b2c37b943720601a50923cd974fcc9cb5e00e8a96fff9d9f965218c85eb3bc89ffa2133ceb2cdf274f37013d4f8451600223f9ed048596d78ceca953525aa31910dd1ad56f58f080f4cf1e1fcdb8cbd72f071da262e13358eb13c1cadbf322dffae8968c7f325150c172fd619c320883f2b5d286f4cb221e7a9fd97389e35d6c8de1225d8ee8c0f3a76e94784af1bb2a2a5e9e03a3ca5db4ef2b672a952e6e9d21ae3189a9b8e9c95530c8f55462a636f83ff0239d50754a08e43320aa82bd6b0f75378ee089afd63687de6aeff0de914550a67e0ea4d1f644ac363214966205d7d1476fada60555957352454f0fce11a80fafd16932b148458bece36e1961bf5162d41afb526ed0659bf060d9a6add4572ccc4b2b4c1d4a7800cb0163f776f8883ed98ec18c354fb3e8e9dfc249f8252a0", 0xff0}], 0x7, &(0x7f0000001c40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @broadcast}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1f}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffffb}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xff}}], 0x80}}, {{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000001d00)="6e86192b3fadbbb74663e482d44f10dd67341f5360ba5284fd02713f7393ffbbb664acdf32eae6ac83347a80645a84e5c1041e2d9e37ad21c232856c810913be9ca0a483d1f86851488a8109ec20d2153c34d0ebaaf97c2215f984a769fce1ba9128afcb76f1b1a5224c5f8754fc2313b7528cd1fbd4ccffb73e57511470c097fd2bf6582d0fa521430979fd513febd07b1405ef1a8f14", 0x97}, {&(0x7f0000001dc0)="6b657b5f784f6a8d3f204d59a2db49760c5472cd325e2b65871fb2a15899555c4cad9fe97dffcbacdb", 0x29}, {&(0x7f0000001e00)="2a3dbd05bf4cb07e2438073d32b019040ce1216e3dbe7d201d687924b842ed2e39add49f48894b79020b40e24e62889419def1e7438794b52d60ce5ef7d4f32317afd3fe9a452e2745686dd1825b16c692c8b3bf", 0x54}, {&(0x7f0000002600)="f3be3bb62ed6d05e87404d89b26a3faf0ad980e0bdcbfdb620167ff5d72cf58a5e05f3768ca65a27cf5e3d9cd0d468653b28c5cbffde164378915a68846452e01daebdff4676ee664474e74956d984a14d8471d919efa4f603850de69d9170b3eedbe69e274a57ad14306bfa6609b9d7f590d97c9e", 0x75}], 0x4, &(0x7f0000001f40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @loopback}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x50}}, {{&(0x7f0000001fc0)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000002200)=[{0x0}, {&(0x7f0000002180)="6209ed67941216fdf598146857a68b5a81019042838b95e9512b2b0641e40e569df37b073c12353fc2b9014cb0a30d5830", 0x31}, {&(0x7f00000021c0)="857bc0bd4d221353bcdbb9b4ffc9fc825e79ab2508b87a902028f0b971dee8b8180b46629feb2882", 0x28}], 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="0514b91d869267f6c5a00560c4a02f2cdc5a502e4a0e397a33e1a82fdb666a045ffa40e5b05796288e78bc193c1e4015fcdf77a0e475cdd39401705fd995ffb35bf1ffec02eefe0b0ed72609000000d6f535cc07effe72a116002e6dafc8fd3e24bf2adce242c778ed14cae3bf14661590557ab7f81a2fd9e50d3f69a095bfd6e4026f3e04bb453c1b5200b46000"/155], 0xc}}], 0x3, 0x140060c4) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x24000) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000000)) io_setup(0x8, &(0x7f00000004c0)=0x0) io_submit(r5, 0xc2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) 22:37:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) set_mempolicy(0x8003, &(0x7f0000000300)=0x75f, 0x9) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x0, 0x100) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) setns(0xffffffffffffffff, 0x20000) ftruncate(r1, 0x1000000) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='hugetlbfs\x00', 0x0, &(0x7f0000000180)='\x00') sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = syz_open_procfs(0x0, 0x0) preadv(r5, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000300)=0xe8) listxattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000500)=""/230, 0xe6) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r7) setresuid(r6, 0x0, r7) write$FUSE_ATTR(r4, &(0x7f0000000280)={0x78, 0x0, 0x10000000000, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0xdfe, 0x8}}}, 0x25c) ioctl$KVM_GET_MP_STATE(r4, 0x8004ae98, &(0x7f0000000000)) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) ioctl$VIDIOC_S_OUTPUT(r4, 0xc004562f, &(0x7f0000000100)=0x72b3) [ 298.424184] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 298.438614] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 22:37:57 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)}) 22:37:57 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="99b500", @ANYRES16=r8, @ANYBLOB="0fe400000000000000000100000000000000014100000003001700000000000000006574683a726f736530000000"], 0x3}}, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) [ 298.546294] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 22:37:57 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f0"}) 22:37:57 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) r4 = syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r8) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="99b500", @ANYRES16=r9, @ANYBLOB="0fe400000000000000000100000000000000014100000003001700000000000000006574683a726f736530000000"], 0x3}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r7, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000810}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c061008", @ANYRES16=r9, @ANYBLOB="000326bd7016fbdbdf25010000f3ff00000007410000001000187fffffff6574683a6e7230000651325fa2f14308b257bfec4fbd00764224bb9f357bd5dde047b137b162ee34768fa9e931a2e32e04a3f809ccca7b6196e5c825df043e46884d295fdf877b64bb3bec76f7375f1f087aced2deb0d6c7aba5d9b30d65fe4d0e252024ecc639629e4de4b44651a8cc1f8fc2d93869b68522166be73983e9df4cb713f2e8c972162bed4a47bd42915abff065521ab0236e2112de45f76114b08f1c9468919b3833dc3d494b9df577e2"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x400c0) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa00010}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r9, 0x1, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x4) preadv(r4, 0x0, 0x0, 0x0) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) [ 298.704624] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 [ 298.728585] vhci_hcd: default hub control req: 0000 v0000 i0000 l60 22:37:57 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:37:57 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r2 = fcntl$dupfd(r1, 0x0, r0) write$FUSE_ATTR(r2, &(0x7f0000000280)={0x78}, 0x78) write$P9_RRENAMEAT(r2, &(0x7f0000000300)={0x7, 0x4b, 0x1}, 0x7) r3 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0xa, 0x8012, r3, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r9 = fcntl$dupfd(r8, 0x0, r7) write$FUSE_ATTR(r9, &(0x7f0000000280)={0x78}, 0x78) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="ffff4000", @ANYRES32=0x0], &(0x7f000095dffc)=0x1bb) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000180)={r10}, 0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r9, 0x84, 0x0, &(0x7f00000001c0)={r10, 0x80000000, 0x775, 0x7}, &(0x7f0000000200)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000240)={0x8000, 0x4df1, 0x1, 0x9, 0x6, 0x81, 0x0, 0xffffff29, r11}, 0x20) r12 = fcntl$dupfd(r5, 0x0, r4) r13 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x4400) bind(r3, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x1, 0x0, 0x0, 0x3, {0xa, 0x4e22, 0xfff, @loopback, 0x40}}}, 0x80) sendfile(r13, r5, 0x0, 0x1) write$FUSE_ATTR(r12, &(0x7f0000000280)={0x78}, 0x78) ioctl$TUNSETPERSIST(r12, 0x400454cb, 0x1) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000040)) 22:37:57 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)}) 22:37:57 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) [ 298.828512] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 [ 298.858296] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 [ 298.869411] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 22:37:57 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}, 0x401}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x8}, 0x8) write(r3, &(0x7f0000000340), 0x11af811b) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x40000, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000180), &(0x7f00000001c0)=0x4) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYCAP(r5, 0x80685600, &(0x7f0000000740)) r6 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000000)={0x0, r6, r6}, &(0x7f0000000480)=""/250, 0xfa, &(0x7f0000000580)={&(0x7f0000000080)={'wp256-generic\x00\x00\x00\x00\x00\x00\xa6\x11z\xe7\xe8\xeeJr\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\'\x00'}}) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000980)=[{&(0x7f00000004c0)="bcb5a145d3854d77d87a1e3dbb29d6a24a31bbea825a1c583bc36cbb01e44e19804ca044923e9295c79cd30624174658df1048861fc9f3ec02b379e05a93e7f9ef4f83d751f25de5c5aa1a42012b0296977d3e7cc9b60992680a7a0986da6aa7ae2f", 0x62}, {&(0x7f0000000c00)="07229294b97d2d946efa1d7c6dcb1d8a6172aff87bb56f5bf7777f33dff7c02f003516d9ab72c24466defe624241f7ac568f18226365c46d3cad8ccfc8eb8d5e97e23294c1f9a44e6f13fd28b2054f744a64f89cdc41010ee86b2090676e03ee5d1c95ad207bb267cdeab7cb5a22dfaec8298ad9c1bdb622adfb1187b321bf50d2a1907c031ac1154c3790765e43e4", 0x8f}, {0x0}, {&(0x7f0000000cc0)="a34082c2e7324a8b6d1246aa726d5910834155947cc590fef9b3a3108cf939b3fceccb60cf7eba197cf12f0c62d411f8090d32b810086b7d3fff57777c62dbbb545d7fc90657fd86d1e79e1ff7563a5e9e1fed568dd281e37037b17d08f2a415d14a73a03840f89116d419cd7bc816969254e765dfc9f0426289473c3fbdd40c77224d8aed6edd", 0x87}, {&(0x7f00000006c0)="f90a6ecf72adb89cf65c3ffa0fca96e85be5fedbd056a7cd56b878713f7a5f9816add4ab29d2011a11dbfd056f6ebba33d2f2aa3dd79c5db099ff8241f7e8e1a30dec60f10778a7cd6ca5faaaedd058e697fe2d89b906fafa4e1b71d7d7de2ff5341454ced671a7d1002b8e4550fa45a20bcb74fdee2b3cd7a78", 0x7a}, {&(0x7f0000000800)="b1912ce1a93508452c7ad24c36ceba0087be062ee910c73598c7505e1f188da4d27e41064950ef063ac2c612e7f70fc4838f9dafe8da93eb310756d8df5cf88fbe4a931e9f09da704e2ed6ef5a603d5b13ca0c5c0ec60ec5a6ca1687723268e4ef412d854a81f4bd60375ee0e5c5c4eb0b81cda85813722f0ab93d1a2a9257af7f9cbca6386ff0c549b90420cd5bc97bae49b19143696fc23fdf4fbaf2b8c38aee4bb7f8d6241d346461221c8875ea0e96ccd2378056", 0xb6}, {&(0x7f00000000c0)="c620df5dc1f2469eed53e9f46a67749d758f10090651e7a0d11489", 0x1b}, {0x0}, {0x0}, {&(0x7f0000000240)}], 0xa, 0x0) socket(0x840000000002, 0x3, 0x200000000000ff) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$USBDEVFS_CLAIM_PORT(r3, 0x80045518, &(0x7f0000000240)=0x80000001) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r9 = fcntl$dupfd(r8, 0x0, r7) write$FUSE_ATTR(r9, &(0x7f0000000280)={0x78}, 0x78) ioctl$KVM_GET_IRQCHIP(r9, 0xc208ae62, &(0x7f00000005c0)) syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') semop(0x0, &(0x7f0000000100), 0x3d) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) 22:37:57 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)}) [ 299.031492] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 [ 299.047799] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 22:37:58 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f0000000100)={0x0, 0x9, 0x3ff, 0x800, 0x3}) write$FUSE_ATTR(r2, &(0x7f0000000280)={0x78}, 0x78) accept4$nfc_llcp(r2, &(0x7f0000000000), &(0x7f00000000c0)=0x60, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:37:58 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) keyctl$set_timeout(0xf, 0x0, 0x2) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000040)={{0xa, 0x4e21, 0x101, @local, 0x1000}, {0xa, 0x4e22, 0x7fffffff, @empty, 0xed8}, 0xdc96, [0x5, 0x8, 0xfffffffd, 0x8, 0x101, 0xce, 0x6, 0x1000000]}, 0x5c) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r4 = fcntl$dupfd(r3, 0x0, r2) write$FUSE_ATTR(r4, &(0x7f0000000280)={0x78}, 0x78) ioctl$SIOCX25SCALLUSERDATA(r4, 0x89e5, &(0x7f00000000c0)={0x30, "183b9325948f51e99b902cdab517b881abe7c73c8e8ae8df742f95c3e056c8b22ed3c3530d34283481d183a1346395916715428bebbc82e960d5d62be452196053a5b85d31181d68d1749a969a53434b6c8c3e04640535f2e05afc9c0e011beb3f32d238ab18dd054f214c85a5a3a8a3761dfe0867eda45482b9351d6912f704"}) 22:37:58 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)}) 22:37:58 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) creat(&(0x7f0000000280)='./file0\x00', 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:37:58 executing program 5: perf_event_open(&(0x7f0000000380)={0x1, 0xffffffffffffff50, 0x40, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, 0x0) symlink(&(0x7f0000000040)='./file1\x00', &(0x7f0000000000)='.//ile0\x00') syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockname(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140), 0xffffffffffffff87, &(0x7f00000001c0)={0x0, 0x60}}, 0x1) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) socket(0x10, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(0x0, &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32, @ANYBLOB, @ANYRES32=r1, @ANYBLOB="1000060000000000200000000000"], 0x5, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') 22:37:58 executing program 4: syz_open_dev$usbmon(&(0x7f0000000000)='\x00\xea\xe0Q\xc6\xf3w\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r2 = fcntl$dupfd(r1, 0x0, r0) write$FUSE_ATTR(r2, &(0x7f0000000280)={0x78}, 0x78) ioctl$BLKROSET(r2, 0x125d, &(0x7f0000000040)=0x9) [ 299.340645] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 299.347266] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 22:37:58 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1e, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba91"}) 22:37:58 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) [ 299.481225] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 [ 299.493488] vhci_hcd: default hub control req: 0000 v0000 i0000 l30 [ 299.502238] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 [ 299.510848] overlayfs: filesystem on './file0' not supported as upperdir 22:37:58 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)}) 22:37:58 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) set_mempolicy(0x8003, &(0x7f0000000300)=0x75f, 0x9) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x0, 0x100) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) setns(0xffffffffffffffff, 0x20000) ftruncate(r1, 0x1000000) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='hugetlbfs\x00', 0x0, &(0x7f0000000180)='\x00') sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = syz_open_procfs(0x0, 0x0) preadv(r5, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000300)=0xe8) listxattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000500)=""/230, 0xe6) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r7) setresuid(r6, 0x0, r7) write$FUSE_ATTR(r4, &(0x7f0000000280)={0x78, 0x0, 0x10000000000, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0xdfe, 0x8}}}, 0x25c) ioctl$KVM_GET_MP_STATE(r4, 0x8004ae98, &(0x7f0000000000)) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) ioctl$VIDIOC_S_OUTPUT(r4, 0xc004562f, &(0x7f0000000100)=0x72b3) 22:37:58 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r5, r4) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:37:58 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm-control\x00', 0x400000, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000340)={0x0, 0x0, [], @bt={0x1, 0x5, 0x9, 0x2ed, 0x7ff, 0x10001, 0x4, 0x11}}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000000c0)="fbc12813a69630db83dd669ccfdc06e31c55448bb543a3494807183e5009d2d374725a9d0f304d9850ad86793421eea30f6adc58e349090db0efffe29597dfecf96ddb67d174d7d3562134e90bac1ea7037add7beddecceb345167cb7c576debf8eee8a2728f7d7eec50b02fdc9f3093bfe80a53dd59c0110b1c9a0c2841a92e0a4bb4dd1b0f40df0b79dbf4c06c2bc9204c4bd0c2dd4c93a7827c318e4e2a528863c9f3da4b56c2bb3f641ab89bcf4e", 