Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.32' (ECDSA) to the list of known hosts. 2020/07/27 12:30:40 fuzzer started 2020/07/27 12:30:40 dialing manager at 10.128.0.105:36851 2020/07/27 12:30:40 syscalls: 3102 2020/07/27 12:30:40 code coverage: enabled 2020/07/27 12:30:40 comparison tracing: enabled 2020/07/27 12:30:40 extra coverage: extra coverage is not supported by the kernel 2020/07/27 12:30:40 setuid sandbox: enabled 2020/07/27 12:30:40 namespace sandbox: enabled 2020/07/27 12:30:40 Android sandbox: enabled 2020/07/27 12:30:40 fault injection: enabled 2020/07/27 12:30:40 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/07/27 12:30:40 net packet injection: enabled 2020/07/27 12:30:40 net device setup: enabled 2020/07/27 12:30:40 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/07/27 12:30:40 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/07/27 12:30:40 USB emulation: /dev/raw-gadget does not exist 12:32:12 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syzkaller login: [ 133.435869] audit: type=1400 audit(1595853132.787:8): avc: denied { execmem } for pid=6462 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 133.539009] IPVS: ftp: loaded support on port[0] = 21 12:32:13 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) write$P9_RFLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x7d6a591eedaef62b}, 0x11ffffff6) connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x0, 0x2}, 0x6e) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000300)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x1) perf_event_open(&(0x7f000000a000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200036150, 0x800007b, 0x2, 0x0, 0x2401, 0x10000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c010000", @ANYRES16=0x0], 0x2c}}, 0x200088c4) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 133.693843] chnl_net:caif_netlink_parms(): no params data found [ 133.862949] IPVS: ftp: loaded support on port[0] = 21 [ 133.941210] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.949963] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.958628] device bridge_slave_0 entered promiscuous mode [ 133.976856] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.984883] bridge0: port 2(bridge_slave_1) entered disabled state 12:32:13 executing program 2: prlimit64(0x0, 0xe, 0x0, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001d80)=[{{&(0x7f00000004c0)=@tipc, 0x80, 0x0, 0x0, &(0x7f00000003c0)=""/15, 0xf}, 0x18c80}, {{0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000ac0)=""/175, 0xaf}}, {{&(0x7f0000000b80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000c00)=""/251, 0xfb}], 0x1}, 0x4}, {{&(0x7f0000000d00)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000000e80)=[{0x0}], 0x1}, 0x8000045}, {{&(0x7f0000000f80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000540)=""/118, 0x76}, {&(0x7f0000001080)=""/24, 0x18}], 0x2, &(0x7f0000000640)=""/147, 0x93}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=""/36, 0x24}, 0xff}, {{&(0x7f0000001680)=@ax25={{0x3, @bcast}, [@default, @bcast, @bcast, @bcast, @default, @netrom, @rose, @rose]}, 0x80, &(0x7f0000001c40)=[{&(0x7f0000001700)=""/183, 0xb7}, {&(0x7f00000017c0)=""/9, 0x9}, {0x0}, {&(0x7f0000000880)=""/187, 0xbb}, {&(0x7f0000001a80)=""/150, 0x96}], 0x5, &(0x7f0000001d00)=""/91, 0x5b}, 0x8000}], 0x7, 0x0, 0x0) pipe(&(0x7f0000000200)) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) [ 133.992538] device bridge_slave_1 entered promiscuous mode [ 134.093833] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 134.125980] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 134.150180] chnl_net:caif_netlink_parms(): no params data found [ 134.181417] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 134.199038] team0: Port device team_slave_0 added [ 134.219048] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 134.226804] team0: Port device team_slave_1 added [ 134.271136] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.281381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.309766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.327543] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.333251] IPVS: ftp: loaded support on port[0] = 21 [ 134.333834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.366082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.381453] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 134.389766] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready 12:32:13 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x42040, 0x0) r1 = socket$key(0xf, 0x3, 0x2) dup2(r1, r0) [ 134.473885] device hsr_slave_0 entered promiscuous mode [ 134.527855] device hsr_slave_1 entered promiscuous mode [ 134.568433] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 134.575916] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 134.617040] IPVS: ftp: loaded support on port[0] = 21 12:32:14 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) r1 = gettid() tkill(r1, 0x40) [ 134.652630] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.659343] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.676020] device bridge_slave_0 entered promiscuous mode [ 134.725579] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.734217] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.742642] device bridge_slave_1 entered promiscuous mode [ 134.900644] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 134.915277] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 134.982681] IPVS: ftp: loaded support on port[0] = 21 12:32:14 executing program 5: ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/seq\x00', 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00', 0x20}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue1\x00'}) [ 135.061484] chnl_net:caif_netlink_parms(): no params data found [ 135.085052] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 135.096612] team0: Port device team_slave_0 added [ 135.125161] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 135.133837] team0: Port device team_slave_1 added [ 135.274797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.282134] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.308947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.321394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.327785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.353158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.364899] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 135.401314] IPVS: ftp: loaded support on port[0] = 21 [ 135.406955] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 135.427846] chnl_net:caif_netlink_parms(): no params data found [ 135.473185] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 135.540299] device hsr_slave_0 entered promiscuous mode [ 135.578212] device hsr_slave_1 entered promiscuous mode [ 135.628661] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 135.680950] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 135.704393] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.711155] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.719203] device bridge_slave_0 entered promiscuous mode [ 135.770767] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.777189] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.785177] device bridge_slave_1 entered promiscuous mode [ 135.818150] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 135.847528] chnl_net:caif_netlink_parms(): no params data found [ 135.870141] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 135.929211] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.935640] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.944276] device bridge_slave_0 entered promiscuous mode [ 135.996357] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.002833] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.010637] device bridge_slave_1 entered promiscuous mode [ 136.034024] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 136.045929] team0: Port device team_slave_0 added [ 136.055520] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 136.064056] team0: Port device team_slave_1 added [ 136.081908] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 136.096552] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 136.191970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.199051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.226200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.253258] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 136.262068] team0: Port device team_slave_0 added [ 136.270135] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 136.281455] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.290232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.317201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.346135] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.352781] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.361106] device bridge_slave_0 entered promiscuous mode [ 136.370141] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 136.379490] team0: Port device team_slave_1 added [ 136.390601] chnl_net:caif_netlink_parms(): no params data found [ 136.401212] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 136.412433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.422470] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.429707] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.436965] device bridge_slave_1 entered promiscuous mode [ 136.455572] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 136.522417] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 136.529811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.536091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.562044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.621095] device hsr_slave_0 entered promiscuous mode [ 136.658117] device hsr_slave_1 entered promiscuous mode [ 136.698556] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 136.706274] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 136.718714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.725006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.751415] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.764363] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 136.784304] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 136.792334] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 136.801992] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 136.819961] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 136.834649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 136.842705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 136.911803] device hsr_slave_0 entered promiscuous mode [ 136.948029] device hsr_slave_1 entered promiscuous mode [ 136.989885] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 136.996007] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.006953] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 137.015608] team0: Port device team_slave_0 added [ 137.037003] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 137.044647] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 137.070959] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 137.080659] team0: Port device team_slave_1 added [ 137.102839] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.109652] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.116734] device bridge_slave_0 entered promiscuous mode [ 137.134335] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 137.151894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.158655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.184607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.196252] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.204342] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.213058] device bridge_slave_1 entered promiscuous mode [ 137.225390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 137.233919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 137.243931] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.250453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.259692] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 137.270208] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 137.278088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 137.286167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 137.295580] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.302065] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.310656] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.316904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.342991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.375326] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 137.386363] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 137.407354] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 137.425784] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 137.444072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 137.456668] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 137.468499] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 137.493742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 137.523988] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 137.531971] team0: Port device team_slave_0 added [ 137.544760] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 137.553526] team0: Port device team_slave_1 added [ 137.581598] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 137.651071] device hsr_slave_0 entered promiscuous mode [ 137.687810] device hsr_slave_1 entered promiscuous mode [ 137.736785] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 137.747118] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 137.767626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 137.775735] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 137.786330] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 137.795615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.803637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.831102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.844513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.851397] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 137.869907] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 137.877243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 137.886060] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 137.898700] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 137.906940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.914406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.940611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.954001] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 137.973871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 137.982324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 137.993306] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 138.001603] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 138.023369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 138.033201] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 138.042316] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 138.052998] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 138.059968] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 138.102486] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 138.136668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 138.144978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 138.157918] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 138.165773] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 138.174054] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.184001] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 138.221374] device hsr_slave_0 entered promiscuous mode [ 138.258249] device hsr_slave_1 entered promiscuous mode [ 138.311321] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 138.324418] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 138.331916] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 138.343437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 138.351591] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.358142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.365215] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 138.372797] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 138.386612] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 138.396653] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 138.405179] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 138.427159] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 138.442841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 138.457035] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 138.466551] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.473020] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.483025] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 138.499076] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.511225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 138.530733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.541018] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 138.579420] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 138.588151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 138.600663] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 138.621340] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 138.628950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 138.636848] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 138.645927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 138.653572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 138.661337] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 138.699227] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 138.709123] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 138.715251] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.725859] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 138.736356] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 138.766007] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 138.775220] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 138.785839] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 138.805008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 138.813417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 138.821705] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.828171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.835173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 138.843943] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 138.854094] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 138.866290] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 138.888656] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 138.897889] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 138.905412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 138.916099] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 138.924546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 138.934948] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 138.943450] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.950092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.960333] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 138.972283] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 138.979686] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 139.004220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 139.012916] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 139.040462] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 139.048423] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 139.055387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 139.073034] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 139.093516] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 139.112407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 139.122797] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 139.133939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.145508] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 139.153813] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 139.161382] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 139.169435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 139.177326] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 139.189321] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 139.199515] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 139.206764] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 139.214527] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 139.229914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.241578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.251859] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 139.264910] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 139.284304] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 139.292661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 139.300102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 139.307139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 139.315412] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 139.326179] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 139.336001] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 139.347316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 139.355785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 139.365480] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 139.373237] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 139.384617] device veth0_vlan entered promiscuous mode [ 139.395429] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 139.402566] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.415754] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 139.442729] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 139.454141] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 139.463625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 139.473975] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 139.482220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 139.490043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 139.500163] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 139.510350] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 139.519474] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 139.539379] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 139.545494] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.558203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 139.566297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 139.576298] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.582788] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.592436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 139.600935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 139.609104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 139.616820] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 139.628218] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 139.640274] device veth1_vlan entered promiscuous mode [ 139.646861] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 139.664917] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 139.672788] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 139.683367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 139.692225] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 139.700470] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.706837] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.717324] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 139.725508] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 139.732043] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 139.741207] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 139.753021] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 139.768173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 139.776393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 139.785041] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 139.796057] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.802582] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.810409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 139.819809] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 139.828203] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.834570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.842828] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 139.859500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.868774] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 139.882722] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 139.894074] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 139.907317] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 139.918421] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 139.925955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 139.934957] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 139.943368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 139.955961] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 139.966963] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 139.978142] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 139.985532] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 139.995122] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 140.005359] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 140.018171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 140.028079] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 140.035764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 140.043955] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 140.052756] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 140.060595] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 140.071584] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 140.083512] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 140.091921] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 140.101017] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 140.114153] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 140.122448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 140.130234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 140.137244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 140.147491] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 140.155155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 140.163877] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 140.173548] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 140.181795] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 140.193479] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 140.203618] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 140.212179] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 140.220365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 140.228320] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 140.235147] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 140.242259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 140.250708] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 140.258798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 140.266422] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 140.276452] device veth0_vlan entered promiscuous mode [ 140.289881] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 140.302419] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 140.313291] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 140.321632] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 140.331018] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 140.338241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 140.345972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 140.354159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 140.362201] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 140.370058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 140.378208] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 140.387751] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 140.393856] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.404236] device veth0_macvtap entered promiscuous mode [ 140.412909] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 140.424402] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 140.433325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 140.443911] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.452917] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 140.463333] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 140.470400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 140.479125] device veth1_macvtap entered promiscuous mode [ 140.485695] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 140.499179] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 140.506657] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 140.516081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 140.524593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 140.533013] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.539487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.550005] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 140.558124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 140.565496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 140.575108] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 140.582973] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.589437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.597373] device veth1_vlan entered promiscuous mode [ 140.605003] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 140.623015] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 140.636283] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 140.653284] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 140.662833] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 140.676724] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 140.684530] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 140.692260] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 140.700595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 140.709744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 