z_open_pts(r0, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f0000000140)={0x4, &(0x7f00000000c0)=[{0x1f, 0xeb5, 0xd33, 0x5d}, {0x20, 0xfffffffffffffff7, 0x5, 0x1a}, {0xca, 0x2, 0x3a, 0x200}, {0x4, 0x8, 0x80000000, 0x8}]}) 11:56:57 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) [ 215.489855] device nr0 entered promiscuous mode 11:56:57 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) 11:56:57 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070") r2 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x1c2) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000100)) bind$alg(r0, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000140)) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r3 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001340)=""/239, 0xef}], 0x1}}], 0x40000000000015c, 0x0, 0x0) 11:56:57 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x1) syz_open_pts(r0, 0x880) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/btrfs-control\x00', 0xb4c41a2926cffdaa, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000000c0)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000180)={0x3, 0x200, 0x9, 0x8, r3}, 0x10) 11:56:57 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) [ 215.699219] device nr0 entered promiscuous mode 11:56:57 executing program 3: 11:56:57 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000340)=ANY=[], 0xff0e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@ccm_128={{0x304}, "78395c95d0fdfb60", "520b1e4a8ff7af2c241636098c1c22ff", "a9016007", "f6885a10e7196cef"}, 0x28) splice(r0, 0x0, r1, 0x0, 0x1000004b8, 0x0) 11:56:57 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000180)=0x3f, 0x12) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x1, 0x0, {0x2}}, 0x18) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}) r2 = syz_open_pts(r0, 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f00000004c0)={0x9, 0x0, [{0xd, 0xe2, 0x101, 0x0, 0x708}, {0xf, 0x3, 0x80000000, 0x6}, {0xba31fc5b3d14e6ab, 0x1, 0x101, 0x401, 0x7}, {0x0, 0x3, 0x5, 0x6, 0x6}, {0x80000008, 0x10000, 0x22, 0xfff, 0x8e21}, {0x80000019, 0x96, 0x0, 0x0, 0x1}, {0x4, 0x10000, 0x3, 0x7, 0xfffffffffffffffa}, {0xc0000001, 0x80000000, 0xa61d69aa00000, 0x9, 0x9}, {0xca73319c7e3a9e6e, 0x7, 0x80000000, 0x5b, 0xffffffff}]}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000200)={0x9, 0x0, [{0x4, 0x0, 0x0, 0x0, @irqchip={0x1, 0x2}}, {0x3, 0x3, 0x0, 0x0, @irqchip={0xffffffffffffffff, 0x2}}, {0x9, 0x3, 0x0, 0x0, @sint={0x7ff, 0xfa}}, {0x5, 0x2, 0x0, 0x0, @sint={0x1, 0x20}}, {0x1f, 0x2, 0x0, 0x0, @irqchip={0xfffffffffffffffa, 0x3}}, {0x8, 0x2, 0x0, 0x0, @msi={0x6, 0x3, 0x100}}, {0x80000001, 0x4, 0x0, 0x0, @msi={0x7ff, 0x74, 0x6f0a176f}}, {0xfff, 0x3, 0x0, 0x0, @msi={0x2, 0x6, 0x21}}, {0xfffffffffffffff7, 0x4, 0x0, 0x0, @msi={0x62, 0x3ff, 0x9}}]}) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f0000000640)=0x7fff) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000000680)=""/209) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r3, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x1c, r4, 0x20, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20040000) 11:56:57 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070") bind$alg(r0, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775db7b2803b4f0a12585675d26b0d5e3a3e5b3b60ced5c001b1b4b06a5109451e8075455dbb75df0dfa2077eccd6ad6200512700c69e5704514bc8cbbc0f1d03e9273a675847a0c734724a348e8261e1f46ccfda3d333946985872598b874fdbab48a5aab2319ccb1d683f9c7121c3e346a0af4cdee892db3136ac418bff9c398e64a12ae022c6119b5a05de6718d136bb289be8ebe6b188c47da72655af3bcd911aab486961bdf2fb9c1c8c710a430c3f294c9a1ad513ceeb371a47015306715b0a6e7844", 0xfffffffffffffe87) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001340)=""/239, 0xef}], 0x1}}], 0x40000000000015c, 0x0, 0x0) fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f0000000100)='y\x00', 0x2, 0x2) 11:56:57 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x50, &(0x7f0000000040)=[@in={0x2, 0x4e22, @rand_addr=0x100000000}, @in={0x2, 0x4e20, @rand_addr=0x2}, @in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e21, @broadcast}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000001c0)={r1, @in={{0x2, 0x4e21, @multicast1}}, 0xfff, 0x4, 0x3, 0x8, 0x7}, &(0x7f0000000280)=0x98) clone(0x41bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() getgroups(0x2, &(0x7f00000006c0)=[0xee01, 0xee01]) setresgid(0x0, 0x0, r3) unshare(0x30010000) rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f00000000c0)) ptrace(0x4206, r2) 11:56:57 executing program 4: capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000080)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, &(0x7f0000000040)}}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="d3d0cd80"], 