0xb0, 0xfffffffffffffff8) r3 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$search(0xa, r2, &(0x7f0000000180)='id_resolver\x00', &(0x7f00000001c0)={'syz', 0x1}, r3) r4 = syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0x1, 0x2) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) ioctl$VIDIOC_G_ENC_INDEX(r4, 0x8818564c, &(0x7f0000000900)) fcntl$dupfd(r6, 0x0, r5) write$vhci(r6, &(0x7f0000000400)=@HCI_ACLDATA_PKT={0x2, "e3b3ebfecac152e367488d53c6c4af8d8bd977c19b03bc72d29a4ae1a12c300ccfd3bae0a7ac402a0da0a9c1310749d05cccac09b62dc998dba31dd1c33954ed406b9291d6c7fd319214d4c44e8e8c3df047ea34c060cd1f324625be21a6db3ea66479c54231522c6ba4d458b8b84baee40d1af007186eb1ac0eaee1145accd189ae1d9c11682f9106534950b76b17fb0a3fd86c74392dacc22bbad4339219ee1c0463c84412031a14654df83af132df0e91acc26f1bc6202e277c3abe6507a0f5562a28387fea5e9f"}, 0xca) write$P9_RCREATE(r4, &(0x7f00000002c0)={0x18, 0x73, 0x1, {{0x10, 0x1, 0x5}, 0x8f08}}, 0x18) 22:37:58 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x8000000000, 0x20383) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) r1 = socket$inet(0x2, 0x803, 0x4) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@link_local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @broadcast}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000300)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r4) setresuid(r3, 0x0, r4) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) lchown(&(0x7f0000000100)='./file0\x00', r6, r5) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f00000000c0)={{}, {0x1, 0x4}, [{0x2, 0xe, r3}], {}, [], {0x10, 0x1}, {0x20, 0xa}}, 0x2c, 0x0) [ 299.681989] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 22:37:58 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)}) 22:37:58 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r5, r4) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) [ 299.738434] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 [ 299.746766] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 22:37:58 executing program 4: syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x1, 0x0, &(0x7f00000000c0)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x1, 0x0) write$binfmt_misc(r2, &(0x7f0000000100)={'syz0', "a5bac046b0143a1badecc6d66ac59fddda9929588d32a4ef633f"}, 0x1e) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r1, 0x29, 0x1, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x1, 0x6100954, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 299.810939] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 [ 299.821360] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 22:37:58 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)}) 22:37:58 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r1, 0x29, 0x1, 0x0, &(0x7f00000000c0)) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) [ 299.936457] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 [ 299.945759] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 22:37:58 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r2 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x3, 0x2) renameat(r1, &(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000100)='./file0\x00') mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:58 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xf, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858"}) 22:37:58 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r5, r4) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) [ 300.014595] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 [ 300.137751] vhci_hcd: default hub control req: 0000 v0000 i0000 l15 [ 300.148827] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 22:37:59 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xedV\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) lseek(r1, 0xfffffffffffffffb, 0x0) read$alg(r1, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r4 = fcntl$dupfd(r3, 0x0, r2) write$FUSE_ATTR(r4, &(0x7f0000000280)={0x78}, 0x78) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x1bb) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000180)={r5}, 0x8) syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x8, 0x242100) getsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={r5, 0x6}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000000c0)={r6, 0x7}, 0x8) 22:37:59 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x54174db1a72006d2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r1, 0x29, 0x1, 0x0, &(0x7f00000000c0)) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000040)={'\xff\x0f\x00\xe7uXj\x1f\x00', 0x5}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:37:59 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) recvfrom$x25(r3, &(0x7f0000000040)=""/185, 0xb9, 0x40, &(0x7f0000000100)={0x9, @remote={[], 0x0}}, 0x12) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:59 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:37:59 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)}) 22:37:59 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:37:59 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='scalable\x00', 0x9) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) setsockopt$inet_dccp_int(r3, 0x21, 0x0, &(0x7f0000000000)=0x651, 0x4) [ 300.523968] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 [ 300.538414] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 22:37:59 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x9540f8e9d9db8aac, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000140)=""/84) r1 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r4 = fcntl$dupfd(r3, 0x0, r2) write$FUSE_ATTR(r4, &(0x7f0000000280)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x20000000000}}}, 0x78) getpeername$inet(r4, &(0x7f0000000040)={0x2, 0x0, @initdev}, &(0x7f00000000c0)=0x10) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x181, 0x0) 22:37:59 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)}) 22:37:59 executing program 4: r0 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) setns(r0, 0x20000) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x10400) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x1, 0x8012, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r4 = fcntl$dupfd(r3, 0x0, r2) write$FUSE_ATTR(r4, &(0x7f0000000280)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xab15}}}, 0x78) getsockopt$packet_int(r4, 0x107, 0x64f66c19facd4f8a, &(0x7f0000000040), &(0x7f0000000080)=0x4) 22:37:59 executing program 5: syz_open_dev$radio(0x0, 0x0, 0x2) pipe(&(0x7f0000000300)) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x60006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x0, 0x6000000}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) 22:37:59 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) [ 300.678162] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 [ 300.688667] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 [ 300.699902] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 300.716194] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 22:37:59 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)}) 22:37:59 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0xc2) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:37:59 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r2 = fcntl$dupfd(r1, 0x0, r0) write$FUSE_ATTR(r2, &(0x7f0000000280)={0x78}, 0x78) connect$tipc(r2, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x41, 0x1}}}, 0x10) r3 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r3, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:37:59 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) syz_open_procfs(0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) [ 300.861307] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 [ 300.869365] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 22:37:59 executing program 5: syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x100, 0x0) r0 = fanotify_init(0x0, 0x0) readv(r0, &(0x7f0000001840)=[{&(0x7f0000000300)=""/196, 0xc4}], 0x1) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, &(0x7f0000000040)={{0x1, 0x0, @identifier="6ddbc0da3b0691204dd3427585ffb069"}}) 22:37:59 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000880)="240f5a6955069d87"}) 22:37:59 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x141000, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x68, 0x29, &(0x7f0000000080)="9619b6cfd69d29b597d91aa20aac251bcb894610ffe2155d3e18f05d92a6e2ab6cb283b201916bf788e8ca658a736c48e9f0ac95540cb7f4872f0ed1807ebca759f17da1d8bafd7950326c5d154833b7378b9afba9fd0da3d42986986e6ff854b21391e7ee6349ca", &(0x7f0000000100)=""/41, 0x0, 0x0, 0xb4, 0xb8, &(0x7f0000000140)="477f363f8d522f1949bc17d60c840b79ab028ba26756e2557dbc6544366de5815ac8ee2ef3178346c027cb0eb17592980998240e5814aeefc5958307f8eef2c0bf3184afd1694a823460d5aa1b0555f20afe15d561e1c62393a8324651db7848d50938c845aff24ec55951cad8d80d722635d38d7e4c4d3408230142232cc633b59c749e2e696d819704945356d4a6ed7a9fe674f93adad36aca90a0bdb08906977f51ebf2d2cf816bfce7b4a87bd85036a94ad7", &(0x7f0000000200)="e0cec49b35e5aafd450f788758bae6ccfc0afa2abde6cf20d9689135b5e239fa99bb914d610d4d9d9a7d6cc3df671e99c20e1ee565c68ffea5634f5854c604edfe8939597d4eb81516c3164b71b7866235adb9714bef49244380c736e61246e84844033a19970fe1d08fa8750af6de0851cdd32534de7c66b31c242d8c1f1f2597ed827172f225b9543fd86baf2dabdfcc862523656acc0e72c993b6d15ed1068a46a2930cbf01ab27342aa365caeeb9b18afb14c833247d"}, 0x40) 22:37:59 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) syz_open_procfs(0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) [ 301.105298] vhci_hcd: default hub control req: 0000 v0000 i0000 l8 [ 301.112245] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 22:38:00 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) syz_open_procfs(0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:38:00 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000880)='$'}) 22:38:00 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x400000) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x7f, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) r1 = semget$private(0x0, 0x2000000010a, 0x0) semop(r1, &(0x7f0000000080)=[{0x0, 0x2}, {}], 0x2) semop(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x1000}], 0x1) semctl$SEM_INFO(r1, 0x1, 0x13, &(0x7f0000000000)=""/128) 22:38:00 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)}) [ 301.233896] vhci_hcd: default hub control req: 0000 v0000 i0000 l1 [ 301.241204] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 22:38:00 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:38:00 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) r2 = geteuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) getgroups(0x1, &(0x7f00000002c0)=[r3]) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) getgroups(0x1, &(0x7f00000002c0)=[r5]) fcntl$getownex(r0, 0x10, &(0x7f00000036c0)={0x0, 0x0}) r7 = syz_open_procfs(0x0, 0x0) preadv(r7, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000300)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r9) setresuid(r8, 0x0, r9) lstat(&(0x7f0000003700)='./file0\x00', &(0x7f0000003740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000037c0)='/selinux/checkreqprot\x00', 0x400000, 0x0) r12 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r12, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r12, 0x29, 0x1, 0x0, &(0x7f00000000c0)) r13 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r14 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r15 = fcntl$dupfd(r14, 0x0, r13) write$FUSE_ATTR(r15, &(0x7f0000000280)={0x78}, 0x78) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f0000003800)=0x0) r17 = syz_open_procfs(0x0, 0x0) preadv(r17, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r17, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000300)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r19) setresuid(r18, 0x0, r19) r20 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r20, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r20, 0x29, 0x1, 0x0, &(0x7f00000000c0)) accept(0xffffffffffffffff, &(0x7f0000004fc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000005040)=0x80) r22 = syz_open_dev$audion(&(0x7f0000005080)='/dev/audio#\x00', 0x7633, 0x490000) r23 = socket$key(0xf, 0x3, 0x2) r24 = getpid() sched_setattr(r24, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r25 = syz_open_procfs(0x0, 0x0) preadv(r25, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r25, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000300)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r27) setresuid(r26, 0x0, r27) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) getgroups(0x1, &(0x7f00000002c0)=[r28]) sendmmsg$unix(r1, &(0x7f0000006600)=[{&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002480)=[{&(0x7f0000000100)="b324f8aa058101274786e76a6836158ef9c4da0c5347740c0ef38060ea460f3b4bb2baf479b541e30c2b60", 0x2b}, {&(0x7f0000000140)="cc70f17b2a797e60f23127fa7095fb5933b6dcc12c6da362a91279e022681c6e6bc9f12fe35c2d7709c9a366536a5309ed95fff7b46518cb0b81911845b662316eb1041ddd5b1cdf3c28ba6b98c9c4a8b669406e2c9b372cdd93d93ad1d8d4d4eedb9a76f719c481f7c1f1015f7168637283471174afe31b59eb160700aec5223a30f349ab305cf169c6a5394a3b2d3cb57ad6d10820a19b2955ee8056f200d344238eeb50465e79a090ca7b5729bfcc0abbad44366df0404a3519a5d7ec", 0xbe}, {&(0x7f0000000200)="8b9b1c4606ce144a94a02926e641047af986519eb001ca", 0x17}, {&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="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", 0x1000}, {&(0x7f0000002240)="d9e3470d424851002041eb5a4ac03157498bed2becb096c1e470dad50d5ef203e83d6a597247f99f9b36c30b1af7501409f3473ab3f78174aefe31848ce4b30d6230fdfb580880f1bf15b695a5ccbe1572dc402900e494855a2e6b0d5eb4cd54f5321de7186aa68bd922127f4354af5083b4d7e71b3a0b374510397a61d6b4f24bd9bbcd6d3c6019c12ca015a9cd6a2a8ae8dfba9c694209474c12e60dc9854f102de90226bc0cafa63c5012fc7415bd5ed756b4074e1c52b200b6", 0xbb}, {&(0x7f0000002300)="ad845a0aa327321e28", 0x9}, {&(0x7f0000002340)="0b32d1dee295020674f3df60a16d70c0c16f987f45e596dc5fff3407286bcb7e122f289d951079238bba9e51e955c00f9ac80de76dd35bd8aa38ddff73d4153b994b49e4164268c90520a0a418d5578a0b9b31513953dcc91f2a", 0x5a}, {&(0x7f00000023c0)="02fbe6d2b6fa8a110336f393a8f219cec764043dc57d9960cd44bd29e78d27593cd93b60b9c17ee8b3016778761a1f5094826f7f24467dea2d939e8397e280a055849f48c10428f00e460b26ba084a8936cd248e4aa8f54c8f73240b34b1961abf2c42dbca0b2402fb1364dade73387aec1758af673a7d04611f07da6d069b62bb8c63af1e8068c0e507858ae43325", 0x8f}], 0x9, 0x0, 0x0, 0x8002}, {&(0x7f0000002540)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003680)=[{&(0x7f00000025c0)="bf47c5ad4a3b5d608cfca481a7057e7aa33060a4c6653f68703cb05af5e97b61e8cf04f252069ff13a3657fbe97344fdb2e5bb2050d31298a74c6efe8f94f21e146fbd4a7252f0f019b6c0c2499024bd7550e201aa54d56ced8c38e9c8d2730695f62be125d33e", 0x67}, {&(0x7f0000002640)="25c76b0ce9411208be1599a0f75c22b18eb4527696630501c03ac1964975bbbe6c2070d56dcac9e478d534b8", 0x2c}, {&(0x7f0000002680)="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", 0x1000}], 