140.724422] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 140.733175] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 140.745600] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 140.756672] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 140.764853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.776624] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 140.786467] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.796503] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 140.803333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 140.811710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 140.819881] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 140.828030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 140.835943] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 140.842872] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 140.853113] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 140.863375] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 140.873205] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 140.895624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.905298] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 140.912882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 140.922220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 140.930587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 140.938779] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 140.946720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 140.954709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 140.963165] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 140.976266] device veth0_macvtap entered promiscuous mode [ 140.995379] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 141.006475] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 141.022120] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 141.035718] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 141.043710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 141.053517] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 141.064387] device veth1_macvtap entered promiscuous mode [ 141.080405] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 141.092187] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 141.124480] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.134861] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 141.194926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 141.203201] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 141.214349] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 141.245449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 141.256262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.272141] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 141.279662] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.291325] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 141.298970] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 141.305931] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 141.315760] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 141.326293] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 141.339528] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 141.346756] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 141.362366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 141.371000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 141.379630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 141.388301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 141.395953] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 141.406239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 141.424234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.434986] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 141.442318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.455453] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 141.466712] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 141.474110] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 141.493108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 141.503168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 141.512248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 141.522289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 141.531451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 141.540719] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 141.548396] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 141.556434] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 141.563066] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 141.576692] device veth0_vlan entered promiscuous mode [ 141.625780] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 141.643020] device veth1_vlan entered promiscuous mode [ 141.656666] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 141.676870] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 141.690304] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 141.697285] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 141.708469] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 141.731496] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 141.751075] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 141.759308] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 141.766150] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 141.773513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 141.781352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 141.791025] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 141.802385] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 141.811062] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 141.818255] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 141.826899] device veth0_vlan entered promiscuous mode [ 141.842089] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.852521] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 141.866043] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 141.876020] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 141.889445] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 141.913260] device veth1_vlan entered promiscuous mode [ 141.920596] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 141.931288] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 141.949858] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 141.969355] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 141.976891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 141.989917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 141.998056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 142.005840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 142.017307] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 142.028426] device veth0_vlan entered promiscuous mode [ 142.046112] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 142.069614] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 142.083208] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 142.103402] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 142.113122] device veth0_macvtap entered promiscuous mode [ 142.122576] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 142.135408] device veth1_macvtap entered promiscuous mode [ 142.145144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 142.163582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 142.173346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 142.184235] device veth1_vlan entered promiscuous mode [ 142.197417] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 142.225105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 142.234356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 142.270636] device veth0_macvtap entered promiscuous mode [ 142.277303] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 142.286856] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready 12:32:21 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = gettid() tkill(r1, 0x15) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$TUNSETOWNER(r2, 0x400454cc, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3f, 0x7f, 0x52, 0x3f, 0x0, 0x7, 0x610a4, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x4, @perf_config_ext={0x1, 0x1}, 0x40, 0x275d, 0x1, 0x4, 0x3, 0x3}, r1, 0x8, r2, 0xa) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3f, 0x40, 0x48, 0x2, 0x0, 0x8, 0x4000, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x7264, 0x4, @perf_config_ext={0x8, 0x4}, 0x1020b, 0x1, 0x14, 0x2, 0x8c82, 0x1, 0xd756}, r1, 0xa, 0xffffffffffffffff, 0x2) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$TUNSETOWNER(r3, 0x400454cc, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x10001) r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0xc0002, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r4, &(0x7f0000000140)={0xfffff002, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x2) [ 142.318250] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 142.325942] device veth1_macvtap entered promiscuous mode [ 142.345095] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 142.370860] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 142.398926] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 142.416119] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 142.424670] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 142.433251] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 142.443116] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 142.451999] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 142.460506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 142.469806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 142.479962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 142.490376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.500244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 142.510662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.521008] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 142.528484] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.536787] device veth0_macvtap entered promiscuous mode [ 142.545331] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 142.555386] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 142.568344] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 142.575460] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 142.584699] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 142.611653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 142.626324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 142.640739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 142.651207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 142.664259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.674445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 142.686773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.698675] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 142.705602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.723999] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 142.732921] device veth1_macvtap entered promiscuous mode [ 142.743595] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 142.751071] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 142.759903] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 142.766894] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 142.774891] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 142.784562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 142.794341] device veth0_vlan entered promiscuous mode [ 142.811600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 142.826006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.836214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 142.846736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.858490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 142.868911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.880076] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 142.887022] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.912801] device veth1_vlan entered promiscuous mode [ 142.919121] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 142.925690] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 142.941090] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 142.950121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 142.960506] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 142.968468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 142.978753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.988726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 142.999256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.009216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 143.019749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.030763] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 143.038616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.061998] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 143.071277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 143.087403] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 143.106451] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 143.126838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 143.139071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.150991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 143.161366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.171229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 143.182071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.192084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 143.202423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.213313] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 143.221563] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.235487] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 143.247214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 143.260114] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 143.271866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 143.282490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.293229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 143.304035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.314073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 143.324735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.334759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 143.345311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.356193] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 143.364019] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.371542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 143.384837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 143.393545] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 143.402803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 143.414363] device veth0_macvtap entered promiscuous mode [ 143.424124] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 143.457060] device veth1_macvtap entered promiscuous mode [ 143.479100] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 143.487182] hrtimer: interrupt took 33811 ns [ 143.516909] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 143.534147] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 143.552541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 12:32:22 executing program 1: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000440)="704394f8", 0x4}, {&(0x7f0000000100)="035e13f7cebd36ddc91f528aab4f922e75009175acc38ee9e68bf8c5f249ac39df0a7d26b42ade05eebebaade0", 0x2d}], 0x2) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$TUNSETOWNER(r4, 0x400454cc, 0x0) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$TUNSETOWNER(r5, 0x400454cc, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r4, 0xc0405610, &(0x7f0000000140)={0x4, 0x3ff, 0x3, 0x0, r5}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, r6, 0xfb62776a79c3b939, 0x70bd2a, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x14, 0x4, [0x7fff, 0x4, 0x2, 0x6]}, @SEG6_ATTR_DST={0x14, 0x1, @private0}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x6]}, @SEG6_ATTR_SECRET={0x10, 0x4, [0xfffffffd, 0x80, 0x3]}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x10000]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x80c1) fallocate(r3, 0x0, 0x9, 0x2000002) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) [ 143.569779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.580336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 143.590549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.599803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 143.609938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.637745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 143.657967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.667140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 143.678939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.689787] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 143.696903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.709516] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 143.717102] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 143.746968] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 143.759494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 143.773488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 143.785263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.808506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 143.823692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.833431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 143.843372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.853232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 143.863516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.872839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 143.882781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.893804] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 143.901697] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.917667] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 143.927035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 12:32:23 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x10, 0x0}, 0x30) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc020660b, &(0x7f0000000040)) 12:32:23 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xdc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x185002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00') ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x4004743b, 0x7fffffffefff) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0xb, &(0x7f0000000180), 0x4) r2 = accept4(r1, &(0x7f0000000100)=@tipc=@id, &(0x7f0000000000)=0x80, 0x80000) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000180)={'nat\x00', 0x2, [{}, {}]}, 0x48) 12:32:23 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x80000000, 0xfffffffffffeffff}, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x5, 0x4000) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffc}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)=0x6, 0x4) r2 = openat$bsg(0xffffffffffffff9c, 0x0, 0x400, 0x0) getsockname$netrom(0xffffffffffffffff, &(0x7f0000000400)={{0x3, @rose}, [@netrom, @default, @bcast, @null, @netrom, @null, @bcast]}, &(0x7f00000002c0)=0x48) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="6fe37f4c78a2a5edc0ce00006671ab75f0e43ad36ad84243b4df5569e75f6fbc6a1470421df172d0a80caf05b005cfec0051877f26b1c5"], 0xa) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, 0x0, 0x0) ftruncate(r3, 0x200002) sendfile(r0, r3, 0x0, 0x80001d00c0d0) 12:32:23 executing program 1: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)={[{0x2d, 'cpu'}]}, 0x5) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000010000104000002000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@RTM_GETMDB={0x18, 0x56, 0x8, 0x70bd2c, 0x25dfdbfb, {0x7, r4}, ["", "", "", "", "", "", "", ""]}, 0x18}}, 0x0) 12:32:23 executing program 3: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = socket(0x10, 0x80002, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)={0x14, r2, 0x305}, 0x14}}, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$TUNSETOWNER(r3, 0x400454cc, 0x0) sendmsg$IPSET_CMD_DEL(r3, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xa8, 0xa, 0x6, 0x301, 0x0, 0x0, {0xc, 0x0, 0x1}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xffff}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x48, 0x7, 0x0, 0x1, [@IPSET_ATTR_BYTES={0xc}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x3}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x5}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x100000000}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x3}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xffff}, @IPSET_ATTR_COMMENT={0x8, 0x1a, '*^@\x00'}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40011}, 0x10) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c000}, 0x20000080) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x1}, 0x10}, 0x78) [ 144.562569] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 12:32:24 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x48410, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f00000000c0), 0xd}, 0x10905, 0x0, 0x3, 0x4, 0x800000000, 0xfffffffd}, 0x0, 0xa, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x2, 0x0, 0x8, 0x0, 0x0, 0x2000000000000000, 0x43002, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0xfffffffffffffffd}, 0x949e, 0x0, 0x2, 0x0, 0xfffffffffffffffe, 0xfd, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0x8) uname(&(0x7f00000001c0)=""/74) mount$bpf(0x20000000, 0x0, 0x0, 0x88401, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6e5ff3a3, 0x0, @perf_config_ext={0x3, 0x80}, 0x10040}, 0x0, 0x8, 0xffffffffffffffff, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/cuse\x00', 0x2, 0x0) unshare(0x8000400) r0 = mq_open(&(0x7f0000000100)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) fadvise64(r0, 0x0, 0x4, 0x1) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x6, 0x0, 0x0, 0x100000041c2, 0x5a10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x775, 0x4, @perf_bp={&(0x7f0000000000), 0x1}, 0x40500, 0x2d8, 0xb1, 0x7, 0x543, 0xff, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$alg(0x26, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff9000/0x7000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000002540)="4a76c90eafe39886dcbb3d0784f6fc2e239d7fed9cfa5b2e751eab47ffe2c84267f7a05082695af6a99c66ef5bea8d8818d82998c934ebf593a2fdf6a24b90eff2d21e29f6604eb21cbc5a6d285846633f8a02dfb5416541138718cb6f1f04fa2608e57160010ad025f81c9f5f4d617f376b04fb6537b6c2c9d2bec6ca1fc7bcf5162d1a281b913c26c1fa287f3fd3784afa684a9d5b330f5358c6ce36ea8797cbb1aede2d0a8d5d7c8d48c974ced1c065c5a1381f4f948eaf4b1d1aa7c8f72cf370404bc0ef54362302a7497ecf0668885d46d00a751e3ab690be9935cde6479f1b6fec2c4f53402e45e7293e69e7ca20ba8d793444b7e285fd3a67f6a337fd8f502768a6e3b47ff373d7ee77ddae764901b6737dc526858a9ba6db3cb9f5c6b7a1908210beec3a51a7055331e0bb27227e56c0eb2cf3cb672f3433b5bf0fd8125814338ad81dac5af36286f20fbc8699632b7187ed2cd190cf12f76952048a1302036c15c2f3c342e6cb4725ab8ce0d5631593253dbfff40a86cf9bc75473e7cc531230d9626873fc6e4fa6e3297675bb7d41541d32346b9df67f3fd904e2bf1946b5fd8ff27cef2eb8a465c37cf0007b322996528da300e5408157f0e8644837a77b6857501ae12df80890bfddb98eed6ecb09973aa42e4f8afa3de786b2d0406a9a07307bb613f4e92598e92c74312949c7f25fa5411becae92eb7f790af782283e95d033ee6e47569e302baaad1c7334942e004506b54368c18910c97cf3b507d3e753b5a42a7f15be42009b2650fdbb56a8325b0c1ddf3354c03308a0222bc73827f3bad78ff8aa0e5fa6245b58463b50d5984b3be0bcee126e90907a3b0fd737a26c8a2723d5f03be8b9ce64f01dc10b350ad48d07e80ee4f3e22daaf7e5551b18d806b341decef6bdc85b7ae361d15b38d678dd023a5b540e5fbbaaf3f844f9e4a2dc9b7e9b6d50a3e8d8041fe0fbe62bf26b2438b4d59b39ea39a0f8b0993d7dacb69eeb7271f78358309ad4d68ebd7b7904626a62f7edfd66c7c1303f2d151e84f357315a3be79c2a53461433120d1bc0444e22339761199620b123e7bde3ada580aa76a85981f183f8f5b602601b0f4ea60ba742c3fdeb2d47b0f96686b6991749300b6725034e188398a407b9b3e2dc9717e454f3ad9b427723bc255abbfdfa26067529c8d6b1ae978291d92a89fd1d27bdbbee7b4de4fe22c657011ddea51106738bc4535d8ca200696f3d866195dda4896e5154d7a9c39133050b8508e787632d26c255b2a0933e991510ed8626f7abbbd63521fa42bec5dc9064a50a08bab13e7c3862ba84fa18254126bf6d78c76fe5986fbae3e5c43189344027bd324b3eaf52a56957f5e2a847073a09cb81499cbaa962421dced7cc186737e8cf86edd1785ec8a29ed116ed3d7cad80813250c96ee527d96bc0a11d126f5af90f8d1e3d236ceae80d348696212c661154462b58918fc729b172e9f8412d6d8dc8626f699739af4b64adb8e6c6ae5831905dc3bb778f966152eac4cb63d91e91c0f46e92bb1ccd7a8c86c7b6a85cf5fd5d1ba34b41e313cca4563ab99f04ca07c05a310b85f5027cbb799f9b3f498b953bdeea27cbc6e495ec7e462f042e77116db54b71def8740f96e844e9c220b0622d4b4293810c6a2715f5a93360b4dc491579d1cf2ba4804381a0671a1e22dbc57aa253f6a1fb6a4ad15b25645335286e51ca02fe83bb88aba39db4292197055b5cb806d83687518a5d3a139da02c5c4512a3980cee8968590fd61a42af7a48931195ffbae3b2ba2ca0ee8cc1d135c1a775240eec37fa52887d5498b52d035b4114f1f83275d8327611e76e378ed1c5938ef10cca441401cead09a374cd17ac1b094176d1c40a219d48cb657a1705cb7d4015511afcc1bb8e0d8d4e1adf96eb1bad8148acc4feb42e9422b778ea900ae9ab02ac4db1ea4c95be384f207fa164e5171f003cb2c8c8f057d8b14094a5d0422e43282a3332ebf7d3f501ded31bd83b044a5c636633ec21aad95f68a6178b7c6017614908aad530d8c49d2bd549df663622a18f8b1a2fce287fc33d611f30aa7a9ba8d772664ec7c7736b9ed390bb8a042f7e8c5ce5106055673ee73e3d2c0e32e42b340ef8dd142af078bcb2b119d27c1a4f43d323ab52abce9bf6d3142f429bdc573e371c1564a1ab06b21307e52f103c93f484a7b5466e318621e96d2b1873602097951b418a6c049fb53eb8eb8124d89db763a6661f8d74d5cbec05007ba1e722ef309cacc06e6fb8a2f6b4865cafa0eeb000249b274eae9a507a3a9ffaa8bbce7c09afd6b1532ab8d8a540a16f3fd66b3ddd8913fe18a830905ddd2f3d578678977652142dae00cf87eefcd760aff20e9fa9d9944ed2a8b065b7e1bda93f62ed078023ae78b8729007b59c14d8880352b33c1c778987037e3c30af51afb0773e37849d86db37b81b0286fcb46c7964c3749e670c3b361da26fbd5ab2294f5fa14d84d0f4a7489a511117ee9f49497577ac40692ff319d423d9619efa2f5c4de97af853673d0312d8ba19aee9a9f4efd2f9299166e6cfc71f69e73b7636f9132b27b01d4358e4226aa7c8feb887c08a38672ef6959ec48f924fe19b0dfe34bcd58c30dc0f65f5a7c7854624982201a1920691eac95dbefb3199d8c85c0b80be9d16ba52ad187be753b763d57bb4fc90fe34544c25f898c15247ba6ad430603c90af51ef47c107cc2cfdb809f8287ece684c91a7ef5cf9038ad68dba6a2785f10cfb61555791cc20c3900ca2fd6b3a780fa2063452429b6ffb7a97c075bfdb2451149d78b225b1d633eddd958478beb0b3e1005d9deea3f908afa8573ee2bf918f06a78a6ee02037fc758b9585b663abc3077160f2af80a802f738a36aff60bace70571599f8b7b70ff92340f53051fddd648518218facc64049d94a5964459db7556f78593e6a2b55f2fa92c57a5667af880cc07d98c01319a8e4e4fcfb6bebce376ffc0ac08f3d3c44f0fb6d7a188400b8afec3ebb34819e9a99757723fe68dfc922a75f6b08b5ad4491bdf77c3814b311be6fa91b59f2094d148eedef151d28935f95d681fd387690f095fbf9090de40455b7fec535dd8808f2b8759a1fa1ad98e94e685dccb1a6819b141719c864b10d2ffc8c964056814dca9c9d9626f8f41941ece5b56d544890cb492fa58636622e9db176dacde26681cb0cd2dbff27582a33148b3bff6370f79c7fc7ded4be3128d04bc93198e0ada457393ec51940b3433b2fe9bb1220afc8934d8be302c36dfa9cceaf210c35e330a874e0a5b7803551f21be35947c7c8c7368db6c2c9091255bc7bb39f4c0c8b134daccc14ca87b524590177c62321343187843e4670d3981e908fff24a4b316ade3fb1ab9c7f20ef91c071931ce0d4bb849831f6c13c162096a899e1f32181f948007e4e08f633c632f01c88d3dc4a9c23bdd16be795d844789f534ab119f78582c0e9430b5de8a24e0551de47d0d52de3d9ada873ba1a83f83a2ac1748fe4b7f49f71f97d8558b7b6fcd14f87da41de51346518a37253d486567d58e76cf9bf30baf799fe226e5b40dd5728e96fae02e8bb335419a6773f9d22271743f8a4a0ea206974ddfd1b9928e27ed95625c80aa5754a4693d18f2b9778d72851b0dab4789190d671753d80b735ef450f73013c0d62cedaf666b6135bf8ffa97524077612e65706664480fc9d01b5bd3d7487216a8d3632fb09d1f36955ba1087e36186cd4f2839f013f53ef343a78b6dbb4bc39eed93b6cb7955694113d96c5f80e57150292e75509db26d181c3b7f83a880b1a3745824b583efb4933ac9a9890476d9ea738c8729a3784e44394c5b3d85de479439988acb4b6972a011f1052760ba7fc43a4ced8e01b7acae6d31da4dcf632dd3d316357bc8b7749eb08e86efa86e13274012566a75fb89cde3bf9c2b6fd509c990798729dc63b3b6c0caab85c1ef3e2d7014d44e337f05d384a703e25e60bd522c9206fb290eed99f0abe2debe3aa5b46e4eacb62213244965d32dfd963ae6680b8ce93ad798275bcfa29c2436dc1decda8f8ecd6ce85a45a3acbfa0ac33803e0e6444524a570d005995cf4c474fcd95fe7987c7063d04a667f16b3291dfebbba50d586627f39f0bdd35b84ecbef554aedf7ee2fcece758aff496de9dc0d58da2c965b06e1c30d35d355303f4c5ab48c6f36a5c430d53544aab72cdb9c478f512e57f39563246257442b97a76eefbc8646e4340aeb3bfa3312a40de6fb1c3e18f5310e2aa5224d55474e24fbcfc8ab2e51221f2bae8fea64ba3861623a4491d0f8abf9ec42ba7428202d71b522f558c9b3d385e5117eb2b9089f18878f69b7773ffe461c93c716555dc4250f8b54e0c4ea6a3f33bc1f9c8cd91986f11e09f7997bc6bebb99f7556aa060a48a0ca832d905b3f78b0bd338c5d81f2fa83444ab867d6cbbefb7444d1ea1a88342426ee37ff07e33ecf41552f442df450d595731d47d7d90421b0d46577c4b7c7ecea4a7aad5fa23452c5008fcb719c7ee54e6e1296e8aa9be92f053203f3132fd9f87dd600feb9193a5c76dc442c2a231ae96233e8afeba3f0f3d2215de796848078ba217a6ffcf9952f2328ea91afdb0ad60547c0d0c7f048ecb6d6c68476b81acdc123a6a90c7d2cd7c806b208776d7a21a6322242d63c166d8132f045d7fd59d6591ffad747c6bf693698a91623e9ed14e841fc3aa0dc77235dab30d63c8a688461666e470d893ebf6f4e92973f9a0d842c97e7578f12fdb2b33c3cceb70f0671a93c47c3a63e92a6f001ffa1ae8ce666f5be89ad05e7d4dfa116635edf47edcb4497e0a25709e4e17029f4a33ae7f6b515b7c6f9b6111aa2fba0662918bfb306c7b000051aa8ed856f4af630934b65667cb037a7797477c086ef4d746a7945a3d4126cd1a49496bc571922ea3758548f695debaa5badedaf49502c3bb4a6937ec9ac9a67c6aedd1ee28ddbbebd2ce6ffa2aadf5dcb71e6541477d7ba1092c7e7cd5df7c567a68e19c234799ffa272636fea480ebfc1071e27300ddb562d3b077850a7ccdc5a3f5dae67645d5c501538c2c8e943d90b23dae54ff0d07696488a0c48b73168b7f3c38f74f3a83e71f34cab946bad3395d462b3a2233b4b93254f672c2d39add9546920bc03bb78e55d33228ebbe5aaab180b1fc7cad2cea0cddfe42215f039e1d9d83ccd29414d7483e7932b897c50410465646d5f636f4339d34c1646e7afcf1d3146bb9320e983aa052705f641f80d44852ec0950f0893405f8805c3be93880a008eb8e3123ab1e6b8f32b76855ded91aff32ce8d7e108c9a4c069c1184736be86fb1746a529376aa07216a5ffa81821e34e6d3efe96438f5e1360a6446a25140c5835bc62078b322e70b48cc25e85fc5d9e78ccfc42f941d0fa33a05266ce8beb72d07d87dbd12bb6daa6871b697c80c345dec5a457a0dada6ee813725e160c73f80ace2644a8de8956c3b16d45be30fcdc3a14bf1dcf5fe5fefc75056250e31fc2abb1233640b289515b9d6f402c7d4fc1603b4d83c2c5213c306116a2ac75a9582c106c711b6303e5bffe00540fb3efda8c0af4fdc9fefa10fa55e32cfa594d96d35d101b7c9dca8bbed8deaa48640a887f91daeac498ec8231a4e237b3854ebbb0f7d6f9b0ba71daa114ee519d2c1b03340885cb902284cee30426591890582e46e83051094fa8e520beff3bdead334b686d03f9103ce4fb69f1c497dcefc7a9ae5deec1073e1a1f773f5f9eecdd6215453ed8ea9b5487735fb36f80d1cac7ea06ee00000000000000", 