0x4}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"/307, @ANYRESHEX, @ANYBLOB="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"], 0x0, 0x7c}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:56:57 executing program 3: 11:56:57 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) ioctl(0xffffffffffffffff, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070") bind$alg(r0, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) ioctl(r0, 0x7, &(0x7f0000000100)="f0a11f7d7e61cbc1b371ecd89cc0be97b070cb42996c2db40db0d94043bff754ab9227b0d69a3e6ed000ac4fa352dca8caa976aa2cda3f811daa76f1d8fcd05ba8a4abdc0bd48ee0eebd88433eb8cd6b7cc88bff713f4d1f08a9340f84bfc58f3250ce15eb2ef5e22d1a43472e5153efa3a8f029f2aab33699") setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001340)=""/239, 0xef}], 0x1}}], 0x40000000000015c, 0x0, 0x0) 11:56:58 executing program 3: 11:56:58 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x7, &(0x7f0000000080)="ecbbc86b77e4418c4836f2433ae4173f66a985dc886b7a61f249b8c3017a626d48dde241fdf8") ioctl(r1, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070") r2 = syz_open_dev$vcsn(&(0x7f0000000580)='/dev/vcs#\x00', 0x9, 0x200000) epoll_pwait(r2, &(0x7f00000005c0)=[{}, {}, {}, {}, {}], 0x5, 0x4, &(0x7f0000000600)={0xb6}, 0x8) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x2) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000100}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x15c, r4, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'erspan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vxcan1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gretap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x40050}, 0x40) bind$alg(r0, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r5 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r5, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000001c0)=""/239, 0xef}], 0x1}}], 0x1, 0x100000000, 0x0) 11:56:58 executing program 4: 11:56:58 executing program 3: [ 216.338585] capability: warning: `syz-executor.4' uses 32-bit capabilities (legacy support in use) [ 216.368285] ptrace attach of "/root/syz-executor.4"[9629] was attempted by "/root/syz-executor.4"[9635] 11:56:58 executing program 3: 11:56:58 executing program 0: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0xb, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 11:56:58 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x80000000}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) 11:56:58 executing program 4: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:tte_device_t:s0\x00', 0x22, 0x0) [ 216.869751] audit: type=1400 audit(1566820618.513:59): avc: denied { mac_admin } for pid=9655 comm="syz-executor.4" capability=33 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1 [ 216.869820] SELinux: Context system_u:object_r:tte_device_t:s0 is not valid (left unmapped). [ 216.908895] audit: type=1400 audit(1566820618.563:60): avc: denied { associate } for pid=9655 comm="syz-executor.4" name="btrfs-control" dev="devtmpfs" ino=15410 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=filesystem permissive=1 11:56:58 executing program 5: clone(0x41bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() getgroups(0x2, &(0x7f00000006c0)=[0xee01, 0xee01]) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0xc0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) setresgid(0x0, 0x0, r1) unshare(0x30010000) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x4206, r0) 11:56:58 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070") bind$alg(r0, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x40040) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001340)=""/239, 0xef}], 0x1}}], 0x40000000000015c, 0x0, 0x0) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r3, 0x406855c9, &(0x7f0000000240)={0x3, 0x31, {0x51, 0x2, 0x100000000, {0xc1, 0x8001}, {0x7, 0xfffffffffffffffe}, @cond=[{0x1, 0x7fffffff, 0x7, 0x6, 0x0, 0x1ff}, {0x2, 0x0, 0x800, 0x9, 0x9, 0x1ff}]}, {0x53, 0x9, 0x6, {0x59}, {0x4, 0x2}, @rumble={0x2, 0x9}}}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f00000001c0)={r1}) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000100)={0x20, 0x0, 0x1, 0x4, 0x7}) 11:56:58 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:tty_device_t:s0\x00', 0x22, 0x0) 11:56:58 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) 11:56:58 executing program 4: ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x4000, 0x0) 11:56:58 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) r2 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x8, 0x400000) ioctl$ASHMEM_SET_PROT_MASK(r2, 0x40087705, &(0x7f0000000180)={0x40, 0x6}) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f00000000c0), &(0x7f0000000140)=0xc) 11:56:58 