0x3, &(0x7f0000006700)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=r8, @ANYRES32=r10, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="1c01800000000000000000000200000823a4d13692d172b343f6101ca0ffb9d547324b4c9fb3354519b0b29900f542d2ee5a083504c313ebc69ca7f51cf438266d702021cedfea7d9f71c227cdceda24ddb08da65c2ef0c137432a9bd831e3e14c04", @ANYRES32=r16, @ANYRES32=r19, @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r20, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x122, 0x10}, {&(0x7f0000003940)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000004f00)=[{&(0x7f00000039c0)="30d5b1e5ff269b878007fd663f31ee835322ab25186bcb3f06340d4ba56c06ccb7924bae6288bec1c36e3cb77de28dea0c76f44b3304ed16ffa22fe9efc9091cffed4959a56ffb876c8ab91bec8fed50c0aea7aabd155e5ff15b15e8e510ab17b49509fb45b7a0612f73c00118744b4ccde7537895ab4586d679d0d757004ff35e9693d2eaff0d7ece827c9c9729aef7a368188d12c809034472b333095b0013900706c54017b2f643c588b6803f25eb66917cb273005f5f613701907304aec189aaa03708309f6285ab8f2d", 0xcc}, {&(0x7f0000003ac0)="bd7ef11ccc687a42a056073d8fb201f01ecd1e0ca1562ee9daf2a0e6abb757aa8f8e92e2781c45f5279412711c381e876897f30db533e001a016c723a263b0220f8d89760a99551e3745a3a295316ff6e7908ee17973695a5a54d32a67dc7fe2ca9a260df0f60e532bbd751e4fcc862b8179cefae48e5164720b15881e6da331fd269e88f547f7771f0d424e260eaab3fe3b426e12edfbc9a1644befc3163749afa5f6836a8546189ce561c6a9e5d67565bbe2f0c7c2418d86cac68142578570", 0xc0}, {&(0x7f0000003b80)="5cf040ac7d59984826978429df929d380f6e289edd56564e2c898966662d1d825f8c76712358069918765ca00fb19c69f862426c84d5e5b163da13b2dc051f67e026d261c051c79712a2a3da7ced87043d6209458b7d9e39", 0x58}, {&(0x7f0000003c00)="6c34ab2dcce30ea8cf3e609a317628be1c5f38044678e7ee3ce7dbda6e048bc8fa97c509e14e1b84e5c2031fc0013c5c218d90b77c6b48b971af10ad473b1d612dbf26e90253a6df85bd127039375abaa78f", 0x52}, {&(0x7f0000003c80)="36a66019f81a20cca0effc9b52bdb73777a1a1eba5e5cf5915e978c37061d2d883871be2", 0x24}, {&(0x7f0000003cc0)="0aa98d58fd2d0621e768867db93bcfd57197942f1c030142f1a5e5f24308db0b2119438c72c1", 0x26}, {&(0x7f0000003d00)="2e24ccaf588c29f9b0710c61a170cc59b102603c33eae45264122771799f4045e3cc8386fdcfb16c371299347e1ac2277da44416d253cbc69a30eaa8eddd98efe28e0d88f25a4eb589bbda63a53b9bb33aca25e0e08fd44333a9cb52d120559f91502b1349cfef516d7b265380c4b2339124255bc6822623e7f667e407c5c980f9ece84d9b4812dbfe779076bb2170a919564c244748aeaeee04351cdf0b82d449d4c2fb110618ebd6ee1e524b8d45f6", 0xb0}, {&(0x7f0000003dc0)="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", 0x1000}, {&(0x7f0000004dc0)="1f8d7a4f0e031d296258ba81970311412947b1a57ac754e44016fab4e2f6664c5e54d63b035be085bb210aac8036345aa334e5e6acb5256f686cc589f6bae6d9d7d7c1d271aaeb7edc4285dce57fdc00"/95, 0x5f}, {&(0x7f0000004e40)="964ba331c216f1dde7e50d9e6e7906098d988c7ce2c378922c1591249cef7d7230f11ee8f7b99bcc68f9e0b3361b17419c53d6343df059cd7522c6cae8b6d6d521eab00983aaa2493dd05128f429a0c2308f84b71d20a5a4bcd44d55314bb4bc6feb7e643dd807cff5d5ce60bc2ec8494d13de712fbbda21ab81c80acc15f257f080dcd2a9c5f0f7d808", 0x8a}], 0xa, &(0x7f00000050c0)=[@rights={{0x24, 0x1, 0x1, [r21, r22, r0, r23, r0]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r24, r26, r28}}}], 0x60, 0x4080}, {&(0x7f0000005140)=@file={0xb8a63c93b2fa3448, './file0\x00'}, 0x6e, &(0x7f0000006580)=[{&(0x7f00000051c0)="92d0c1ec8cd839df32f87ade5cb2859e2456a0a7cefaf36a524e9a7ce6a0f5bbb9117756e356aeb05aa97c72a768886f20c3fde36e70381afcdc4a80a6a6f85bd7ba3667e346303ffb7a320bd0f6f07ae9e7fa474dc15ec738856ffbf0690eb007635cd19d78dcbc49519f1158836d84884b946dd004087bb1a1e4", 0x7b}, {&(0x7f0000005240)="7ed51caf3ac6d28105cd674dbe6d69deed8b5a955b09b3d1d88fb995e9e8cc6b1dbcb108c839bf97a9b96eece07e1b0a98034c9bc0d9908032c25038c76ff811c419ec056a5b198e", 0x48}, {&(0x7f00000052c0)="1fbce10881e388930fff891bcef13e54604cc54661291fb767ec64fde3a019e3651d7e22dd53f6bad339885c548ef3367a505402c2a70b9bee0e7ad6aa08c0b31b4cd4f69bce93f4588ff4e7fc27f3fcd07e3533608b2a26947ae64c1eee12515489391d0e551cd55715", 0x6a}, {&(0x7f0000005340)="15a4ed999e1b4ba88d031292ab715386dd32bbe2155b93bd621d7061c0cf98f586277714be07de87d159cbbfa931a7382ad5", 0x32}, {&(0x7f0000005380)="788d456f5c0d1c14aa9149ab0f53b2978a99b7c73ab001f7d2e7550e9a0054baa3cd572bf5c61145fce21f5ad7e8a0059479cad9620557721e6d836d3de12ecad39b00a1df0539b73e391031b87b00ea473697fbbb882131d06b1eec5d38831c0eab54835195ffaa8807d4553e5104417042f763de6a258507adbdc01d86d268bde090f90ab3b2892d3d284e61936ecf2f0ce1b8b46eaeb36c9355e42d7e1087266f4d73452e8d8789dfe4f42fd7b328e0c6f94b712bca019731", 0xba}, {&(0x7f0000005440)="e389ec67a159cb0132f5e56cae4a380b5fd44aed0d3c30ad9b44492010573517920a9d6657ba6be7129c9d0fa5591a5b1014e4b5d87138f5ed324d4ca7d2d4b91ff1f21aba6426f5b06c66782b9aa37c247e80a1198201286e8572f80040fa06b9d0243ef22226e8feaee465421f700b764ad4614ac6b303b0fc792842135e56511aabd68b6945c34a009fbfe0cc4aa5c35129bb3da9b0a843620a54b616cd7a091b1243cba31c84071c8e01d4749a9eff1c2abc572a2aa000d0c57d090ca2bc8b0f72aa4e3083bd73c62e39d8864c7ab36fba3529fe4caa127bec49c4e7e1bc4e73edeb3aa4e5044f2f8843edc5183565467f7f", 0xf4}, {&(0x7f0000005540)="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", 0x1000}, {&(0x7f0000006540)="d443072add", 0x5}], 0x8}], 0x4, 0x8000) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:38:00 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)}) [ 301.351998] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 301.370511] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 22:38:00 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) fcntl$dupfd(r2, 0x0, r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) [ 301.470445] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 301.477217] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 22:38:00 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat$rtc(0xffffffffffffff9c, &(0x7f0000000340)='/dev/rtc\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={0x0}, 0x35943, 0x0, 0x0, 0x0, 0x0, 0xfffffacc}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, 0x0) write$P9_RREADLINK(r1, 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_GET(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2080}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@FOU_ATTR_AF={0x8, 0x2, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8020}, 0xc0a1bcce4ecbf2c3) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$UI_SET_PROPBIT(r3, 0x4004556e, 0x16) syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0xfffffffffffffffb, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xf17) unshare(0x40040400) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='\xc4Iq\x05v\xff\x00') sendmsg$TIPC_NL_BEARER_GET(r4, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x18c01020}, 0xc, &(0x7f0000000480)={&(0x7f0000000b40)=ANY=[@ANYBLOB="2e495370438417398a2cc519630300c61dc645ca6d8d936d194aa291d1d03ad5525c29078ea7baab39f7da8479c547761202a81138aab05c420bb64b6db2ec4d985265b932b0abe06628f249247050f519de75de8e4e3cdf8ff8d7938f61e6d2609cbc5bf443f45840615a9748bbe223dbd72e88a9e195982b0061ac95045c957f60006037337313d77925f0094b952b79a9c4583482f959b16d0dcf638097efcf79e15c8530c8f3b2833046b27eb9481445397260e83b1451c39851ae", @ANYRES16=r5, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x444}, 0x80) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000180)=0x804, 0x4) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r8 = fcntl$dupfd(r7, 0x0, r6) write$FUSE_ATTR(r8, &(0x7f0000000280)={0x78}, 0x78) ioctl$KDGETLED(r8, 0x4b31, &(0x7f00000000c0)) vmsplice(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000540)="07332dddc13e9928dbc3c2e194f4612185b3759b732073a8042e169f66abeb7bd884d984fa158df07801dfcd0519d83f548103d56e5c4ae29ee82af5aebe536a6968636fba5b2a845945c34d8929d59e5aa9649fb24f708211d36226a00fee65bf10a4cb5b2ba10b0c061159c3b9b531e4f6c5579861f481ed9aae949a45bdd8db84d97e8c4cfb4e47bad4fd3565146be3c28fbe202d99ef73e4bf4d9577496c892482919fca374f92a5876e6d5228db20a539cd2c67794dc6", 0xb9}], 0x1, 0xc) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, 0x0) r9 = semget$private(0x0, 0x2000000010a, 0x0) semctl$SETALL(r9, 0x0, 0x11, &(0x7f0000000100)) semctl$GETPID(r9, 0x1, 0xb, &(0x7f0000000640)=""/210) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) ptrace(0x10, 0x0) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) 22:38:00 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x800) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r6 = fcntl$dupfd(r5, 0x0, r4) write$FUSE_ATTR(r6, &(0x7f0000000280)={0x78}, 0x78) ioctl$NBD_CLEAR_SOCK(r6, 0xab04) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) r7 = accept$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) connect$l2tp(r0, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, r7, 0x0, 0x4, 0x4, 0x0, {0xa, 0x4e24, 0x2, @ipv4={[], [], @multicast1}}}}, 0x3a) r8 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r8, 0x0) r9 = syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x1, 0x80000) ioctl$VIDIOC_G_SLICED_VBI_CAP(r9, 0xc0745645, &(0x7f0000000180)={0x87, [0x4652, 0x0, 0x84f, 0x800, 0x0, 0x7e, 0x9, 0x5, 0x0, 0xb782, 0x401, 0x40, 0x6, 0x400, 0x9, 0x6, 0x7, 0x3, 0x100, 0x81, 0x7, 0x2, 0xf040, 0x7ff, 0x1, 0xffff, 0x0, 0x3ff, 0x6, 0xcc1a, 0x6, 0x8, 0x2, 0x1, 0x7, 0x4, 0x40, 0x9b, 0x1, 0x1f, 0x20, 0x7fff, 0x5, 0x9, 0x8, 0x400, 0x100, 0x6], 0x5}) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:38:00 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)}) 22:38:00 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) [ 301.953695] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 301.960606] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 22:38:00 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:38:01 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x716894c8e442c8b6, r0, 0x200000) madvise(&(0x7f0000ca1000/0x11000)=nil, 0x11000, 0x12) clone(0x20100200, 0x0, 0x0, 0x0, 0x0) 22:38:01 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f0000000000)) 22:38:01 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:38:01 executing program 2 (fault-call:4 fault-nth:0): r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000880)='$'}) [ 302.131266] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 [ 302.158636] IPVS: ftp: loaded support on port[0] = 21 [ 302.234776] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 [ 302.249933] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 [ 302.259708] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 [ 302.279504] FAULT_INJECTION: forcing a failure. 22:38:01 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xfffffffffffffffa, 0x90181) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x4100, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000000c0)={0x1, &(0x7f0000000040), 0x8, r4, 0x6}) [ 302.279504] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 302.301716] CPU: 0 PID: 13851 Comm: syz-executor.2 Not tainted 4.14.156-syzkaller #0 [ 302.309765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 302.319141] Call Trace: [ 302.321754] dump_stack+0x142/0x197 [ 302.325619] should_fail.cold+0x10f/0x159 [ 302.329788] ? __might_sleep+0x93/0xb0 [ 302.333694] __alloc_pages_nodemask+0x1d6/0x7a0 [ 302.338373] ? __might_fault+0x110/0x1d0 [ 302.342454] ? __alloc_pages_slowpath+0x2930/0x2930 [ 302.347613] alloc_pages_current+0xec/0x1e0 [ 302.352049] ? check_ctrlrecip+0x91/0x290 [ 302.356237] __get_free_pages+0xf/0x40 [ 302.360144] proc_control+0x138/0x6a0 [ 302.363958] ? get_pid_task+0x98/0x140 [ 302.368042] ? snoop_urb.part.0+0x200/0x200 [ 302.372481] usbdev_do_ioctl+0x1881/0x2a60 [ 302.376853] ? lock_downgrade+0x740/0x740 [ 302.381039] ? proc_submiturb_compat+0x150/0x150 [ 302.385950] ? __might_sleep+0x93/0xb0 [ 302.389852] ? __fget+0x210/0x370 [ 302.393333] usbdev_ioctl+0x26/0x30 [ 302.396976] ? usbdev_compat_ioctl+0x30/0x30 [ 302.401599] do_vfs_ioctl+0x7ae/0x1060 [ 302.405651] ? selinux_file_mprotect+0x5d0/0x5d0 [ 302.410426] ? lock_downgrade+0x740/0x740 [ 302.414684] ? ioctl_preallocate+0x1c0/0x1c0 [ 302.419118] ? __fget+0x237/0x370 [ 302.422687] ? security_file_ioctl+0x89/0xb0 [ 302.427118] SyS_ioctl+0x8f/0xc0 [ 302.430589] ? do_vfs_ioctl+0x1060/0x1060 [ 302.434761] do_syscall_64+0x1e8/0x640 [ 302.438660] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 302.443693] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 302.448906] RIP: 0033:0x45a679 [ 302.452293] RSP: 002b:00007fcdb7d8dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 302.460138] RAX: ffffffffffffffda RBX: 00007fcdb7d8dc90 RCX: 000000000045a679 [ 302.467423] RDX: 0000000020000080 RSI: 00000000c0185500 RDI: 0000000000000003 [ 302.474800] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 22:38:01 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x1, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000cb1000/0x3000)=nil, 0x3000, 0x2, 0x810, r0, 0xf1500000) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r1, 0x0) read(r1, &(0x7f0000000040)=""/92, 0x5c) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 302.482084] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcdb7d8e6d4 [ 302.489521] R13: 00000000004c592b R14: 00000000004daff8 R15: 0000000000000006 [ 302.555530] IPVS: ftp: loaded support on port[0] = 21 [ 302.606613] [ 302.608263] kobject: 'tunl0' (ffff88804de44b30): kobject_uevent_env [ 302.608529] ====================================================== [ 302.621353] WARNING: possible circular locking dependency detected [ 302.622875] kobject: 'tunl0' (ffff88804de44b30): fill_kobj_path: path = '/devices/virtual/net/tunl0' [ 302.627677] 4.14.156-syzkaller #0 Not tainted [ 302.627681] ------------------------------------------------------ [ 302.627686] syz-executor.4/13865 is trying to acquire lock: [ 302.627691] (&mm->mmap_sem){++++} [ 302.637426] kobject: 'queues' (ffff888082bc7948): kobject_add_internal: parent: 'tunl0', set: '' [ 302.641468] , at: [] __might_fault+0xe0/0x1d0 [ 302.641471] [ 302.641471] but task is already holding lock: [ 302.641474] (&rp->fetch_lock [ 302.648248] kobject: 'queues' (ffff888082bc7948): kobject_uevent_env [ 302.653488] ){+.+.}, at: [] mon_bin_read+0x5d/0x5e0 [ 302.653508] [ 302.653508] which lock already depends on the new lock. [ 302.653508] [ 302.653510] [ 302.653510] the existing dependency chain (in reverse order) is: [ 302.653512] [ 302.653512] -> #1 (&rp->fetch_lock){+.+.} [ 302.657081] kobject: 'queues' (ffff888082bc7948): kobject_uevent_env: filter function caused the event to drop! [ 302.666480] : [ 302.666496] lock_acquire+0x16f/0x430 [ 302.666506] __mutex_lock+0xe8/0x1470 [ 302.666513] mutex_lock_nested+0x16/0x20 [ 302.666522] mon_bin_vma_fault+0x6f/0x280 [ 302.666532] __do_fault+0x104/0x390 [ 302.673046] kobject: 'rx-0' (ffff88804b362c10): kobject_add_internal: parent: 'queues', set: 'queues' [ 302.678542] __handle_mm_fault+0x23bd/0x33d0 [ 302.678547] handle_mm_fault+0x293/0x7c0 [ 302.678560] __get_user_pages+0x465/0x12e0 [ 302.681951] kobject: 'rx-0' (ffff88804b362c10): kobject_uevent_env [ 302.688313] populate_vma_page_range+0x18e/0x230 [ 302.688320] __mm_populate+0x198/0x2c0 [ 302.688328] vm_mmap_pgoff+0x1be/0x1d0 [ 302.688338] SyS_mmap_pgoff+0x3ca/0x520 [ 302.695290] kobject: 'rx-0' (ffff88804b362c10): fill_kobj_path: path = '/devices/virtual/net/tunl0/queues/rx-0' [ 302.703214] SyS_mmap+0x16/0x20 [ 302.703227] do_syscall_64+0x1e8/0x640 [ 302.703239] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 302.703246] [ 302.703246] -> #0 [ 302.711274] kobject: 'tx-0' (ffff8880558f9d58): kobject_add_internal: parent: 'queues', set: 'queues' [ 302.716601] (&mm->mmap_sem){++++}: [ 302.716619] __lock_acquire+0x2cb3/0x4620 [ 302.716629] lock_acquire+0x16f/0x430 [ 302.727626] kobject: 'tx-0' (ffff8880558f9d58): kobject_uevent_env [ 302.728852] __might_fault+0x143/0x1d0 [ 302.728862] _copy_to_user+0x2c/0xd0 [ 302.728878] mon_bin_read+0x2fb/0x5e0 [ 302.733402] kobject: 'tx-0' (ffff8880558f9d58): fill_kobj_path: path = '/devices/virtual/net/tunl0/queues/tx-0' [ 302.737655] __vfs_read+0x105/0x6a0 [ 302.737662] vfs_read+0x137/0x350 [ 302.737666] SyS_read+0xfd/0x230 [ 302.737681] do_syscall_64+0x1e8/0x640 [ 302.743770] kobject: 'gre0' (ffff88805dcf0c70): kobject_add_internal: parent: 'net', set: 'devices' [ 302.747039] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 302.747045] [ 302.747045] other info that might help us debug this: [ 302.747045] [ 302.751926] kobject: 'gre0' (ffff88805dcf0c70): kobject_uevent_env [ 302.760655] Possible unsafe locking scenario: [ 302.760655] [ 302.760657] CPU0 CPU1 [ 302.760659] ---- ---- [ 302.760660] lock(&rp->fetch_lock); [ 302.760667] lock(&mm->mmap_sem); [ 302.760672] lock(&rp->fetch_lock); [ 302.760676] lock(&mm->mmap_sem); [ 302.760681] [ 302.760681] *** DEADLOCK *** [ 302.760681] [ 302.760687] 1 lock held by syz-executor.4/13865: [ 302.760689] #0: (&rp->fetch_lock [ 302.766212] kobject: 'gre0' (ffff88805dcf0c70): fill_kobj_path: path = '/devices/virtual/net/gre0' [ 302.770496] ){+.