0x100e, r1}, 0x64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x40000000, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000240)='/dev/vcsu#\x00', 0x2, 0x1a801) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) r3 = getpid() tkill(r3, 0x38) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007ff, &(0x7f0000000100)={0x2, 0x10004e23, @empty}, 0x10) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000001, 0x11, 0xffffffffffffffff, 0x0) sendto$inet(r4, &(0x7f0000d7cfcb), 0x79df47f963e03bb8, 0xe00000000000000, 0x0, 0xffffffffffffffc2) 12:32:24 executing program 5: ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/seq\x00', 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00', 0x20}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue1\x00'}) [ 144.832919] audit: type=1800 audit(1595853144.187:9): pid=7856 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=15768 res=0 12:32:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x80000000, 0xfffffffffffeffff}, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x5, 0x4000) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffc}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)=0x6, 0x4) r2 = openat$bsg(0xffffffffffffff9c, 0x0, 0x400, 0x0) getsockname$netrom(0xffffffffffffffff, &(0x7f0000000400)={{0x3, @rose}, [@netrom, @default, @bcast, @null, @netrom, @null, @bcast]}, &(0x7f00000002c0)=0x48) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="6fe37f4c78a2a5edc0ce00006671ab75f0e43ad36ad84243b4df5569e75f6fbc6a1470421df172d0a80caf05b005cfec0051877f26b1c5"], 0xa) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, 0x0, 0x0) ftruncate(r3, 0x200002) sendfile(r0, r3, 0x0, 0x80001d00c0d0) 12:32:24 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x6) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffbf, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001000010453930200000001000000000010816f08d3cd7d9f0b35af13ef3abbbe5d48a2bf8c72e507769f6595eeb14a7b42e922bc6f6c7f9e2b3346b5adba0e0da6552582fd49f6b69a09798f5666f784aa04df4119d2d9f6d304ebbe8d142c3b", @ANYRES32=r5, @ANYBLOB="ddffffff03ffffff140012000c000100627269646765"], 0x34}}, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty}}}], 0x20}}], 0x1, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r7, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="0903001700"/14], 0x14}}, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x800, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r9, 0x5385, &(0x7f0000000300)={0x2f, ""/47}) sendmsg$DEVLINK_CMD_PORT_GET(r6, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)={0xf4, r8, 0xb08, 0x70bd25, 0x25dfdbfe, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x814}, 0x8884) 12:32:24 executing program 4: r0 = socket$inet6(0xa, 0x8000000000080001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000000)=0x0) ptrace(0x11, r2) 12:32:24 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000180), 0x4) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) syz_open_dev$video4linux(&(0x7f0000000280)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 12:32:24 executing program 5: ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/seq\x00', 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00', 0x20}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue1\x00'}) 12:32:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x80000000, 0xfffffffffffeffff}, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x5, 0x4000) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffc}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)=0x6, 0x4) r2 = openat$bsg(0xffffffffffffff9c, 0x0, 0x400, 0x0) getsockname$netrom(0xffffffffffffffff, &(0x7f0000000400)={{0x3, @rose}, [@netrom, @default, @bcast, @null, @netrom, @null, @bcast]}, &(0x7f00000002c0)=0x48) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="6fe37f4c78a2a5edc0ce00006671ab75f0e43ad36ad84243b4df5569e75f6fbc6a1470421df172d0a80caf05b005cfec0051877f26b1c5"], 0xa) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, 0x0, 0x0) ftruncate(r3, 0x200002) sendfile(r0, r3, 0x0, 0x80001d00c0d0) [ 145.414188] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 145.433987] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 12:32:24 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) sendmmsg(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="8d", 0x1}], 0x1}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000006340)=[{{0x0, 0x0, 0x0}}], 0x517, 0x102, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000010000104000002000000000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x1d, r6}, 0x10, &(0x7f0000000200)={&(0x7f0000000100)={0x3, 0x800, 0x4, {0x0, 0xea60}, {0x77359400}, {0x2, 0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1}, 0x4, 0x2, 0x0, 0x0, "f85ecc020b77d1ed"}}, 0x48}, 0x1, 0x0, 0x0, 0x4000040}, 0x20008010) [ 145.523958] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 12:32:24 executing program 5: ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/seq\x00', 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00', 0x20}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue1\x00'}) 12:32:25 executing program 3: open_by_handle_at(0xffffffffffffff9c, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfe, 0x0, 0x0, 0x0, 0x0, 0xeb9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0xb) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000813}, 0x40000) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) r1 = creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0xb, &(0x7f0000000180), 0x4) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0xb, &(0x7f0000000180), 0x4) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='overlay\x00', 0x99047c, &(0x7f0000000300)=ANY=[@ANYRES16=r0, @ANYRESHEX, @ANYRESDEC, @ANYRES64=r3, @ANYRES16=r1, @ANYRESHEX]) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0xc010) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000140)=0x57a) fstat(0xffffffffffffffff, 0x0) setuid(0x0) rmdir(&(0x7f00000000c0)='./bus/file0\x00') ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @loopback}, @nl=@proc, @nl=@unspec}) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) 12:32:25 executing program 1: bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x5c}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0xfea3, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000180), 0x4) r1 = accept4(r0, &(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast}, &(0x7f0000000240)=0x80, 0x800) accept4$tipc(r1, 0x0, &(0x7f0000000280), 0x800) [ 145.677003] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 12:32:25 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000180)='tmpfs\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0xc0ed0000, &(0x7f0000001480)=ANY=[@ANYBLOB='\a']) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000180), 0x4) pread64(r0, &(0x7f0000000000)=""/235, 0xeb, 0x1) [ 145.771073] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 12:32:25 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'md4-generic\x00'}, 0x58) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) 12:32:25 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) getsockname$netlink(r1, &(0x7f0000000000), &(0x7f0000000180)=0xc) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000480002240000000000889078ac141400ac1414bb0d00907800000000000000000000000000000000a796c04dda5f96a46072d05dfd7222d865aa108ab5c8c0021fee1108fe31c74c66e0da74fbee702a27b42f16b42d6cfce19ca2791e6c5a5349f6d1de8537"], 0x100c) 12:32:25 executing program 2: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000140)) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(r1, 0x80084121, &(0x7f0000000100)) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@errors_remount='errors=remount-ro'}]}) 12:32:25 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x101002) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) [ 145.898606] tmpfs: No value for mount option '' [ 146.025679] tmpfs: No value for mount option '' [ 146.036195] audit: type=1400 audit(1595853145.387:10): avc: denied { create } for pid=7943 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 [ 146.074627] block nbd1: Receive control failed (result -107) [ 146.095706] block nbd1: shutting down sockets [ 146.133668] block nbd1: Could not allocate knbd recv work queue. [ 146.171598] block nbd1: shutting down sockets 12:32:25 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x8, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @remote}}}, 0x48) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x140f, 0x100, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'mad\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x8090}, 0x4008010) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x4000, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0xb, &(0x7f0000000180), 0x4) sendmsg$unix(r2, &(0x7f0000000480)={&(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000280)=[{&(0x7f00000001c0)="4e4d5be51078282d2f522aed7a9af9b1fd1e7c8b91e33e5b778c6d2de438bb53ab977460ab9298fbbdd8ccc287ac8a051a86028c512824bf312c6720", 0x3c}, {&(0x7f0000000380)="c358121bbb4545bd409d33cf119fd638220fe6ab81862a9781cab4781848848044ec497233139bb63fc7fa7c2431b4e42d1cfb5876787aae4af308948492775a3ae12f397ce4c79d97da51b07899fe4f3fad6cde4201f0b5876dd2c45836ebc0a160121bff762fd4e4a1e9144ce845e0ef097371363ed224e2a7f6dbe5f6b6e323d69df6cb20569b1c076da896d84d19048de15d43c5866869fcb5ff34515e2ea197972f515fda937fa9", 0xaa}], 0x2, &(0x7f0000000440)=[@rights={{0x18, 0x1, 0x1, [r3, r1]}}], 0x18, 0x40000}, 0x4048004) 12:32:25 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x140a, 0x20, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x40000000) r0 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000540)={{{@in=@private, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@local, 0x0, 0x6c}, 0x0, @in6=@empty, 0x0, 0x4, 0x0, 0x2}}, 0xe8) sendmmsg(r0, &(0x7f0000008440), 0x0, 0x10) 12:32:25 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'md4-generic\x00'}, 0x58) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) 12:32:25 executing program 4: socketpair(0x3, 0x0, 0xfffffffc, &(0x7f0000000000)) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) getpeername$l2tp(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, &(0x7f0000000080)=0x10) 12:32:25 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x101002) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 12:32:25 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'md4-generic\x00'}, 0x58) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) [ 146.475835] block nbd1: Receive control failed (result -107) [ 146.484165] block nbd1: shutting down sockets 12:32:25 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a902000000020000003a8f000079a782d2250000000206e73ba8f4952bedc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000100)={[{@data_err_ignore='data_err=ignore'}]}) r2 = gettid() tkill(r2, 0x15) getpgid(r2) 12:32:26 executing program 0: r0 = creat(&(0x7f0000000340)='./file0\x00', 0x98) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0xb, &(0x7f0000000180), 0x4) getsockopt$inet6_dccp_int(r1, 0x21, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000100)=r0, 0x4) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="4b3f914ab595b2d57d25631621ea7665a5c76fa09027e45a4a91b94449f87c19e750a0443c2f6adda180ce192984f74f27bb77beeb433ffd872fcb1c0484c4f7b46b01162acc681ff92871bcc7e801a69cc3fc836b0496ab08a5f135e3bf00f313e14ad5218e8f06c611904b76b16dbb35d91121"]) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$TUNSETOWNER(r4, 0x400454cc, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x18) write$FUSE_NOTIFY_INVAL_INODE(r3, &(0x7f0000000140)={0x28, 0x2, 0x0, {0x1}}, 0x28) 12:32:26 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x101002) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) [ 146.743970] EXT4-fs (loop4): Can't read superblock on 2nd try [ 146.751283] block nbd1: Receive control failed (result -107) [ 146.760789] block nbd1: shutting down sockets 12:32:26 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x200, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={&(0x7f0000000100)="03328c70e3f9f0f401b5d0eaac215e9e86330bc2f7525db0b5638c0caf614afff43de397faefda4397a05bef44fcd55ee63f5e064ea99c896c4d245162184ee7cdd282d26045ebfa3a0844dedbb3ef445097", &(0x7f0000000000)=""/15, &(0x7f0000000480)="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", &(0x7f0000000080)="8de070884f", 0xe9, r2, 0x4}, 0x38) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 12:32:26 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'md4-generic\x00'}, 0x58) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) 12:32:26 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x140a, 0x20, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x40000000) r0 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000540)={{{@in=@private, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@local, 0x0, 0x6c}, 0x0, @in6=@empty, 0x0, 0x4, 0x0, 0x2}}, 0xe8) sendmmsg(r0, &(0x7f0000008440), 0x0, 0x10) 12:32:26 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000180), 0x4) r1 = socket(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, 0x20) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$TUNSETOWNER(r4, 0x400454cc, 0x0) ioctl$KVM_DIRTY_TLB(r4, 0x4010aeaa, &(0x7f0000000140)={0x6, 0x10000}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000040)={r3, @in6={{0xa, 0x4e21, 0x84, @empty, 0x1}}, 0xc1, 0x3}, &(0x7f0000000100)=0x90) r5 = memfd_create(&(0x7f0000000340)='\x00\x00\x00\x00\x00\x00z\x9b\xb0\xe8t%\xfc\x96L\x82\xdb', 0x0) write$binfmt_elf64(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46020000000000000000c4b40003003e000039a594249c1fd83d0000000000000000000000dfeb7bba00281213bd5d74dafc2038"], 0x3c) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 12:32:26 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x101002) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) [ 147.047126] block nbd1: Receive control failed (result -107) [ 147.058391] block nbd1: shutting down sockets 12:32:26 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'ipvlan1\x00', {0x2, 0x0, @rand_addr=0x64010102}}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$TUNSETOWNER(r2, 0x400454cc, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) 12:32:26 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x101002) socket(0x2, 0x6, 0x0) ioctl$NBD_DO_IT(r0, 0xab03) 12:32:26 executing program 2: rt_sigprocmask(0x2, &(0x7f0000000100)={[0x7]}, &(0x7f0000000140), 0x8) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000780)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002001100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$TUNSETOWNER(r2, 0x400454cc, 0x0) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000000)=0x1000, &(0x7f0000000040)=0x2) setsockopt$inet6_buf(r0, 0x29, 0xd3, &(0x7f0000000280)="09cb05004aff00000868b31bb6398cd8", 0x10) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2f) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, 0x20) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000001c0)={r3, @in6={{0xa, 0x4e24, 0x1, @private2, 0x2}}, 0x5, 0x9}, &(0x7f00000002c0)=0x90) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0xb, &(0x7f0000000180), 0x4) fcntl$setstatus(r4, 0x4, 0x800) 12:32:26 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) [ 147.124000] syz-executor.0 (8030) used greatest stack depth: 22496 bytes left [ 147.335902] audit: type=1804 audit(1595853146.687:11): pid=8052 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir102465536/syzkaller.yBaZLD/6/cgroup.controllers" dev="sda1" ino=15766 res=1 [ 147.391042] FAT-fs (loop0): bogus number of reserved sectors [ 147.404096] FAT-fs (loop0): This looks like a DOS 1.x volume; assuming default BPB values [ 147.645022] audit: type=1804 audit(1595853146.997:12): pid=8054 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir102465536/syzkaller.yBaZLD/6/cgroup.controllers" dev="sda1" ino=15766 res=1 12:32:28 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x101002) socket(0x2, 0x6, 0x0) ioctl$NBD_DO_IT(r0, 0xab03) 12:32:28 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x200, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={&(0x7f0000000100)="03328c70e3f9f0f401b5d0eaac215e9e86330bc2f7525db0b5638c0caf614afff43de397faefda4397a05bef44fcd55ee63f5e064ea99c896c4d245162184ee7cdd282d26045ebfa3a0844dedbb3ef445097", &(0x7f0000000000)=""/15, &(0x7f0000000480)="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", &(0x7f0000000080)="8de070884f", 0xe9, r2, 0x4}, 0x38) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 12:32:28 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) 12:32:28 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x2, 0x80000, 0x0, &(0x7f00000003c0)) r1 = socket$inet(0x2, 0x3, 0x2) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x0, 0x0) write$P9_ROPEN(r2, &(0x7f00000001c0)={0x18, 0x71, 0x1, {{0x40, 0x2, 0x8}, 0x101}}, 0x18) r3 = socket$inet_sctp(0x2, 0x1, 0x84) dup(r0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x0, 0x0) wait4(0x0, &(0x7f00000002c0), 0x8, &(0x7f0000000300)) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000040)={'filter\x00'}, &(0x7f0000000100)=0x78) ioctl$TUNSETOWNER(r4, 0x400454cc, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xfd}}, 0x0, 0x0, 0x0, 0x3}}, 0x2e) setsockopt$inet_int(r1, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) 12:32:28 executing program 4: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000000)=0x8, 0x4) r1 = perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000080)='cpu&3\n;pU\xe3\xbc\x12|\xec\xb4\xf6;5\x80$\xbe\x00\xc8 \xf4\xb3\xca\f\x90|\x1ff\xf0\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7f]\x17~\x9e\\\xac\x97\xa3\xa3\xea\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\n\x00\x00\x00\x00\x00\x00') 12:32:28 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'ipvlan1\x00', {0x2, 0x0, @rand_addr=0x64010102}}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$TUNSETOWNER(r2, 0x400454cc, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) 12:32:29 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) 12:32:29 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x200, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={&(0x7f0000000100)="03328c70e3f9f0f401b5d0eaac215e9e86330bc2f7525db0b5638c0caf614afff43de397faefda4397a05bef44fcd55ee63f5e064ea99c896c4d245162184ee7cdd282d26045ebfa3a0844dedbb3ef445097", &(0x7f0000000000)=""/15, &(0x7f0000000480)="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", &(0x7f0000000080)="8de070884f", 0xe9, r2, 0x4}, 0x38) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 12:32:29 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x101002) socket(0x2, 0x6, 0x0) ioctl$NBD_DO_IT(r0, 0xab03) [ 149.775495] audit: type=1804 audit(1595853149.127:13): pid=8088 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir102465536/syzkaller.yBaZLD/7/cgroup.controllers" dev="sda1" ino=15792 res=1 12:32:29 executing program 3: bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'md4-generic\x00'}, 0x58) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) 12:32:29 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x200, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={&(0x7f0000000100)="03328c70e3f9f0f401b5d0eaac215e9e86330bc2f7525db0b5638c0caf614afff43de397faefda4397a05bef44fcd55ee63f5e064ea99c896c4d245162184ee7cdd282d26045ebfa3a0844dedbb3ef445097", &(0x7f0000000000)=""/15, &(0x7f0000000480)="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", &(0x7f0000000080)="8de070884f", 0xe9, r2, 0x4}, 0x38) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 12:32:29 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYRES32], 0x18}}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0xb, &(0x7f0000000180), 0x4) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000000)=0x9, 0x4) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$TUNSETOWNER(r2, 0x400454cc, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x24, r3, 0x711, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffffffff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1ff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) [ 149.918512] FAT-fs (loop0): bogus number of reserved sectors [ 149.951779] FAT-fs (loop0): This looks like a DOS 1.x volume; assuming default BPB values 12:32:29 executing program 2: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000080)) syz_read_part_table(0x0, 0xb784, &(0x7f0000000040)=[{&(0x7f0000000000)="0201a6ffffff0a000000ff45ac0000ffffffa900e931190000000000000680ffffffa5000000e100e2ff877700720030070081ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:32:29 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x101002) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) 12:32:29 executing program 3: bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'md4-generic\x00'}, 0x58) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) 12:32:29 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x200, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={&(0x7f0000000100)="03328c70e3f9f0f401b5d0eaac215e9e86330bc2f7525db0b5638c0caf614afff43de397faefda4397a05bef44fcd55ee63f5e064ea99c896c4d245162184ee7cdd282d26045ebfa3a0844dedbb3ef445097", &(0x7f0000000000)=""/15, &(0x7f0000000480)="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", &(0x7f0000000080)="8de070884f", 0xe9, r2, 0x4}, 0x38) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 12:32:29 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x200, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={&(0x7f0000000100)="03328c70e3f9f0f401b5d0eaac215e9e86330bc2f7525db0b5638c0caf614afff43de397faefda4397a05bef44fcd55ee63f5e064ea99c896c4d245162184ee7cdd282d26045ebfa3a0844dedbb3ef445097", &(0x7f0000000000)=""/15, &(0x7f0000000480)="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", &(0x7f0000000080)="8de070884f", 0xe9, r2, 0x4}, 0x38) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 12:32:29 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'ipvlan1\x00', {0x2, 0x0, @rand_addr=0x64010102}}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$TUNSETOWNER(r2, 0x400454cc, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) 12:32:29 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000340)='./file0\x00') creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') open(&(0x7f00000000c0)='./file0\x00', 0x262040, 0x0) 12:32:29 executing program 3: bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'md4-generic\x00'}, 0x58) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) 12:32:29 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x101002) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) 12:32:29 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x200, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={&(0x7f0000000100)="03328c70e3f9f0f401b5d0eaac215e9e86330bc2f7525db0b5638c0caf614afff43de397faefda4397a05bef44fcd55ee63f5e064ea99c896c4d245162184ee7cdd282d26045ebfa3a0844dedbb3ef445097", &(0x7f0000000000)=""/15, &(0x7f0000000480)="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", &(0x7f0000000080)="8de070884f", 0xe9, r2, 0x4}, 0x38) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 12:32:29 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'md4-generic\x00'}, 0x58) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) 12:32:29 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x101002) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) [ 150.504624] audit: type=1804 audit(1595853149.857:14): pid=8148 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir102465536/syzkaller.yBaZLD/8/cgroup.controllers" dev="sda1" ino=15769 res=1 12:32:30 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x200, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={&(0x7f0000000100)="03328c70e3f9f0f401b5d0eaac215e9e86330bc2f7525db0b5638c0caf614afff43de397faefda4397a05bef44fcd55ee63f5e064ea99c896c4d245162184ee7cdd282d26045ebfa3a0844dedbb3ef445097", &(0x7f0000000000)=""/15, &(0x7f0000000480)="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", &(0x7f0000000080)="8de070884f", 0xe9, r2, 0x4}, 0x38) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 12:32:30 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'md4-generic\x00'}, 0x58) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) 12:32:30 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000340)='./file0\x00') creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') open(&(0x7f00000000c0)='./file0\x00', 0x262040, 0x0) 12:32:30 executing program 1: r0 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 12:32:30 executing program 2: r0 = socket$kcm(0xa, 0x2, 0x11) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$l2tp6(0xa, 0x2, 0x73) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r4, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0xb, &(0x7f0000000180), 0x4) fstat(r5, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r7, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xff8b) ioctl$TUNSETOWNER(r2, 0x400454cc, r8) r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10) setsockopt$sock_attach_bpf(r0, 0x1, 0x3d, &(0x7f00000002c0)=r9, 0x4) sendmsg$sock(r0, &(0x7f00000007c0)={&(0x7f0000000240)=@in6={0xa, 0x4e20, 0x0, @mcast2}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[@txtime={{0x18}}], 0x18}, 0x0) 12:32:30 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'ipvlan1\x00', {0x2, 0x0, @rand_addr=0x64010102}}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$TUNSETOWNER(r2, 0x400454cc, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) 12:32:30 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x200, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={&(0x7f0000000100)="03328c70e3f9f0f401b5d0eaac215e9e86330bc2f7525db0b5638c0caf614afff43de397faefda4397a05bef44fcd55ee63f5e064ea99c896c4d245162184ee7cdd282d26045ebfa3a0844dedbb3ef445097", &(0x7f0000000000)=""/15, &(0x7f0000000480)="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", &(0x7f0000000080)="8de070884f", 0xe9, r2, 0x4}, 0x38) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 12:32:30 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'md4-generic\x00'}, 0x58) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) 12:32:30 executing program 1: r0 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 12:32:30 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) 12:32:30 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x200, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={&(0x7f0000000100)="03328c70e3f9f0f401b5d0eaac215e9e86330bc2f7525db0b5638c0caf614afff43de397faefda4397a05bef44fcd55ee63f5e064ea99c896c4d245162184ee7cdd282d26045ebfa3a0844dedbb3ef445097", &(0x7f0000000000)=""/15, &(0x7f0000000480)="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", &(0x7f0000000080)="8de070884f", 0xe9, r2, 0x4}, 0x38) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) [ 151.252705] audit: type=1804 audit(1595853150.607:15): pid=8196 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir102465536/syzkaller.yBaZLD/9/cgroup.controllers" dev="sda1" ino=15810 res=1 12:32:30 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0xb, &(0x7f0000000180), 0x4) r2 = fcntl$getown(r1, 0x9) r3 = getpgid(0xffffffffffffffff) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$TUNSETOWNER(r4, 0x400454cc, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0xb, &(0x7f0000000180), 0x4) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r0, &(0x7f0000000340)={r4, r5, 0x2}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) r6 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000040)=0x4e, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200187ec, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$TUNSETOWNER(r7, 0x400454cc, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r7, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x58020001}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0x1e0, 0x0, 0x2, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@CTA_EXPECT_HELP_NAME={0xe, 0x6, 'snmp_trap\x00'}, @CTA_EXPECT_MASTER={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, [], 0x1}}, {0x14, 0x4, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @rand_addr=0x64010102}}}]}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_NAT={0x11c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x90, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xb}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @remote}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_EXPECT_NAT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x8081}, 0x8000) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x1000001bd) 12:32:30 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000340)='./file0\x00') creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') open(&(0x7f00000000c0)='./file0\x00', 0x262040, 0x0) 12:32:30 executing program 1: r0 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 12:32:30 executing program 1: r0 = syz_open_dev$ndb(0x0, 0x0, 0x101002) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 12:32:30 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) 12:32:30 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x200, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 12:32:31 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'ipvlan1\x00', {0x2, 0x0, @rand_addr=0x64010102}}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$TUNSETOWNER(r2, 0x400454cc, 0x0) 12:32:31 executing program 1: r0 = syz_open_dev$ndb(0x0, 0x0, 0x101002) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 12:32:31 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000340)='./file0\x00') creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') open(&(0x7f00000000c0)='./file0\x00', 0x262040, 0x0) 12:32:31 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) 12:32:31 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x200, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 12:32:31 executing program 1: r0 = syz_open_dev$ndb(0x0, 0x0, 0x101002) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) [ 152.208382] audit: type=1804 audit(1595853151.567:16): pid=8252 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir102465536/syzkaller.yBaZLD/10/cgroup.controllers" dev="sda1" ino=15818 