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 11:56:58 executing program 4 (fault-call:5 fault-nth:0): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 11:56:58 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setxattr$trusted_overlay_opaque(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='trusted.overlay.opaque\x00', &(0x7f0000000380)='y\x00', 0x2, 0x3) ioctl(r1, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070") bind$alg(r0, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x200, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, r0, 0x0, 0x9, &(0x7f0000000200)='lrw(aes)\x00', 0xffffffffffffffff}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r2, r3, 0x0, 0x1, &(0x7f00000001c0)='\x00', r4}, 0x30) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r5 = accept$alg(r0, 0x0, 0x0) setsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f00000002c0)=0x8, 0x4) listen(r0, 0x8) sendmmsg$alg(r5, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r5, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001340)=""/239, 0xef}], 0x1}}], 0x40000000000015c, 0x0, 0x0) 11:56:58 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) 11:56:58 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000200)=""/65}, {&(0x7f0000000280)=""/244}], 0x8) 11:56:58 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070") bind$alg(r0, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r2 = accept$alg(r0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) eventfd(0x0) recvmmsg(r2, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001340)=""/239, 0xef}], 0x1}}], 0x40000000000015c, 0x0, 0x0) [ 217.286813] input: syz1 as /devices/virtual/input/input187 [ 217.302577] FAULT_INJECTION: forcing a failure. [ 217.302577] name failslab, interval 1, probability 0, space 0, times 0 [ 217.355028] CPU: 0 PID: 9693 Comm: syz-executor.4 Not tainted 4.14.140 #36 [ 217.362090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 217.371450] Call Trace: [ 217.374047] dump_stack+0x138/0x197 [ 217.377689] should_fail.cold+0x10f/0x159 [ 217.382037] should_failslab+0xdb/0x130 [ 217.386025] __kmalloc+0x2f0/0x7a0 [ 217.389574] ? avc_has_extended_perms+0x8ec/0xe40 [ 217.394423] ? get_pid_task+0x98/0x140 [ 217.398495] ? input_register_device+0x467/0xb20 [ 217.403365] input_register_device+0x467/0xb20 [ 217.407963] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 217.413154] ? uinput_request_submit.part.0+0x290/0x290 [ 217.419196] ? dquot_reclaim_space_nodirty+0x2d0/0x4b0 [ 217.424567] ? __might_sleep+0x93/0xb0 [ 217.428599] ? __fget+0x210/0x370 [ 217.432065] ? uinput_compat_ioctl+0xa0/0xa0 [ 217.436485] uinput_ioctl+0x4a/0x60 [ 217.440457] do_vfs_ioctl+0x7ae/0x1060 [ 217.444339] ? selinux_file_mprotect+0x5d0/0x5d0 [ 217.449266] ? lock_downgrade+0x6e0/0x6e0 [ 217.453563] ? ioctl_preallocate+0x1c0/0x1c0 [ 217.457977] ? __fget+0x237/0x370 [ 217.461448] ? security_file_ioctl+0x89/0xb0 [ 217.465862] SyS_ioctl+0x8f/0xc0 [ 217.469226] ? do_vfs_ioctl+0x1060/0x1060 [ 217.473368] do_syscall_64+0x1e8/0x640 [ 217.477406] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 217.482337] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 217.487540] RIP: 0033:0x459879 [ 217.490818] RSP: 002b:00007fb32813ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 217.499000] RAX: ffffffffffffffda RBX: 00007fb32813ec90 RCX: 0000000000459879 [ 217.506260] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 217.513516] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 217.520778] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb32813f6d4 [ 217.528176] R13: 00000000004c460b R14: 00000000004d8938 R15: 0000000000000005 11:56:59 executing program 5: clone(0x41bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() getgroups(0x2, &(0x7f00000006c0)=[0xee01, 0xee01]) setresgid(0x0, r1, r1) unshare(0x30010000) r2 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x101, 0x10200) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x5}, &(0x7f00000001c0)=0xc) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000200)={r3, @in={{0x2, 0x4e23, @remote}}, 0x6, 0x1, 0xbc81, 0x4, 0x8}, &(0x7f00000002c0)=0x98) r4 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x9, 0x3) write$P9_RSTATFS(r4, &(0x7f0000000040)={0x43, 0x9, 0x1, {0x4, 0xffffffffffff6725, 0x100000001, 0x8, 0x3, 0x2, 0x7, 0x600000, 0x1}}, 0x43) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x4206, r0) 11:56:59 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x81, 0x2000) recvfrom$llc(r1, &(0x7f0000000140)=""/88, 0x58, 0x10000, &(0x7f00000000c0)={0x1a, 0x324, 0x2, 0x3, 0x0, 0x180000000}, 0x10) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}) r2 = syz_open_pts(r0, 0x0) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) 11:56:59 