+.}, at: [] mon_bin_read+0x5d/0x5e0 [ 302.770516] [ 302.770516] stack backtrace: [ 302.770526] CPU: 1 PID: 13865 Comm: syz-executor.4 Not tainted 4.14.156-syzkaller #0 22:38:01 executing program 2 (fault-call:4 fault-nth:1): r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000880)='$'}) [ 302.770533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 302.775996] kobject: 'queues' (ffff888082bc7648): kobject_add_internal: parent: 'gre0', set: '' [ 302.781723] Call Trace: [ 302.781744] dump_stack+0x142/0x197 [ 302.781756] ? vprintk_func+0x65/0x159 [ 302.781766] print_circular_bug.isra.0.cold+0x1cc/0x28f [ 302.781775] __lock_acquire+0x2cb3/0x4620 [ 302.781787] ? remove_wait_queue+0x10f/0x190 [ 302.787796] kobject: 'queues' (ffff888082bc7648): kobject_uevent_env [ 302.791583] ? trace_hardirqs_on+0x10/0x10 [ 302.791592] ? save_trace+0x290/0x290 [ 302.791606] lock_acquire+0x16f/0x430 [ 302.796050] kobject: 'queues' (ffff888082bc7648): kobject_uevent_env: filter function caused the event to drop! [ 302.800498] ? __might_fault+0xe0/0x1d0 [ 302.800508] __might_fault+0x143/0x1d0 [ 302.800513] ? __might_fault+0xe0/0x1d0 [ 302.800526] _copy_to_user+0x2c/0xd0 [ 302.800543] mon_bin_read+0x2fb/0x5e0 [ 302.811296] kobject: 'rx-0' (ffff88804b3629d0): kobject_add_internal: parent: 'queues', set: 'queues' [ 302.814572] __vfs_read+0x105/0x6a0 [ 302.814588] ? __fsnotify_update_child_dentry_flags.part.0+0x300/0x300 [ 302.819071] kobject: 'rx-0' (ffff88804b3629d0): kobject_uevent_env [ 302.824690] ? mon_bin_fetch+0x2e0/0x2e0 [ 302.824699] ? vfs_copy_file_range+0xa40/0xa40 [ 302.824711] ? __inode_security_revalidate+0xd6/0x130 [ 302.824718] ? avc_policy_seqno+0x9/0x20 [ 302.824726] ? selinux_file_permission+0x85/0x480 [ 302.824737] ? security_file_permission+0x89/0x1f0 [ 302.824749] ? rw_verify_area+0xea/0x2b0 [ 302.829358] kobject: 'rx-0' (ffff88804b3629d0): fill_kobj_path: path = '/devices/virtual/net/gre0/queues/rx-0' [ 302.837742] vfs_read+0x137/0x350 [ 302.837751] SyS_read+0xfd/0x230 [ 302.837757] ? kernel_write+0x120/0x120 [ 302.837769] ? do_syscall_64+0x53/0x640 [ 302.837778] ? kernel_write+0x120/0x120 [ 302.842143] kobject: 'tx-0' (ffff88804c239a18): kobject_add_internal: parent: 'queues', set: 'queues' [ 302.846492] do_syscall_64+0x1e8/0x640 [ 302.846505] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 302.851508] kobject: 'tx-0' (ffff88804c239a18): kobject_uevent_env [ 302.857237] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 302.857248] RIP: 0033:0x45a679 [ 302.862148] kobject: 'tx-0' (ffff88804c239a18): fill_kobj_path: path = '/devices/virtual/net/gre0/queues/tx-0' [ 302.866226] RSP: 002b:00007f7ce7ebfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 302.866235] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a679 [ 302.866239] RDX: 000000000000005c RSI: 0000000020000040 RDI: 0000000000000004 [ 302.866243] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 302.866252] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7ce7ec06d4 [ 302.872408] kobject: 'gretap0' (ffff88804e898db0): kobject_add_internal: parent: 'net', set: 'devices' [ 302.881022] R13: 00000000004c6ebd R14: 00000000004deaf0 R15: 00000000ffffffff [ 302.950519] kobject: 'hci61' (ffff88804df4ea68): kobject_add_internal: parent: 'bluetooth', set: 'devices' [ 302.956404] kobject: 'loop2' (ffff8880a4adcca0): kobject_uevent_env [ 302.959505] kobject: 'hci61' (ffff88804df4ea68): kobject_uevent_env [ 302.963524] kobject: 'loop2' (ffff8880a4adcca0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 302.989389] kobject: 'hci61' (ffff88804df4ea68): fill_kobj_path: path = '/devices/virtual/bluetooth/hci61' [ 302.995790] kobject: 'loop0' (ffff8880a4a89460): kobject_uevent_env [ 303.004343] kobject: 'rfkill68' (ffff88804b33a2a8): kobject_add_internal: parent: 'hci61', set: 'devices' [ 303.006510] kobject: 'loop0' (ffff8880a4a89460): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 303.042894] kobject: 'rfkill68' (ffff88804b33a2a8): kobject_uevent_env [ 303.045131] kobject: 'hci62' (ffff8880559ceaa8): kobject_add_internal: parent: 'bluetooth', set: 'devices' [ 303.058265] kobject: 'rfkill68' (ffff88804b33a2a8): fill_kobj_path: path = '/devices/virtual/bluetooth/hci61/rfkill68' [ 303.060545] kobject: 'hci62' (ffff8880559ceaa8): kobject_uevent_env [ 303.073401] kobject: 'hci63' (ffff8880559faae8): kobject_add_internal: parent: 'bluetooth', set: 'devices' [ 303.079462] kobject: 'gretap0' (ffff88804e898db0): kobject_uevent_env [ 303.112813] kobject: 'hci63' (ffff8880559faae8): kobject_uevent_env [ 303.119250] kobject: 'loop3' (ffff8880a4b5d5a0): kobject_uevent_env [ 303.156308] kobject: 'hci63' (ffff8880559faae8): fill_kobj_path: path = '/devices/virtual/bluetooth/hci63' [ 303.157314] kobject: 'hci62' (ffff8880559ceaa8): fill_kobj_path: path = '/devices/virtual/bluetooth/hci62' [ 303.168203] FAULT_INJECTION: forcing a failure. [ 303.168203] name failslab, interval 1, probability 0, space 0, times 0 [ 303.171728] kobject: 'rfkill69' (ffff88804d5fe228): kobject_add_internal: parent: 'hci62', set: 'devices' [ 303.182801] CPU: 1 PID: 13871 Comm: syz-executor.2 Not tainted 4.14.156-syzkaller #0 [ 303.182810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 303.187096] kobject: 'rfkill69' (ffff88804d5fe228): kobject_uevent_env [ 303.196339] Call Trace: [ 303.196365] dump_stack+0x142/0x197 [ 303.196384] should_fail.cold+0x10f/0x159 [ 303.196402] should_failslab+0xdb/0x130 [ 303.196423] kmem_cache_alloc_trace+0x2e9/0x790 [ 303.200441] kobject: 'gretap0' (ffff88804e898db0): fill_kobj_path: path = '/devices/virtual/net/gretap0' [ 303.205974] ? lock_downgrade+0x740/0x740 [ 303.205989] usb_control_msg+0x9a/0x490 [ 303.206001] ? usb_start_wait_urb+0x290/0x290 [ 303.212490] kobject: 'loop3' (ffff8880a4b5d5a0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 303.217519] ? wait_for_completion+0x420/0x420 [ 303.217537] proc_control+0x2cf/0x6a0 [ 303.221117] kobject: 'queues' (ffff888082bc7148): kobject_add_internal: parent: 'gretap0', set: '' [ 303.230880] ? kstrtouint+0xf8/0x140 [ 303.230893] ? snoop_urb.part.0+0x200/0x200 [ 303.230904] usbdev_do_ioctl+0x1881/0x2a60 [ 303.230915] ? lock_downgrade+0x740/0x740 [ 303.230930] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 303.238745] kobject: 'rfkill69' (ffff88804d5fe228): fill_kobj_path: path = '/devices/virtual/bluetooth/hci62/rfkill69' [ 303.246208] ? proc_submiturb_compat+0x150/0x150 [ 303.246220] ? get_pid_task+0xbf/0x140 [ 303.246229] ? proc_fail_nth_write+0x7d/0x180 [ 303.246239] ? trace_hardirqs_on+0x10/0x10 [ 303.246249] ? __fdget_pos+0xab/0xd0 [ 303.246263] ? __might_sleep+0x93/0xb0 [ 303.270623] kobject: 'queues' (ffff888082bc7148): kobject_uevent_env [ 303.277775] usbdev_ioctl+0x26/0x30 [ 303.277787] ? usbdev_compat_ioctl+0x30/0x30 [ 303.287845] kobject: 'queues' (ffff888082bc7148): kobject_uevent_env: filter function caused the event to drop! [ 303.295216] do_vfs_ioctl+0x7ae/0x1060 [ 303.295231] ? selinux_file_mprotect+0x5d0/0x5d0 [ 303.295242] ? lock_downgrade+0x740/0x740 [ 303.295254] ? ioctl_preallocate+0x1c0/0x1c0 [ 303.301824] kobject: 'rx-0' (ffff88804b362790): kobject_add_internal: parent: 'queues', set: 'queues' [ 303.308057] ? __fget+0x237/0x370 [ 303.308076] ? security_file_ioctl+0x89/0xb0 [ 303.317673] kobject: 'rx-0' (ffff88804b362790): kobject_uevent_env [ 303.327409] SyS_ioctl+0x8f/0xc0 [ 303.327418] ? do_vfs_ioctl+0x1060/0x1060 [ 303.327430] do_syscall_64+0x1e8/0x640 [ 303.327441] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 303.333934] kobject: 'rx-0' (ffff88804b362790): fill_kobj_path: path = '/devices/virtual/net/gretap0/queues/rx-0' [ 303.343571] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 303.343581] RIP: 0033:0x45a679 [ 303.353414] kobject: 'tx-0' (ffff88804df7a7d8): kobject_add_internal: parent: 'queues', set: 'queues' [ 303.359784] RSP: 002b:00007fcdb7d6cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 303.359793] RAX: ffffffffffffffda RBX: 00007fcdb7d6cc90 RCX: 000000000045a679 [ 303.359798] RDX: 0000000020000080 RSI: 00000000c0185500 RDI: 0000000000000003 [ 303.359802] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 303.359810] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcdb7d6d6d4 [ 303.369851] kobject: 'tx-0' (ffff88804df7a7d8): kobject_uevent_env [ 303.380565] R13: 00000000004c592b R14: 00000000004daff8 R15: 0000000000000006 [ 303.417088] kobject: 'rfkill70' (ffff8880939cd568): kobject_add_internal: parent: 'hci63', set: 'devices' [ 303.469119] kobject: 'tx-0' (ffff88804df7a7d8): fill_kobj_path: path = '/devices/virtual/net/gretap0/queues/tx-0' [ 303.552956] kobject: 'rfkill70' (ffff8880939cd568): kobject_uevent_env [ 303.651020] kobject: 'batman_adv' (ffff88808851cb80): kobject_add_internal: parent: 'gretap0', set: '' [ 303.772683] kobject: 'rfkill70' (ffff8880939cd568): fill_kobj_path: path = '/devices/virtual/bluetooth/hci63/rfkill70' [ 303.783197] kobject: 'loop4' (ffff8880a4bcf620): kobject_uevent_env [ 303.829576] kobject: 'loop4' (ffff8880a4bcf620): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 303.843158] kobject: 'hci64' (ffff88808b552b28): kobject_add_internal: parent: 'bluetooth', set: 'devices' [ 303.855803] kobject: 'erspan0' (ffff88805ddd2630): kobject_add_internal: parent: 'net', set: 'devices' [ 303.866429] kobject: 'erspan0' (ffff88805ddd2630): kobject_uevent_env [ 303.874546] kobject: 'erspan0' (ffff88805ddd2630): fill_kobj_path: path = '/devices/virtual/net/erspan0' [ 303.878146] kobject: 'hci64' (ffff88808b552b28): kobject_uevent_env [ 303.885827] kobject: 'queues' (ffff8880884bb748): kobject_add_internal: parent: 'erspan0', set: '' [ 303.903616] kobject: 'queues' (ffff8880884bb748): kobject_uevent_env [ 303.910284] kobject: 'queues' (ffff8880884bb748): kobject_uevent_env: filter function caused the event to drop! [ 303.918627] kobject: 'hci64' (ffff88808b552b28): fill_kobj_path: path = '/devices/virtual/bluetooth/hci64' [ 303.920587] usb usb7: usbfs: USBDEVFS_CONTROL failed cmd syz-executor.2 rqt 0 rq 0 len 1 ret -12 [ 303.942057] kobject: 'rx-0' (ffff8880a5c62a90): kobject_add_internal: parent: 'queues', set: 'queues' [ 303.944309] kobject: 'rfkill71' (ffff88805eb892e8): kobject_add_internal: parent: 'hci64', set: 'devices' [ 303.964034] kobject: 'rx-0' (ffff8880a5c62a90): kobject_uevent_env [ 303.979850] kobject: 'rx-0' (ffff8880a5c62a90): fill_kobj_path: path = '/devices/virtual/net/erspan0/queues/rx-0' [ 303.980121] kobject: 'rfkill71' (ffff88805eb892e8): kobject_uevent_env [ 303.997668] kobject: 'tx-0' (ffff88808f02ed18): kobject_add_internal: parent: 'queues', set: 'queues' [ 304.008186] kobject: 'rfkill71' (ffff88805eb892e8): fill_kobj_path: path = '/devices/virtual/bluetooth/hci64/rfkill71' [ 304.013314] kobject: 'loop2' (ffff8880a4adcca0): kobject_uevent_env [ 304.037391] kobject: 'loop2' (ffff8880a4adcca0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 304.047414] kobject: 'tx-0' (ffff88808f02ed18): kobject_uevent_env [ 304.059482] kobject: 'tx-0' (ffff88808f02ed18): fill_kobj_path: path = '/devices/virtual/net/erspan0/queues/tx-0' [ 304.082994] kobject: 'batman_adv' (ffff88808bac9300): kobject_add_internal: parent: 'erspan0', set: '' [ 304.111172] kobject: 'ip_vti0' (ffff88804ba56ff0): kobject_add_internal: parent: 'net', set: 'devices' [ 304.121569] kobject: 'ip_vti0' (ffff88804ba56ff0): kobject_uevent_env [ 304.128277] kobject: 'ip_vti0' (ffff88804ba56ff0): fill_kobj_path: path = '/devices/virtual/net/ip_vti0' [ 304.138780] kobject: 'queues' (ffff88804df5cf48): kobject_add_internal: parent: 'ip_vti0', set: '' [ 304.148599] kobject: 'queues' (ffff88804df5cf48): kobject_uevent_env [ 304.155626] kobject: 'queues' (ffff88804df5cf48): kobject_uevent_env: filter function caused the event to drop! [ 304.166325] kobject: 'rx-0' (ffff8880a40f5910): kobject_add_internal: parent: 'queues', set: 'queues' [ 304.176121] kobject: 'rx-0' (ffff8880a40f5910): kobject_uevent_env [ 304.182747] kobject: 'rx-0' (ffff8880a40f5910): fill_kobj_path: path = '/devices/virtual/net/ip_vti0/queues/rx-0' [ 304.194103] kobject: 'tx-0' (ffff88804df752d8): kobject_add_internal: parent: 'queues', set: 'queues' [ 304.204132] kobject: 'tx-0' (ffff88804df752d8): kobject_uevent_env [ 304.210656] kobject: 'tx-0' (ffff88804df752d8): fill_kobj_path: path = '/devices/virtual/net/ip_vti0/queues/tx-0' [ 304.223046] kobject: 'ip6_vti0' (ffff88805ddc5230): kobject_add_internal: parent: 'net', set: 'devices' [ 304.233621] kobject: 'ip6_vti0' (ffff88805ddc5230): kobject_uevent_env [ 304.240595] kobject: 'ip6_vti0' (ffff88805ddc5230): fill_kobj_path: path = '/devices/virtual/net/ip6_vti0' [ 304.251000] kobject: 'queues' (ffff88804df5cc48): kobject_add_internal: parent: 'ip6_vti0', set: '' [ 304.261029] kobject: 'queues' (ffff88804df5cc48): kobject_uevent_env [ 304.267625] kobject: 'queues' (ffff88804df5cc48): kobject_uevent_env: filter function caused the event to drop! [ 304.278061] kobject: 'rx-0' (ffff888095156850): kobject_add_internal: parent: 'queues', set: 'queues' [ 304.288243] kobject: 'rx-0' (ffff888095156850): kobject_uevent_env [ 304.294722] kobject: 'rx-0' (ffff888095156850): fill_kobj_path: path = '/devices/virtual/net/ip6_vti0/queues/rx-0' [ 304.305931] kobject: 'tx-0' (ffff88804df55798): kobject_add_internal: parent: 'queues', set: 'queues' [ 304.315870] kobject: 'tx-0' (ffff88804df55798): kobject_uevent_env [ 304.322318] kobject: 'tx-0' (ffff88804df55798): fill_kobj_path: path = '/devices/virtual/net/ip6_vti0/queues/tx-0' [ 304.334147] kobject: 'sit0' (ffff88804da95430): kobject_add_internal: parent: 'net', set: 'devices' [ 304.344143] kobject: 'sit0' (ffff88804da95430): kobject_uevent_env [ 304.356045] kobject: 'sit0' (ffff88804da95430): fill_kobj_path: path = '/devices/virtual/net/sit0' [ 304.375393] kobject: 'queues' (ffff88804df5c948): kobject_add_internal: parent: 'sit0', set: '' [ 304.394934] kobject: 'queues' (ffff88804df5c948): kobject_uevent_env [ 304.408203] kobject: 'queues' (ffff88804df5c948): kobject_uevent_env: filter function caused the event to drop! [ 304.441581] kobject: 'rx-0' (ffff8880a5c62550): kobject_add_internal: parent: 'queues', set: 