res=1 [ 152.260103] FAT-fs (loop0): Unrecognized mount option "cgroup.controllers" or missing value 12:32:31 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='hybla\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0xb, &(0x7f0000000180), 0x4) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000040)={0xec1}, 0x4) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0x100000530) 12:32:31 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x200, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 12:32:31 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 12:32:31 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'md4-generic\x00'}, 0x58) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) 12:32:31 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'md4-generic\x00'}, 0x58) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) [ 152.450343] block nbd1: Receive control failed (result -107) [ 152.465809] block nbd1: shutting down sockets 12:32:31 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x200, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 12:32:31 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'ipvlan1\x00', {0x2, 0x0, @rand_addr=0x64010102}}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$TUNSETOWNER(r2, 0x400454cc, 0x0) 12:32:31 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x0, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 12:32:32 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000340)='./file0\x00') creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') 12:32:32 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'md4-generic\x00'}, 0x58) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) 12:32:32 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x200, 0x4) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 12:32:32 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'md4-generic\x00'}, 0x58) bind$alg(r0, 0x0, 0x0) [ 152.778868] audit: type=1804 audit(1595853152.127:17): pid=8289 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir102465536/syzkaller.yBaZLD/11/cgroup.controllers" dev="sda1" ino=15825 res=1 [ 152.822031] FAT-fs (loop0): bogus number of reserved sectors [ 152.850555] FAT-fs (loop0): This looks like a DOS 1.x volume; assuming default BPB values 12:32:32 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'ipvlan1\x00', {0x2, 0x0, @rand_addr=0x64010102}}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$TUNSETOWNER(r2, 0x400454cc, 0x0) 12:32:32 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x200, 0x4) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 12:32:32 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x0, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 12:32:32 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000340)='./file0\x00') creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') 12:32:32 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'md4-generic\x00'}, 0x58) bind$alg(r0, 0x0, 0x0) 12:32:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'ipvlan1\x00', {0x2, 0x0, @rand_addr=0x64010102}}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x0, 0x0) 12:32:32 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x200, 0x4) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 12:32:32 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'md4-generic\x00'}, 0x58) bind$alg(r0, 0x0, 0x0) 12:32:32 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x0, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) [ 153.537908] audit: type=1804 audit(1595853152.897:18): pid=8333 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir163434630/syzkaller.YDGA88/14/cgroup.controllers" dev="sda1" ino=15826 res=1 12:32:33 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000340)='./file0\x00') creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') [ 153.623115] FAT-fs (loop2): Unrecognized mount option "cgroup.controllers" or missing value 12:32:33 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 12:32:33 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) [ 153.717428] audit: type=1804 audit(1595853153.057:19): pid=8340 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir102465536/syzkaller.yBaZLD/12/cgroup.controllers" dev="sda1" ino=15823 res=1 [ 153.728271] FAT-fs (loop0): Unrecognized mount option "cgroup.controllers" or missing value 12:32:33 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'ipvlan1\x00', {0x2, 0x0, @rand_addr=0x64010102}}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$TUNSETOWNER(r2, 0x400454cc, 0x0) 12:32:33 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000340)='./file0\x00') creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') 12:32:33 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000340)='./file0\x00') creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') 12:32:33 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 12:32:33 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'ipvlan1\x00', {0x2, 0x0, @rand_addr=0x64010102}}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x0, 0x0) 12:32:33 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 12:32:33 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 12:32:33 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) [ 154.501475] audit: type=1804 audit(1595853153.857:20): pid=8394 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir163434630/syzkaller.YDGA88/15/cgroup.controllers" dev="sda1" ino=15830 res=1 12:32:33 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) [ 154.576145] FAT-fs (loop2): bogus number of reserved sectors [ 154.590733] FAT-fs (loop0): bogus number of reserved sectors [ 154.643619] FAT-fs (loop0): This looks like a DOS 1.x volume; assuming default BPB values [ 154.650555] audit: type=1804 audit(1595853153.867:21): pid=8393 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir102465536/syzkaller.yBaZLD/13/cgroup.controllers" dev="sda1" ino=15832 res=1 [ 154.683946] FAT-fs (loop2): This looks like a DOS 1.x volume; assuming default BPB values 12:32:34 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 12:32:34 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'ipvlan1\x00', {0x2, 0x0, @rand_addr=0x64010102}}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x0, 0x0) 12:32:34 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 12:32:34 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000340)='./file0\x00') creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') 12:32:34 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000340)='./file0\x00') creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x262040, 0x0) [ 155.181677] audit: type=1804 audit(1595853154.537:22): pid=8421 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir102465536/syzkaller.yBaZLD/14/cgroup.controllers" dev="sda1" ino=15822 res=1 12:32:34 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000340)='./file0\x00') creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') 12:32:34 executing program 5: r0 = socket$inet(0x2, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 12:32:34 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) [ 155.235317] FAT-fs (loop0): bogus number of reserved sectors [ 155.247548] FAT-fs (loop0): This looks like a DOS 1.x volume; assuming default BPB values 12:32:35 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 12:32:35 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000340)='./file0\x00') creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x262040, 0x0) 12:32:35 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'ipvlan1\x00', {0x2, 0x0, @rand_addr=0x64010102}}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) 12:32:35 executing program 5: r0 = socket$inet(0x2, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 12:32:35 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'ipvlan1\x00', {0x2, 0x0, @rand_addr=0x64010102}}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x0, 0x0) 12:32:35 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) 12:32:35 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000340)='./file0\x00') creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x262040, 0x0) 12:32:35 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) 12:32:35 executing program 5: r0 = socket$inet(0x2, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) [ 156.213140] audit: type=1804 audit(1595853155.567:23): pid=8482 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir237641447/syzkaller.qbBrdF/29/cgroup.controllers" dev="sda1" ino=15768 res=1 12:32:35 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) [ 156.426671] FAT-fs (loop0): bogus number of reserved sectors [ 156.433922] FAT-fs (loop0): This looks like a DOS 1.x volume; assuming default BPB values [ 156.436055] FAT-fs (loop3): bogus number of reserved sectors [ 156.624141] FAT-fs (loop3): This looks like a DOS 1.x volume; assuming default BPB values 12:32:36 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000340)='./file0\x00') creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x262040, 0x0) [ 156.670245] audit: type=1804 audit(1595853155.767:24): pid=8495 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir102465536/syzkaller.yBaZLD/15/cgroup.controllers" dev="sda1" ino=15835 res=1 12:32:36 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000340)='./file0\x00') creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x262040, 0x0) 12:32:36 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 12:32:36 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(0xffffffffffffffff, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) [ 156.866631] block nbd1: shutting down sockets 12:32:36 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 12:32:36 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(0xffffffffffffffff, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 12:32:36 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000340)='./file0\x00') creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x262040, 0x0) 12:32:36 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'ipvlan1\x00', {0x2, 0x0, @rand_addr=0x64010102}}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) [ 157.151432] block nbd1: shutting down sockets 12:32:36 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(0xffffffffffffffff, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 12:32:36 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) [ 157.322766] block nbd1: shutting down sockets 12:32:36 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) [ 157.425676] audit: type=1804 audit(1595853156.777:25): pid=8544 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir102465536/syzkaller.yBaZLD/16/cgroup.controllers" dev="sda1" ino=15822 res=1 12:32:37 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000340)='./file0\x00') creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x262040, 0x0) 12:32:37 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000340)='./file0\x00') creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') [ 157.654589] FAT-fs (loop0): bogus number of reserved sectors [ 157.685771] FAT-fs (loop0): This looks like a DOS 1.x volume; assuming default BPB values 12:32:37 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000340)='./file0\x00') creat(&(0x7f00000002c0)='./file0\x00', 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x262040, 0x0) 12:32:37 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000340)='./file0\x00') creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x262040, 0x0) 12:32:37 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 12:32:37 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 12:32:37 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket(0x11, 0xa, 0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) 12:32:37 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'ipvlan1\x00', {0x2, 0x0, @rand_addr=0x64010102}}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) 12:32:37 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 12:32:37 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000340)='./file0\x00') creat(&(0x7f00000002c0)='./file0\x00', 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x262040, 0x0) 12:32:37 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) [ 158.436556] block nbd3: Receive control failed (result -107) [ 158.444212] block nbd3: shutting down sockets 12:32:37 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 12:32:38 executing program 1 (fault-call:3 fault-nth:0): r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) [ 158.642497] audit: type=1804 audit(1595853157.997:26): pid=8612 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir163434630/syzkaller.YDGA88/20/cgroup.controllers" dev="sda1" ino=15831 res=1 [ 158.776689] FAULT_INJECTION: forcing a failure. [ 158.776689] name failslab, interval 1, probability 0, space 0, times 1 [ 158.788558] CPU: 0 PID: 8619 Comm: syz-executor.1 Not tainted 4.19.134-syzkaller #0 [ 158.796379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 158.805741] Call Trace: [ 158.808344] dump_stack+0x1fc/0x2fe [ 158.811994] should_fail.cold+0xa/0x14 [ 158.815910] ? setup_fault_attr+0x200/0x200 [ 158.820288] ? lock_acquire+0x170/0x3c0 [ 158.824300] __should_failslab+0x115/0x180 [ 158.825166] FAT-fs (loop0): Unrecognized mount option "cgroup.controllers" or missing value [ 158.828553] should_failslab+0x5/0xf [ 158.828596] __kmalloc+0x2ab/0x3c0 [ 158.828609] ? __alloc_workqueue_key+0x789/0xed0 [ 158.828622] ? lock_acquire+0x170/0x3c0 [ 158.828638] __alloc_workqueue_key+0x789/0xed0 [ 158.828657] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 158.828671] ? deref_stack_reg+0x134/0x1d0 [ 158.828687] ? nbd_ioctl+0x151/0xbe0 [ 158.828702] ? __mutex_add_waiter+0x160/0x160 [ 158.828721] ? avc_has_extended_perms+0x6f3/0xea0 [ 158.828740] nbd_start_device+0x183/0xd50 [ 158.828755] ? security_capable+0x8f/0xc0 [ 158.828776] nbd_ioctl+0x62a/0xbe0 [ 158.828797] ? nbd_disconnect_and_put+0x270/0x270 [ 158.828815] ? avc_ss_reset+0x170/0x170 [ 158.828833] ? __lock_acquire+0x6de/0x3ff0 [ 158.828850] ? nbd_disconnect_and_put+0x270/0x270 [ 158.828873] blkdev_ioctl+0x5cb/0x1a7e [ 158.828888] ? blkpg_ioctl+0x9d0/0x9d0 [ 158.828902] ? get_pid_task+0xf4/0x190 12:32:38 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000340)='./file0\x00') truncate(&(0x7f0000000100)='./file0\x00', 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x262040, 0x0) 12:32:38 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) [ 158.828918] ? mark_held_locks+0xf0/0xf0 [ 158.828933] ? proc_fail_nth_write+0x95/0x1d0 [ 158.828948] ? proc_tgid_io_accounting+0x7f0/0x7f0 [ 158.828976] block_ioctl+0xe9/0x130 [ 158.828991] ? blkdev_fallocate+0x3f0/0x3f0 [ 158.829008] do_vfs_ioctl+0xcdb/0x12e0 [ 158.829025] ? selinux_file_ioctl+0x506/0x6c0 [ 158.829041] ? ioctl_preallocate+0x200/0x200 [ 158.829057] ? selinux_inode_link+0x20/0x20 [ 158.829075] ? __fget+0x356/0x510 [ 158.829093] ? do_dup2+0x450/0x450 [ 158.829108] ? vfs_write+0x393/0x540 12:32:38 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) [ 158.829133] ksys_ioctl+0x9b/0xc0 [ 158.829152] __x64_sys_ioctl+0x6f/0xb0 [ 158.829166] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 158.829186] do_syscall_64+0xf9/0x620 [ 158.865876] block nbd3: Receive control failed (result -107) [ 158.868059] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 158.868073] RIP: 0033:0x45c369 [ 158.868086] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 158.868094] RSP: 002b:00007fce67eb5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 158.868106] RAX: ffffffffffffffda RBX: 0000000000011bc0 RCX: 000000000045c369 [ 158.868114] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 158.868121] RBP: 00007fce67eb5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 158.868128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.868136] R13: 00007fff57e4f31f R14: 00007fce67eb69c0 R15: 000000000078bf0c [ 158.936080] block nbd1: Could not allocate knbd recv work queue. 12:32:38 executing program 1 (fault-call:3 fault-nth:1): r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) [ 158.977323] block nbd3: shutting down sockets [ 158.987245] block nbd1: shutting down sockets 12:32:38 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 12:32:38 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket(0x11, 0xa, 0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) 12:32:38 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'ipvlan1\x00', {0x2, 0x0, @rand_addr=0x64010102}}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) [ 159.229451] FAULT_INJECTION: forcing a failure. [ 159.229451] name failslab, interval 1, probability 0, space 0, times 0 [ 159.240441] block nbd3: Receive control failed (result -107) [ 159.252750] block nbd3: shutting down sockets 12:32:38 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) socket(0x2, 0x6, 0x0) ioctl$NBD_DO_IT(r0, 0xab03) [ 159.277685] CPU: 0 PID: 8639 Comm: syz-executor.1 Not tainted 4.19.134-syzkaller #0 [ 159.285539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 159.294909] Call Trace: [ 159.297516] dump_stack+0x1fc/0x2fe [ 159.301160] should_fail.cold+0xa/0x14 [ 159.305063] ? setup_fault_attr+0x200/0x200 [ 159.309399] ? lock_acquire+0x170/0x3c0 [ 159.313395] __should_failslab+0x115/0x180 [ 159.317691] should_failslab+0x5/0xf [ 159.321425] kmem_cache_alloc_trace+0x284/0x380 [ 159.326138] __alloc_workqueue_key+0x7de/0xed0 [ 159.330777] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 159.335811] ? deref_stack_reg+0x134/0x1d0 [ 159.340063] ? nbd_ioctl+0x151/0xbe0 [ 159.343798] ? __mutex_add_waiter+0x160/0x160 [ 159.348311] ? avc_has_extended_perms+0x6f3/0xea0 [ 159.353265] nbd_start_device+0x183/0xd50 [ 159.357446] ? security_capable+0x8f/0xc0 [ 159.361621] nbd_ioctl+0x62a/0xbe0 [ 159.365181] ? nbd_disconnect_and_put+0x270/0x270 [ 159.370148] ? avc_ss_reset+0x170/0x170 [ 159.374139] ? __lock_acquire+0x6de/0x3ff0 [ 159.378411] ? nbd_disconnect_and_put+0x270/0x270 [ 159.383364] blkdev_ioctl+0x5cb/0x1a7e [ 159.387282] ? blkpg_ioctl+0x9d0/0x9d0 [ 159.391179] ? get_pid_task+0xf4/0x190 [ 159.395081] ? mark_held_locks+0xf0/0xf0 [ 159.399152] ? proc_fail_nth_write+0x95/0x1d0 [ 159.403651] ? proc_tgid_io_accounting+0x7f0/0x7f0 [ 159.409307] block_ioctl+0xe9/0x130 [ 159.412951] ? blkdev_fallocate+0x3f0/0x3f0 [ 159.417296] do_vfs_ioctl+0xcdb/0x12e0 [ 159.421202] ? selinux_file_ioctl+0x506/0x6c0 [ 159.425721] ? ioctl_preallocate+0x200/0x200 [ 159.430151] ? selinux_inode_link+0x20/0x20 [ 159.434503] ? __fget+0x356/0x510 [ 159.437976] ? do_dup2+0x450/0x450 [ 159.441525] ? vfs_write+0x393/0x540 [ 159.445285] ksys_ioctl+0x9b/0xc0 [ 159.448759] __x64_sys_ioctl+0x6f/0xb0 [ 159.452664] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 159.454862] FAT-fs (loop0): bogus number of reserved sectors [ 159.458235] do_syscall_64+0xf9/0x620 [ 159.458256] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 159.458269] RIP: 0033:0x45c369 12:32:38 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) [ 159.458284] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 159.458292] RSP: 002b:00007fce67eb5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 159.458305] RAX: ffffffffffffffda RBX: 0000000000011bc0 RCX: 000000000045c369 [ 159.458312] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 159.458319] RBP: 00007fce67eb5ca0 R08: 0000000000000000 R09: 0000000000000000 12:32:38 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) socket(0x2, 0x6, 0x0) ioctl$NBD_DO_IT(r0, 0xab03) [ 159.458325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.458333] R13: 00007fff57e4f31f R14: 00007fce67eb69c0 R15: 000000000078bf0c [ 159.462892] audit: type=1804 audit(1595853158.807:27): pid=8652 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir102465536/syzkaller.yBaZLD/18/cgroup.controllers" dev="sda1" ino=15829 res=1 [ 159.545632] FAT-fs (loop0): This looks like a DOS 1.x volume; assuming default BPB values 12:32:39 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 12:32:39 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) socket(0x2, 0x6, 0x0) ioctl$NBD_DO_IT(r0, 0xab03) [ 159.688771] FAT-fs (loop2): bogus number of reserved sectors [ 159.728497] FAT-fs (loop2): This looks like a DOS 1.x volume; assuming default BPB values 12:32:39 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000340)='./file0\x00') truncate(&(0x7f0000000100)='./file0\x00', 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x262040, 0x0) 12:32:39 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket(0x11, 0xa, 0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) 12:32:39 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) 12:32:39 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 12:32:39 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'ipvlan1\x00', {0x2, 0x0, @rand_addr=0x64010102}}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) 12:32:39 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 12:32:39 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) [ 160.013893] audit: type=1804 audit(1595853158.997:28): pid=8658 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir163434630/syzkaller.YDGA88/21/cgroup.controllers" dev="sda1" ino=15823 res=1 [ 160.039860] block nbd1: Could not allocate knbd recv work queue. [ 160.047947] block nbd1: shutting down sockets [ 160.114795] audit: type=1804 audit(1595853159.467:29): pid=8686 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir102465536/syzkaller.yBaZLD/19/cgroup.controllers" dev="sda1" ino=15767 res=1 12:32:39 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) [ 160.188196] FAT-fs (loop0): bogus number of reserved sectors [ 160.212432] FAT-fs (loop0): This looks like a DOS 1.x volume; assuming default BPB values 12:32:39 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) [ 160.266312] block nbd1: Receive control failed (result -107) [ 160.285202] block nbd1: shutting down sockets [ 160.347442] audit: type=1804 audit(1595853159.697:30): pid=8702 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir163434630/syzkaller.YDGA88/22/cgroup.controllers" dev="sda1" ino=15829 res=1 12:32:39 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x2) 12:32:39 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000200)={'ipvlan1\x00', {0x2, 0x0, @rand_addr=0x64010102}}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) 12:32:39 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) [ 160.391090] FAT-fs (loop2): bogus number of reserved sectors [ 160.446317] FAT-fs (loop2): This looks like a DOS 1.x volume; assuming default BPB values [ 160.482805] block nbd1: shutting down sockets [ 160.513557] block nbd1: shutting down sockets [ 160.702936] audit: type=1804 audit(1595853160.057:31): pid=8718 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir102465536/syzkaller.yBaZLD/20/cgroup.controllers" dev="sda1" ino=15768 res=1 [ 160.712443] FAT-fs (loop0): bogus number of reserved sectors [ 160.734255] FAT-fs (loop0): This looks like a DOS 1.x volume; assuming default BPB values 12:32:40 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000340)='./file0\x00') truncate(&(0x7f0000000100)='./file0\x00', 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x262040, 0x0) 12:32:40 executing program 3: r0 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 12:32:40 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 12:32:40 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x301) 12:32:40 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket(0x11, 0xa, 0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) 12:32:40 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000200)={'ipvlan1\x00', {0x2, 0x0, @rand_addr=0x64010102}}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) 12:32:40 executing program 3: r0 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) [ 160.882735] block nbd1: shutting down sockets [ 160.915008] block nbd1: shutting down sockets 12:32:40 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x125d) 12:32:40 executing program 3: r0 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 12:32:40 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) [ 161.109674] audit: type=1804 audit(1595853160.467:32): pid=8749 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir102465536/syzkaller.yBaZLD/21/cgroup.controllers" dev="sda1" ino=15793 res=1 [ 161.194159] FAT-fs (loop0): bogus number of reserved sectors [ 161.195653] FAT-fs (loop2): Unrecognized mount option "cgroup.controllers" or missing value [ 161.207301] FAT-fs (loop0): This looks like a DOS 1.x volume; assuming default BPB values [ 161.300152] block nbd1: shutting down sockets 12:32:40 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 12:32:40 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 12:32:40 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x262040, 0x0) 12:32:40 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x125e) [ 161.333010] audit: type=1804 audit(1595853160.497:33): pid=8748 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir163434630/syzkaller.YDGA88/23/cgroup.controllers" dev="sda1" ino=15863 res=1 12:32:40 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000200)={'ipvlan1\x00', {0x2, 0x0, @rand_addr=0x64010102}}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) [ 161.378882] audit: type=1804 audit(1595853160.497:34): pid=8746 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir163434630/syzkaller.YDGA88/23/cgroup.controllers" dev="sda1" ino=15863 res=1 [ 161.469249] block nbd1: shutting down sockets 12:32:40 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 12:32:40 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket(0x11, 0xa, 0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) [ 161.496217] block nbd1: shutting down sockets 12:32:40 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 12:32:40 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x125f) 12:32:41 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) [ 161.588719] audit: type=1800 audit(1595853160.497:35): pid=8748 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="cgroup.controllers" dev="sda1" ino=15863 res=0 12:32:41 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) [ 161.691617] block nbd1: shutting down sockets [ 161.740403] block nbd1: shutting down sockets [ 161.759159] audit: type=1804 audit(1595853161.117:36): pid=8797 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir102465536/syzkaller.yBaZLD/22/cgroup.controllers" dev="sda1" ino=15873 res=1 [ 161.783203] FAT-fs (loop0): Unrecognized mount option "cgroup.controllers" or missing value [ 161.806325] FAT-fs (loop2): bogus number of reserved sectors [ 161.826690] FAT-fs (loop2): This looks like a DOS 1.x volume; assuming default BPB values 12:32:41 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x1260) 12:32:41 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x0, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 12:32:41 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) [ 161.939988] audit: type=1804 audit(1595853161.147:37): pid=8794 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir163434630/syzkaller.YDGA88/24/cgroup.controllers" dev="sda1" ino=15874 res=1 12:32:41 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x262040, 0x0) 12:32:41 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x1261) 12:32:41 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) r1 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'ipvlan1\x00', {0x2, 0x0, @rand_addr=0x64010102}}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) 12:32:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000200)={'ipvlan1\x00', {0x2, 0x0, @rand_addr=0x64010102}}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) 12:32:41 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 12:32:41 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x0, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) [ 162.230626] block nbd1: shutting down sockets [ 162.250277] block nbd1: shutting down sockets 12:32:41 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 12:32:41 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x1262) 12:32:41 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x0, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) [ 162.575527] audit: type=1804 audit(1595853161.927:38): pid=8848 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir163434630/syzkaller.YDGA88/25/cgroup.controllers" dev="sda1" ino=15867 res=1 12:32:42 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x262040, 0x0) 12:32:42 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) [ 162.628065] block nbd1: shutting down sockets [ 162.645397] block nbd1: shutting down sockets 12:32:42 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x1263) 12:32:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) r1 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'ipvlan1\x00', {0x2, 0x0, @rand_addr=0x64010102}}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) 12:32:42 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 12:32:42 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 12:32:42 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000200)={'ipvlan1\x00', {0x2, 0x0, @rand_addr=0x64010102}}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) [ 162.794860] block nbd1: shutting down sockets [ 162.811891] block nbd1: shutting down sockets 12:32:42 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x1264) 12:32:42 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 12:32:42 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000340)='./file0\x00') creat(&(0x7f00000002c0)='./file0\x00', 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x262040, 0x0) 12:32:42 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) [ 163.121342] FAT-fs (loop0): bogus number of reserved sectors [ 163.135721] FAT-fs (loop0): This looks like a DOS 1.x volume; assuming default BPB values 12:32:42 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) [ 163.162989] block nbd1: shutting down sockets [ 163.168092] audit: type=1804 audit(1595853162.517:39): pid=8895 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir163434630/syzkaller.YDGA88/26/cgroup.controllers" dev="sda1" ino=15877 res=1 [ 163.177046] FAT-fs (loop2): bogus number of reserved sectors [ 163.195324] block nbd1: shutting down sockets 12:32:42 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x1265) 12:32:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) r1 