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070") bind$alg(r0, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x80000000, 0x80) ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f0000000100)=""/35) recvmmsg(r2, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001340)=""/239, 0xef}], 0x1}}], 0x40000000000015c, 0x0, 0x0) 11:56:59 executing program 3 (fault-call:5 fault-nth:0): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 11:56:59 executing program 4 (fault-call:5 fault-nth:1): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 11:56:59 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) [ 218.011845] FAULT_INJECTION: forcing a failure. [ 218.011845] name failslab, interval 1, probability 0, space 0, times 0 [ 218.029485] FAULT_INJECTION: forcing a failure. [ 218.029485] name failslab, interval 1, probability 0, space 0, times 0 [ 218.045132] CPU: 0 PID: 9726 Comm: syz-executor.3 Not tainted 4.14.140 #36 [ 218.052167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 218.061518] Call Trace: [ 218.064285] dump_stack+0x138/0x197 [ 218.067920] should_fail.cold+0x10f/0x159 [ 218.072070] should_failslab+0xdb/0x130 [ 218.076038] __kmalloc+0x2f0/0x7a0 [ 218.079568] ? avc_has_extended_perms+0x8ec/0xe40 [ 218.084422] ? get_pid_task+0x98/0x140 [ 218.088306] ? input_register_device+0x467/0xb20 [ 218.093062] input_register_device+0x467/0xb20 [ 218.097648] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 218.102867] ? uinput_request_submit.part.0+0x290/0x290 [ 218.108331] ? __might_sleep+0x93/0xb0 [ 218.112300] ? __fget+0x210/0x370 [ 218.115757] ? uinput_compat_ioctl+0xa0/0xa0 [ 218.120165] uinput_ioctl+0x4a/0x60 [ 218.123786] do_vfs_ioctl+0x7ae/0x1060 [ 218.127667] ? selinux_file_mprotect+0x5d0/0x5d0 [ 218.132419] ? lock_downgrade+0x6e0/0x6e0 [ 218.136563] ? ioctl_preallocate+0x1c0/0x1c0 [ 218.140965] ? __fget+0x237/0x370 [ 218.144420] ? security_file_ioctl+0x89/0xb0 [ 218.148820] SyS_ioctl+0x8f/0xc0 [ 218.152178] ? do_vfs_ioctl+0x1060/0x1060 [ 218.156320] do_syscall_64+0x1e8/0x640 [ 218.160207] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 218.165052] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 218.170233] RIP: 0033:0x459879 [ 218.173525] RSP: 002b:00007fc30efd4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 218.181235] RAX: ffffffffffffffda RBX: 00007fc30efd4c90 RCX: 0000000000459879 [ 218.188542] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 218.196003] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 218.203449] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc30efd56d4 11:56:59 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) [ 218.210721] R13: 00000000004c460b R14: 00000000004d8938 R15: 0000000000000005 [ 218.218012] CPU: 1 PID: 9720 Comm: syz-executor.4 Not tainted 4.14.140 #36 [ 218.225148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 218.225152] Call Trace: [ 218.225168] dump_stack+0x138/0x197 [ 218.225183] should_fail.cold+0x10f/0x159 [ 218.225197] should_failslab+0xdb/0x130 [ 218.225212] kmem_cache_alloc_trace+0x2e9/0x790 [ 218.237266] device_private_init+0x4a/0x190 [ 218.237276] device_add+0xd1a/0x1490 [ 218.245030] ? rcu_read_lock_sched_held+0x110/0x130 [ 218.245041] ? __kmalloc+0x376/0x7a0 [ 218.245051] ? device_private_init+0x190/0x190 [ 218.275409] ? input_register_device+0x467/0xb20 [ 218.280295] input_register_device+0x60d/0xb20 [ 218.284915] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 218.290216] ? uinput_request_submit.part.0+0x290/0x290 [ 218.295597] ? __might_sleep+0x93/0xb0 [ 218.299469] ? __fget+0x210/0x370 [ 218.302909] ? uinput_compat_ioctl+0xa0/0xa0 [ 218.307298] uinput_ioctl+0x4a/0x60 [ 218.310914] do_vfs_ioctl+0x7ae/0x1060 [ 218.314874] ? selinux_file_mprotect+0x5d0/0x5d0 [ 218.319614] ? lock_downgrade+0x6e0/0x6e0 [ 218.323774] ? ioctl_preallocate+0x1c0/0x1c0 [ 218.328294] ? __fget+0x237/0x370 [ 218.331827] ? security_file_ioctl+0x89/0xb0 [ 218.336256] SyS_ioctl+0x8f/0xc0 [ 218.339631] ? do_vfs_ioctl+0x1060/0x1060 [ 218.343795] do_syscall_64+0x1e8/0x640 [ 218.347754] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 218.352602] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 218.357801] RIP: 0033:0x459879 11:57:00 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070") bind$alg(r0, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000180), 0x0, 0x0) splice(r2, &(0x7f00000000c0), r0, &(0x7f0000000100), 0x10000, 0x9) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e21, 0x8, @remote, 0x8}, @in={0x2, 0x4e23, @loopback}], 0x2c) recvmmsg(r2, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001340)=""/239, 0xef}], 0x1}}], 0x40000000000015c, 0x0, 0x0) 11:57:00 executing program 3 (fault-call:5 fault-nth:1): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) [ 218.360985] RSP: 002b:00007fb32813ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 