'queues' [ 304.451083] kobject: 'rx-0' (ffff8880a5c62550): kobject_uevent_env [ 304.457462] kobject: 'rx-0' (ffff8880a5c62550): fill_kobj_path: path = '/devices/virtual/net/sit0/queues/rx-0' [ 304.490404] kobject: 'tx-0' (ffff88804df56818): kobject_add_internal: parent: 'queues', set: 'queues' [ 304.499979] kobject: 'tx-0' (ffff88804df56818): kobject_uevent_env [ 304.520095] kobject: 'tx-0' (ffff88804df56818): fill_kobj_path: path = '/devices/virtual/net/sit0/queues/tx-0' [ 304.544032] kobject: 'ip6tnl0' (ffff888055a1e730): kobject_add_internal: parent: 'net', set: 'devices' [ 304.565383] kobject: 'ip6tnl0' (ffff888055a1e730): kobject_uevent_env [ 304.579690] kobject: 'ip6tnl0' (ffff888055a1e730): fill_kobj_path: path = '/devices/virtual/net/ip6tnl0' [ 304.601577] kobject: 'queues' (ffff88804df5c648): kobject_add_internal: parent: 'ip6tnl0', set: '' [ 304.619943] kobject: 'queues' (ffff88804df5c648): kobject_uevent_env [ 304.639593] kobject: 'queues' (ffff88804df5c648): kobject_uevent_env: filter function caused the event to drop! [ 304.650452] kobject: 'rx-0' (ffff88804b362550): kobject_add_internal: parent: 'queues', set: 'queues' [ 304.660126] kobject: 'rx-0' (ffff88804b362550): kobject_uevent_env [ 304.676817] kobject: 'rx-0' (ffff88804b362550): fill_kobj_path: path = '/devices/virtual/net/ip6tnl0/queues/rx-0' [ 304.698028] kobject: 'tx-0' (ffff888051e65518): kobject_add_internal: parent: 'queues', set: 'queues' [ 304.714315] kobject: 'tx-0' (ffff888051e65518): kobject_uevent_env [ 304.720925] kobject: 'tx-0' (ffff888051e65518): fill_kobj_path: path = '/devices/virtual/net/ip6tnl0/queues/tx-0' [ 304.734016] kobject: 'ip6gre0' (ffff8880559d6930): kobject_add_internal: parent: 'net', set: 'devices' [ 304.744321] kobject: 'ip6gre0' (ffff8880559d6930): kobject_uevent_env [ 304.753135] kobject: 'ip6gre0' (ffff8880559d6930): fill_kobj_path: path = '/devices/virtual/net/ip6gre0' [ 304.763346] kobject: 'queues' (ffff88805f74cf48): kobject_add_internal: parent: 'ip6gre0', set: '' [ 304.775077] kobject: 'queues' (ffff88805f74cf48): kobject_uevent_env [ 304.781679] kobject: 'queues' (ffff88805f74cf48): kobject_uevent_env: filter function caused the event to drop! [ 304.803875] kobject: 'rx-0' (ffff88809d85d790): kobject_add_internal: parent: 'queues', set: 'queues' [ 304.824749] kobject: 'rx-0' (ffff88809d85d790): kobject_uevent_env [ 304.840378] kobject: 'rx-0' (ffff88809d85d790): fill_kobj_path: path = '/devices/virtual/net/ip6gre0/queues/rx-0' [ 304.863775] kobject: 'tx-0' (ffff88804ff14058): kobject_add_internal: parent: 'queues', set: 'queues' [ 304.889842] kobject: 'tx-0' (ffff88804ff14058): kobject_uevent_env [ 304.899828] kobject: 'tx-0' (ffff88804ff14058): fill_kobj_path: path = '/devices/virtual/net/ip6gre0/queues/tx-0' 22:38:03 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat$rtc(0xffffffffffffff9c, &(0x7f0000000340)='/dev/rtc\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={0x0}, 0x35943, 0x0, 0x0, 0x0, 0x0, 0xfffffacc}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, 0x0) write$P9_RREADLINK(r1, 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_GET(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2080}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@FOU_ATTR_AF={0x8, 0x2, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8020}, 0xc0a1bcce4ecbf2c3) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$UI_SET_PROPBIT(r3, 0x4004556e, 0x16) syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0xfffffffffffffffb, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xf17) unshare(0x40040400) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='\xc4Iq\x05v\xff\x00') sendmsg$TIPC_NL_BEARER_GET(r4, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x18c01020}, 0xc, &(0x7f0000000480)={&(0x7f0000000b40)=ANY=[@ANYBLOB="2e495370438417398a2cc519630300c61dc645ca6d8d936d194aa291d1d03ad5525c29078ea7baab39f7da8479c547761202a81138aab05c420bb64b6db2ec4d985265b932b0abe06628f249247050f519de75de8e4e3cdf8ff8d7938f61e6d2609cbc5bf443f45840615a9748bbe223dbd72e88a9e195982b0061ac95045c957f60006037337313d77925f0094b952b79a9c4583482f959b16d0dcf638097efcf79e15c8530c8f3b2833046b27eb9481445397260e83b1451c39851ae", @ANYRES16=r5, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x444}, 0x80) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000180)=0x804, 0x4) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r8 = fcntl$dupfd(r7, 0x0, r6) write$FUSE_ATTR(r8, &(0x7f0000000280)={0x78}, 0x78) ioctl$KDGETLED(r8, 0x4b31, &(0x7f00000000c0)) vmsplice(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000540)="07332dddc13e9928dbc3c2e194f4612185b3759b732073a8042e169f66abeb7bd884d984fa158df07801dfcd0519d83f548103d56e5c4ae29ee82af5aebe536a6968636fba5b2a845945c34d8929d59e5aa9649fb24f708211d36226a00fee65bf10a4cb5b2ba10b0c061159c3b9b531e4f6c5579861f481ed9aae949a45bdd8db84d97e8c4cfb4e47bad4fd3565146be3c28fbe202d99ef73e4bf4d9577496c892482919fca374f92a5876e6d5228db20a539cd2c67794dc6", 0xb9}], 0x1, 0xc) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, 0x0) r9 = semget$private(0x0, 0x2000000010a, 0x0) semctl$SETALL(r9, 0x0, 0x11, &(0x7f0000000100)) semctl$GETPID(r9, 0x1, 0xb, &(0x7f0000000640)=""/210) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) ptrace(0x10, 0x0) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) 22:38:03 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:38:03 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x1bb) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000180)={r4}, 0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000000)={r4, 0x61, "68401183c3de4f6a93b20dfa92da8268b5802ac2332d353ef78905a67799e9507b1601207cb29c6beb5639756eadb3253a001718972668f8d9c7b3d7768d944f667f6d71c5af2a6a5e32f219121fe195e3647b9681ee001d71f8a57ab80aa8e9be"}, &(0x7f00000000c0)=0x69) 22:38:03 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) r4 = open(&(0x7f0000000180)='./file0\x00', 0x404002, 0x0) bind$netlink(r4, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfc, 0x20000}, 0xc) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e22, 0x40, @mcast1, 0x9}}, 0x80000001, 0x9, 0x101, 0x3, 0x8}, &(0x7f0000000100)=0x98) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000140)={r5, 0x3800, 0xffff}, 0x8) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x700000a, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 304.933688] kobject: 'loop5' (ffff8880a4026560): kobject_uevent_env [ 304.960181] kobject: 'loop5' (ffff8880a4026560): fill_kobj_path: path = '/devices/virtual/block/loop5' 22:38:03 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) [ 305.027240] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 [ 305.038618] kobject: 'loop0' (ffff8880a4a89460): kobject_uevent_env [ 305.047638] kobject: 'loop0' (ffff8880a4a89460): fill_kobj_path: path = '/devices/virtual/block/loop0' 22:38:04 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) ioctl$KDGKBLED(r3, 0x4b64, &(0x7f0000000040)) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 305.087420] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 [ 305.095215] kobject: 'loop4' (ffff8880a4bcf620): kobject_uevent_env 22:38:04 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:38:04 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x280, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@mcast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@dev}}, &(0x7f0000000000)=0xe8) ioprio_get$uid(0x0, r1) [ 305.130854] kobject: 'loop4' (ffff8880a4bcf620): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 305.150760] kobject: 'rx-0' (ffff8880838ba550): kobject_cleanup, parent ffff8880558a0648 [ 305.166823] kobject: 'rx-0' (ffff8880838ba550): auto cleanup 'remove' event [ 305.168699] kobject: 'loop3' (ffff8880a4b5d5a0): kobject_uevent_env 22:38:04 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='#dev/\x00\x00\x04\x00\x00\x00\x00\x16', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 305.201742] kobject: 'loop3' (ffff8880a4b5d5a0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 305.203213] kobject: 'rx-0' (ffff8880838ba550): kobject_uevent_env [ 305.228310] kobject: 'rx-0' (ffff8880838ba550): kobject_uevent_env: uevent_suppress caused the event to drop! [ 305.231699] vhci_hcd: default hub control req: 0000 v0000 i0000 l640 [ 305.249539] kobject: 'rx-0' (ffff8880838ba550): auto cleanup kobject_del [ 305.258799] kobject: 'loop4' (ffff8880a4bcf620): kobject_uevent_env [ 305.269172] kobject: 'rx-0' (ffff8880838ba550): calling ktype release [ 305.284799] kobject: 'loop4' (ffff8880a4bcf620): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 305.298447] kobject: 'rx-0': free name 22:38:04 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r6 = fcntl$dupfd(r5, 0x0, r4) write$FUSE_ATTR(r6, &(0x7f0000000280)={0x78}, 0x78) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r9 = fcntl$dupfd(r8, 0x0, r7) write$FUSE_ATTR(r9, &(0x7f0000000280)={0x78}, 0x78) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x1ff, 0x0, 0x1, 0x9}) ioctl$DRM_IOCTL_AGP_UNBIND(r9, 0x40106437, &(0x7f0000000180)={r10, 0x766d7c78}) r11 = accept4$x25(r6, &(0x7f0000000040), &(0x7f00000000c0)=0x12, 0x80000) ioctl$FS_IOC_RESVSP(r11, 0x40305828, &(0x7f0000000100)={0x0, 0x2, 0x557bf3f4}) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000080), 0x10) 22:38:04 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x9, 0x6000) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000080)=0x8, 0x4) mmap(&(0x7f0000cb0000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x2ed34000) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 305.307113] kobject: 'tx-0' (ffff8880a71f7cd8): kobject_cleanup, parent ffff8880558a0648 [ 305.316483] vhci_hcd: default hub control req: 0000 v0000 i0000 l640 [ 305.325364] kobject: 'tx-0' (ffff8880a71f7cd8): auto cleanup 'remove' event [ 305.344470] kobject: 'tx-0' (ffff8880a71f7cd8): kobject_uevent_env 22:38:04 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x20000, 0x0) r2 = socket(0x1, 0x0, 0xc) sendmmsg$alg(r2, &(0x7f0000000140), 0xffffffffffffff68, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="008000", @ANYRES16=r3, @ANYBLOB="000327bd7000fbdbdf250500000008000600ff070000040001000800040025cabf190c0002000800080036020000"], 0x34}, 0x1, 0x0, 0x0, 0x7ab5431d5c4231c9}, 0x20000800) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000300)=""/123) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80400000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xf8, r3, 0x500, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xff}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @multicast1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @broadcast}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1f}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x3}, 0x4) [ 305.359560] kobject: 'tx-0' (ffff8880a71f7cd8): kobject_uevent_env: uevent_suppress caused the event to drop! [ 305.378372] kobject: 'loop3' (ffff8880a4b5d5a0): kobject_uevent_env [ 305.385807] kobject: 'tx-0' (ffff8880a71f7cd8): auto cleanup kobject_del [ 305.389222] kobject: 'loop3' (ffff8880a4b5d5a0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 305.402240] kobject: 'tx-0' (ffff8880a71f7cd8): calling ktype release [ 305.402245] kobject: 'tx-0': free name [ 305.402259] kobject: 'queues' (ffff8880558a0648): kobject_cleanup, parent (null) [ 305.402262] kobject: 'queues' (ffff8880558a0648): calling ktype release [ 305.402266] kobject: 'queues' (ffff8880558a0648): kset_release [ 305.402272] kobject: 'queues': free name [ 305.402521] kobject: 'ip6gre0' (ffff88805de329b0): kobject_uevent_env [ 305.454935] kobject: 'loop4' (ffff8880a4bcf620): kobject_uevent_env [ 305.473479] kobject: 'loop4' (ffff8880a4bcf620): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 305.490987] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 [ 305.506254] kobject: 'ip6gre0' (ffff88805de329b0): kobject_uevent_env: uevent_suppress caused the event to drop! [ 305.525216] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 [ 305.548492] kobject: 'loop1' (ffff8880a4aca3a0): kobject_uevent_env [ 305.556234] kobject: 'loop1' (ffff8880a4aca3a0): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 305.560231] kobject: 'ip6gre0' (ffff88805de329b0): kobject_cleanup, parent (null) [ 305.585257] kobject: 'ip6gre0' (ffff88805de329b0): calling ktype release [ 305.594876] kobject: 'loop0' (ffff8880a4a89460): kobject_uevent_env [ 305.599814] kobject: 'ip6gre0': free name [ 305.611579] kobject: 'rx-0' (ffff8880838ba6d0): kobject_cleanup, parent ffff8880558a0948 [ 305.617516] kobject: 'loop0' (ffff8880a4a89460): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 305.629583] kobject: 'rx-0' (ffff8880838ba6d0): auto cleanup 'remove' event [ 305.629588] kobject: 'rx-0' (ffff8880838ba6d0): kobject_uevent_env [ 305.629592] kobject: 'rx-0' (ffff8880838ba6d0): kobject_uevent_env: uevent_suppress caused the event to drop! [ 305.629595] kobject: 'rx-0' (ffff8880838ba6d0): auto cleanup kobject_del [ 305.629625] kobject: 'rx-0' (ffff8880838ba6d0): calling ktype release [ 305.629628] kobject: 'rx-0': free name [ 305.629655] kobject: 'tx-0' (ffff888055898558): kobject_cleanup, parent ffff8880558a0948 [ 305.659162] kobject: 'loop3' (ffff8880a4b5d5a0): kobject_uevent_env [ 305.691460] kobject: 'tx-0' (ffff888055898558): auto cleanup 'remove' event [ 305.706193] kobject: 'tx-0' (ffff888055898558): kobject_uevent_env [ 305.716959] kobject: 'loop3' (ffff8880a4b5d5a0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 305.719067] kobject: 'tx-0' (ffff888055898558): kobject_uevent_env: uevent_suppress caused the event to drop! 22:38:04 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat$rtc(0xffffffffffffff9c, &(0x7f0000000340)='/dev/rtc\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={0x0}, 0x35943, 0x0, 0x0, 0x0, 0x0, 0xfffffacc}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, 0x0) write$P9_RREADLINK(r1, 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_GET(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2080}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@FOU_ATTR_AF={0x8, 0x2, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8020}, 0xc0a1bcce4ecbf2c3) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$UI_SET_PROPBIT(r3, 0x4004556e, 0x16) syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0xfffffffffffffffb, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xf17) unshare(0x40040400) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='\xc4Iq\x05v\xff\x00') sendmsg$TIPC_NL_BEARER_GET(r4, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x18c01020}, 0xc, &(0x7f0000000480)={&(0x7f0000000b40)=ANY=[@ANYBLOB="2e495370438417398a2cc519630300c61dc645ca6d8d936d194aa291d1d03ad5525c29078ea7baab39f7da8479c547761202a81138aab05c420bb64b6db2ec4d985265b932b0abe06628f249247050f519de75de8e4e3cdf8ff8d7938f61e6d2609cbc5bf443f45840615a9748bbe223dbd72e88a9e195982b0061ac95045c957f60006037337313d77925f0094b952b79a9c4583482f959b16d0dcf638097efcf79e15c8530c8f3b2833046b27eb9481445397260e83b1451c39851ae", @ANYRES16=r5, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x444}, 0x80) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000180)=0x804, 0x4) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r8 = fcntl$dupfd(r7, 0x0, r6) write$FUSE_ATTR(r8, &(0x7f0000000280)={0x78}, 0x78) ioctl$KDGETLED(r8, 