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'ipvlan1\x00', {0x2, 0x0, @rand_addr=0x64010102}}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) 12:32:42 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 12:32:42 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) [ 163.340050] FAT-fs (loop2): This looks like a DOS 1.x volume; assuming default BPB values [ 163.415160] block nbd1: shutting down sockets [ 163.441392] block nbd1: shutting down sockets 12:32:42 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) r1 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'ipvlan1\x00', {0x2, 0x0, @rand_addr=0x64010102}}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) 12:32:42 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) 12:32:42 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x1267) [ 163.636554] block nbd1: shutting down sockets 12:32:43 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) [ 163.659375] block nbd1: shutting down sockets 12:32:43 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) 12:32:43 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000340)='./file0\x00') creat(&(0x7f00000002c0)='./file0\x00', 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x262040, 0x0) 12:32:43 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x1268) 12:32:43 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 12:32:43 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) 12:32:43 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r0 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000200)={'ipvlan1\x00', {0x2, 0x0, @rand_addr=0x64010102}}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) [ 163.926806] FAT-fs (loop2): bogus number of reserved sectors [ 163.950786] block nbd1: shutting down sockets [ 163.961544] FAT-fs (loop2): This looks like a DOS 1.x volume; assuming default BPB values 12:32:43 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) [ 163.980579] block nbd1: shutting down sockets 12:32:43 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x1269) [ 164.213126] audit: type=1804 audit(1595853163.567:40): pid=8973 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir102465536/syzkaller.yBaZLD/26/cgroup.controllers" dev="sda1" ino=15868 res=1 [ 164.359420] block nbd1: shutting down sockets [ 164.369580] FAT-fs (loop0): Unrecognized mount option "cgroup.controllers" or missing value [ 164.385878] block nbd1: shutting down sockets 12:32:43 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) r1 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'ipvlan1\x00', {0x2, 0x0, @rand_addr=0x64010102}}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) 12:32:43 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) 12:32:43 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) 12:32:43 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000340)='./file0\x00') creat(&(0x7f00000002c0)='./file0\x00', 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x262040, 0x0) [ 164.397529] audit: type=1800 audit(1595853163.567:41): pid=8973 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="cgroup.controllers" dev="sda1" ino=15868 res=0 12:32:43 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x1274) 12:32:43 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) [ 164.454180] audit: type=1804 audit(1595853163.567:42): pid=8971 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir102465536/syzkaller.yBaZLD/26/cgroup.controllers" dev="sda1" ino=15868 res=1 12:32:43 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) 12:32:43 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r0 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000200)={'ipvlan1\x00', {0x2, 0x0, @rand_addr=0x64010102}}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) 12:32:43 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) [ 164.599052] block nbd1: shutting down sockets [ 164.647726] block nbd1: shutting down sockets 12:32:44 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x1276) 12:32:44 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) 12:32:44 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) [ 164.822914] FAT-fs (loop0): Unrecognized mount option "cgroup.controllers" or missing value [ 164.873670] block nbd1: shutting down sockets [ 164.892246] block nbd3: shutting down sockets [ 164.901522] block nbd1: shutting down sockets 12:32:44 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) r1 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'ipvlan1\x00', {0x2, 0x0, @rand_addr=0x64010102}}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) 12:32:44 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x1277) 12:32:44 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) [ 165.083595] block nbd3: shutting down sockets [ 165.111867] block nbd1: shutting down sockets [ 165.138753] block nbd1: shutting down sockets 12:32:44 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r0 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000200)={'ipvlan1\x00', {0x2, 0x0, @rand_addr=0x64010102}}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) 12:32:44 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r0 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000200)={'ipvlan1\x00', {0x2, 0x0, @rand_addr=0x64010102}}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) 12:32:44 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 12:32:44 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000340)='./file0\x00') creat(&(0x7f00000002c0)='./file0\x00', 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x262040, 0x0) 12:32:44 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x1278) [ 165.263204] block nbd3: shutting down sockets [ 165.289567] block nbd1: shutting down sockets [ 165.301545] block nbd1: shutting down sockets [ 165.320484] FAT-fs (loop2): bogus number of reserved sectors [ 165.342114] FAT-fs (loop2): This looks like a DOS 1.x volume; assuming default BPB values 12:32:44 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x1279) 12:32:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r0 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000200)={'ipvlan1\x00', {0x2, 0x0, @rand_addr=0x64010102}}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) [ 165.601641] FAT-fs (loop0): Unrecognized mount option "cgroup.controllers" or missing value 12:32:45 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000340)='./file0\x00') creat(&(0x7f00000002c0)='./file0\x00', 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x262040, 0x0) 12:32:45 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000340)='./file0\x00') creat(&(0x7f00000002c0)='./file0\x00', 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x262040, 0x0) 12:32:45 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x127a) [ 165.728924] block nbd1: shutting down sockets [ 165.748900] block nbd1: shutting down sockets 12:32:45 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e27b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r0 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000200)={'ipvlan1\x00', {0x2, 0x0, @rand_addr=0x64010102}}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) [ 165.948416] block nbd1: shutting down sockets [ 165.961288] block nbd1: shutting down sockets 12:32:45 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x127b) 12:32:45 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r0 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000200)={'ipvlan1\x00', {0x2, 0x0, @rand_addr=0x64010102}}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) 12:32:45 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 12:32:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) r1 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'ipvlan1\x00', {0x2, 0x0, @rand_addr=0x64010102}}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) [ 166.384787] block nbd1: shutting down sockets 12:32:45 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) [ 166.418983] block nbd1: shutting down sockets 12:32:45 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x127c) [ 166.519049] kauditd_printk_skb: 4 callbacks suppressed [ 166.519065] audit: type=1804 audit(1595853165.877:47): pid=9117 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir407409902/syzkaller.pQtJvi/64/cgroup.controllers" dev="sda1" ino=15866 res=1 12:32:45 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e27b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r0 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000200)={'ipvlan1\x00', {0x2, 0x0, @rand_addr=0x64010102}}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) [ 166.588016] FAT-fs (loop5): bogus number of reserved sectors [ 166.606992] FAT-fs (loop5): This looks like a DOS 1.x volume; assuming default BPB values [ 166.666542] block nbd1: shutting down sockets 12:32:46 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000340)='./file0\x00') creat(&(0x7f00000002c0)='./file0\x00', 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x262040, 0x0) [ 166.709940] block nbd1: shutting down sockets 12:32:46 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000200)={'ipvlan1\x00', {0x2, 0x0, @rand_addr=0x64010102}}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) 12:32:46 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x127d) 12:32:46 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000340)='./file0\x00') creat(&(0x7f00000002c0)='./file0\x00', 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x262040, 0x0) 12:32:46 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000340)='./file0\x00') creat(&(0x7f00000002c0)='./file0\x00', 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x262040, 0x0) [ 167.004693] audit: type=1804 audit(1595853166.357:48): pid=9151 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir163434630/syzkaller.YDGA88/33/cgroup.controllers" dev="sda1" ino=15868 res=1 [ 167.031070] NOHZ: local_softirq_pending 08 [ 167.169390] block nbd1: shutting down sockets [ 167.184517] block nbd1: shutting down sockets 12:32:46 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000340)='./file0\x00') creat(&(0x7f00000002c0)='./file0\x00', 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x262040, 0x0) 12:32:46 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x127e) 12:32:46 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000200)={'ipvlan1\x00', {0x2, 0x0, @rand_addr=0x64010102}}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) 12:32:46 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e27b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r0 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000200)={'ipvlan1\x00', {0x2, 0x0, @rand_addr=0x64010102}}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) [ 167.581631] block nbd1: shutting down sockets 12:32:47 executing program 5 (fault-call:3 fault-nth:0): r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 12:32:47 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x127f) 12:32:47 executing program 3 (fault-call:5 fault-nth:0): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) [ 167.780205] FAULT_INJECTION: forcing a failure. [ 167.780205] name failslab, interval 1, probability 0, space 0, times 0 [ 167.793104] audit: type=1804 audit(1595853167.147:49): pid=9191 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir163434630/syzkaller.YDGA88/34/cgroup.controllers" dev="sda1" ino=15871 res=1 [ 167.829892] block nbd1: shutting down sockets [ 167.841650] FAT-fs (loop2): Unrecognized mount option "cgroup.controllers" or missing value [ 167.864701] block nbd1: shutting down sockets [ 167.889325] FAT-fs (loop0): bogus number of reserved sectors [ 167.899218] FAULT_INJECTION: forcing a failure. [ 167.899218] name failslab, interval 1, probability 0, space 0, times 0 [ 167.906821] CPU: 0 PID: 9190 Comm: syz-executor.5 Not tainted 4.19.134-syzkaller #0 [ 167.911640] FAT-fs (loop0): This looks like a DOS 1.x volume; assuming default BPB values [ 167.918460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 167.918466] Call Trace: [ 167.918490] dump_stack+0x1fc/0x2fe [ 167.918510] should_fail.cold+0xa/0x14 [ 167.918529] ? setup_fault_attr+0x200/0x200 [ 167.918544] ? lock_acquire+0x170/0x3c0 [ 167.918566] __should_failslab+0x115/0x180 [ 167.918582] should_failslab+0x5/0xf [ 167.918595] __kmalloc+0x2ab/0x3c0 [ 167.918608] ? __alloc_workqueue_key+0x789/0xed0 [ 167.918621] ? lock_acquire+0x170/0x3c0 [ 167.918636] __alloc_workqueue_key+0x789/0xed0 [ 167.918658] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 167.918673] ? deref_stack_reg+0x134/0x1d0 [ 167.918691] ? nbd_ioctl+0x151/0xbe0 [ 167.918706] ? __mutex_add_waiter+0x160/0x160 [ 167.918728] ? avc_has_extended_perms+0x6f3/0xea0 [ 167.918746] nbd_start_device+0x183/0xd50 [ 167.918761] ? security_capable+0x8f/0xc0 [ 167.918782] nbd_ioctl+0x62a/0xbe0 [ 167.918803] ? nbd_disconnect_and_put+0x270/0x270 [ 167.918821] ? avc_ss_reset+0x170/0x170 [ 167.918838] ? __lock_acquire+0x6de/0x3ff0 [ 167.918856] ? nbd_disconnect_and_put+0x270/0x270 [ 167.918872] blkdev_ioctl+0x5cb/0x1a7e [ 167.918884] ? blkpg_ioctl+0x9d0/0x9d0 [ 167.918897] ? get_pid_task+0xf4/0x190 [ 167.918913] ? mark_held_locks+0xf0/0xf0 [ 167.918927] ? proc_fail_nth_write+0x95/0x1d0 [ 167.918942] ? proc_tgid_io_accounting+0x7f0/0x7f0 [ 167.918973] block_ioctl+0xe9/0x130 [ 167.918987] ? blkdev_fallocate+0x3f0/0x3f0 [ 167.919014] do_vfs_ioctl+0xcdb/0x12e0 [ 167.919033] ? selinux_file_ioctl+0x506/0x6c0 [ 167.919049] ? ioctl_preallocate+0x200/0x200 [ 167.919064] ? selinux_inode_link+0x20/0x20 [ 167.919082] ? __fget+0x356/0x510 [ 167.919101] ? do_dup2+0x450/0x450 [ 167.919115] ? vfs_write+0x393/0x540 [ 167.919140] ksys_ioctl+0x9b/0xc0 [ 167.919159] __x64_sys_ioctl+0x6f/0xb0 [ 167.919173] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 167.919189] do_syscall_64+0xf9/0x620 [ 167.919209] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 167.919221] RIP: 0033:0x45c369 [ 167.919235] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 167.919244] RSP: 002b:00007f9ab783dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 167.919257] RAX: ffffffffffffffda RBX: 0000000000011bc0 RCX: 000000000045c369 [ 167.919265] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 167.919273] RBP: 00007f9ab783dca0 R08: 0000000000000000 R09: 0000000000000000 [ 167.919282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 167.919291] R13: 00007ffc12bf740f R14: 00007f9ab783e9c0 R15: 000000000078bf0c [ 167.970457] CPU: 0 PID: 9200 Comm: syz-executor.3 Not tainted 4.19.134-syzkaller #0 [ 168.189030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 168.198388] Call Trace: [ 168.200996] dump_stack+0x1fc/0x2fe [ 168.204649] should_fail.cold+0xa/0x14 [ 168.208558] ? setup_fault_attr+0x200/0x200 [ 168.212906] ? lock_acquire+0x170/0x3c0 [ 168.216904] __should_failslab+0x115/0x180 [ 168.221165] should_failslab+0x5/0xf [ 168.224890] kmem_cache_alloc_trace+0x284/0x380 [ 168.229565] ? mark_held_locks+0xf0/0xf0 [ 168.233640] tcp_sendmsg_locked+0x26f5/0x2f60 [ 168.238143] ? __fget+0x32f/0x510 [ 168.241613] ? tcp_sendpage+0xd0/0xd0 [ 168.245429] ? mark_held_locks+0xa6/0xf0 [ 168.249498] ? __local_bh_enable_ip+0x159/0x270 [ 168.254180] tcp_sendmsg+0x2b/0x40 [ 168.257729] inet_sendmsg+0x132/0x5a0 [ 168.261534] ? security_socket_sendmsg+0x83/0xb0 [ 168.266294] ? inet_recvmsg+0x5c0/0x5c0 [ 168.270273] sock_sendmsg+0xc3/0x120 [ 168.273991] __sys_sendto+0x21a/0x320 [ 168.277799] ? __ia32_sys_getpeername+0xb0/0xb0 [ 168.282490] ? lock_downgrade+0x720/0x720 [ 168.286657] ? vfs_write+0x3d7/0x540 [ 168.290392] ? check_preemption_disabled+0x41/0x280 [ 168.295429] ? vfs_write+0x393/0x540 [ 168.299154] ? fput+0x2b/0x190 [ 168.302363] ? ksys_write+0x1c8/0x2a0 [ 168.306198] ? __ia32_sys_read+0xb0/0xb0 [ 168.310272] ? posix_timer_fn+0x3d0/0x3d0 [ 168.314439] __x64_sys_sendto+0xdd/0x1b0 [ 168.318521] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 168.323122] do_syscall_64+0xf9/0x620 [ 168.326948] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 168.332152] RIP: 0033:0x45c369 [ 168.335369] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 168.354291] RSP: 002b:00007fb1c0813c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 168.362013] RAX: ffffffffffffffda RBX: 000000000002ba00 RCX: 000000000045c369 [ 168.369287] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 168.376597] RBP: 00007fb1c0813ca0 R08: 0000000020000040 R09: 0000000000000010 [ 168.383881] R10: 00000000200007fd R11: 0000000000000246 R12: 0000000000000000 12:32:47 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x4b47) [ 168.391158] R13: 00007ffccb46d86f R14: 00007fb1c08149c0 R15: 000000000078bf0c 12:32:47 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000340)='./file0\x00') creat(&(0x7f00000002c0)='./file0\x00', 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x262040, 0x0) [ 168.455114] block nbd5: Could not allocate knbd recv work queue. [ 168.487021] block nbd1: shutting down sockets 12:32:47 executing program 0: syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'ipvlan1\x00', {0x2, 0x0, @rand_addr=0x64010102}}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) [ 168.523014] block nbd5: shutting down sockets [ 168.525379] block nbd1: shutting down sockets 12:32:47 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x4b49) 12:32:47 executing program 5 (fault-call:3 fault-nth:1): r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) [ 168.658376] block nbd1: shutting down sockets [ 168.663282] FAULT_INJECTION: forcing a failure. [ 168.663282] name failslab, interval 1, probability 0, space 0, times 0 [ 168.686823] block nbd1: shutting down sockets [ 168.691581] CPU: 0 PID: 9217 Comm: syz-executor.5 Not tainted 4.19.134-syzkaller #0 [ 168.691591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 168.691597] Call Trace: [ 168.691618] dump_stack+0x1fc/0x2fe [ 168.691647] should_fail.cold+0xa/0x14 [ 168.718916] ? setup_fault_attr+0x200/0x200 [ 168.723259] ? lock_acquire+0x170/0x3c0 [ 168.727261] __should_failslab+0x115/0x180 [ 168.731520] should_failslab+0x5/0xf [ 168.735251] kmem_cache_alloc_trace+0x284/0x380 [ 168.739946] __alloc_workqueue_key+0x7de/0xed0 [ 168.744564] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 168.749601] ? deref_stack_reg+0x134/0x1d0 [ 168.753851] ? nbd_ioctl+0x151/0xbe0 [ 168.757584] ? __mutex_add_waiter+0x160/0x160 [ 168.762101] ? avc_has_extended_perms+0x6f3/0xea0 [ 168.766975] nbd_start_device+0x183/0xd50 [ 168.771150] ? security_capable+0x8f/0xc0 [ 168.775327] nbd_ioctl+0x62a/0xbe0 [ 168.778892] ? nbd_disconnect_and_put+0x270/0x270 [ 168.783758] ? avc_ss_reset+0x170/0x170 [ 168.787750] ? __lock_acquire+0x6de/0x3ff0 [ 168.792005] ? nbd_disconnect_and_put+0x270/0x270 [ 168.796867] blkdev_ioctl+0x5cb/0x1a7e [ 168.800768] ? blkpg_ioctl+0x9d0/0x9d0 [ 168.804667] ? get_pid_task+0xf4/0x190 [ 168.808570] ? mark_held_locks+0xf0/0xf0 [ 168.812645] ? proc_fail_nth_write+0x95/0x1d0 [ 168.817154] ? proc_tgid_io_accounting+0x7f0/0x7f0 [ 168.822115] block_ioctl+0xe9/0x130 [ 168.825756] ? blkdev_fallocate+0x3f0/0x3f0 [ 168.830092] do_vfs_ioctl+0xcdb/0x12e0 [ 168.833998] ? selinux_file_ioctl+0x506/0x6c0 [ 168.838513] ? ioctl_preallocate+0x200/0x200 [ 168.842936] ? selinux_inode_link+0x20/0x20 [ 168.847275] ? __fget+0x356/0x510 [ 168.850743] ? do_dup2+0x450/0x450 [ 168.854298] ? vfs_write+0x393/0x540 [ 168.858048] ksys_ioctl+0x9b/0xc0 [ 168.861523] __x64_sys_ioctl+0x6f/0xb0 [ 168.865429] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 168.870033] do_syscall_64+0xf9/0x620 [ 168.873856] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 168.879057] RIP: 0033:0x45c369 [ 168.882262] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 168.901180] RSP: 002b:00007f9ab783dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 12:32:48 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 12:32:48 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000200)={'ipvlan1\x00', {0x2, 0x0, @rand_addr=0x64010102}}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) [ 168.908919] RAX: ffffffffffffffda RBX: 0000000000011bc0 RCX: 000000000045c369 [ 168.916205] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 168.923495] RBP: 00007f9ab783dca0 R08: 0000000000000000 R09: 0000000000000000 [ 168.931038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.938326] R13: 00007ffc12bf740f R14: 00007f9ab783e9c0 R15: 000000000078bf0c 12:32:48 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x541b) [ 169.022783] FAT-fs (loop0): bogus number of reserved sectors [ 169.030312] audit: type=1804 audit(1595853168.387:50): pid=9223 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir102465536/syzkaller.yBaZLD/32/cgroup.controllers" dev="sda1" ino=15822 res=1 [ 169.109213] FAT-fs (loop0): This looks like a DOS 1.x volume; assuming default BPB values [ 169.144349] block nbd1: shutting down sockets [ 169.168605] block nbd1: shutting down sockets 12:32:48 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x2, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 12:32:48 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000340)='./file0\x00') creat(&(0x7f00000002c0)='./file0\x00', 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x262040, 0x0) [ 169.259754] audit: type=1804 audit(1595853168.617:51): pid=9236 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir163434630/syzkaller.YDGA88/35/cgroup.controllers" dev="sda1" ino=15759 res=1 12:32:48 executing program 0: syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'ipvlan1\x00', {0x2, 0x0, @rand_addr=0x64010102}}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) 12:32:48 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x5421) 12:32:48 executing program 5 (fault-call:3 fault-nth:2): r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) [ 169.307518] FAT-fs (loop2): bogus number of reserved sectors [ 169.313488] block nbd5: Could not allocate knbd recv work queue. [ 169.329751] block nbd5: shutting down sockets 12:32:48 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x3, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) [ 169.382590] FAT-fs (loop2): This looks like a DOS 1.x volume; assuming default BPB values [ 169.389290] block nbd1: shutting down sockets [ 169.397022] block nbd1: shutting down sockets 12:32:48 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x5450) [ 169.504816] FAULT_INJECTION: forcing a failure. [ 169.504816] name failslab, interval 1, probability 0, space 0, times 0 [ 169.529436] FAT-fs (loop0): bogus number of reserved sectors [ 169.547638] block nbd1: shutting down sockets [ 169.555002] CPU: 0 PID: 9253 Comm: syz-executor.5 Not tainted 4.19.134-syzkaller #0 [ 169.562846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 169.567414] FAT-fs (loop0): This looks like a DOS 1.x volume; assuming default BPB values [ 169.572211] Call Trace: [ 169.572282] dump_stack+0x1fc/0x2fe [ 169.572304] should_fail.cold+0xa/0x14 [ 169.572322] ? setup_fault_attr+0x200/0x200 [ 169.572339] ? lock_acquire+0x170/0x3c0 [ 169.572361] __should_failslab+0x115/0x180 [ 169.572379] should_failslab+0x5/0xf [ 169.572397] __kmalloc+0x2ab/0x3c0 [ 169.586033] block nbd1: shutting down sockets [ 169.586926] ? apply_wqattrs_prepare+0xf7/0xa50 [ 169.586952] apply_wqattrs_prepare+0xf7/0xa50 [ 169.586977] apply_workqueue_attrs_locked+0xc5/0x120 [ 169.586996] __alloc_workqueue_key+0x9c4/0xed0 [ 169.634003] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 169.639044] ? nbd_ioctl+0x151/0xbe0 [ 169.642777] ? __mutex_add_waiter+0x160/0x160 [ 169.647298] ? avc_has_extended_perms+0x6f3/0xea0 [ 169.652167] nbd_start_device+0x183/0xd50 [ 169.656332] ? security_capable+0x8f/0xc0 [ 169.660501] nbd_ioctl+0x62a/0xbe0 [ 169.664059] ? nbd_disconnect_and_put+0x270/0x270 [ 169.668921] ? avc_ss_reset+0x170/0x170 [ 169.672925] ? __lock_acquire+0x6de/0x3ff0 [ 169.677191] ? nbd_disconnect_and_put+0x270/0x270 [ 169.682053] blkdev_ioctl+0x5cb/0x1a7e [ 169.685970] ? blkpg_ioctl+0x9d0/0x9d0 [ 169.689880] ? get_pid_task+0xf4/0x190 [ 169.693191] block nbd1: shutting down sockets [ 169.693788] ? mark_held_locks+0xf0/0xf0 [ 169.693803] ? proc_fail_nth_write+0x95/0x1d0 [ 169.693818] ? proc_tgid_io_accounting+0x7f0/0x7f0 [ 169.693847] block_ioctl+0xe9/0x130 [ 169.693865] ? blkdev_fallocate+0x3f0/0x3f0 [ 169.702611] block nbd1: shutting down sockets [ 169.706925] do_vfs_ioctl+0xcdb/0x12e0 [ 169.706950] ? selinux_file_ioctl+0x506/0x6c0 [ 169.706967] ? ioctl_preallocate+0x200/0x200 [ 169.706983] ? selinux_inode_link+0x20/0x20 [ 169.707000] ? __fget+0x356/0x510 [ 169.707017] ? do_dup2+0x450/0x450 [ 169.748494] ? vfs_write+0x393/0x540 [ 169.752235] ksys_ioctl+0x9b/0xc0 12:32:48 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x4, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 12:32:49 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x5451) 12:32:49 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) [ 169.755713] __x64_sys_ioctl+0x6f/0xb0 [ 169.759628] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 169.764235] do_syscall_64+0xf9/0x620 [ 169.768053] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 169.773255] RIP: 0033:0x45c369 [ 169.776462] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 169.795378] RSP: 002b:00007f9ab783dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 12:32:49 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x5452) 12:32:49 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x6, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 12:32:49 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000200)={'ipvlan1\x00', {0x2, 0x0, @rand_addr=0x64010102}}) [ 169.803106] RAX: ffffffffffffffda RBX: 0000000000011bc0 RCX: 000000000045c369 [ 169.810394] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 169.817707] RBP: 00007f9ab783dca0 R08: 0000000000000000 R09: 0000000000000000 [ 169.824997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 169.832286] R13: 00007ffc12bf740f R14: 00007f9ab783e9c0 R15: 000000000078bf0c [ 169.847054] block nbd5: Could not allocate knbd recv work queue. [ 169.856453] block nbd5: shutting down sockets [ 169.899356] block nbd1: shutting down sockets [ 169.904989] block nbd1: shutting down sockets [ 170.027104] FAT-fs (loop2): bogus number of reserved sectors [ 170.039894] FAT-fs (loop2): This looks like a DOS 1.x volume; assuming default BPB values [ 170.072978] audit: type=1804 audit(1595853169.427:52): pid=9288 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir163434630/syzkaller.YDGA88/36/cgroup.controllers" dev="sda1" ino=15831 res=1 12:32:49 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000340)='./file0\x00') creat(&(0x7f00000002c0)='./file0\x00', 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x262040, 0x0) 12:32:49 executing program 5 (fault-call:3 fault-nth:3): r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 12:32:49 executing program 0: syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'ipvlan1\x00', {0x2, 0x0, @rand_addr=0x64010102}}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) 12:32:49 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x5460) 12:32:49 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 12:32:49 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000200)={'ipvlan1\x00', {0x2, 0x0, @rand_addr=0x64010102}}) [ 170.233666] block nbd1: shutting down sockets [ 170.234894] FAULT_INJECTION: forcing a failure. [ 170.234894] name failslab, interval 1, probability 0, space 0, times 0 [ 170.246443] block nbd1: shutting down sockets [ 170.262732] CPU: 1 PID: 9297 Comm: syz-executor.5 Not tainted 4.19.134-syzkaller #0 [ 170.270571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 170.279940] Call Trace: [ 170.282542] dump_stack+0x1fc/0x2fe [ 170.286328] should_fail.cold+0xa/0x14 [ 170.290258] ? setup_fault_attr+0x200/0x200 [ 170.294599] ? lock_acquire+0x170/0x3c0 [ 170.298594] __should_failslab+0x115/0x180 [ 170.302864] should_failslab+0x5/0xf [ 170.306597] kmem_cache_alloc_trace+0x284/0x380 [ 170.311291] apply_wqattrs_prepare+0x137/0xa50 [ 170.315915] apply_workqueue_attrs_locked+0xc5/0x120 [ 170.321040] __alloc_workqueue_key+0x9c4/0xed0 [ 170.325651] ? workqueue_sysfs_register+0x3e0/0x3e0 12:32:49 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x8, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) [ 170.330690] ? nbd_ioctl+0x151/0xbe0 [ 170.334420] ? __mutex_add_waiter+0x160/0x160 [ 170.338941] ? avc_has_extended_perms+0x6f3/0xea0 [ 170.343807] nbd_start_device+0x183/0xd50 [ 170.347976] ? security_capable+0x8f/0xc0 [ 170.352156] nbd_ioctl+0x62a/0xbe0 [ 170.355716] ? nbd_disconnect_and_put+0x270/0x270 [ 170.360584] ? avc_ss_reset+0x170/0x170 [ 170.364587] ? __lock_acquire+0x6de/0x3ff0 [ 170.368843] ? nbd_disconnect_and_put+0x270/0x270 [ 170.373705] blkdev_ioctl+0x5cb/0x1a7e [ 170.377601] ? blkpg_ioctl+0x9d0/0x9d0 [ 170.381511] ? get_pid_task+0xf4/0x190 [ 170.385421] ? mark_held_locks+0xf0/0xf0 [ 170.389500] ? proc_fail_nth_write+0x95/0x1d0 [ 170.394016] ? proc_tgid_io_accounting+0x7f0/0x7f0 [ 170.398977] block_ioctl+0xe9/0x130 [ 170.402624] ? blkdev_fallocate+0x3f0/0x3f0 [ 170.406968] do_vfs_ioctl+0xcdb/0x12e0 [ 170.410876] ? selinux_file_ioctl+0x506/0x6c0 [ 170.415399] ? ioctl_preallocate+0x200/0x200 [ 170.419834] ? selinux_inode_link+0x20/0x20 [ 170.424181] ? __fget+0x356/0x510 [ 170.427661] ? do_dup2+0x450/0x450 12:32:49 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xa, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) [ 170.431229] ? vfs_write+0x393/0x540 [ 170.434975] ksys_ioctl+0x9b/0xc0 [ 170.438460] __x64_sys_ioctl+0x6f/0xb0 [ 170.442364] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 170.446968] do_syscall_64+0xf9/0x620 [ 170.450799] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 170.456003] RIP: 0033:0x45c369 [ 170.459210] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 12:32:49 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab00) [ 170.478123] RSP: 002b:00007f9ab783dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 170.485848] RAX: ffffffffffffffda RBX: 0000000000011bc0 RCX: 000000000045c369 [ 170.493132] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 170.500423] RBP: 00007f9ab783dca0 R08: 0000000000000000 R09: 0000000000000000 [ 170.507709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 170.515006] R13: 00007ffc12bf740f R14: 00007f9ab783e9c0 R15: 000000000078bf0c [ 170.515077] FAT-fs (loop0): bogus number of reserved sectors [ 170.543775] audit: type=1804 audit(1595853169.897:53): pid=9316 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir102465536/syzkaller.yBaZLD/34/cgroup.controllers" dev="sda1" ino=15759 res=1 [ 