218.368696] RAX: ffffffffffffffda RBX: 00007fb32813ec90 RCX: 0000000000459879 [ 218.375965] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 218.383223] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 218.390492] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb32813f6d4 [ 218.398178] R13: 00000000004c460b R14: 00000000004d8938 R15: 0000000000000005 11:57:00 executing program 4 (fault-call:5 fault-nth:2): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) [ 218.452951] FAULT_INJECTION: forcing a failure. [ 218.452951] name failslab, interval 1, probability 0, space 0, times 0 11:57:00 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) [ 218.499371] CPU: 1 PID: 9736 Comm: syz-executor.3 Not tainted 4.14.140 #36 [ 218.506435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 218.515883] Call Trace: [ 218.518474] dump_stack+0x138/0x197 [ 218.518494] should_fail.cold+0x10f/0x159 [ 218.518510] should_failslab+0xdb/0x130 [ 218.518522] kmem_cache_alloc_trace+0x2e9/0x790 [ 218.522946] FAULT_INJECTION: forcing a failure. [ 218.522946] name failslab, interval 1, probability 0, space 0, times 0 [ 218.526921] device_private_init+0x4a/0x190 [ 218.526932] device_add+0xd1a/0x1490 [ 218.526945] ? rcu_read_lock_sched_held+0x110/0x130 [ 218.526958] ? __kmalloc+0x376/0x7a0 [ 218.564321] ? device_private_init+0x190/0x190 [ 218.568896] ? input_register_device+0x467/0xb20 [ 218.573648] input_register_device+0x60d/0xb20 [ 218.578231] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 218.583415] ? uinput_request_submit.part.0+0x290/0x290 [ 218.588827] ? __might_sleep+0x93/0xb0 [ 218.593224] ? __fget+0x210/0x370 [ 218.596679] ? uinput_compat_ioctl+0xa0/0xa0 [ 218.601163] uinput_ioctl+0x4a/0x60 [ 218.604791] do_vfs_ioctl+0x7ae/0x1060 [ 218.608668] ? selinux_file_mprotect+0x5d0/0x5d0 [ 218.613420] ? lock_downgrade+0x6e0/0x6e0 [ 218.617564] ? ioctl_preallocate+0x1c0/0x1c0 [ 218.621965] ? __fget+0x237/0x370 [ 218.625417] ? security_file_ioctl+0x89/0xb0 [ 218.629821] SyS_ioctl+0x8f/0xc0 [ 218.633180] ? do_vfs_ioctl+0x1060/0x1060 [ 218.637336] do_syscall_64+0x1e8/0x640 [ 218.641215] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 218.646052] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 218.651228] RIP: 0033:0x459879 [ 218.654408] RSP: 002b:00007fc30efd4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 218.662210] RAX: ffffffffffffffda RBX: 00007fc30efd4c90 RCX: 0000000000459879 [ 218.669469] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 218.677254] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 218.684511] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc30efd56d4 [ 218.696810] R13: 00000000004c460b R14: 00000000004d8938 R15: 0000000000000005 [ 218.707765] CPU: 0 PID: 9742 Comm: syz-executor.4 Not tainted 4.14.140 #36 [ 218.716242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 218.725774] Call Trace: [ 218.725791] dump_stack+0x138/0x197 [ 218.725813] should_fail.cold+0x10f/0x159 [ 218.725827] should_failslab+0xdb/0x130 [ 218.732006] __kmalloc_track_caller+0x2ec/0x790 [ 218.732018] ? ___preempt_schedule+0x16/0x18 11:57:00 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070") bind$alg(r0, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000640)="0a0775db7b2803b4f054d700010000aba786a90000df0000c100000000d8a6672e47d04ec44b7f5b04e86b00000000000000000000000000000000433045da8513b184ec6c80f1c0af87eb62952a7e13ef938df7b6982c929154fc22b5849f8e7d45f72c6b465e3df098005a09000000000000003fdf76764689f49b2ff33407974d95eb651f2d948afc65aa9fa4f08b307fe83847749fdfb35a842a5464b8a885d332168e164084b398733d5e7b20ddc756842e78000000", 0x10058) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001340)=""/239, 0xef}], 0x1}}], 0x40000000000015c, 0x0, 0x0) [ 218.732031] ? kstrdup_const+0x48/0x60 [ 218.732041] kstrdup+0x3a/0x70 [ 218.732050] kstrdup_const+0x48/0x60 [ 218.732060] __kernfs_new_node+0x2f/0x420 [ 218.732068] ? vprintk_func+0x65/0x159 [ 218.732081] kernfs_new_node+0x80/0xf0 [ 218.740160] kernfs_create_dir_ns+0x41/0x140 [ 218.740172] sysfs_create_dir_ns+0xbe/0x1d0 [ 218.740186] kobject_add_internal.part.0.cold+0x114/0x5ae [ 218.740200] kobject_add+0x11f/0x180 [ 218.740209] ? kset_create_and_add+0x180/0x180 [ 218.740222] ? mutex_unlock+0xd/0x10 [ 218.740236] device_add+0x383/0x1490 [ 218.771896] ? rcu_read_lock_sched_held+0x110/0x130 [ 218.780587] ? device_private_init+0x190/0x190 [ 218.780599] ? input_register_device+0x467/0xb20 [ 218.780610] input_register_device+0x60d/0xb20 [ 218.780625] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 218.780639] ? uinput_request_submit.part.0+0x290/0x290 [ 218.780664] ? __might_sleep+0x93/0xb0 [ 218.780673] ? __fget+0x210/0x370 [ 218.780686] ? uinput_compat_ioctl+0xa0/0xa0 [ 218.780696] uinput_ioctl+0x4a/0x60 11:57:00 executing program 5: clone(0x41bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() getgroups(0x2, &(0x7f00000006c0)=[0xee01, 0xee01]) setresgid(0x0, 0x0, r1) prctl$PR_SET_PTRACER(0x59616d61, r0) unshare(0x30010000) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x4206, r0) [ 218.780707] do_vfs_ioctl+0x7ae/0x1060 [ 218.780719] ? selinux_file_mprotect+0x5d0/0x5d0 [ 218.780728] ? lock_downgrade+0x6e0/0x6e0 [ 218.780740] ? ioctl_preallocate+0x1c0/0x1c0 [ 218.794531] ? __fget+0x237/0x370 [ 218.794550] ? security_file_ioctl+0x89/0xb0 [ 218.802030] SyS_ioctl+0x8f/0xc0 [ 218.802038] ? do_vfs_ioctl+0x1060/0x1060 [ 218.802050] do_syscall_64+0x1e8/0x640 [ 218.802058] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 218.802074] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 218.802081] RIP: 0033:0x459879 11:57:00 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x2000000000000}) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) 11:57:00 executing program 3 (fault-call:5 fault-nth:2): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 11:57:00 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070") bind$alg(r0, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f0000000100)={0x1, 0xa, 0xf, 0xe, 0x9, 0x800, 0x1, 0x70, 0x1}) recvmmsg(r2, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001340)=""/239, 0xef}], 0x1}}], 0x40000000000015c, 0x0, 0x0) [ 218.802086] RSP: 002b:00007fb32813ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 218.802095] RAX: ffffffffffffffda RBX: 00007fb32813ec90 RCX: 0000000000459879 [ 218.802100] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 218.802105] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 218.802110] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb32813f6d4 [ 218.802117] R13: 00000000004c460b R14: 00000000004d8938 R15: 0000000000000005 [ 218.832887] kobject_add_internal failed for input192 (error: -12 parent: input) 11:57:00 executing program 2: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$VIDIOC_OVERLAY(r0, 0x4004560e, &(0x7f0000000140)=0x3ff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x1) r2 = socket(0x10, 0x800, 0x80000000) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080), 0x10) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}) r3 = syz_open_pts(r1, 0x0) readv(r3, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) [ 218.954257] FAULT_INJECTION: forcing a failure. [ 218.954257] name failslab, interval 1, probability 0, space 0, times 0 [ 219.021990] CPU: 1 PID: 9760 Comm: syz-executor.3 Not tainted 4.14.140 #36 [ 219.029048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 219.038434] Call Trace: [ 219.041025] dump_stack+0x138/0x197 [ 219.041043] should_fail.cold+0x10f/0x159 [ 219.041062] should_failslab+0xdb/0x130 [ 219.048901] __kmalloc_track_caller+0x2ec/0x790 [ 219.048912] ? ___preempt_schedule+0x16/0x18 [ 219.048926] ? kstrdup_const+0x48/0x60 [ 219.048937] kstrdup+0x3a/0x70 [ 219.048947] kstrdup_const+0x48/0x60 [ 219.073019] __kernfs_new_node+0x2f/0x420 [ 219.077174] ? vprintk_func+0x65/0x159 [ 219.081069] kernfs_new_node+0x80/0xf0 [ 219.084984] kernfs_create_dir_ns+0x41/0x140 [ 219.089400] sysfs_create_dir_ns+0xbe/0x1d0 [ 219.093760] kobject_add_internal.part.0.cold+0x114/0x5ae [ 219.099376] kobject_add+0x11f/0x180 [ 219.103097] ? kset_create_and_add+0x180/0x180 [ 219.107686] ? mutex_unlock+0xd/0x10 [ 219.111407] device_add+0x383/0x1490 [ 219.115120] ? rcu_read_lock_sched_held+0x110/0x130 [ 219.120157] ? device_private_init+0x190/0x190 [ 219.124746] ? input_register_device+0x467/0xb20 [ 219.129505] input_register_device+0x60d/0xb20 [ 219.134102] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 219.139297] ? uinput_request_submit.part.0+0x290/0x290 [ 219.144671] ? __might_sleep+0x93/0xb0 [ 219.148558] ? __fget+0x210/0x370 [ 219.152022] ? uinput_compat_ioctl+0xa0/0xa0 [ 219.156433] uinput_ioctl+0x4a/0x60 [ 219.160068] do_vfs_ioctl+0x7ae/0x1060 [ 219.163962] ? selinux_file_mprotect+0x5d0/0x5d0 11:57:00 executing program 4 (fault-call:5 fault-nth:3): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 11:57:00 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000080)={0x8, [0x8, 0x100000001, 0x33656bb9, 0x9, 0x4, 0x6, 0x7, 0x1]}, 0x14) r2 = syz_open_pts(r0, 0x0) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') sendmsg$FOU_CMD_GET(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x8c, r3, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @empty}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e22}, @FOU_ATTR_PEER_V4={0x8, 0x8, @remote}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @dev={0xfe, 0x80, [], 0xf}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @rand_addr="bf536f8cc84b11925c60e0f9ce7c867b"}, @FOU_ATTR_PEER_V4={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 11:57:00 