0x4b31, &(0x7f00000000c0)) vmsplice(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000540)="07332dddc13e9928dbc3c2e194f4612185b3759b732073a8042e169f66abeb7bd884d984fa158df07801dfcd0519d83f548103d56e5c4ae29ee82af5aebe536a6968636fba5b2a845945c34d8929d59e5aa9649fb24f708211d36226a00fee65bf10a4cb5b2ba10b0c061159c3b9b531e4f6c5579861f481ed9aae949a45bdd8db84d97e8c4cfb4e47bad4fd3565146be3c28fbe202d99ef73e4bf4d9577496c892482919fca374f92a5876e6d5228db20a539cd2c67794dc6", 0xb9}], 0x1, 0xc) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, 0x0) r9 = semget$private(0x0, 0x2000000010a, 0x0) semctl$SETALL(r9, 0x0, 0x11, &(0x7f0000000100)) semctl$GETPID(r9, 0x1, 0xb, &(0x7f0000000640)=""/210) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) ptrace(0x10, 0x0) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) 22:38:04 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/d{\x00\x00\r\x002-\xdf\xfa4d3:', 0x100000, 0x0) ioctl$KDDELIO(r0, 0x4b35, 0x80000000) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev\xff\t\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r1, 0x0) close(0xffffffffffffffff) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x104400) ioctl$TIOCNXCL(r2, 0x540d) 22:38:04 executing program 0: r0 = syz_open_dev$usbfs(0x0, 0x40000000909, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:38:04 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x2}, 0x10) 22:38:04 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) chdir(&(0x7f0000000000)='./file0\x00') ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) [ 305.760679] kobject: 'tx-0' (ffff888055898558): auto cleanup kobject_del [ 305.777763] kobject: 'tx-0' (ffff888055898558): calling ktype release [ 305.782379] kobject: 'loop5' (ffff8880a4026560): kobject_uevent_env [ 305.793926] kobject: 'tx-0': free name [ 305.804254] kobject: 'loop5' (ffff8880a4026560): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 305.807766] kobject: 'queues' (ffff8880558a0948): kobject_cleanup, parent (null) 22:38:04 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0xa57a42) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x488c04, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(r3, 0x400443c9, &(0x7f0000000080)={{0x4, 0x80, 0x0, 0x40, 0x0, 0x7f}, 0x1f}) r4 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r4, &(0x7f0000000280)={0x78}, 0x78) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r4, 0x84, 0x1c, &(0x7f0000000140), &(0x7f0000000180)=0x4) [ 305.854691] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 [ 305.880415] kobject: 'loop4' (ffff8880a4bcf620): kobject_uevent_env [ 305.886478] kobject: 'queues' (ffff8880558a0948): calling ktype release [ 305.892270] kobject: 'loop4' (ffff8880a4bcf620): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 305.906156] kobject: 'queues' (ffff8880558a0948): kset_release [ 305.921326] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 [ 305.934149] kobject: 'queues': free name [ 305.943944] kobject: 'ip6tnl0' (ffff8880559ab130): kobject_uevent_env 22:38:04 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r4, 0x400, 0x70bd28, 0x25dfdbfe, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x200}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000581) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:38:04 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r1 = accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80000) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x0) 22:38:04 executing program 0: r0 = syz_open_dev$usbfs(0x0, 0x40000000909, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) [ 305.968692] kobject: 'ip6tnl0' (ffff8880559ab130): kobject_uevent_env: uevent_suppress caused the event to drop! [ 305.973229] kobject: 'loop4' (ffff8880a4bcf620): kobject_uevent_env 22:38:04 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_KEEPCAPS(0x8, 0x0) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000080), 0x1e6) 22:38:04 executing program 0: r0 = syz_open_dev$usbfs(0x0, 0x40000000909, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) [ 306.014790] kobject: 'loop4' (ffff8880a4bcf620): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 306.030400] kobject: 'ip6tnl0' (ffff8880559ab130): kobject_cleanup, parent (null) [ 306.046887] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 [ 306.052818] kobject: 'loop3' (ffff8880a4b5d5a0): kobject_uevent_env [ 306.059947] kobject: 'ip6tnl0' (ffff8880559ab130): calling ktype release [ 306.068701] kobject: 'loop3' (ffff8880a4b5d5a0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 306.070315] kobject: 'hci65' (ffff88804cbeec28): kobject_add_internal: parent: 'bluetooth', set: 'devices' [ 306.080406] kobject: 'hci66' (ffff88805de72c68): kobject_add_internal: parent: 'bluetooth', set: 'devices' [ 306.105323] kobject: 'ip6tnl0': free name 22:38:05 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) [ 306.130819] kobject: 'hci65' (ffff88804cbeec28): kobject_uevent_env [ 306.134542] kobject: 'loop0' (ffff8880a4a89460): kobject_uevent_env [ 306.149649] kobject: 'hci66' (ffff88805de72c68): kobject_uevent_env [ 306.155730] kobject: 'hci65' (ffff88804cbeec28): fill_kobj_path: path = '/devices/virtual/bluetooth/hci65' [ 306.169843] kobject: 'hci66' (ffff88805de72c68): fill_kobj_path: path = '/devices/virtual/bluetooth/hci66' [ 306.179865] kobject: 'rfkill72' (ffff888091fd6ba8): kobject_add_internal: parent: 'hci65', set: 'devices' [ 306.181536] kobject: 'loop0' (ffff8880a4a89460): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 306.200809] kobject: 'rfkill72' (ffff888091fd6ba8): kobject_uevent_env [ 306.216068] kobject: 'rfkill72' (ffff888091fd6ba8): fill_kobj_path: path = '/devices/virtual/bluetooth/hci65/rfkill72' [ 306.239627] kobject: 'rfkill73' (ffff88805dbe2428): kobject_add_internal: parent: 'hci66', set: 'devices' [ 306.241894] kobject: 'hci67' (ffff8880611daca8): kobject_add_internal: parent: 'bluetooth', set: 'devices' [ 306.250099] kobject: 'loop1' (ffff8880a4aca3a0): kobject_uevent_env [ 306.272503] kobject: 'hci67' (ffff8880611daca8): kobject_uevent_env [ 306.280248] kobject: 'rfkill73' (ffff88805dbe2428): kobject_uevent_env [ 306.286966] kobject: 'rfkill73' (ffff88805dbe2428): fill_kobj_path: path = '/devices/virtual/bluetooth/hci66/rfkill73' [ 306.288200] kobject: 'hci67' (ffff8880611daca8): fill_kobj_path: path = '/devices/virtual/bluetooth/hci67' [ 306.319204] kobject: 'loop1' (ffff8880a4aca3a0): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 306.339582] kobject: 'loop0' (ffff8880a4a89460): kobject_uevent_env [ 306.354875] kobject: 'loop0' (ffff8880a4a89460): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 306.366946] kobject: 'rfkill74' (ffff88804d4c2368): kobject_add_internal: parent: 'hci67', set: 'devices' [ 306.396060] kobject: 'rfkill74' (ffff88804d4c2368): kobject_uevent_env [ 306.421959] kobject: 'rfkill74' (ffff88804d4c2368): fill_kobj_path: path = '/devices/virtual/bluetooth/hci67/rfkill74' [ 306.449035] kobject: 'rx-0' (ffff8880838ba910): kobject_cleanup, parent ffff8880558a0c48 [ 306.461788] kobject: 'rx-0' (ffff8880838ba910): auto cleanup 'remove' event [ 306.476579] kobject: 'rx-0' (ffff8880838ba910): kobject_uevent_env [ 306.489633] kobject: 'rx-0' (ffff8880838ba910): kobject_uevent_env: uevent_suppress caused the event to drop! [ 306.499974] kobject: 'rx-0' (ffff8880838ba910): auto cleanup kobject_del [ 306.507067] kobject: 'rx-0' (ffff8880838ba910): calling ktype release [ 306.513748] kobject: 'rx-0': free name [ 306.517711] kobject: 'tx-0' (ffff8880558a2518): kobject_cleanup, parent ffff8880558a0c48 [ 306.526046] kobject: 'tx-0' (ffff8880558a2518): auto cleanup 'remove' event [ 306.533198] kobject: 'tx-0' (ffff8880558a2518): kobject_uevent_env [ 306.539571] kobject: 'tx-0' (ffff8880558a2518): kobject_uevent_env: uevent_suppress caused the event to drop! [ 306.549712] kobject: 'tx-0' (ffff8880558a2518): auto cleanup kobject_del [ 306.556663] kobject: 'tx-0' (ffff8880558a2518): calling ktype release [ 306.563342] kobject: 'tx-0': free name [ 306.567279] kobject: 'queues' (ffff8880558a0c48): kobject_cleanup, parent (null) [ 306.575775] kobject: 'queues' (ffff8880558a0c48): calling ktype release [ 306.582784] kobject: 'queues' (ffff8880558a0c48): kset_release [ 306.588823] kobject: 'queues': free name [ 306.593147] kobject: 'sit0' (ffff88805596ae30): kobject_uevent_env 22:38:05 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat$rtc(0xffffffffffffff9c, &(0x7f0000000340)='/dev/rtc\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={0x0}, 0x35943, 0x0, 0x0, 0x0, 0x0, 0xfffffacc}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, 0x0) write$P9_RREADLINK(r1, 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_GET(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2080}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@FOU_ATTR_AF={0x8, 0x2, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8020}, 0xc0a1bcce4ecbf2c3) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$UI_SET_PROPBIT(r3, 0x4004556e, 0x16) syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0xfffffffffffffffb, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xf17) unshare(0x40040400) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='\xc4Iq\x05v\xff\x00') sendmsg$TIPC_NL_BEARER_GET(r4, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x18c01020}, 0xc, &(0x7f0000000480)={&(0x7f0000000b40)=ANY=[@ANYBLOB="2e495370438417398a2cc519630300c61dc645ca6d8d936d194aa291d1d03ad5525c29078ea7baab39f7da8479c547761202a81138aab05c420bb64b6db2ec4d985265b932b0abe06628f249247050f519de75de8e4e3cdf8ff8d7938f61e6d2609cbc5bf443f45840615a9748bbe223dbd72e88a9e195982b0061ac95045c957f60006037337313d77925f0094b952b79a9c4583482f959b16d0dcf638097efcf79e15c8530c8f3b2833046b27eb9481445397260e83b1451c39851ae", @ANYRES16=r5, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x444}, 0x80) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000180)=0x804, 0x4) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r8 = fcntl$dupfd(r7, 0x0, r6) write$FUSE_ATTR(r8, &(0x7f0000000280)={0x78}, 0x78) ioctl$KDGETLED(r8, 0x4b31, &(0x7f00000000c0)) vmsplice(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000540)="07332dddc13e9928dbc3c2e194f4612185b3759b732073a8042e169f66abeb7bd884d984fa158df07801dfcd0519d83f548103d56e5c4ae29ee82af5aebe536a6968636fba5b2a845945c34d8929d59e5aa9649fb24f708211d36226a00fee65bf10a4cb5b2ba10b0c061159c3b9b531e4f6c5579861f481ed9aae949a45bdd8db84d97e8c4cfb4e47bad4fd3565146be3c28fbe202d99ef73e4bf4d9577496c892482919fca374f92a5876e6d5228db20a539cd2c67794dc6", 0xb9}], 0x1, 0xc) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, 0x0) r9 = semget$private(0x0, 0x2000000010a, 0x0) semctl$SETALL(r9, 0x0, 0x11, &(0x7f0000000100)) semctl$GETPID(r9, 0x1, 0xb, &(0x7f0000000640)=""/210) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) ptrace(0x10, 0x0) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) 22:38:05 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/\x06\x00v/bus/j]b/00#/00#\x00', 0x2, 0x2ca240) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:38:05 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r1, 0x29, 0x1, 0x0, &(0x7f00000000c0)) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r2, 0x29, 0x1, 0x0, &(0x7f00000000c0)) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r3, 0x29, 0x1, 0x0, &(0x7f00000000c0)) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r6 = fcntl$dupfd(r5, 0x0, r4) write$FUSE_ATTR(r6, &(0x7f0000000280)={0x78}, 0x78) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x2344}, {r1}, {r2, 0x80}, {0xffffffffffffffff, 0x200}, {r3, 0x3c0}, {r7}], 0x6, 0x9) clone(0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r8, 0x29, 0x1, 0x0, &(0x7f00000000c0)) getsockopt$inet6_mreq(r8, 0x29, 0x34, &(0x7f0000000100)={@ipv4={[], [], @loopback}}, &(0x7f0000000140)=0x14) 22:38:05 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r2 = fcntl$dupfd(r1, 0x0, r0) write$FUSE_ATTR(r2, &(0x7f0000000280)={0x78}, 0x78) setsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000140)=0x1ff, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000080), 0x10) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)) 22:38:05 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) [ 306.599612] kobject: 'sit0' (ffff88805596ae30): kobject_uevent_env: uevent_suppress caused the event to drop! [ 306.625211] kobject: 'loop5' (ffff8880a4026560): kobject_uevent_env [ 306.636571] kobject: 'loop5' (ffff8880a4026560): fill_kobj_path: path = '/devices/virtual/block/loop5' 22:38:05 executing program 3: syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r2 = fcntl$dupfd(r1, 0x0, r0) write$FUSE_ATTR(r2, &(0x7f0000000280)={0x78}, 0x78) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1f7, 0x1001, &(0x7f0000000180)="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"}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r3, 0xc0a85322, &(0x7f0000000380)) [ 306.659707] kobject: 'loop1' (ffff8880a4aca3a0): kobject_uevent_env [ 306.666580] kobject: 'sit0' (ffff88805596ae30): kobject_cleanup, parent (null) [ 306.690922] kobject: 'sit0' (ffff88805596ae30): calling ktype release 22:38:05 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$SIOCAX25GETINFOOLD(r4, 0x89e9, &(0x7f0000000200)) sendmsg$key(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="021609051f0000002abd7000ffdbdf2502000100000004d4a781f8010000009007001900000000000a004e240000000400000000000000000000ffff0000077ae4f1000002004e1e7f000001000000000000000000000000040005008000000003000000000000000900000000000000faffffffffffffff0800120003000000000000007400000006001100ff1f0000080000000000000000000006000000000000000000000000ac1414aa000000000000000000000000020013007f0000002bbd700002350000010016004e200000050019000000000002004e2400000040000000000000000002004e20e00000010000000000000000"], 0xf8}}, 0x10) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000080), 0x10) [ 306.717821] kobject: 'loop1' (ffff8880a4aca3a0): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 306.737396] kobject: 'sit0': free name [ 306.743208] kobject: 'rx-0' (ffff8880838ba9d0): kobject_cleanup, parent ffff888092000448 [ 306.752225] kobject: 'loop0' (ffff8880a4a89460): kobject_uevent_env [ 306.758662] kobject: 'loop0' (ffff8880a4a89460): fill_kobj_path: path = '/devices/virtual/block/loop0' 22:38:05 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:38:05 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='\x00\x00\xf0\a\x00\x00\x00 \x00', 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x200, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000280)={&(0x7f0000000140), &(0x7f0000000180)=""/233, 0xe9}) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) signalfd(r3, &(0x7f0000000380)={0x2533}, 0x8) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r7 = fcntl$dupfd(r6, 0x0, r5) write$FUSE_ATTR(r7, &(0x7f0000000280)={0x78}, 0x78) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) getgroups(0x1, &(0x7f00000002c0)=[r8]) write$FUSE_ATTR(r7, &(0x7f0000000280)={0x78, 0x0, 0x1, {0x0, 0x0, 0x0, {0xfffffffffffffffd, 0x0, 0x0, 0x2, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, r8, 0x7f}}}, 0x78) setsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f00000002c0), 0x4) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r10 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r11 = fcntl$dupfd(r10, 