170.548744] FAT-fs (loop0): This looks like a DOS 1.x volume; assuming default BPB values 12:32:50 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xe, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) [ 170.634032] block nbd1: shutting down sockets [ 170.679364] block nbd1: shutting down sockets 12:32:50 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab01) [ 170.732961] block nbd5: Could not allocate knbd recv work queue. [ 170.754389] audit: type=1804 audit(1595853169.947:54): pid=9317 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir163434630/syzkaller.YDGA88/37/cgroup.controllers" dev="sda1" ino=15881 res=1 12:32:50 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'ipvlan1\x00', {0x2, 0x0, @rand_addr=0x64010102}}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) [ 170.765337] block nbd1: shutting down sockets [ 170.794646] block nbd1: shutting down sockets [ 170.810104] block nbd5: shutting down sockets [ 170.918369] FAT-fs (loop0): bogus number of reserved sectors [ 170.924283] FAT-fs (loop0): This looks like a DOS 1.x volume; assuming default BPB values [ 170.962009] audit: type=1804 audit(1595853170.317:55): pid=9340 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir102465536/syzkaller.yBaZLD/35/cgroup.controllers" dev="sda1" ino=15822 res=1 12:32:50 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000340)='./file0\x00') creat(&(0x7f00000002c0)='./file0\x00', 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x262040, 0x0) 12:32:50 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab02) 12:32:50 executing program 5 (fault-call:3 fault-nth:4): r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 12:32:50 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000200)={'ipvlan1\x00', {0x2, 0x0, @rand_addr=0x64010102}}) 12:32:50 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x34, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 12:32:50 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'ipvlan1\x00', {0x2, 0x0, @rand_addr=0x64010102}}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) [ 171.106460] block nbd1: shutting down sockets [ 171.126737] block nbd1: shutting down sockets [ 171.132506] FAULT_INJECTION: forcing a failure. [ 171.132506] name failslab, interval 1, probability 0, space 0, times 0 [ 171.163020] CPU: 1 PID: 9355 Comm: syz-executor.5 Not tainted 4.19.134-syzkaller #0 [ 171.170866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 171.180409] Call Trace: [ 171.183023] dump_stack+0x1fc/0x2fe [ 171.186665] should_fail.cold+0xa/0x14 [ 171.190580] ? setup_fault_attr+0x200/0x200 [ 171.194949] ? lock_acquire+0x170/0x3c0 [ 171.198941] __should_failslab+0x115/0x180 [ 171.203194] should_failslab+0x5/0xf [ 171.206923] kmem_cache_alloc_trace+0x284/0x380 [ 171.211329] FAT-fs (loop2): bogus number of reserved sectors [ 171.211617] apply_wqattrs_prepare+0x1c4/0xa50 [ 171.211641] apply_workqueue_attrs_locked+0xc5/0x120 [ 171.211658] __alloc_workqueue_key+0x9c4/0xed0 [ 171.211697] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 171.211717] ? nbd_ioctl+0x151/0xbe0 [ 171.211733] ? __mutex_add_waiter+0x160/0x160 [ 171.211754] ? avc_has_extended_perms+0x6f3/0xea0 [ 171.220365] FAT-fs (loop2): This looks like a DOS 1.x volume; assuming default BPB values [ 171.222160] nbd_start_device+0x183/0xd50 [ 171.222179] ? security_capable+0x8f/0xc0 [ 171.222199] nbd_ioctl+0x62a/0xbe0 [ 171.222220] ? nbd_disconnect_and_put+0x270/0x270 [ 171.222242] ? avc_ss_reset+0x170/0x170 [ 171.278921] ? __lock_acquire+0x6de/0x3ff0 [ 171.283181] ? nbd_disconnect_and_put+0x270/0x270 [ 171.288057] blkdev_ioctl+0x5cb/0x1a7e [ 171.291963] ? blkpg_ioctl+0x9d0/0x9d0 [ 171.295866] ? get_pid_task+0xf4/0x190 [ 171.299772] ? mark_held_locks+0xf0/0xf0 [ 171.303842] ? proc_fail_nth_write+0x95/0x1d0 [ 171.308958] ? proc_tgid_io_accounting+0x7f0/0x7f0 [ 171.313917] block_ioctl+0xe9/0x130 [ 171.317562] ? blkdev_fallocate+0x3f0/0x3f0 [ 171.318769] audit: type=1804 audit(1595853170.577:56): pid=9364 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir163434630/syzkaller.YDGA88/38/cgroup.controllers" dev="sda1" ino=15820 res=1 [ 171.321908] do_vfs_ioctl+0xcdb/0x12e0 [ 171.321927] ? selinux_file_ioctl+0x506/0x6c0 [ 171.321945] ? ioctl_preallocate+0x200/0x200 [ 171.359555] ? selinux_inode_link+0x20/0x20 [ 171.363901] ? __fget+0x356/0x510 [ 171.367377] ? do_dup2+0x450/0x450 [ 171.370936] ? vfs_write+0x393/0x540 [ 171.374681] ksys_ioctl+0x9b/0xc0 [ 171.378152] __x64_sys_ioctl+0x6f/0xb0 [ 171.382059] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 171.386662] do_syscall_64+0xf9/0x620 [ 171.390484] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 171.395691] RIP: 0033:0x45c369 [ 171.398895] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 171.417811] RSP: 002b:00007f9ab783dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 12:32:50 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x3c, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 12:32:50 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) 12:32:50 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab04) [ 171.425538] RAX: ffffffffffffffda RBX: 0000000000011bc0 RCX: 000000000045c369 [ 171.432821] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 171.440100] RBP: 00007f9ab783dca0 R08: 0000000000000000 R09: 0000000000000000 [ 171.447387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 171.454670] R13: 00007ffc12bf740f R14: 00007f9ab783e9c0 R15: 000000000078bf0c [ 171.468640] block nbd5: Could not allocate knbd recv work queue. 12:32:50 executing program 5 (fault-call:3 fault-nth:5): r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) [ 171.477795] block nbd5: shutting down sockets [ 171.490469] FAT-fs (loop0): bogus number of reserved sectors [ 171.513023] FAT-fs (loop0): This looks like a DOS 1.x volume; assuming default BPB values [ 171.569250] audit: type=1804 audit(1595853170.927:57): pid=9370 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir102465536/syzkaller.yBaZLD/36/cgroup.controllers" dev="sda1" ino=15819 res=1 [ 171.588448] block nbd1: shutting down sockets 12:32:51 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x1f4, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 12:32:51 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'ipvlan1\x00', {0x2, 0x0, @rand_addr=0x64010102}}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) [ 171.643915] FAULT_INJECTION: forcing a failure. [ 171.643915] name failslab, interval 1, probability 0, space 0, times 0 [ 171.686663] CPU: 0 PID: 9387 Comm: syz-executor.5 Not tainted 4.19.134-syzkaller #0 [ 171.694512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 171.703880] Call Trace: [ 171.706489] dump_stack+0x1fc/0x2fe [ 171.710139] should_fail.cold+0xa/0x14 [ 171.714048] ? setup_fault_attr+0x200/0x200 [ 171.718407] ? lock_acquire+0x170/0x3c0 [ 171.722418] __should_failslab+0x115/0x180 [ 171.726679] should_failslab+0x5/0xf [ 171.730413] kmem_cache_alloc_node+0x245/0x3b0 [ 171.735018] alloc_unbound_pwq+0x499/0xc30 [ 171.739281] apply_wqattrs_prepare+0x3bd/0xa50 [ 171.743898] apply_workqueue_attrs_locked+0xc5/0x120 [ 171.749023] __alloc_workqueue_key+0x9c4/0xed0 [ 171.753633] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 171.758676] ? nbd_ioctl+0x151/0xbe0 [ 171.762414] ? __mutex_add_waiter+0x160/0x160 [ 171.766930] ? avc_has_extended_perms+0x6f3/0xea0 [ 171.771825] nbd_start_device+0x183/0xd50 [ 171.775989] ? security_capable+0x8f/0xc0 [ 171.780160] nbd_ioctl+0x62a/0xbe0 [ 171.783714] ? nbd_disconnect_and_put+0x270/0x270 [ 171.788571] ? avc_ss_reset+0x170/0x170 [ 171.792566] ? __lock_acquire+0x6de/0x3ff0 [ 171.796816] ? nbd_disconnect_and_put+0x270/0x270 [ 171.801679] blkdev_ioctl+0x5cb/0x1a7e [ 171.805585] ? blkpg_ioctl+0x9d0/0x9d0 [ 171.809491] ? get_pid_task+0xf4/0x190 [ 171.813396] ? mark_held_locks+0xf0/0xf0 [ 171.817472] ? proc_fail_nth_write+0x95/0x1d0 [ 171.821986] ? proc_tgid_io_accounting+0x7f0/0x7f0 [ 171.826949] block_ioctl+0xe9/0x130 [ 171.830597] ? blkdev_fallocate+0x3f0/0x3f0 [ 171.834944] do_vfs_ioctl+0xcdb/0x12e0 [ 171.838843] ? selinux_file_ioctl+0x506/0x6c0 [ 171.843340] ? ioctl_preallocate+0x200/0x200 [ 171.847797] ? selinux_inode_link+0x20/0x20 [ 171.852119] ? __fget+0x356/0x510 [ 171.855574] ? do_dup2+0x450/0x450 [ 171.859135] ? vfs_write+0x393/0x540 [ 171.862890] ksys_ioctl+0x9b/0xc0 [ 171.866362] __x64_sys_ioctl+0x6f/0xb0 [ 171.870250] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 171.874858] do_syscall_64+0xf9/0x620 [ 171.878659] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 171.883855] RIP: 0033:0x45c369 [ 171.887064] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 171.905977] RSP: 002b:00007f9ab783dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 171.913707] RAX: ffffffffffffffda RBX: 0000000000011bc0 RCX: 000000000045c369 [ 171.920990] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 171.928270] RBP: 00007f9ab783dca0 R08: 0000000000000000 R09: 0000000000000000 12:32:51 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab05) 12:32:51 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000340)='./file0\x00') creat(&(0x7f00000002c0)='./file0\x00', 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x262040, 0x0) [ 171.935533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 171.942796] R13: 00007ffc12bf740f R14: 00007f9ab783e9c0 R15: 000000000078bf0c [ 171.961816] block nbd5: Could not allocate knbd recv work queue. [ 171.972959] block nbd5: shutting down sockets 12:32:51 executing program 5 (fault-call:3 fault-nth:6): r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 12:32:51 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab06) [ 171.991141] audit: type=1804 audit(1595853171.037:58): pid=9392 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir163434630/syzkaller.YDGA88/39/cgroup.controllers" dev="sda1" ino=15887 res=1 [ 171.997998] block nbd1: shutting down sockets [ 172.022789] block nbd1: shutting down sockets [ 172.062260] FAT-fs (loop0): bogus number of reserved sectors [ 172.070221] FAT-fs (loop0): This looks like a DOS 1.x volume; assuming default BPB values [ 172.078571] FAT-fs (loop2): bogus number of reserved sectors [ 172.078881] FAT-fs (loop2): This looks like a DOS 1.x volume; assuming default BPB values [ 172.092501] audit: type=1804 audit(1595853171.447:59): pid=9403 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir102465536/syzkaller.yBaZLD/37/cgroup.controllers" dev="sda1" ino=15897 res=1 12:32:51 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x218, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 12:32:51 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'ipvlan1\x00', {0x2, 0x0, @rand_addr=0x64010102}}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) [ 172.151770] FAULT_INJECTION: forcing a failure. [ 172.151770] name failslab, interval 1, probability 0, space 0, times 0 [ 172.171199] block nbd1: shutting down sockets [ 172.198629] CPU: 0 PID: 9412 Comm: syz-executor.5 Not tainted 4.19.134-syzkaller #0 [ 172.206477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 172.215845] Call Trace: [ 172.218460] dump_stack+0x1fc/0x2fe [ 172.222114] should_fail.cold+0xa/0x14 [ 172.226025] ? setup_fault_attr+0x200/0x200 [ 172.230367] ? lock_acquire+0x170/0x3c0 [ 172.234376] __should_failslab+0x115/0x180 [ 172.238635] should_failslab+0x5/0xf [ 172.242375] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 172.247506] init_rescuer+0xa1/0x370 [ 172.251237] __alloc_workqueue_key+0xb56/0xed0 [ 172.255842] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 172.260878] ? nbd_ioctl+0x151/0xbe0 [ 172.264611] ? __mutex_add_waiter+0x160/0x160 [ 172.269132] ? avc_has_extended_perms+0x6f3/0xea0 [ 172.273998] nbd_start_device+0x183/0xd50 [ 172.278170] ? security_capable+0x8f/0xc0 [ 172.282455] nbd_ioctl+0x62a/0xbe0 [ 172.286022] ? nbd_disconnect_and_put+0x270/0x270 [ 172.290890] ? avc_ss_reset+0x170/0x170 [ 172.294901] ? __lock_acquire+0x6de/0x3ff0 [ 172.300292] ? nbd_disconnect_and_put+0x270/0x270 [ 172.305157] blkdev_ioctl+0x5cb/0x1a7e [ 172.309068] ? blkpg_ioctl+0x9d0/0x9d0 [ 172.312978] ? get_pid_task+0xf4/0x190 [ 172.316935] ? mark_held_locks+0xf0/0xf0 [ 172.321020] ? proc_fail_nth_write+0x95/0x1d0 [ 172.325544] ? proc_tgid_io_accounting+0x7f0/0x7f0 [ 172.330512] block_ioctl+0xe9/0x130 [ 172.334155] ? blkdev_fallocate+0x3f0/0x3f0 [ 172.338506] do_vfs_ioctl+0xcdb/0x12e0 [ 172.342420] ? selinux_file_ioctl+0x506/0x6c0 [ 172.346943] ? ioctl_preallocate+0x200/0x200 [ 172.351380] ? selinux_inode_link+0x20/0x20 [ 172.355733] ? __fget+0x356/0x510 [ 172.359210] ? do_dup2+0x450/0x450 [ 172.362767] ? vfs_write+0x393/0x540 [ 172.366507] ksys_ioctl+0x9b/0xc0 [ 172.369983] __x64_sys_ioctl+0x6f/0xb0 [ 172.373905] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 172.378512] do_syscall_64+0xf9/0x620 [ 172.382340] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 172.387547] RIP: 0033:0x45c369 [ 172.390755] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 172.410191] RSP: 002b:00007f9ab783dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 172.417920] RAX: ffffffffffffffda RBX: 0000000000011bc0 RCX: 000000000045c369 [ 172.425209] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 172.432510] RBP: 00007f9ab783dca0 R08: 0000000000000000 R09: 0000000000000000 [ 172.439795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 12:32:51 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x240, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 12:32:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) [ 172.447081] R13: 00007ffc12bf740f R14: 00007f9ab783e9c0 R15: 000000000078bf0c [ 172.469768] audit: type=1400 audit(1595853171.557:60): avc: denied { ioctl } for pid=9411 comm="syz-executor.1" path="socket:[33251]" dev="sockfs" ino=33251 ioctlcmd=0xab00 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 12:32:51 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x300, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 12:32:51 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab07) [ 172.507282] block nbd5: Could not allocate knbd recv work queue. [ 172.520971] block nbd5: shutting down sockets 12:32:51 executing program 5 (fault-call:3 fault-nth:7): r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) [ 172.613608] block nbd1: shutting down sockets [ 172.614065] FAT-fs (loop0): bogus number of reserved sectors [ 172.630774] block nbd1: shutting down sockets [ 172.651620] FAT-fs (loop0): This looks like a DOS 1.x volume; assuming default BPB values 12:32:52 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x3e8, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) [ 172.662894] FAULT_INJECTION: forcing a failure. [ 172.662894] name failslab, interval 1, probability 0, space 0, times 0 12:32:52 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab08) [ 172.712540] audit: type=1804 audit(1595853172.067:61): pid=9450 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir102465536/syzkaller.yBaZLD/38/cgroup.controllers" dev="sda1" ino=15822 res=1 [ 172.782169] CPU: 1 PID: 9448 Comm: syz-executor.5 Not tainted 4.19.134-syzkaller #0 [ 172.790027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 172.799397] Call Trace: [ 172.802008] dump_stack+0x1fc/0x2fe [ 172.805660] should_fail.cold+0xa/0x14 [ 172.807568] audit: type=1804 audit(1595853172.107:62): pid=9451 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir163434630/syzkaller.YDGA88/40/cgroup.controllers" dev="sda1" ino=15910 res=1 [ 172.809569] ? setup_fault_attr+0x200/0x200 [ 172.809591] ? lock_acquire+0x170/0x3c0 [ 172.809611] __should_failslab+0x115/0x180 [ 172.809628] should_failslab+0x5/0xf [ 172.809644] kmem_cache_alloc_trace+0x284/0x380 [ 172.809658] ? cancel_delayed_work+0x2c0/0x2c0 [ 172.809673] __kthread_create_on_node+0xd2/0x410 [ 172.809687] ? mark_held_locks+0xf0/0xf0 [ 172.809701] ? kthread_parkme+0xa0/0xa0 [ 172.809728] ? __alloc_workqueue_key+0x9d2/0xed0 [ 172.848596] FAT-fs (loop2): bogus number of reserved sectors [ 172.850812] ? cancel_delayed_work+0x2c0/0x2c0 [ 172.850831] kthread_create_on_node+0xbb/0xf0 [ 172.850848] ? __kthread_create_on_node+0x410/0x410 [ 172.850862] ? check_preemption_disabled+0x41/0x280 [ 172.850880] ? init_rescuer+0xa1/0x370 [ 172.850901] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 172.850918] ? kmem_cache_alloc_node_trace+0x351/0x3b0 [ 172.850943] init_rescuer+0x1f7/0x370 [ 172.850962] __alloc_workqueue_key+0xb56/0xed0 [ 172.856571] FAT-fs (loop2): This looks like a DOS 1.x volume; assuming default BPB values [ 172.860244] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 172.860262] ? nbd_ioctl+0x151/0xbe0 [ 172.860278] ? __mutex_add_waiter+0x160/0x160 [ 172.860296] ? avc_has_extended_perms+0x6f3/0xea0 [ 172.860312] nbd_start_device+0x183/0xd50 [ 172.860326] ? security_capable+0x8f/0xc0 [ 172.860345] nbd_ioctl+0x62a/0xbe0 [ 172.860363] ? nbd_disconnect_and_put+0x270/0x270 [ 172.860380] ? avc_ss_reset+0x170/0x170 [ 172.860397] ? __lock_acquire+0x6de/0x3ff0 [ 172.860414] ? nbd_disconnect_and_put+0x270/0x270 [ 172.860430] blkdev_ioctl+0x5cb/0x1a7e [ 172.860445] ? blkpg_ioctl+0x9d0/0x9d0 [ 172.860459] ? get_pid_task+0xf4/0x190 [ 172.860473] ? mark_held_locks+0xf0/0xf0 [ 172.860487] ? proc_fail_nth_write+0x95/0x1d0 [ 172.860502] ? proc_tgid_io_accounting+0x7f0/0x7f0 [ 172.860531] block_ioctl+0xe9/0x130 [ 172.860546] ? blkdev_fallocate+0x3f0/0x3f0 [ 172.860563] do_vfs_ioctl+0xcdb/0x12e0 [ 172.860580] ? selinux_file_ioctl+0x506/0x6c0 [ 172.860602] ? ioctl_preallocate+0x200/0x200 [ 173.027768] ? selinux_inode_link+0x20/0x20 [ 173.032122] ? __fget+0x356/0x510 [ 173.035615] ? do_dup2+0x450/0x450 [ 173.039175] ? vfs_write+0x393/0x540 [ 173.042922] ksys_ioctl+0x9b/0xc0 [ 173.046399] __x64_sys_ioctl+0x6f/0xb0 [ 173.050309] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 173.054908] do_syscall_64+0xf9/0x620 [ 173.058734] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 173.063938] RIP: 0033:0x45c369 [ 173.067145] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 173.086065] RSP: 002b:00007f9ab783dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 173.090035] block nbd1: NBD_DISCONNECT [ 173.093794] RAX: ffffffffffffffda RBX: 0000000000011bc0 RCX: 000000000045c369 [ 173.093803] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 173.093810] RBP: 00007f9ab783dca0 R08: 0000000000000000 R09: 0000000000000000 [ 173.093817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 12:32:52 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000340)='./file0\x00') creat(&(0x7f00000002c0)='./file0\x00', 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x262040, 0x0) 12:32:52 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'ipvlan1\x00', {0x2, 0x0, @rand_addr=0x64010102}}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) 12:32:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) 12:32:52 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x500, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) [ 173.093833] R13: 00007ffc12bf740f R14: 00007f9ab783e9c0 R15: 000000000078bf0c [ 173.108474] block nbd1: Send disconnect failed -32 [ 173.205706] block nbd5: Could not allocate knbd recv work queue. [ 173.208112] block nbd1: Disconnected due to user request. [ 173.218369] block nbd1: shutting down sockets [ 173.224861] block nbd5: shutting down sockets 12:32:52 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x600, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) [ 173.275068] block nbd1: shutting down sockets [ 173.286912] FAT-fs (loop0): bogus number of reserved sectors 12:32:52 executing program 5 (fault-call:3 fault-nth:8): r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 12:32:52 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab09) 12:32:52 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000340)='./file0\x00') creat(&(0x7f00000002c0)='./file0\x00', 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x262040, 0x0) [ 173.353290] FAT-fs (loop0): This looks like a DOS 1.x volume; assuming default BPB values 12:32:52 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab0a) [ 173.427391] block nbd1: shutting down sockets [ 173.437273] block nbd1: shutting down sockets [ 173.438813] audit: type=1804 audit(1595853172.786:63): pid=9482 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir102465536/syzkaller.yBaZLD/39/cgroup.controllers" dev="sda1" ino=15881 res=1 [ 173.480189] FAULT_INJECTION: forcing a failure. [ 173.480189] name failslab, interval 1, probability 0, space 0, times 0 [ 173.528724] CPU: 0 PID: 9491 Comm: syz-executor.5 Not tainted 4.19.134-syzkaller #0 [ 173.536578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 173.545943] Call Trace: [ 173.548550] dump_stack+0x1fc/0x2fe [ 173.552195] should_fail.cold+0xa/0x14 [ 173.556105] ? setup_fault_attr+0x200/0x200 [ 173.560440] ? lock_acquire+0x170/0x3c0 [ 173.564435] __should_failslab+0x115/0x180 [ 173.568686] should_failslab+0x5/0xf [ 173.572413] kmem_cache_alloc+0x277/0x370 [ 173.576581] __kernfs_new_node+0xd2/0x680 [ 173.580747] ? lock_acquire+0x170/0x3c0 [ 173.584745] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 173.589530] ? __lock_acquire+0x6de/0x3ff0 [ 173.593799] kernfs_new_node+0x92/0x120 [ 173.594585] block nbd1: shutting down sockets [ 173.597794] __kernfs_create_file+0x51/0x33f [ 173.597816] sysfs_add_file_mode_ns+0x226/0x540 [ 173.597840] sysfs_create_file_ns+0x131/0x1b0 [ 173.597864] ? sysfs_add_file_mode_ns+0x540/0x540 [ 173.597884] ? mark_held_locks+0xa6/0xf0 [ 173.624841] ? _raw_spin_unlock_irq+0x24/0x80 [ 173.629381] device_create_file+0xef/0x1d0 [ 173.633642] nbd_start_device+0x3c1/0xd50 [ 173.637818] ? security_capable+0x8f/0xc0 [ 173.638352] block nbd1: shutting down sockets [ 173.641991] nbd_ioctl+0x62a/0xbe0 [ 173.642014] ? nbd_disconnect_and_put+0x270/0x270 [ 173.642033] ? avc_ss_reset+0x170/0x170 [ 173.642052] ? __lock_acquire+0x6de/0x3ff0 [ 173.642070] ? nbd_disconnect_and_put+0x270/0x270 [ 173.668014] blkdev_ioctl+0x5cb/0x1a7e [ 173.671918] ? blkpg_ioctl+0x9d0/0x9d0 [ 173.675830] ? get_pid_task+0xf4/0x190 12:32:52 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'ipvlan1\x00', {0x2, 0x0, @rand_addr=0x64010102}}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) 12:32:53 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x40049409) [ 173.679737] ? mark_held_locks+0xf0/0xf0 [ 173.683806] ? proc_fail_nth_write+0x95/0x1d0 [ 173.688313] ? proc_tgid_io_accounting+0x7f0/0x7f0 [ 173.689322] FAT-fs (loop2): bogus number of reserved sectors [ 173.693276] block_ioctl+0xe9/0x130 [ 173.693294] ? blkdev_fallocate+0x3f0/0x3f0 [ 173.693313] do_vfs_ioctl+0xcdb/0x12e0 [ 173.693331] ? selinux_file_ioctl+0x506/0x6c0 [ 173.693347] ? ioctl_preallocate+0x200/0x200 [ 173.693365] ? selinux_inode_link+0x20/0x20 12:32:53 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x700, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) [ 173.715491] FAT-fs (loop2): This looks like a DOS 1.x volume; assuming default BPB values [ 173.719887] ? __fget+0x356/0x510 [ 173.719907] ? do_dup2+0x450/0x450 [ 173.719922] ? vfs_write+0x393/0x540 [ 173.719948] ksys_ioctl+0x9b/0xc0 [ 173.719967] __x64_sys_ioctl+0x6f/0xb0 [ 173.719982] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 173.719996] do_syscall_64+0xf9/0x620 [ 173.720017] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 173.720029] RIP: 0033:0x45c369 [ 173.720044] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 173.720059] RSP: 002b:00007f9ab783dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 173.800482] RAX: ffffffffffffffda RBX: 0000000000011bc0 RCX: 000000000045c369 [ 173.807768] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 173.815060] RBP: 00007f9ab783dca0 R08: 0000000000000000 R09: 0000000000000000 [ 173.822345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 12:32:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) [ 173.829634] R13: 00007ffc12bf740f R14: 00007f9ab783e9c0 R15: 000000000078bf0c [ 173.857513] block nbd1: shutting down sockets 12:32:53 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xa00, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) [ 173.879529] block nbd1: shutting down sockets 12:32:53 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x40081271) [ 173.907787] block nbd5: device_create_file failed! [ 173.916850] block nbd5: shutting down sockets 12:32:53 executing program 5 (fault-call:3 fault-nth:9): r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) [ 174.002891] block nbd1: shutting down sockets [ 174.023520] block nbd1: shutting down sockets 12:32:53 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xe00, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 12:32:53 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x40086602) [ 174.065732] FAT-fs (loop0): bogus number of reserved sectors [ 174.088261] FAT-fs (loop0): This looks like a DOS 1.x volume; assuming default BPB values [ 174.097161] FAULT_INJECTION: forcing a failure. [ 174.097161] name failslab, interval 1, probability 0, space 0, times 0 12:32:53 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000340)='./file0\x00') creat(&(0x7f00000002c0)='./file0\x00', 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x262040, 0x0) [ 174.157255] audit: type=1804 audit(1595853173.506:64): pid=9520 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir102465536/syzkaller.yBaZLD/40/cgroup.controllers" dev="sda1" ino=15894 res=1 [ 174.215117] CPU: 1 PID: 9522 Comm: syz-executor.5 Not tainted 4.19.134-syzkaller #0 [ 174.222966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 174.232337] Call Trace: [ 174.234934] dump_stack+0x1fc/0x2fe [ 174.238588] should_fail.cold+0xa/0x14 [ 174.242500] ? setup_fault_attr+0x200/0x200 [ 174.246836] ? lock_acquire+0x170/0x3c0 [ 174.250833] __should_failslab+0x115/0x180 [ 174.255081] should_failslab+0x5/0xf [ 174.258808] kmem_cache_alloc+0x277/0x370 [ 174.262969] __d_alloc+0x2b/0xa10 [ 174.266445] d_alloc+0x4a/0x230 [ 174.269737] d_alloc_parallel+0xeb/0x19e0 [ 174.273910] ? mark_held_locks+0xf0/0xf0 [ 174.277994] ? __d_lookup_rcu+0x6b0/0x6b0 [ 174.282159] ? __mutex_unlock_slowpath+0x30e/0x610 [ 174.287113] ? mark_held_locks+0xf0/0xf0 [ 174.291196] ? __lockdep_init_map+0x100/0x5a0 [ 174.295709] ? __lockdep_init_map+0x100/0x5a0 [ 174.300222] __lookup_slow+0x18d/0x4a0 [ 174.304119] ? check_preemption_disabled+0x41/0x280 [ 174.309147] ? follow_dotdot_rcu+0x1040/0x1040 [ 174.313752] ? __d_lookup+0x411/0x710 [ 174.317572] ? d_lookup+0x18e/0x250 [ 174.321225] lookup_one_len+0x163/0x190 [ 174.323046] FAT-fs (loop2): bogus number of reserved sectors [ 174.325207] ? try_lookup_one_len+0x180/0x180 [ 174.325254] start_creating.part.0+0x62/0x160 [ 174.325270] debugfs_create_dir+0x75/0x4a0 [ 174.325289] nbd_start_device+0x449/0xd50 [ 174.325305] ? security_capable+0x8f/0xc0 [ 174.325326] nbd_ioctl+0x62a/0xbe0 [ 174.325346] ? nbd_disconnect_and_put+0x270/0x270 [ 174.342688] FAT-fs (loop2): This looks like a DOS 1.x volume; assuming default BPB values [ 174.344363] ? avc_ss_reset+0x170/0x170 [ 174.344383] ? __lock_acquire+0x6de/0x3ff0 [ 174.344402] ? nbd_disconnect_and_put+0x270/0x270 [ 174.344427] blkdev_ioctl+0x5cb/0x1a7e [ 174.386291] ? blkpg_ioctl+0x9d0/0x9d0 [ 174.390201] ? get_pid_task+0xf4/0x190 [ 174.394113] ? mark_held_locks+0xf0/0xf0 [ 174.398198] ? proc_fail_nth_write+0x95/0x1d0 [ 174.402714] ? proc_tgid_io_accounting+0x7f0/0x7f0 [ 174.407679] block_ioctl+0xe9/0x130 [ 174.411329] ? blkdev_fallocate+0x3f0/0x3f0 [ 174.415669] do_vfs_ioctl+0xcdb/0x12e0 [ 174.419580] ? selinux_file_ioctl+0x506/0x6c0 [ 174.424102] ? ioctl_preallocate+0x200/0x200 [ 174.428538] ? selinux_inode_link+0x20/0x20 [ 174.432887] ? __fget+0x356/0x510 [ 174.436368] ? do_dup2+0x450/0x450 [ 174.439926] ? vfs_write+0x393/0x540 [ 174.443677] ksys_ioctl+0x9b/0xc0 [ 174.447154] __x64_sys_ioctl+0x6f/0xb0 [ 174.451067] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 174.455683] do_syscall_64+0xf9/0x620 [ 174.459510] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 174.464715] RIP: 0033:0x45c369 [ 174.467922] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 174.486847] RSP: 002b:00007f9ab783dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 174.494586] RAX: ffffffffffffffda RBX: 0000000000011bc0 RCX: 000000000045c369 [ 174.501880] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 174.509169] RBP: 00007f9ab783dca0 R08: 0000000000000000 R09: 0000000000000000 12:32:53 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'ipvlan1\x00', {0x2, 0x0, @rand_addr=0x64010102}}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) 12:32:53 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x1802, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 12:32:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) [ 174.516452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 174.523740] R13: 00007ffc12bf740f R14: 00007f9ab783e9c0 R15: 000000000078bf0c 12:32:53 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x40087602) [ 174.574141] block nbd5: Failed to create debugfs dir for 'nbd5' [ 174.597508] block nbd5: Receive control failed (result -107) [ 174.607264] block nbd5: shutting down sockets [ 174.631634] block nbd1: shutting down sockets [ 174.643931] block nbd1: shutting down sockets 12:32:54 executing program 5 (fault-call:3 fault-nth:10): r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 12:32:54 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x2000, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 12:32:54 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x40101283) [ 174.674098] FAT-fs (loop0): bogus number of reserved sectors [ 174.713522] FAT-fs (loop0): This looks like a DOS 1.x volume; assuming default BPB values [ 174.773776] audit: type=1804 audit(1595853174.126:65): pid=9573 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir102465536/syzkaller.yBaZLD/41/cgroup.controllers" dev="sda1" ino=15921 res=1 [ 174.803958] block nbd1: shutting down sockets 12:32:54 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000340)='./file0\x00') creat(&(0x7f00000002c0)='./file0\x00', 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x262040, 0x0) [ 174.825440] FAULT_INJECTION: forcing a failure. [ 174.825440] name failslab, interval 1, probability 0, space 0, times 0 12:32:54 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'ipvlan1\x00', {0x2, 0x0, @rand_addr=0x64010102}}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) [ 174.922799] CPU: 1 PID: 9574 Comm: syz-executor.5 Not tainted 4.19.134-syzkaller #0 [ 174.930657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 174.940027] Call Trace: [ 