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x1) r1 = open(&(0x7f0000000180)='./file0\x00', 0x2a000, 0x10) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0}, &(0x7f00000003c0)=0xc) getresuid(&(0x7f0000000400), &(0x7f0000000440), &(0x7f00000004c0)=0x0) syz_mount_image$ntfs(&(0x7f0000000240)='ntfs\x00', &(0x7f0000000280)='./file0\x00', 0x3, 0x1, &(0x7f0000000340)=[{&(0x7f00000002c0)="7039cc8635a5cd7ac7749baa579e0f01001932f13dd42b2aa12112adb57763b799eb2dd3e1006f75aa25de7956a288a102212f49f94a52039610517635c6d5525ecf85b568af43c803171a7026d2387b3db83cf704486344893cb4e08207f2284274341867c91910f664930818277fc4", 0x70, 0x9}], 0x120000, &(0x7f0000000500)={[{@disable_sparse_no='disable_sparse=no'}, {@errors_remount='errors=remount-ro'}, {@disable_sparse_no='disable_sparse=no'}, {@errors_remount='errors=remount-ro'}, {@utf8='utf8'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0xffffffffffffffff}}, {@show_sys_files_yes='show_sys_files=yes'}, {@dmask={'dmask', 0x3d, 0x8000}}, {@errors_continue='errors=continue'}, {@disable_sparse_no='disable_sparse=no'}], [{@uid_eq={'uid', 0x3d, r2}}, {@fowner_lt={'fowner<', r3}}, {@permit_directio='permit_directio'}, {@permit_directio='permit_directio'}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@context={'context', 0x3d, 'system_u'}}, {@permit_directio='permit_directio'}, {@seclabel='seclabel'}, {@smackfsdef={'smackfsdef', 0x3d, 'posix_acl_access:'}}]}) openat$null(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/null\x00', 0xeca3c52b817cc6f6, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) r4 = syz_open_pts(r0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000200)={0x80000000, 0x7ff, 0x10000, 0x0, 0x4, "af9172716f36ce63934cfe5626bf07d8d090e2", 0x40, 0x9}) readv(r4, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) ioctl$VT_OPENQRY(r4, 0x5600, &(0x7f0000000700)) r5 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x101240, 0x15) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000140)=0x9, 0x4) [ 219.163975] ? lock_downgrade+0x6e0/0x6e0 [ 219.163988] ? ioctl_preallocate+0x1c0/0x1c0 [ 219.164001] ? __fget+0x237/0x370 [ 219.164016] ? security_file_ioctl+0x89/0xb0 [ 219.164027] SyS_ioctl+0x8f/0xc0 [ 219.173024] ? do_vfs_ioctl+0x1060/0x1060 [ 219.173037] do_syscall_64+0x1e8/0x640 [ 219.173046] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 219.173063] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 219.173072] RIP: 0033:0x459879 [ 219.173077] RSP: 002b:00007fc30efd4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 219.173088] RAX: ffffffffffffffda RBX: 00007fc30efd4c90 RCX: 0000000000459879 [ 219.173094] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 219.173103] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 219.196846] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc30efd56d4 [ 219.196852] R13: 00000000004c460b R14: 00000000004d8938 R15: 0000000000000005 [ 219.231388] kobject_add_internal failed for input193 (error: -12 parent: input) [ 219.263325] FAULT_INJECTION: forcing a failure. 11:57:00 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) 11:57:00 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070") bind$alg(r0, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r2 = accept$alg(r0, 0x0, 0x0) statfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)=""/41) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001340)=""/239, 0xef}], 0x1}}], 0x40000000000015c, 0x0, 0x0) 11:57:00 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) [ 219.263325] name failslab, interval 1, probability 0, space 0, times 0 [ 219.283934] CPU: 0 PID: 9783 Comm: syz-executor.4 Not tainted 4.14.140 #36 [ 219.291542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 219.291547] Call Trace: [ 219.291563] dump_stack+0x138/0x197 [ 219.291579] should_fail.cold+0x10f/0x159 [ 219.291593] should_failslab+0xdb/0x130 [ 219.291604] kmem_cache_alloc+0x2d7/0x780 [ 219.291610] ? memcpy+0x46/0x50 [ 219.291621] ? kstrdup+0x5a/0x70 [ 219.291637] __kernfs_new_node+0x70/0x420 [ 219.291646] ? vprintk_func+0x65/0x159 [ 219.291658] kernfs_new_node+0x80/0xf0 [ 219.291669] kernfs_create_dir_ns+0x41/0x140 [ 219.291680] sysfs_create_dir_ns+0xbe/0x1d0 [ 219.291691] kobject_add_internal.part.0.cold+0x114/0x5ae [ 219.291704] kobject_add+0x11f/0x180 [ 219.291713] ? kset_create_and_add+0x180/0x180 [ 219.291727] ? mutex_unlock+0xd/0x10 [ 219.291741] device_add+0x383/0x1490 11:57:01 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070") bind$alg(r0, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) r2 = dup3(r1, r1, 0x80000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r3 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) ioctl$KDGETKEYCODE(r2, 0x4b4c, &(0x7f0000000080)={0x41a3, 0x1}) recvmmsg(r3, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001340)=""/239, 