0x0, r9) write$FUSE_ATTR(r11, &(0x7f0000000280)={0x78}, 0x78) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000000300)=@assoc_value, &(0x7f0000000340)=0x8) r12 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x620c23, 0x0) getsockopt$inet_dccp_int(r12, 0x21, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0x4) [ 306.770348] kobject: 'rx-0' (ffff8880838ba9d0): auto cleanup 'remove' event [ 306.777556] kobject: 'rx-0' (ffff8880838ba9d0): kobject_uevent_env [ 306.792236] kobject: 'loop3' (ffff8880a4b5d5a0): kobject_uevent_env [ 306.798834] kobject: 'rx-0' (ffff8880838ba9d0): kobject_uevent_env: uevent_suppress caused the event to drop! 22:38:05 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x4000000090c, 0x66a7800aebc676a8) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) tgkill(0x0, r1, 0x2c) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x80, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r4 = fcntl$dupfd(r3, 0x0, r2) write$FUSE_ATTR(r4, &(0x7f0000000280)={0x78}, 0x78) ioctl$VIDIOC_G_ENC_INDEX(r4, 0x8818564c, &(0x7f0000000900)) [ 306.824273] kobject: 'loop3' (ffff8880a4b5d5a0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 306.835669] kobject: 'rx-0' (ffff8880838ba9d0): auto cleanup kobject_del [ 306.846685] kobject: 'loop4' (ffff8880a4bcf620): kobject_uevent_env [ 306.854847] kobject: 'rx-0' (ffff8880838ba9d0): calling ktype release [ 306.855418] Unknown ioctl 1075352074 [ 306.865288] kobject: 'loop4' (ffff8880a4bcf620): fill_kobj_path: path = '/devices/virtual/block/loop4' 22:38:05 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) [ 306.877826] kobject: 'rx-0': free name [ 306.881997] kobject: 'tx-0' (ffff8880898552d8): kobject_cleanup, parent ffff888092000448 [ 306.891925] Unknown ioctl 1075352074 [ 306.896270] kobject: 'loop0' (ffff8880a4a89460): kobject_uevent_env [ 306.902859] kobject: 'tx-0' (ffff8880898552d8): auto cleanup 'remove' event [ 306.915065] kobject: 'loop0' (ffff8880a4a89460): fill_kobj_path: path = '/devices/virtual/block/loop0' 22:38:05 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x2, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 306.924802] kobject: 'tx-0' (ffff8880898552d8): kobject_uevent_env [ 306.936928] kobject: 'loop3' (ffff8880a4b5d5a0): kobject_uevent_env [ 306.943446] kobject: 'tx-0' (ffff8880898552d8): kobject_uevent_env: uevent_suppress caused the event to drop! [ 306.962278] kobject: 'loop3' (ffff8880a4b5d5a0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 306.970655] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 [ 306.973581] kobject: 'tx-0' (ffff8880898552d8): auto cleanup kobject_del [ 306.989593] kobject: 'loop4' (ffff8880a4bcf620): kobject_uevent_env [ 307.004259] kobject: 'tx-0' (ffff8880898552d8): calling ktype release [ 307.005459] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 [ 307.014548] kobject: 'loop4' (ffff8880a4bcf620): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 307.032092] kobject: 'tx-0': free name [ 307.036062] kobject: 'queues' (ffff888092000448): kobject_cleanup, parent (null) [ 307.065690] kobject: 'queues' (ffff888092000448): calling ktype release [ 307.089700] kobject: 'queues' (ffff888092000448): kset_release [ 307.105068] kobject: 'queues': free name [ 307.109441] kobject: 'ip6_vti0' (ffff88804dec2a70): kobject_uevent_env [ 307.118518] kobject: 'ip6_vti0' (ffff88804dec2a70): kobject_uevent_env: uevent_suppress caused the event to drop! [ 307.138379] kobject: 'loop0' (ffff8880a4a89460): kobject_uevent_env [ 307.147210] kobject: 'loop0' (ffff8880a4a89460): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 307.162038] kobject: 'ip6_vti0' (ffff88804dec2a70): kobject_cleanup, parent (null) [ 307.172113] kobject: 'loop1' (ffff8880a4aca3a0): kobject_uevent_env [ 307.182035] kobject: 'ip6_vti0' (ffff88804dec2a70): calling ktype release [ 307.184751] kobject: 'loop1' (ffff8880a4aca3a0): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 307.195617] kobject: 'ip6_vti0': free name [ 307.212245] kobject: 'rx-0' (ffff8880a871f0d0): kobject_cleanup, parent ffff88809c0e2248 [ 307.221811] kobject: 'rx-0' (ffff8880a871f0d0): auto cleanup 'remove' event [ 307.228955] kobject: 'rx-0' (ffff8880a871f0d0): kobject_uevent_env [ 307.235619] kobject: 'rx-0' (ffff8880a871f0d0): kobject_uevent_env: uevent_suppress caused the event to drop! [ 307.247651] kobject: 'rx-0' (ffff8880a871f0d0): auto cleanup kobject_del [ 307.254909] kobject: 'rx-0' (ffff8880a871f0d0): calling ktype release [ 307.263439] kobject: 'rx-0': free name [ 307.267416] kobject: 'tx-0' (ffff88808ac65098): kobject_cleanup, parent ffff88809c0e2248 [ 307.276092] kobject: 'tx-0' (ffff88808ac65098): auto cleanup 'remove' event [ 307.284814] kobject: 'tx-0' (ffff88808ac65098): kobject_uevent_env [ 307.291463] kobject: 'tx-0' (ffff88808ac65098): kobject_uevent_env: uevent_suppress caused the event to drop! [ 307.303231] kobject: 'tx-0' (ffff88808ac65098): auto cleanup kobject_del [ 307.310417] kobject: 'tx-0' (ffff88808ac65098): calling ktype release [ 307.317034] kobject: 'tx-0': free name [ 307.322910] kobject: 'queues' (ffff88809c0e2248): kobject_cleanup, parent (null) [ 307.331373] kobject: 'queues' (ffff88809c0e2248): calling ktype release [ 307.338152] kobject: 'queues' (ffff88809c0e2248): kset_release [ 307.346000] kobject: 'queues': free name [ 307.350334] kobject: 'ip_vti0' (ffff8880a10ce830): kobject_uevent_env [ 307.356954] kobject: 'ip_vti0' (ffff8880a10ce830): kobject_uevent_env: uevent_suppress caused the event to drop! [ 307.390258] kobject: 'ip_vti0' (ffff8880a10ce830): kobject_cleanup, parent (null) [ 307.398861] kobject: 'ip_vti0' (ffff8880a10ce830): calling ktype release [ 307.407729] kobject: 'ip_vti0': free name [ 307.412848] kobject: 'batman_adv' (ffff888092311b00): kobject_uevent_env [ 307.419798] kobject: 'batman_adv' (ffff888092311b00): kobject_uevent_env: filter function caused the event to drop! [ 307.432371] kobject: 'batman_adv' (ffff888092311b00): kobject_cleanup, parent (null) [ 307.451835] kobject: 'batman_adv' (ffff888092311b00): calling ktype release [ 307.467876] kobject: (ffff888092311b00): dynamic_kobj_release 22:38:06 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x2001) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000004) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1277, &(0x7f0000000300)={0x600, 0x60000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "abb474f4030054327b52a27213d4210500000600000000ffffff7ffff7ef0900020000d14704000001000000000000000013003e00", "141f2b09000000000000002850c94200ffff400023000000000000020000ff000000000000000700002000", "0000000023eb0000000000f7a562a4ce49370700ce00"}) 22:38:06 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x1, 0x0) r1 = socket$bt_bnep(0x1f, 0x3, 0x4) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendfile(r1, r2, &(0x7f0000000140)=0x91d, 0x9b4b) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x1, 0x10010, r0, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x5) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:38:06 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0x1, 0xd, 0x8, 0x8, 0x1000, 0x401, &(0x7f0000000900)="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"}) 22:38:06 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:38:06 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x201000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x2) r3 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xbc4c, 0x130402) ioctl$BLKRRPART(r3, 0x125f, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, &(0x7f0000000080), 0x10) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000000c0)=0x20) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r7, 0x29, 0x1, 0x0, &(0x7f00000000c0)) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r8, 0x29, 0x1, 0x0, &(0x7f00000000c0)) sendfile(r7, r8, &(0x7f0000000140)=0xffff, 0x20) r9 = fcntl$dupfd(r6, 0x0, r5) write$FUSE_ATTR(r9, &(0x7f0000000280)={0x78}, 0x78) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r9, 0x28, 0x6, &(0x7f0000000100)={0x0, 0x7530}, 0x10) 22:38:06 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x40000006100) ftruncate(r1, 0x208200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x800002, 0x11, r2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) r4 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000340), 0x41395527) ioctl$VT_OPENQRY(r5, 0x5600, &(0x7f0000000000)) sendfile(r1, r4, 0x0, 0x8000fffffffe) socket(0x0, 0x0, 0x0) dup(0xffffffffffffffff) [ 307.493283] kobject: 'batman_adv': free name [ 307.498087] kobject: 'loop5' (ffff8880a4026560): kobject_uevent_env [ 307.504700] kobject: 'rx-0' (ffff88809606c790): kobject_cleanup, parent ffff888059611648 [ 307.521995] kobject: 'loop5' (ffff8880a4026560): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 307.532229] kobject: 'rx-0' (ffff88809606c790): auto cleanup 'remove' event [ 307.568821] kobject: 'rx-0' (ffff88809606c790): kobject_uevent_env [ 307.579274] kobject: 'loop0' (ffff8880a4a89460): kobject_uevent_env [ 307.589632] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 [ 307.600908] kobject: 'rx-0' (ffff88809606c790): kobject_uevent_env: uevent_suppress caused the event to drop! 22:38:06 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000080), 0x10) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x2f, @remote, 0x4e24, 0x1, 'lblc\x00', 0x34, 0x7fffffff, 0x6d}, 0x2c) 22:38:06 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0xfffffffffffffffc, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000080)=0xfffffffb, 0x4) clone(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000040)=0x3a8, 0x4) [ 307.617541] kobject: 'loop0' (ffff8880a4a89460): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 307.629574] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 [ 307.642882] kobject: 'rx-0' (ffff88809606c790): auto cleanup kobject_del [ 307.661756] kobject: 'loop4' (ffff8880a4bcf620): kobject_uevent_env 22:38:06 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r1 = getuid() lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000000)='./file0\x00', r1, r2) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) [ 307.672910] kobject: 'hci68' (ffff8880a1426d28): kobject_add_internal: parent: 'bluetooth', set: 'devices' [ 307.690645] kobject: 'rx-0' (ffff88809606c790): calling ktype release [ 307.697379] kobject: 'hci68' (ffff8880a1426d28): kobject_uevent_env [ 307.709520] kobject: 'loop4' (ffff8880a4bcf620): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 307.717393] kobject: 'hci68' (ffff8880a1426d28): fill_kobj_path: path = '/devices/virtual/bluetooth/hci68' [ 307.731187] kobject: 'rx-0': free name [ 307.733983] audit: type=1400 audit(1575067086.649:75): avc: denied { map } for pid=14062 comm="syz-executor.4" path="/dev/usbmon," dev="devtmpfs" ino=37674 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:device_t:s0 tclass=file permissive=1 [ 307.744907] kobject: 'tx-0' (ffff88808c069598): kobject_cleanup, parent ffff888059611648 22:38:06 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x20001000000001, 0x202040) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 307.768744] kobject: 'hci69' (ffff88805b98ada8): kobject_add_internal: parent: 'bluetooth', set: 'devices' [ 307.780011] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 [ 307.787711] kobject: 'loop1' (ffff8880a4aca3a0): kobject_uevent_env [ 307.797664] kobject: 'hci69' (ffff88805b98ada8): kobject_uevent_env [ 307.815393] kobject: 'loop1' (ffff8880a4aca3a0): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 307.817571] kobject: 'rfkill75' (ffff8880824649a8): kobject_add_internal: parent: 'hci68', set: 'devices' [ 307.830782] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 [ 307.841534] kobject: 'hci69' (ffff88805b98ada8): fill_kobj_path: path = '/devices/virtual/bluetooth/hci69' [ 307.861314] kobject: 'tx-0' (ffff88808c069598): auto cleanup 'remove' event 22:38:06 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r2 = fcntl$dupfd(r1, 0x0, r0) write$FUSE_ATTR(r2, &(0x7f0000000280)={0x78, 0xfffffffffffffffe, 0x7, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3}}}, 0x78) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040), 0x4) r3 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x101200) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r3, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 307.876978] kobject: 'loop3' (ffff8880a4b5d5a0): kobject_uevent_env [ 307.886919] kobject: 'rfkill75' (ffff8880824649a8): kobject_uevent_env [ 307.895608] kobject: 'tx-0' (ffff88808c069598): kobject_uevent_env [ 307.908048] kobject: 'loop3' (ffff8880a4b5d5a0): fill_kobj_path: path = '/devices/virtual/block/loop3' 22:38:06 executing program 3: io_setup(0xfffffff7, &(0x7f0000000000)=0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x600) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000280)={'bond_slave_0\x00'}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={'bond_slave_0\x00', {0x2, 0x0, @loopback}}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) io_getevents(r0, 0x0, 0x4, &(0x7f00000000c0)=[{}, {}, {}, {}], &(0x7f0000000140)={r2, r3+30000000}) r4 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000080)={0x0, 0x13, 0x2, 0x1, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) [ 307.920270] kobject: 'tx-0' (ffff88808c069598): kobject_uevent_env: uevent_suppress caused the event to drop! [ 307.928464] kobject: 'rfkill75' (ffff8880824649a8): fill_kobj_path: path = '/devices/virtual/bluetooth/hci68/rfkill75' [ 307.955099] kobject: 'tx-0' (ffff88808c069598): auto cleanup kobject_del [ 307.970680] kobject: 'loop3' (ffff8880a4b5d5a0): kobject_uevent_env 22:38:06 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r2 = fcntl$dupfd(r1, 0x0, r0) write$FUSE_ATTR(r2, &(0x7f0000000280)={0x78}, 0x78) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000080)={0xa5b8, 0x80000001, 0x9, 0x9}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f0000000040)={0x400, 0x100, 0x1}) r3 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r3, 0x0) clone(0x800000, 0x0, 0x0, 0x0, 0x0) [ 307.977659] kobject: 'tx-0' (ffff88808c069598): calling ktype release [ 307.997799] kobject: 'rfkill76' (ffff88805c260628): kobject_add_internal: parent: 'hci69', set: 'devices' [ 308.007650] kobject: 'loop3' (ffff8880a4b5d5a0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 308.018250] kobject: 'tx-0': free name [ 308.025873] kobject: 'rfkill76' (ffff88805c260628): kobject_uevent_env [ 308.032886] kobject: 'queues' (ffff888059611648): kobject_cleanup, parent (null) [ 308.043866] vhci_hcd: default hub control req: 0013 v0002 i0001 l120 [ 308.050785] kobject: 'loop4' (ffff8880a4bcf620): kobject_uevent_env [ 308.057301] kobject: 'rfkill76' (ffff88805c260628): fill_kobj_path: path = '/devices/virtual/bluetooth/hci69/rfkill76' [ 308.070071] kobject: 'queues' (ffff888059611648): calling ktype release [ 308.081115] kobject: 'loop4' (ffff8880a4bcf620): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 308.094065] kobject: 'queues' (ffff888059611648): kset_release [ 308.101368] kobject: 'queues': free name [ 308.110883] kobject: 'loop4' (ffff8880a4bcf620): kobject_uevent_env [ 308.117608] kobject: 'erspan0' (ffff88808e2425f0): kobject_uevent_env 22:38:07 executing program 4: r0 = syz_open_procfs(0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x40004, 