174.942637] dump_stack+0x1fc/0x2fe [ 174.946294] should_fail.cold+0xa/0x14 [ 174.950208] ? setup_fault_attr+0x200/0x200 [ 174.954554] ? lock_acquire+0x170/0x3c0 [ 174.958569] __should_failslab+0x115/0x180 [ 174.962837] should_failslab+0x5/0xf [ 174.966571] kmem_cache_alloc+0x277/0x370 [ 174.970750] alloc_inode+0xab/0x180 [ 174.974399] new_inode+0x1d/0xf0 [ 174.977791] debugfs_get_inode+0x1a/0x130 [ 174.981962] debugfs_create_dir+0xce/0x4a0 [ 174.986226] nbd_start_device+0x449/0xd50 [ 174.990408] ? security_capable+0x8f/0xc0 [ 174.994599] nbd_ioctl+0x62a/0xbe0 [ 174.998174] ? nbd_disconnect_and_put+0x270/0x270 [ 175.003046] ? avc_ss_reset+0x170/0x170 [ 175.007062] ? __lock_acquire+0x6de/0x3ff0 [ 175.011344] ? nbd_disconnect_and_put+0x270/0x270 [ 175.016215] blkdev_ioctl+0x5cb/0x1a7e [ 175.020131] ? blkpg_ioctl+0x9d0/0x9d0 [ 175.024040] ? get_pid_task+0xf4/0x190 [ 175.027964] ? mark_held_locks+0xf0/0xf0 [ 175.032047] ? proc_fail_nth_write+0x95/0x1d0 [ 175.036756] ? proc_tgid_io_accounting+0x7f0/0x7f0 [ 175.041731] block_ioctl+0xe9/0x130 [ 175.045378] ? blkdev_fallocate+0x3f0/0x3f0 [ 175.049726] do_vfs_ioctl+0xcdb/0x12e0 [ 175.053643] ? selinux_file_ioctl+0x506/0x6c0 [ 175.058172] ? ioctl_preallocate+0x200/0x200 [ 175.062605] ? selinux_inode_link+0x20/0x20 [ 175.066956] ? __fget+0x356/0x510 12:32:54 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x401070c9) [ 175.070442] ? do_dup2+0x450/0x450 [ 175.074004] ? vfs_write+0x393/0x540 [ 175.077753] ksys_ioctl+0x9b/0xc0 [ 175.079296] FAT-fs (loop2): bogus number of reserved sectors [ 175.081232] __x64_sys_ioctl+0x6f/0xb0 [ 175.081248] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 175.081264] do_syscall_64+0xf9/0x620 [ 175.081284] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 175.081301] RIP: 0033:0x45c369 [ 175.092748] FAT-fs (loop2): This looks like a DOS 1.x volume; assuming default BPB values 12:32:54 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x3400, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) [ 175.095579] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 175.095605] RSP: 002b:00007f9ab783dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 175.095618] RAX: ffffffffffffffda RBX: 0000000000011bc0 RCX: 000000000045c369 [ 175.095625] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 175.095632] RBP: 00007f9ab783dca0 R08: 0000000000000000 R09: 0000000000000000 [ 175.095640] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a 12:32:54 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000340)='./file0\x00') creat(&(0x7f00000002c0)='./file0\x00', 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x262040, 0x0) [ 175.095649] R13: 00007ffc12bf740f R14: 00007f9ab783e9c0 R15: 000000000078bf0c [ 175.132888] block nbd5: Failed to create debugfs dir for 'nbd5' 12:32:54 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) [ 175.234819] block nbd1: shutting down sockets [ 175.254149] block nbd1: shutting down sockets 12:32:54 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x401070ca) 12:32:54 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x3c00, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) [ 175.319409] block nbd5: Receive control failed (result -107) [ 175.329304] block nbd5: shutting down sockets 12:32:54 executing program 5 (fault-call:3 fault-nth:11): r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 12:32:54 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000340)='./file0\x00') creat(&(0x7f00000002c0)='./file0\x00', 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x262040, 0x0) [ 175.375921] FAT-fs (loop0): bogus number of reserved sectors [ 175.394670] FAT-fs (loop0): This looks like a DOS 1.x volume; assuming default BPB values [ 175.413697] block nbd1: shutting down sockets [ 175.440354] block nbd1: shutting down sockets 12:32:54 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x401070cd) [ 175.501898] audit: type=1804 audit(1595853174.856:66): pid=9606 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir102465536/syzkaller.yBaZLD/42/cgroup.controllers" dev="sda1" ino=15894 res=1 12:32:54 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x3ca0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) [ 175.547157] FAULT_INJECTION: forcing a failure. [ 175.547157] name failslab, interval 1, probability 0, space 0, times 0 [ 175.584332] FAT-fs (loop2): bogus number of reserved sectors [ 175.599295] block nbd1: shutting down sockets [ 175.612770] CPU: 1 PID: 9622 Comm: syz-executor.5 Not tainted 4.19.134-syzkaller #0 [ 175.620628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 175.621076] block nbd1: shutting down sockets [ 175.630001] Call Trace: [ 175.630027] dump_stack+0x1fc/0x2fe [ 175.630048] should_fail.cold+0xa/0x14 [ 175.630064] ? setup_fault_attr+0x200/0x200 [ 175.630084] ? __d_lookup+0x411/0x710 [ 175.630104] __should_failslab+0x115/0x180 [ 175.630120] should_failslab+0x5/0xf [ 175.630134] kmem_cache_alloc+0x277/0x370 [ 175.630155] selinux_inode_alloc_security+0xb1/0x2a0 [ 175.670031] security_inode_alloc+0x67/0xc0 [ 175.674380] inode_init_always+0x5a3/0xb70 [ 175.678645] alloc_inode+0x7a/0x180 [ 175.682299] new_inode+0x1d/0xf0 [ 175.685686] debugfs_get_inode+0x1a/0x130 [ 175.689856] debugfs_create_dir+0xce/0x4a0 [ 175.694116] nbd_start_device+0x449/0xd50 12:32:55 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x401870c8) [ 175.698282] ? security_capable+0x8f/0xc0 [ 175.702457] nbd_ioctl+0x62a/0xbe0 [ 175.706022] ? nbd_disconnect_and_put+0x270/0x270 [ 175.710889] ? avc_ss_reset+0x170/0x170 [ 175.714891] ? __lock_acquire+0x6de/0x3ff0 [ 175.719160] ? nbd_disconnect_and_put+0x270/0x270 [ 175.724029] blkdev_ioctl+0x5cb/0x1a7e [ 175.727932] ? blkpg_ioctl+0x9d0/0x9d0 [ 175.731831] ? get_pid_task+0xf4/0x190 [ 175.735731] ? mark_held_locks+0xf0/0xf0 [ 175.739805] ? proc_fail_nth_write+0x95/0x1d0 [ 175.744322] ? proc_tgid_io_accounting+0x7f0/0x7f0 [ 175.749295] block_ioctl+0xe9/0x130 [ 175.752946] ? blkdev_fallocate+0x3f0/0x3f0 [ 175.754021] FAT-fs (loop2): This looks like a DOS 1.x volume; assuming default BPB values [ 175.757288] do_vfs_ioctl+0xcdb/0x12e0 [ 175.757307] ? selinux_file_ioctl+0x506/0x6c0 [ 175.757322] ? ioctl_preallocate+0x200/0x200 [ 175.757338] ? selinux_inode_link+0x20/0x20 [ 175.757354] ? __fget+0x356/0x510 [ 175.757380] ? do_dup2+0x450/0x450 [ 175.757399] ? vfs_write+0x393/0x540 [ 175.793512] ksys_ioctl+0x9b/0xc0 [ 175.796991] __x64_sys_ioctl+0x6f/0xb0 [ 175.800899] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 175.805501] do_syscall_64+0xf9/0x620 [ 175.809333] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 175.814558] RIP: 0033:0x45c369 [ 175.814865] block nbd1: shutting down sockets [ 175.817760] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 175.817768] RSP: 002b:00007f9ab783dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 12:32:55 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'ipvlan1\x00', {0x2, 0x0, @rand_addr=0x64010102}}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) 12:32:55 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x3f00, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 12:32:55 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r2, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000340)='./file0\x00') creat(&(0x7f00000002c0)='./file0\x00', 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x262040, 0x0) [ 175.817782] RAX: ffffffffffffffda RBX: 0000000000011bc0 RCX: 000000000045c369 [ 175.817791] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 175.817798] RBP: 00007f9ab783dca0 R08: 0000000000000000 R09: 0000000000000000 [ 175.817806] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000b [ 175.817814] R13: 00007ffc12bf740f R14: 00007f9ab783e9c0 R15: 000000000078bf0c 12:32:55 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) 12:32:55 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x401870cb) [ 175.969417] block nbd5: Failed to create debugfs dir for 'nbd5' [ 175.980687] block nbd1: shutting down sockets [ 176.003146] block nbd5: Receive control failed (result -107) [ 176.012031] block nbd5: shutting down sockets 12:32:55 executing program 5 (fault-call:3 fault-nth:12): r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) [ 176.074571] FAT-fs (loop0): bogus number of reserved sectors [ 176.082925] FAT-fs (loop0): This looks like a DOS 1.x volume; assuming default BPB values [ 176.141735] block nbd1: shutting down sockets [ 176.152519] FAULT_INJECTION: forcing a failure. [ 176.152519] name fail_page_alloc, interval 1, probability 0, space 0, times 1 12:32:55 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x4000, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) [ 176.195732] block nbd1: shutting down sockets 12:32:55 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'ipvlan1\x00', {0x2, 0x0, @rand_addr=0x64010102}}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) [ 176.253274] CPU: 1 PID: 9665 Comm: syz-executor.5 Not tainted 4.19.134-syzkaller #0 [ 176.261126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 176.270503] Call Trace: [ 176.273112] dump_stack+0x1fc/0x2fe [ 176.276756] should_fail.cold+0xa/0x14 [ 176.280663] ? lock_acquire+0x170/0x3c0 [ 176.284657] ? setup_fault_attr+0x200/0x200 [ 176.287235] FAT-fs (loop2): bogus number of reserved sectors [ 176.289001] __alloc_pages_nodemask+0x239/0x2890 [ 176.289025] ? __lock_acquire+0x6de/0x3ff0 [ 176.289048] ? mark_held_locks+0xf0/0xf0 [ 176.289062] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 176.289099] ? mark_held_locks+0xf0/0xf0 [ 176.289119] ? mark_held_locks+0xf0/0xf0 [ 176.289133] ? simple_lookup+0xce/0x110 [ 176.289148] ? mark_held_locks+0xf0/0xf0 [ 176.289164] ? inode_doinit_with_dentry+0x90c/0x10b0 [ 176.289183] ? lock_downgrade+0x720/0x720 [ 176.289197] ? lockref_get+0x11/0x50 [ 176.289216] alloc_pages_current+0x193/0x2a0 [ 176.289233] __get_free_pages+0x8/0x40 12:32:55 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) [ 176.289247] inode_doinit_with_dentry+0x98d/0x10b0 [ 176.289265] ? selinux_capset+0x100/0x100 [ 176.289282] ? current_time+0x13c/0x1c0 [ 176.289296] ? igrab+0xb0/0xb0 [ 176.289313] selinux_d_instantiate+0x23/0x30 [ 176.289328] security_d_instantiate+0x50/0xe0 [ 176.289343] d_instantiate+0x5a/0x90 [ 176.289360] debugfs_create_dir+0x175/0x4a0 [ 176.289379] nbd_start_device+0x449/0xd50 [ 176.289394] ? security_capable+0x8f/0xc0 [ 176.289415] nbd_ioctl+0x62a/0xbe0 [ 176.289436] ? nbd_disconnect_and_put+0x270/0x270 [ 176.289453] ? avc_ss_reset+0x170/0x170 [ 176.289471] ? __lock_acquire+0x6de/0x3ff0 [ 176.289498] ? nbd_disconnect_and_put+0x270/0x270 [ 176.297583] FAT-fs (loop2): This looks like a DOS 1.x volume; assuming default BPB values [ 176.300070] blkdev_ioctl+0x5cb/0x1a7e [ 176.300094] ? blkpg_ioctl+0x9d0/0x9d0 [ 176.300109] ? get_pid_task+0xf4/0x190 [ 176.300126] ? mark_held_locks+0xf0/0xf0 [ 176.300139] ? proc_fail_nth_write+0x95/0x1d0 [ 176.300154] ? proc_tgid_io_accounting+0x7f0/0x7f0 [ 176.300181] block_ioctl+0xe9/0x130 [ 176.450713] ? blkdev_fallocate+0x3f0/0x3f0 [ 176.455054] do_vfs_ioctl+0xcdb/0x12e0 [ 176.458969] ? selinux_file_ioctl+0x506/0x6c0 [ 176.463483] ? ioctl_preallocate+0x200/0x200 [ 176.467911] ? selinux_inode_link+0x20/0x20 [ 176.472260] ? __fget+0x356/0x510 [ 176.475733] ? do_dup2+0x450/0x450 [ 176.479295] ? vfs_write+0x393/0x540 [ 176.483036] ksys_ioctl+0x9b/0xc0 [ 176.486511] __x64_sys_ioctl+0x6f/0xb0 [ 176.490413] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 176.495013] do_syscall_64+0xf9/0x620 [ 176.500318] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 176.505523] RIP: 0033:0x45c369 [ 176.508733] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 176.527649] RSP: 002b:00007f9ab783dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 176.535376] RAX: ffffffffffffffda RBX: 0000000000011bc0 RCX: 000000000045c369 [ 176.542661] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 12:32:55 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x401870cc) 12:32:55 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x4002, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) [ 176.549945] RBP: 00007f9ab783dca0 R08: 0000000000000000 R09: 0000000000000000 [ 176.557229] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000c [ 176.564515] R13: 00007ffc12bf740f R14: 00007f9ab783e9c0 R15: 000000000078bf0c [ 176.636096] block nbd1: shutting down sockets [ 176.650061] block nbd1: shutting down sockets 12:32:56 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x4020940d) [ 176.799159] kauditd_printk_skb: 1 callbacks suppressed [ 176.799174] audit: type=1804 audit(1595853176.156:68): pid=9698 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir102465536/syzkaller.yBaZLD/44/cgroup.controllers" dev="sda1" ino=15937 res=1 12:32:56 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r2, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000340)='./file0\x00') creat(&(0x7f00000002c0)='./file0\x00', 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x262040, 0x0) 12:32:56 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xa03c, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) [ 176.850574] FAT-fs (loop2): bogus number of reserved sectors [ 176.881532] block nbd1: shutting down sockets [ 176.889571] FAT-fs (loop2): This looks like a DOS 1.x volume; assuming default BPB values [ 176.899932] block nbd1: shutting down sockets 12:32:56 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x80081270) 12:32:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'ipvlan1\x00', {0x2, 0x0, @rand_addr=0x64010102}}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) 12:32:56 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xe803, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) [ 177.137755] block nbd1: shutting down sockets [ 177.203748] block nbd1: shutting down sockets 12:32:56 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 12:32:56 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e27b) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) 12:32:56 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r2, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000340)='./file0\x00') creat(&(0x7f00000002c0)='./file0\x00', 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x262040, 0x0) 12:32:56 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x80081272) 12:32:56 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xf401, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) [ 177.305183] block nbd5: Receive control failed (result -107) [ 177.305410] block nbd5: shutting down sockets [ 177.408373] block nbd5: Receive control failed (result -107) [ 177.414739] audit: type=1804 audit(1595853176.766:69): pid=9733 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir102465536/syzkaller.yBaZLD/45/cgroup.controllers" dev="sda1" ino=15927 res=1 [ 177.415816] block nbd5: shutting down sockets 12:32:56 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xff0f, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) [ 177.457873] block nbd1: shutting down sockets [ 177.492533] block nbd1: shutting down sockets 12:32:56 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x80086601) 12:32:56 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x2) 12:32:57 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x20000, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 12:32:57 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'ipvlan1\x00', {0x2, 0x0, @rand_addr=0x64010102}}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) [ 177.654561] FAT-fs (loop2): bogus number of reserved sectors [ 177.683562] FAT-fs (loop2): This looks like a DOS 1.x volume; assuming default BPB values [ 177.709496] block nbd1: shutting down sockets [ 177.723641] block nbd5: shutting down sockets [ 177.734044] block nbd1: shutting down sockets [ 177.753356] block nbd5: shutting down sockets 12:32:57 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x50000, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 12:32:57 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x301) 12:32:57 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x80087601) 12:32:57 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e27b) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) [ 177.919019] audit: type=1804 audit(1595853177.276:70): pid=9774 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir102465536/syzkaller.yBaZLD/46/cgroup.controllers" dev="sda1" ino=15929 res=1 [ 177.958081] block nbd5: shutting down sockets [ 177.963958] block nbd5: shutting down sockets [ 177.971680] block nbd1: shutting down sockets [ 177.991086] block nbd1: shutting down sockets 12:32:57 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r2, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000340)='./file0\x00') creat(&(0x7f00000002c0)='./file0\x00', 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x262040, 0x0) 12:32:57 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x1000000, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 12:32:57 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x125d) 12:32:57 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xc0045878) 12:32:57 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'ipvlan1\x00', {0x2, 0x0, @rand_addr=0x64010102}}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) [ 178.289795] FAT-fs (loop2): bogus number of reserved sectors [ 178.302246] block nbd5: shutting down sockets [ 178.306138] FAT-fs (loop2): This looks like a DOS 1.x volume; assuming default BPB values [ 178.325321] block nbd5: shutting down sockets [ 178.333080] block nbd1: shutting down sockets 12:32:57 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x2000000, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) [ 178.342499] block nbd1: shutting down sockets 12:32:57 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x125e) 12:32:57 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xc0045878) [ 178.418175] audit: type=1804 audit(1595853177.766:71): pid=9807 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir102465536/syzkaller.yBaZLD/47/cgroup.controllers" dev="sda1" ino=15915 res=1 12:32:57 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xc0101282) [ 178.462404] block nbd1: shutting down sockets [ 178.468979] block nbd1: shutting down sockets 12:32:57 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x3000000, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) [ 178.527305] FAT-fs (loop0): bogus number of reserved sectors [ 178.530499] block nbd5: shutting down sockets [ 178.546427] block nbd1: shutting down sockets [ 178.552813] block nbd5: shutting down sockets [ 178.564376] FAT-fs (loop0): This looks like a DOS 1.x volume; assuming default BPB values 12:32:57 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e27b) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) [ 178.583949] block nbd1: shutting down sockets 12:32:58 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x125f) [ 178.774981] block nbd5: Device being setup by another task [ 178.820620] block nbd5: shutting down sockets 12:32:58 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r2, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000340)='./file0\x00') creat(&(0x7f00000002c0)='./file0\x00', 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x262040, 0x0) 12:32:58 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xc0189436) 12:32:58 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x4000000, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 12:32:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'ipvlan1\x00', {0x2, 0x0, @rand_addr=0x64010102}}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) 12:32:58 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x1260) 12:32:58 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x5000000, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) [ 179.021586] block nbd5: shutting down sockets [ 179.029108] FAT-fs (loop2): bogus number of reserved sectors [ 179.034990] block nbd1: shutting down sockets [ 179.047770] block nbd1: shutting down sockets [ 179.070562] FAT-fs (loop2): This looks like a DOS 1.x volume; assuming default BPB values [ 179.075314] block nbd5: shutting down sockets [ 179.131447] audit: type=1804 audit(1595853178.486:72): pid=9855 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir102465536/syzkaller.yBaZLD/48/cgroup.controllers" dev="sda1" ino=15945 res=1 12:32:58 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xc020660b) 12:32:58 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x1261) 12:32:58 executing program 2: syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) 12:32:58 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x50fc1f3, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) [ 179.317379] block nbd1: shutting down sockets [ 179.330403] block nbd1: shutting down sockets [ 179.344749] block nbd5: shutting down sockets 12:32:58 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xc0481273) 12:32:58 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x1262) [ 179.365380] block nbd5: shutting down sockets [ 179.459656] FAT-fs (loop2): bogus number of reserved sectors [ 179.475722] FAT-fs (loop2): This looks like a DOS 1.x volume; assuming default BPB values [ 179.497828] block nbd1: shutting down sockets [ 179.530265] block nbd5: shutting down sockets [ 179.547082] block nbd1: shutting down sockets [ 179.563148] block nbd5: shutting down sockets 12:32:59 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r2, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000340)='./file0\x00') creat(&(0x7f00000002c0)='./file0\x00', 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x262040, 0x0) 12:32:59 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'ipvlan1\x00', {0x2, 0x0, @rand_addr=0x64010102}}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) 12:32:59 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x6000000, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 12:32:59 executing program 2: syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) 12:32:59 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x1263) 12:32:59 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$TUNSETOWNER(r2, 0x400454cc, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') setxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@random={'system.', '/dev/btrfs-control\x00'}, &(0x7f0000000200)='/dev/btrfs-control\x00', 0x13, 0x6) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r3, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x10001}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088d2}, 0x800) ioctl$NBD_DO_IT(r0, 0xab03) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$TUNSETOWNER(r4, 0x400454cc, 0x0) ioctl$CHAR_RAW_DISCARD(r4, 0x1277, &(0x7f0000000240)=0x3) 12:32:59 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7000000, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) [ 179.755808] block nbd5: shutting down sockets [ 179.763208] FAT-fs (loop2): bogus number of reserved sectors [ 179.769197] block nbd1: Receive control failed (result -107) [ 179.776107] block nbd1: shutting down sockets [ 179.776983] FAT-fs (loop2): This looks like a DOS 1.x volume; assuming default BPB values 12:32:59 executing program 2: syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) [ 179.810737] block nbd1: Receive control failed (result -107) [ 179.817324] block nbd1: shutting down sockets 12:32:59 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x8000000, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 12:32:59 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x1264) 12:32:59 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x11, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x800, 0x80802) [ 179.919262] audit: type=1804 audit(1595853179.276:73): pid=9911 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir102465536/syzkaller.yBaZLD/49/cgroup.controllers" dev="sda1" ino=15913 res=1 [ 179.955282] FAT-fs (loop0): bogus number of reserved sectors [ 179.977416] FAT-fs (loop0): This looks like a DOS 1.x volume; assuming default BPB values [ 179.995015] block nbd5: shutting down sockets [ 180.022696] block nbd5: shutting down sockets 12:32:59 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xa000000, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) [ 180.094707] FAT-fs (loop2): bogus number of reserved sectors [ 180.125348] FAT-fs (loop2): This looks like a DOS 1.x volume; assuming default BPB values 12:32:59 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r2, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000340)='./file0\x00') creat(&(0x7f00000002c0)='./file0\x00', 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x262040, 0x0) 12:32:59 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x1265) 12:32:59 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$TUNSETOWNER(r2, 0x400454cc, 0x0) r3 = gettid() tkill(r3, 0x15) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r2, 0xc1105518, &(0x7f00000000c0)={{0x8, 0x2, 0xfffffffc, 0x5, 'syz0\x00', 0x7}, 0x2, 0x0, 0x42d00, r3, 0x7, 0x6, 'syz1\x00', &(0x7f0000000000)=['/dev/nbd#\x00', '!{{/-\x00', '/dev/nbd#\x00', ':/\x00', '/<\x00', '*:*}\x00', '\'\x00'], 0x27, [], [0x4f86, 0x6, 0x0, 0x1000]}) ioctl$NBD_DO_IT(r0, 0xab03) 12:32:59 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) 12:32:59 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'ipvlan1\x00', {0x2, 0x0, @rand_addr=0x64010102}}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) 12:32:59 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xa14ae41, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) [ 180.418869] block nbd5: shutting down sockets 12:32:59 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xa14af2b, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) [ 180.444301] FAT-fs (loop2): bogus number of reserved sectors [ 180.445802] block nbd5: shutting down sockets [ 180.473568] FAT-fs (loop2): This looks like a DOS 1.x volume; assuming default BPB values 12:32:59 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x1267) [ 180.576569] audit: type=1804 audit(1595853179.926:74): pid=9962 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir102465536/syzkaller.yBaZLD/50/cgroup.controllers" dev="sda1" ino=15913 res=1 [ 180.621347] FAT-fs (loop0): bogus number of reserved sectors [ 180.627608] FAT-fs (loop0): This looks like a DOS 1.x volume; assuming default BPB values [ 180.655047] block nbd5: shutting down sockets 12:33:00 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xe000000, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 12:33:00 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) [ 180.681483] block nbd5: shutting down sockets 12:33:00 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'ipvlan1\x00', {0x2, 0x0, @rand_addr=0x64010102}}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) 12:33:00 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x1268) [ 180.881334] block nbd5: shutting down sockets [ 180.902323] FAT-fs (loop2): bogus number of reserved sectors [ 180.903580] block nbd5: shutting down sockets [ 180.915208] FAT-fs (loop2): This looks like a DOS 1.x volume; assuming default BPB values [ 181.114485] audit: type=1804 audit(1595853180.466:75): pid=9993 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir102465536/syzkaller.yBaZLD/51/cgroup.controllers" dev="sda1" ino=15956 res=1 12:33:00 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r2, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000340)='./file0\x00') creat(&(0x7f00000002c0)='./file0\x00', 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x262040, 0x0) 12:33:00 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x18020000, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 12:33:02 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) 12:33:02 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x1269) 12:33:02 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x80) r1 = socket(0x26, 0x3, 0xfffffbfd) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 12:33:02 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'ipvlan1\x00', {0x2, 0x0, @rand_addr=0x64010102}}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) 12:33:02 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x18bfbac1, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 12:33:02 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r2, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000340)='./file0\x00') creat(&(0x7f00000002c0)='./file0\x00', 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x262040, 0x0) [ 183.380378] block nbd1: shutting down sockets [ 183.424211] block nbd5: shutting down sockets [ 183.430335] block nbd5: shutting down sockets [ 183.444722] FAT-fs (loop2): bogus number of reserved sectors [ 183.462903] FAT-fs (loop2): This looks like a DOS 1.x volume; assuming default BPB values 12:33:02 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x1274) 12:33:02 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x20000000, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 12:33:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) [ 183.585539] FAT-fs (loop0): bogus number of reserved sectors [ 183.595720] audit: type=1804 audit(1595853182.946:76): pid=10038 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir102465536/syzkaller.yBaZLD/52/cgroup.controllers" dev="sda1" ino=15987 res=1 [ 183.606056] block nbd5: shutting down sockets [ 183.671489] FAT-fs (loop0): This looks like a DOS 1.x volume; assuming default BPB values 12:33:03 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x2baf140a, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) [ 183.769145] block nbd5: shutting down sockets 12:33:03 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x1276) 12:33:03 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'ipvlan1\x00', {0x2, 0x0, @rand_addr=0x64010102}}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) [ 183.852083] FAT-fs (loop2): bogus number of reserved sectors [ 183.869503] FAT-fs (loop2): This looks like a DOS 1.x volume; assuming default BPB values 12:33:03 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x34000000, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 12:33:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) [ 183.964402] block nbd5: shutting down sockets [ 183.980571] block nbd5: shutting down sockets 12:33:03 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x1277) 12:33:03 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x3c000000, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) [ 