0x0) preadv(r0, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000300)=0xe8) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f0000000380)={0x1, 0x3, 0x8}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r3) setresuid(r2, 0x0, r3) ioprio_set$uid(0x3, r2, 0x8) r4 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_SET_XCRS(r5, 0x4188aea7, &(0x7f00000000c0)={0x5, 0x1, [{0x4, 0x0, 0x81}, {0xda16, 0x0, 0xe0}, {0x659d, 0x0, 0x57d48bcd}, {0x2, 0x0, 0xffffffff}, {0x1, 0x0, 0x8}]}) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r4, 0x0) r6 = accept(r5, &(0x7f0000000180)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000200)=0x80) sendmsg$nl_generic(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)={0x1290, 0x3d, 0x200, 0x70bd2b, 0x25dfdbfc, {0x1b}, [@nested={0x24, 0x8f, [@typed={0x18, 0x9, @str='/dev/vga_arbiter\x00'}, @typed={0x8, 0xd633, @u32}]}, @nested={0x1190, 0x49, [@generic="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", @generic="5e9dd17d44ded40ac2cd6abd7602698a0600a700c6aa85a46640c25f864c81ad40b56ce9b715bfe64d40f3c2b9a6ee3a185091d6faf96b930f0d9189633ade7e7fc1ce10786c2e10d6147eba1b29ad4e91604b08c5a7a62cfbb29adccd97e52271512eb95861929535d902502aa3702d404b44a16d23471077200776b8aa2fad9e637d8a7590cd38f4850fced3f45843a95cfbdef94510306e5f39ac80df1ca4f2853f227e3102e1974f653f9138c7fb25e3e424438085b89d5e75736d92b20386965c2b55a11ff5fceddf883f38878a0da5a07d5b2cae71efaab13f2d9820e7d23952fac756825e54148df1ae253ae7359afceba36a", @generic="ef52cd3c4c6e356131e64af45f78294fcb31fd67aca19db5def933aaeeb61feb07de68f29dce4b800ce13651048442ad6c902ae605090387bca8aff257acf22846f2f1f939687eff81602b5beb0d03009ce2cd9890891a1b0faf89b690d4befb59de04b82f7bdf840d952a1883551fab8f6b19451eaaebbc24", @typed={0x4, 0x65}, @typed={0x18, 0x6c, @str='/dev/vga_arbiter\x00'}]}, @typed={0x8, 0x61, @fd=r6}, @typed={0xc, 0x8d, @u64=0x22}, @nested={0x4, 0x23}, @typed={0x8, 0x5b, @pid=0xffffffffffffffff}, @typed={0xa8, 0x57, @binary="128fd884cd91ca27e005d0d4d0e592f2c2cd039ac298b6735801d017871196d4a8c843e9cdb55a70899c97984bf50a4a0096d861e2bb7a91bdaa745353a712620b9d37b4097124cfc9ebc8a9be5c54b195b94a0875df094de95866970db16efa298ec4d75de468b375de1faac46b2d4d804176ef3ea15d7aad53def59f9f09e3f599e6d4d6925687e8b7ec8df4688a9b978c6517550621b982df2b0e5bd49d27bb"}]}, 0x1290}, 0x1, 0x0, 0x0, 0x40000}, 0x2004001) clone(0x82500000, 0x0, 0x0, 0x0, 0x0) 22:38:07 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) [ 308.124858] kobject: 'loop4' (ffff8880a4bcf620): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 308.134391] kobject: 'erspan0' (ffff88808e2425f0): kobject_uevent_env: uevent_suppress caused the event to drop! [ 308.164790] kobject: 'loop0' (ffff8880a4a89460): kobject_uevent_env 22:38:07 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000080), 0x10) [ 308.188546] kobject: 'erspan0' (ffff88808e2425f0): kobject_cleanup, parent (null) [ 308.212762] kobject: 'loop0' (ffff8880a4a89460): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 308.226719] kobject: 'erspan0' (ffff88808e2425f0): calling ktype release [ 308.243659] kobject: 'loop3' (ffff8880a4b5d5a0): kobject_uevent_env [ 308.250395] kobject: 'erspan0': free name [ 308.262667] audit: type=1400 audit(1575067087.179:76): avc: denied { map } for pid=14100 comm="syz-executor.4" path="/dev/vga_arbiter" dev="devtmpfs" ino=1038 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:xserver_misc_device_t:s0 tclass=chr_file permissive=1 22:38:07 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78}, 0x78) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000000)=0x100000000) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r6 = fcntl$dupfd(r5, 0x0, r4) write$FUSE_ATTR(r6, &(0x7f0000000280)={0x78}, 0x78) ioctl$KDSETLED(r6, 0x4b32, 0x1) [ 308.271503] kobject: 'loop3' (ffff8880a4b5d5a0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 308.307613] kobject: 'batman_adv' (ffff8880a686a980): kobject_uevent_env [ 308.318891] kobject: 'batman_adv' (ffff8880a686a980): kobject_uevent_env: filter function caused the event to drop! [ 308.330241] kobject: 'batman_adv' (ffff8880a686a980): kobject_cleanup, parent (null) [ 308.339866] kobject: 'batman_adv' (ffff8880a686a980): calling ktype release [ 308.349463] kobject: 'loop1' (ffff8880a4aca3a0): kobject_uevent_env [ 308.349506] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 [ 308.356042] kobject: (ffff8880a686a980): dynamic_kobj_release [ 308.370207] kobject: 'loop1' (ffff8880a4aca3a0): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 308.384627] kobject: 'batman_adv': free name 22:38:07 executing program 5: io_submit(0x0, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, 0xffffffffffffffff, 0x0, 0x7ffffffff000}]) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x4606, &(0x7f0000000000)) 22:38:07 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) 22:38:07 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb0000/0x3000)=nil, 0x3000, 0x4, 0x6d5d0d3add4f923d, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) r4 = fcntl$dupfd(r3, 0x0, r2) write$FUSE_ATTR(r4, &(0x7f0000000280)={0x78}, 0x78) lseek(r4, 0x7, 0x2) ioctl$SIOCRSGCAUSE(r4, 0x89e0, &(0x7f0000000100)) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r5, 0x29, 0x1, 0x0, &(0x7f00000000c0)) ioctl$void(r5, 0x5451) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0xffffffffffffff5b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) chroot(&(0x7f0000000140)='./file0\x00') connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r6, 0x29, 0x1, 0x0, &(0x7f00000000c0)) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r7, 0x29, 0x1, 0x0, &(0x7f00000000c0)) getsockopt$inet6_int(r7, 0x29, 0x11, 0x0, &(0x7f0000000040)) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) [ 308.398022] kobject: 'loop4' (ffff8880a4bcf620): kobject_uevent_env [ 308.409233] kobject: 'rx-0' (ffff8880828a5910): kobject_cleanup, parent ffff888082905148 [ 308.410294] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 [ 308.422074] kobject: 'loop4' (ffff8880a4bcf620): fill_kobj_path: path = '/devices/virtual/block/loop4' 22:38:07 executing program 5: io_submit(0x0, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, 0xffffffffffffffff, 0x0, 0x7ffffffff000}]) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x4606, &(0x7f0000000000)) [ 308.442555] kobject: 'rx-0' (ffff8880828a5910): auto cleanup 'remove' event [ 308.462526] kobject: 'loop5' (ffff8880a4026560): kobject_uevent_env [ 308.469287] kobject: 'rx-0' (ffff8880828a5910): kobject_uevent_env [ 308.487330] kobject: 'loop5' (ffff8880a4026560): fill_kobj_path: path = '/devices/virtual/block/loop5' 22:38:07 executing program 5: io_submit(0x0, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, 0xffffffffffffffff, 0x0, 0x7ffffffff000}]) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x4606, &(0x7f0000000000)) [ 308.498938] kobject: 'rx-0' (ffff8880828a5910): kobject_uevent_env: uevent_suppress caused the event to drop! [ 308.521293] kobject: 'rx-0' (ffff8880828a5910): auto cleanup kobject_del [ 308.528496] kobject: 'loop3' (ffff8880a4b5d5a0): kobject_uevent_env 22:38:07 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x2, 0x8000) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 308.541185] kobject: 'loop3' (ffff8880a4b5d5a0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 308.553828] kobject: 'rx-0' (ffff8880828a5910): calling ktype release [ 308.565950] kobject: 'rx-0': free name [ 308.572098] kobject: 'loop5' (ffff8880a4026560): kobject_uevent_env [ 308.578772] kobject: 'tx-0' (ffff88808b46f558): kobject_cleanup, parent ffff888082905148 [ 308.587643] kobject: 'loop5' (ffff8880a4026560): fill_kobj_path: path = '/devices/virtual/block/loop5' 22:38:07 executing program 5: io_submit(0x0, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, 0xffffffffffffffff, 0x0, 0x7ffffffff000}]) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x4606, &(0x7f0000000000)) [ 308.612156] kobject: 'tx-0' (ffff88808b46f558): auto cleanup 'remove' event [ 308.619375] kobject: 'tx-0' (ffff88808b46f558): kobject_uevent_env [ 308.636872] kobject: 'loop4' (ffff8880a4bcf620): kobject_uevent_env 22:38:07 executing program 5: io_submit(0x0, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, 0xffffffffffffffff, 0x0, 0x7ffffffff000}]) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x4606, &(0x7f0000000000)) 22:38:07 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x100000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a00)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000380)={0x28, r3, 0x401, 0x0, 0x0, {0x15}, [@TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd0, r3, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0xbc, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x20, @mcast1, 0x3}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x8, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x300}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3dbf, @loopback, 0x6}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc7ac}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x1}, 0x40) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a00)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000380)={0x28, r5, 0x401, 0x0, 0x0, {0x15}, [@TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0x3ec, r5, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x34, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x3c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x72}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x124, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'vcan0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xfff, @mcast2, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xffffffff, @remote, 0x9}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xe6}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, [], 0xa}, 0x4e}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xfffffff9, @empty, 0x5c}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x0, @mcast1, 0x28d}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast2}}}}]}, @TIPC_NLA_BEARER={0x68, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'rose0\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'bcsh0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER={0x24, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_LINK={0xec, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb053}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x86280}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1b800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1318}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK={0x4c, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3e000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}]}]}, 0x3ec}, 0x1, 0x0, 0x0, 0x10}, 0x8080) 22:38:07 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x0, 0x8012, r0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x20400, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x31640, 0x0) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f0000000100)=""/138) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000080)=0x8) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 308.655671] kobject: 'tx-0' (ffff88808b46f558): kobject_uevent_env: uevent_suppress caused the event to drop! [ 308.668084] kobject: 'loop4' (ffff8880a4bcf620): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 308.688445] kobject: 'tx-0' (ffff88808b46f558): auto cleanup kobject_del [ 308.703275] kobject: 'loop5' (ffff8880a4026560): kobject_uevent_env [ 308.718930] kobject: 'tx-0' (ffff88808b46f558): calling ktype release [ 308.727928] kobject: 'loop5' (ffff8880a4026560): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 308.744485] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 [ 308.757277] kobject: 'tx-0': free name [ 308.761310] kobject: 'queues' (ffff888082905148): kobject_cleanup, parent (null) [ 308.772076] kobject: 'loop4' (ffff8880a4bcf620): kobject_uevent_env [ 308.784058] kobject: 'loop4' (ffff8880a4bcf620): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 308.799127] kobject: 'queues' (ffff888082905148): calling ktype release [ 308.807438] kobject: 'queues' (ffff888082905148): kset_release [ 308.819085] kobject: 'loop4' (ffff8880a4bcf620): kobject_uevent_env [ 308.825651] kobject: 'queues': free name [ 308.836145] kobject: 'loop4' (ffff8880a4bcf620): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 308.847198] kobject: 'gretap0' (ffff88804e8192f0): kobject_uevent_env [ 308.857401] kobject: 'gretap0' (ffff88804e8192f0): kobject_uevent_env: uevent_suppress caused the event to drop! 22:38:07 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000080), 0x1f3) 22:38:07 executing program 5: io_submit(0x0, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, 0xffffffffffffffff, 0x0, 0x7ffffffff000}]) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x4606, &(0x7f0000000000)) 22:38:07 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000880)="240f5a6955069d874fc609117ba858f98711e20c998173eb79a7b2bcba919a5ddecb7117c15508537e2acf1b26fa6cac5d2120185c1e44822ceb60f027f9e12609b339cacf99e233552b4abe3165f5f4f777748b01462429d8a185da60c28bb552f7da6e9c10558253be1d47b2ea90674f2d045a7c44e17c"}) [ 308.896069] kobject: 'loop0' (ffff8880a4a89460): kobject_uevent_env [ 308.904622] kobject: 'loop0' (ffff8880a4a89460): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 308.911303] vhci_hcd: default hub control req: 0000 v0000 i0000 l120 [ 308.922146] kobject: 'loop1' (ffff8880a4aca3a0): kobject_uevent_env [ 308.928783] kobject: 'loop1' (ffff8880a4aca3a0): fill_kobj_path: path = '/devices/virtual/block/loop1' 22:38:07 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000cb1000/0x1000)=nil, 0x1000, 0x1, 0x10, r0, 0xffffe000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000240)={0xf000, &(0x7f00000001c0), 0x1, 0xffffffffffffffff, 0x1}) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x840f02) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6e61ca09d80869dd, 0x10) r3 = fcntl$dupfd(r2, 0x0, r1) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}}, 0x78) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r4, 0x29, 0x1, 0x0, &(0x7f00000000c0)) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r5, 0x29, 0x1, 0x0, &(0x7f00000000c0)) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r6, 0x29, 0x1, 0x0, &(0x7f00000000c0)) r7 = epoll_create1(0xc0000) ppoll(&(0x7f0000000200)=[{r4, 0x190}, {0xffffffffffffffff, 0x44}, {r5, 0x2}, {r0, 0x40}, {r6, 0x100}, {r7, 0x1}], 0x6, &(0x7f0000000300)={0x77359400}, &(0x7f0000000340)={0xffffffffffff8000}, 0x8) r8 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000180)=0x1) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000040)={[{0x5, 0x200, 0x1f, 0x24, 0xff, 0x7f, 0xfe, 0x40, 0x0, 0x6, 0x3f, 0xdc, 0x9}, {0x7fff, 0xfff, 0x40, 0x4, 0x80, 0x6, 0x2, 0x0, 0x5, 0x7, 0x1, 0x4, 0x69}, {0x0, 0x40, 0x9, 0x3, 0x7, 0x4, 0x1, 0x3, 0x6, 0x1, 0x3, 0x7, 0x2}], 0x7f}) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 308.942927] kobject: 'gretap0' (ffff88804e8192f0): kobject_cleanup, parent (null) [ 308.950371] kobject: 'hci70' (ffff88805abcae28): kobject_add_internal: parent: 'bluetooth', set: 'devices' [ 308.958147] kobject: 'gretap0' (ffff88804e8192f0): calling ktype release [ 308.979498] kobject: 'gretap0': free name 22:38:07 ex