184.173583] FAT-fs (loop2): bogus number of reserved sectors [ 184.188316] block nbd5: shutting down sockets [ 184.196984] FAT-fs (loop2): This looks like a DOS 1.x volume; assuming default BPB values 12:33:03 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x3f000000, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) [ 184.235206] audit: type=1804 audit(1595853183.586:77): pid=10081 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir102465536/syzkaller.yBaZLD/53/cgroup.controllers" dev="sda1" ino=15984 res=1 [ 184.255395] FAT-fs (loop0): Unrecognized mount option "cgroup.controllers" or missing value 12:33:03 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r2, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000340)='./file0\x00') creat(&(0x7f00000002c0)='./file0\x00', 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x262040, 0x0) 12:33:03 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x1278) 12:33:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) 12:33:03 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'ipvlan1\x00', {0x2, 0x0, @rand_addr=0x64010102}}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) 12:33:03 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x40000000, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) [ 184.444826] block nbd5: shutting down sockets [ 184.485663] block nbd5: shutting down sockets 12:33:03 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x1279) [ 184.520240] FAT-fs (loop2): bogus number of reserved sectors [ 184.554035] FAT-fs (loop2): This looks like a DOS 1.x volume; assuming default BPB values 12:33:04 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x40020000, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 12:33:04 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) [ 184.695557] audit: type=1804 audit(1595853184.046:78): pid=10117 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir102465536/syzkaller.yBaZLD/54/cgroup.controllers" dev="sda1" ino=15988 res=1 [ 184.701452] block nbd5: shutting down sockets 12:33:04 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x41ae140a, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) [ 184.842540] block nbd5: shutting down sockets 12:33:04 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x127a) 12:33:04 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'ipvlan1\x00', {0x2, 0x0, @rand_addr=0x64010102}}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) [ 184.960244] FAT-fs (loop2): bogus number of reserved sectors 12:33:04 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x91ffffff, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) [ 185.003443] FAT-fs (loop2): This looks like a DOS 1.x volume; assuming default BPB values [ 185.014735] block nbd5: shutting down sockets [ 185.032642] block nbd5: shutting down sockets 12:33:04 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r2, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000340)='./file0\x00') creat(&(0x7f00000002c0)='./file0\x00', 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x262040, 0x0) 12:33:04 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xa03c0000, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 12:33:04 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) 12:33:04 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x127b) [ 185.240209] audit: type=1804 audit(1595853184.596:79): pid=10147 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir102465536/syzkaller.yBaZLD/55/cgroup.controllers" dev="sda1" ino=15951 res=1 [ 185.265575] FAT-fs (loop0): bogus number of reserved sectors [ 185.278922] FAT-fs (loop0): This looks like a DOS 1.x volume; assuming default BPB values [ 185.358479] block nbd5: shutting down sockets [ 185.375320] FAT-fs (loop2): bogus number of reserved sectors [ 185.389682] block nbd5: shutting down sockets [ 185.402305] FAT-fs (loop2): This looks like a DOS 1.x volume; assuming default BPB values 12:33:04 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x127c) 12:33:04 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xc1babf18, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 12:33:04 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'ipvlan1\x00', {0x2, 0x0, @rand_addr=0x64010102}}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) 12:33:04 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) [ 185.539908] block nbd5: shutting down sockets 12:33:04 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xe8030000, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) [ 185.569847] block nbd5: shutting down sockets 12:33:04 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x127d) [ 185.683412] block nbd5: shutting down sockets [ 185.697882] FAT-fs (loop2): bogus number of reserved sectors 12:33:05 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xf3c10f05, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) [ 185.741968] FAT-fs (loop2): This looks like a DOS 1.x volume; assuming default BPB values [ 185.751239] block nbd5: shutting down sockets 12:33:05 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x127e) [ 185.877627] audit: type=1804 audit(1595853185.226:80): pid=10200 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir102465536/syzkaller.yBaZLD/56/cgroup.controllers" dev="sda1" ino=16001 res=1 [ 185.931938] FAT-fs (loop0): Unrecognized mount option "cgroup.controllers" or missing value [ 185.969613] block nbd5: shutting down sockets [ 185.986350] block nbd5: shutting down sockets 12:33:05 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r2, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000340)='./file0\x00') creat(&(0x7f00000002c0)='./file0\x00', 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x262040, 0x0) 12:33:05 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) 12:33:05 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xf4010000, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 12:33:05 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x127f) 12:33:05 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'ipvlan1\x00', {0x2, 0x0, @rand_addr=0x64010102}}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) [ 186.342458] block nbd5: shutting down sockets [ 186.386783] block nbd5: shutting down sockets 12:33:05 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xfeffffff, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) [ 186.435965] audit: type=1804 audit(1595853185.786:81): pid=10230 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir102465536/syzkaller.yBaZLD/57/cgroup.controllers" dev="sda1" ino=16002 res=1 12:33:05 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x4b47) [ 186.484742] FAT-fs (loop0): bogus number of reserved sectors [ 186.497846] FAT-fs (loop2): bogus number of reserved sectors [ 186.557196] FAT-fs (loop2): This looks like a DOS 1.x volume; assuming default BPB values [ 186.571060] FAT-fs (loop0): This looks like a DOS 1.x volume; assuming default BPB values [ 186.638476] block nbd5: shutting down sockets [ 186.657056] block nbd5: shutting down sockets 12:33:06 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xff0f0000, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 12:33:06 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x4b49) 12:33:06 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) 12:33:06 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'ipvlan1\x00', {0x2, 0x0, @rand_addr=0x64010102}}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) [ 186.821567] block nbd5: shutting down sockets [ 186.851179] block nbd5: shutting down sockets 12:33:06 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffff91, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) [ 187.065153] FAT-fs (loop2): bogus number of reserved sectors [ 187.073006] audit: type=1804 audit(1595853186.426:82): pid=10263 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir102465536/syzkaller.yBaZLD/58/cgroup.controllers" dev="sda1" ino=16001 res=1 [ 187.118908] FAT-fs (loop0): bogus number of reserved sectors [ 187.126804] FAT-fs (loop2): This looks like a DOS 1.x volume; assuming default BPB values [ 187.155580] FAT-fs (loop0): This looks like a DOS 1.x volume; assuming default BPB values 12:33:06 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000340)='./file0\x00') creat(&(0x7f00000002c0)='./file0\x00', 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x262040, 0x0) 12:33:06 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x541b) 12:33:06 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xfffffffe, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 12:33:06 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) [ 187.287349] block nbd5: shutting down sockets [ 187.295572] block nbd5: shutting down sockets 12:33:06 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x5421) 12:33:06 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'ipvlan1\x00', {0x2, 0x0, @rand_addr=0x64010102}}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) 12:33:06 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x20000000000, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) [ 187.416356] block nbd5: shutting down sockets [ 187.430328] block nbd5: shutting down sockets 12:33:06 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7ffffffff000, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 12:33:06 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x5450) [ 187.618348] block nbd5: shutting down sockets [ 187.645743] block nbd5: shutting down sockets [ 187.664051] FAT-fs (loop2): bogus number of reserved sectors [ 187.686260] audit: type=1804 audit(1595853187.036:83): pid=10304 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir102465536/syzkaller.yBaZLD/59/cgroup.controllers" dev="sda1" ino=16007 res=1 [ 187.705795] FAT-fs (loop0): Unrecognized mount option "cgroup.controllers" or missing value [ 187.723731] FAT-fs (loop2): This looks like a DOS 1.x volume; assuming default BPB values 12:33:07 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x2000000000000, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 12:33:07 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x5451) 12:33:07 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'ipvlan1\x00', {0x2, 0x0, @rand_addr=0x64010102}}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) [ 187.910595] block nbd5: shutting down sockets [ 187.967135] block nbd5: shutting down sockets [ 188.116481] audit: type=1804 audit(1595853187.466:84): pid=10319 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir102465536/syzkaller.yBaZLD/60/cgroup.controllers" dev="sda1" ino=15982 res=1 12:33:07 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000340)='./file0\x00') creat(&(0x7f00000002c0)='./file0\x00', 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x262040, 0x0) 12:33:07 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x5000000000000, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 12:33:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) 12:33:07 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x5452) [ 188.161356] FAT-fs (loop0): bogus number of reserved sectors [ 188.171458] FAT-fs (loop0): This looks like a DOS 1.x volume; assuming default BPB values [ 188.248363] block nbd5: shutting down sockets [ 188.285429] block nbd5: shutting down sockets 12:33:07 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'ipvlan1\x00', {0x2, 0x0, @rand_addr=0x64010102}}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) 12:33:07 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xf0ffffff7f0000, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 12:33:07 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x5460) [ 188.391288] FAT-fs (loop2): bogus number of reserved sectors [ 188.424394] FAT-fs (loop2): This looks like a DOS 1.x volume; assuming default BPB values [ 188.443590] block nbd5: shutting down sockets [ 188.461303] block nbd5: shutting down sockets 12:33:07 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x100000000000000, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 12:33:07 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab00) 12:33:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) 12:33:08 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x200000000000000, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) [ 188.625605] audit: type=1804 audit(1595853187.976:85): pid=10353 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir102465536/syzkaller.yBaZLD/61/cgroup.controllers" dev="sda1" ino=15997 res=1 [ 188.659523] FAT-fs (loop0): bogus number of reserved sectors [ 188.696771] block nbd5: shutting down sockets [ 188.700636] FAT-fs (loop0): This looks like a DOS 1.x volume; assuming default BPB values [ 188.706773] block nbd5: shutting down sockets 12:33:08 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x300000000000000, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) [ 189.013651] FAT-fs (loop2): bogus number of reserved sectors [ 189.035576] FAT-fs (loop2): This looks like a DOS 1.x volume; assuming default BPB values 12:33:08 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000340)='./file0\x00') creat(&(0x7f00000002c0)='./file0\x00', 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x262040, 0x0) 12:33:08 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab01) 12:33:08 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'ipvlan1\x00', {0x2, 0x0, @rand_addr=0x64010102}}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) 12:33:08 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x400000000000000, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 12:33:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) [ 189.173782] block nbd5: shutting down sockets [ 189.185438] block nbd5: shutting down sockets [ 189.210756] FAT-fs (loop0): bogus number of reserved sectors 12:33:08 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x500000000000000, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 12:33:08 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab02) [ 189.245952] FAT-fs (loop0): This looks like a DOS 1.x volume; assuming default BPB values [ 189.291181] audit: type=1804 audit(1595853188.646:86): pid=10395 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir102465536/syzkaller.yBaZLD/62/cgroup.controllers" dev="sda1" ino=15980 res=1 12:33:08 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x600000000000000, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) [ 189.385199] block nbd5: shutting down sockets 12:33:08 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'ipvlan1\x00', {0x2, 0x0, @rand_addr=0x64010102}}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) [ 189.423565] block nbd5: shutting down sockets 12:33:08 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab04) 12:33:08 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x700000000000000, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) [ 189.582435] FAT-fs (loop2): bogus number of reserved sectors [ 189.593291] block nbd5: shutting down sockets [ 189.595697] FAT-fs (loop2): This looks like a DOS 1.x volume; assuming default BPB values [ 189.651881] FAT-fs (loop0): bogus number of reserved sectors [ 189.674796] block nbd5: shutting down sockets 12:33:09 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x800000000000000, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) [ 189.714418] FAT-fs (loop0): This looks like a DOS 1.x volume; assuming default BPB values [ 189.739529] audit: type=1804 audit(1595853189.096:87): pid=10426 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir102465536/syzkaller.yBaZLD/63/cgroup.controllers" dev="sda1" ino=16011 res=1 12:33:09 executing program 4: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000340)='./file0\x00') creat(&(0x7f00000002c0)='./file0\x00', 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x262040, 0x0) 12:33:09 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab05) 12:33:09 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) 12:33:09 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xa00000000000000, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 12:33:09 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'ipvlan1\x00', {0x2, 0x0, @rand_addr=0x64010102}}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) [ 190.105960] block nbd5: shutting down sockets [ 190.126865] block nbd5: shutting down sockets 12:33:09 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab06) 12:33:09 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xe00000000000000, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) [ 190.233781] block nbd5: shutting down sockets [ 190.269056] block nbd5: shutting down sockets 12:33:09 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab07) [ 190.325093] FAT-fs (loop2): bogus number of reserved sectors [ 190.358852] FAT-fs (loop2): This looks like a DOS 1.x volume; assuming default BPB values [ 190.396028] audit: type=1804 audit(1595853189.746:88): pid=10462 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir102465536/syzkaller.yBaZLD/64/cgroup.controllers" dev="sda1" ino=16011 res=1 [ 190.406517] block nbd5: shutting down sockets 12:33:09 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x1802000000000000, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) [ 190.522949] block nbd5: shutting down sockets 12:33:09 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'ipvlan1\x00', {0x2, 0x0, @rand_addr=0x64010102}}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) 12:33:09 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) 12:33:10 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab08) [ 190.777551] block nbd5: NBD_DISCONNECT [ 190.802075] block nbd5: Send disconnect failed -32 [ 190.832887] audit: type=1804 audit(1595853190.186:89): pid=10483 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir102465536/syzkaller.yBaZLD/65/cgroup.controllers" dev="sda1" ino=15980 res=1 [ 190.876926] block nbd5: Disconnected due to user request. [ 190.887213] block nbd5: shutting down sockets [ 190.921224] block nbd5: shutting down sockets 12:33:10 executing program 4: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000340)='./file0\x00') creat(&(0x7f00000002c0)='./file0\x00', 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x262040, 0x0) 12:33:10 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x18bfbac100000000, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 12:33:10 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab09) [ 190.979340] FAT-fs (loop2): bogus number of reserved sectors [ 190.994749] FAT-fs (loop2): This looks like a DOS 1.x volume; assuming default BPB values 12:33:10 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'ipvlan1\x00', {0x2, 0x0, @rand_addr=0x64010102}}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) 12:33:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8}, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) [ 191.085158] block nbd5: shutting down sockets [ 191.160721] block nbd5: shutting down sockets 12:33:10 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x2000000000000000, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 12:33:10 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0xa0400) r1 = socket(0x1e, 0x2, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$TUNSETOWNER(r2, 0x400454cc, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000000)={0x0, 0x80000, r2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0], 0x6, 0x1, 0x7, 0x2}) ioctl$NBD_DO_IT(r0, 0xab03) 12:33:10 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab0a) [ 191.349488] block nbd5: shutting down sockets [ 191.382800] block nbd5: shutting down sockets 12:33:10 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x40049409) 12:33:10 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x2baf140a00000000, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) [ 191.464417] audit: type=1804 audit(1595853190.816:90): pid=10525 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir102465536/syzkaller.yBaZLD/66/cgroup.controllers" dev="sda1" ino=16021 res=1 [ 191.490936] FAT-fs (loop2): bogus number of reserved sectors [ 191.497751] FAT-fs (loop2): This looks like a DOS 1.x volume; assuming default BPB values [ 191.612230] block nbd5: shutting down sockets 12:33:11 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x3400000000000000, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 12:33:11 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', 0x0, 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'ipvlan1\x00', {0x2, 0x0, @rand_addr=0x64010102}}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) [ 191.657411] block nbd5: shutting down sockets 12:33:11 executing program 4: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000340)='./file0\x00') creat(&(0x7f00000002c0)='./file0\x00', 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x262040, 0x0) 12:33:11 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0x40081271) 12:33:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) 12:33:11 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x3c00000000000000, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) [ 191.910799] audit: type=1804 audit(1595853191.236:91): pid=10540 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir102465536/syzkaller.yBaZLD/67/cgroup.controllers" dev="sda1" ino=15940 res=1 [ 191.977984] block nbd5: shutting down sockets 12:33:11 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', 0x0, 0x5a002, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e27b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'ipvlan1\x00', {0x2, 0x0, @rand_addr=0x64010102}}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) 12:33:11 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x3f00000000000000, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) [ 192.008870] block nbd5: shutting down sockets [ 192.130373] FAT-fs (loop2): bogus number of reserved sectors [ 192.135624] block nbd1: Device being setup by another task [ 192.159344] FAT-fs (loop2): This looks like a DOS 1.x volume; assuming default BPB values [ 192.183350] block nbd1: shutting down sockets [ 192.251172] audit: type=1804 audit(1595853191.606:92): pid=10579 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir102465536/syzkaller.yBaZLD/68/cgroup.controllers" dev="sda1" ino=15982 res=1 [ 207.979621] NOHZ: local_softirq_pending 08 [ 225.902450] NOHZ: local_softirq_pending 08 [ 228.458619] NOHZ: local_softirq_pending 08 [ 267.497811] NOHZ: local_softirq_pending 08 [ 268.779094] NOHZ: local_softirq_pending 08 [ 308.458114] NOHZ: local_softirq_pending 08 [ 310.377459] NOHZ: local_softirq_pending 08 [ 330.218563] NOHZ: local_softirq_pending 08 [ 348.790081] NOHZ: local_softirq_pending 08 [ 351.336734] INFO: task syz-executor.1:10514 blocked for more than 140 seconds. [ 351.344165] Not tainted 4.19.134-syzkaller #0 [ 351.350681] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 351.359285] syz-executor.1 D28568 10514 6581 0x00000004 [ 351.364940] Call Trace: [ 351.368407] __schedule+0x887/0x2040 [ 351.372144] ? io_schedule_timeout+0x140/0x140 [ 351.378696] ? mark_held_locks+0xf0/0xf0 [ 351.382782] schedule+0x8d/0x1b0 [ 351.386144] schedule_timeout+0x92d/0xfe0 [ 351.391395] ? usleep_range+0x170/0x170 [ 351.395385] ? wait_for_common+0x294/0x470 [ 351.400475] ? lock_downgrade+0x720/0x720 [ 351.404624] ? lock_acquire+0x170/0x3c0 [ 351.410782] ? wait_for_common+0x9e/0x470 [ 351.415021] ? _raw_spin_unlock_irq+0x24/0x80 [ 351.420367] wait_for_common+0x29c/0x470 [ 351.424436] ? bit_wait_io_timeout+0x100/0x100 [ 351.429860] ? __mutex_unlock_slowpath+0xea/0x610 [ 351.434726] ? wake_up_q+0xe0/0xe0 [ 351.439356] ? check_flush_dependency+0x86/0x400 [ 351.444148] flush_workqueue+0x40b/0x13e0 [ 351.449217] ? uevent_store+0x70/0x70 [ 351.453032] ? check_flush_dependency+0x400/0x400 [ 351.459121] ? sock_shutdown+0x1d1/0x240 [ 351.463229] nbd_ioctl+0x759/0xbe0 [ 351.467933] ? nbd_disconnect_and_put+0x270/0x270 [ 351.472821] ? wait_woken+0x250/0x250 [ 351.477812] ? __lock_acquire+0x6de/0x3ff0 [ 351.482092] ? nbd_disconnect_and_put+0x270/0x270 [ 351.488170] blkdev_ioctl+0x5cb/0x1a7e [ 351.492131] ? blkpg_ioctl+0x9d0/0x9d0 [ 351.496010] ? do_futex+0x163/0x1c40 [ 351.500944] ? mark_held_locks+0xf0/0xf0 [ 351.505047] ? mark_held_locks+0xf0/0xf0 [ 351.510286] ? kfree+0x110/0x210 [ 351.513657] ? memdup_user+0x93/0xb0 [ 351.518509] block_ioctl+0xe9/0x130 [ 351.522152] ? blkdev_fallocate+0x3f0/0x3f0 [ 351.527630] do_vfs_ioctl+0xcdb/0x12e0 [ 351.531552] ? selinux_file_ioctl+0x506/0x6c0 [ 351.536055] ? ioctl_preallocate+0x200/0x200 [ 351.541607] ? selinux_inode_link+0x20/0x20 [ 351.545996] ? __fget+0x356/0x510 [ 351.550711] ? do_dup2+0x450/0x450 [ 351.554278] ksys_ioctl+0x9b/0xc0 [ 351.558570] __x64_sys_ioctl+0x6f/0xb0 [ 351.562468] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 351.568257] do_syscall_64+0xf9/0x620 [ 351.572117] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 351.578500] RIP: 0033:0x45c369 [ 351.581718] Code: Bad RIP value. [ 351.585083] RSP: 002b:00007fce67eb5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 351.594562] RAX: ffffffffffffffda RBX: 0000000000011bc0 RCX: 000000000045c369 [ 351.602480] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 351.610340] RBP: 000000000078bf38 R08: 0000000000000000 R09: 0000000000000000 [ 351.618315] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 351.625605] R13: 00007fff57e4f31f R14: 00007fce67eb69c0 R15: 000000000078bf0c [ 351.633806] [ 351.633806] Showing all locks held in the system: [ 351.641135] 1 lock held by khungtaskd/1083: [ 351.645455] #0: 0000000083a71191 (rcu_read_lock){....}, at: debug_show_all_locks+0x53/0x265 [ 351.654959] 1 lock held by in:imklog/6137: [ 351.659890] #0: 0000000020a90c8a (&f->f_pos_lock){+.+.}, at: __fdget_pos+0x26f/0x310 [ 351.668615] 2 locks held by kworker/u5:1/7730: [ 351.673223] #0: 0000000000a3a333 ((wq_completion)"knbd%d-recv"nbd->index){+.+.}, at: process_one_work+0x767/0x1570 [ 351.684710] #1: 0000000049af8a48 ((work_completion)(&args->work)){+.+.}, at: process_one_work+0x79c/0x1570 [ 351.695423] [ 351.698440] ============================================= [ 351.698440] [ 351.705475] NMI backtrace for cpu 1 [ 351.709243] CPU: 1 PID: 1083 Comm: khungtaskd Not tainted 4.19.134-syzkaller #0 [ 351.716701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 351.726046] Call Trace: [ 351.728682] dump_stack+0x1fc/0x2fe [ 351.732351] nmi_cpu_backtrace.cold+0x63/0xa2 [ 351.736843] ? lapic_can_unplug_cpu.cold+0x39/0x39 [ 351.741786] nmi_trigger_cpumask_backtrace+0x1a6/0x1eb [ 351.747056] watchdog+0x991/0xe60 [ 351.750501] ? reset_hung_task_detector+0x30/0x30 [ 351.755348] kthread+0x30b/0x410 [ 351.758703] ? kthread_park+0x180/0x180 [ 351.762664] ret_from_fork+0x24/0x30 [ 351.766708] Sending NMI from CPU 1 to CPUs 0: [ 351.771732] NMI backtrace for cpu 0 [ 351.771739] CPU: 0 PID: 3688 Comm: systemd-journal Not tainted 4.19.134-syzkaller #0 [ 351.771745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 351.771750] RIP: 0010:clear_page_erms+0x0/0x10 [ 351.771761] Code: 89 47 08 48 89 47 10 48 89 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 00 10 00 00 31 c0 f3 aa c3 90 90 90 90 90 90 41 57 41 56 41 55 [ 351.771765] RSP: 0000:ffff8880944afa40 EFLAGS: 00000286 [ 351.771774] RAX: ffff888000000000 RBX: ffffea00024d7200 RCX: 1ffff1101289468e [ 351.771780] RDX: 1ffff1101289465e RSI: ffffffff818cea25 RDI: ffff8880935c8000 [ 351.771785] RBP: ffffea00024d7200 R08: 0000000000000000 R09: 0000000000000001 [ 351.771790] R10: 0000000000000004 R11: 0000000000000000 R12: 0000000000000000 [ 351.771796] R13: ffff8880944a2140 R14: ffff8880944a2140 R15: 0000000000000000 [ 351.771802] FS: 00007ff3c92e38c0(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 351.771806] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 351.771812] CR2: 00007ff3c67ca028 CR3: 0000000094931000 CR4: 00000000001406f0 [ 351.771817] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 351.771822] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 351.771826] Call Trace: [ 351.771830] shmem_getpage_gfp+0x12f7/0x37f0 [ 351.771834] ? shmem_alloc_and_acct_page+0x850/0x850 [ 351.771839] ? check_preemption_disabled+0x41/0x280 [ 351.771842] shmem_fault+0x206/0x6b0 [ 351.771847] ? shmem_read_mapping_page_gfp+0x170/0x170 [ 351.771851] __do_fault+0x10b/0x4b0 [ 351.771855] __handle_mm_fault+0x25b0/0x41c0 [ 351.771859] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 351.771863] ? vm_insert_page+0x9c0/0x9c0 [ 351.771867] ? debug_object_active_state+0x254/0x330 [ 351.771871] ? check_preemption_disabled+0x41/0x280 [ 351.771875] handle_mm_fault+0x436/0xb10 [ 351.771878] __do_page_fault+0x6d8/0xde0 [ 351.771883] ? trace_hardirqs_off_caller+0x69/0x210 [ 351.771887] ? spurious_fault+0x840/0x840 [ 351.771890] ? page_fault+0x8/0x30 [ 351.771895] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 351.771898] ? page_fault+0x8/0x30 [ 351.771902] page_fault+0x1e/0x30 [ 351.771906] RIP: 0033:0x7ff3c85ed03d [ 351.771917] Code: 0f 82 47 e5 fc ff 0f 1f 80 00 00 00 00 48 89 f8 48 83 fa 20 72 49 48 83 fa 40 0f 87 9f 00 00 00 c5 fe 6f 06 c5 fe 6f 4c 16 e0 fe 7f 07 c5 fe 7f 4c 17 e0 c5 f8 77 c3 48 3b 15 36 54 27 00 0f [ 351.771921] RSP: 002b:00007ffcbc8fd078 EFLAGS: 00010283 [ 351.771929] RAX: 00007ff3c67ca028 RBX: 00005614c171b290 RCX: 0000000000366fe8 [ 351.771934] RDX: 0000000000000025 RSI: 00005614c171b290 RDI: 00007ff3c67ca028 [ 351.771940] RBP: 0000000000000025 R08: 000000000036704d R09: 00005614c1713140 [ 351.771945] R10: 00007ffcbc8fd220 R11: 0000000000000001 R12: 00005614c1712ea0 [ 351.771950] R13: 0000000000000000 R14: 00007ffcbc8fd228 R15: 00007ff3c67c9fe8 [ 351.772950] Kernel panic - not syncing: hung_task: blocked tasks [ 352.050488] CPU: 1 PID: 1083 Comm: khungtaskd Not tainted 4.19.134-syzkaller #0 [ 352.057937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 352.067311] Call Trace: [ 352.069892] dump_stack+0x1fc/0x2fe [ 352.073506] panic+0x26a/0x50e [ 352.076766] ? __warn_printk+0xf3/0xf3 [ 352.080644] ? lapic_can_unplug_cpu.cold+0x39/0x39 [ 352.085804] ? ___preempt_schedule+0x16/0x18 [ 352.090254] ? watchdog+0x991/0xe60 [ 352.093885] ? nmi_trigger_cpumask_backtrace+0x15e/0x1eb [ 352.099339] watchdog+0x9a2/0xe60 [ 352.102834] ? reset_hung_task_detector+0x30/0x30 [ 352.107716] kthread+0x30b/0x410 [ 352.111095] ? kthread_park+0x180/0x180 [ 352.115066] ret_from_fork+0x24/0x30 [ 352.120096] Kernel Offset: disabled [ 352.123748] Rebooting in 86400 seconds..