0xef}], 0x1}}], 0x40000000000015c, 0x0, 0x0) [ 219.291758] ? rcu_read_lock_sched_held+0x110/0x130 [ 219.291771] ? device_private_init+0x190/0x190 [ 219.291782] ? input_register_device+0x467/0xb20 [ 219.291793] input_register_device+0x60d/0xb20 [ 219.291809] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 219.291821] ? uinput_request_submit.part.0+0x290/0x290 [ 219.291845] ? __might_sleep+0x93/0xb0 [ 219.291853] ? __fget+0x210/0x370 [ 219.291865] ? uinput_compat_ioctl+0xa0/0xa0 [ 219.311541] uinput_ioctl+0x4a/0x60 [ 219.311553] do_vfs_ioctl+0x7ae/0x1060 [ 219.311566] ? selinux_file_mprotect+0x5d0/0x5d0 [ 219.311578] ? lock_downgrade+0x6e0/0x6e0 [ 219.311589] ? ioctl_preallocate+0x1c0/0x1c0 [ 219.311600] ? __fget+0x237/0x370 [ 219.311615] ? security_file_ioctl+0x89/0xb0 [ 219.311626] SyS_ioctl+0x8f/0xc0 [ 219.319713] ? do_vfs_ioctl+0x1060/0x1060 [ 219.319728] do_syscall_64+0x1e8/0x640 [ 219.319738] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 219.319759] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 219.330663] RIP: 0033:0x459879 [ 219.330668] RSP: 002b:00007fb32813ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 219.330679] RAX: ffffffffffffffda RBX: 00007fb32813ec90 RCX: 0000000000459879 [ 219.330685] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 219.330691] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 219.330697] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb32813f6d4 [ 219.330703] R13: 00000000004c460b R14: 00000000004d8938 R15: 0000000000000005 [ 219.363708] kobject_add_internal failed for input194 (error: -12 parent: input) 11:57:01 executing program 5: clone(0x41bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() getgroups(0x2, &(0x7f00000006c0)=[0xee01, 0xee01]) setresgid(0x0, 0x0, r1) unshare(0x30010000) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x4206, r0) link(&(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00') 11:57:01 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x6}, 0x18) 11:57:01 executing program 4 (fault-call:5 fault-nth:4): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 11:57:01 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x11000008912, &(0x7f00000001c0)="11dc4fc109efcfe47bf070b66835ba7231852e668f5ac9468986e97777869c4c684812ac00d80f08b8e01d6bf3da650e79902240e8f7dc6ff37cb59d7f3df116c790e91a08ee36ca8f2f77f751098180925ef4ddc477bdf5e65567c2aa37bac3505fa03da3860728dd8858eeb35481d9acf23c272942de25f3d0cf5200") bind$alg(r0, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000100)={0x0, 0xff, 0x9, [0x1, 0x38, 0x8, 0x2, 0x1, 0x7, 0x3, 0x7, 0x0]}, &(0x7f0000000140)=0x1a) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000240)={r3, 0x7fffffff}, 0x8) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r4 = accept$alg(r0, 0x0, 0x0) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r4, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001340)=""/239, 0xef}], 0x1}}], 0x40000000000015c, 0x0, 0x0) 11:57:01 executing program 3 (fault-call:5 fault-nth:3): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) [ 219.718173] FAULT_INJECTION: forcing a failure. [ 219.718173] name failslab, interval 1, probability 0, space 0, times 0 [ 219.743949] FAULT_INJECTION: forcing a failure. [ 219.743949] name failslab, interval 1, probability 0, space 0, times 0 [ 219.755781] CPU: 1 PID: 9819 Comm: syz-executor.4 Not tainted 4.14.140 #36 11:57:01 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r2, 0x80386433, &(0x7f00000001c0)=""/139) ioctl(r1, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070") bind$alg(r0, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r3 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001340)=""/239, 0xef}], 0x1}}], 0x40000000000015c, 0x0, 0x0) [ 219.762791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 219.762862] Call Trace: [ 219.762877] dump_stack+0x138/0x197 [ 219.762895] should_fail.cold+0x10f/0x159 [ 219.762910] should_failslab+0xdb/0x130 [ 219.762921] kmem_cache_alloc+0x47/0x780 [ 219.762929] ? save_stack_trace+0x16/0x20 [ 219.762935] ? save_stack+0x45/0xd0 [ 219.762945] ? kasan_kmalloc+0xce/0xf0 [ 219.802458] ? kasan_slab_alloc+0xf/0x20 [ 219.806663] ? kmem_cache_alloc+0x12e/0x780 [ 219.810992] ? __kernfs_new_node+0x70/0x420 [ 219.815313] ? kernfs_new_node+0x80/0xf0 [ 219.819515] ? kernfs_create_dir_ns+0x41/0x140 [ 219.824110] radix_tree_node_alloc.constprop.0+0x1c7/0x310 [ 219.829747] idr_get_free_cmn+0x563/0x8d0 [ 219.834172] idr_alloc_cmn+0x10e/0x210 [ 219.838079] ? __fprop_inc_percpu_max+0x1e0/0x1e0 [ 219.842931] ? __lock_is_held+0xb6/0x140 [ 219.846989] ? check_preemption_disabled+0x3c/0x250 [ 219.852023] idr_alloc_cyclic+0xd0/0x1e2 [ 219.856187] ? ida_simple_remove+0x60/0x60 [ 219.860430] __kernfs_new_node+0xe4/0x420 [ 219.864591] kernfs_new_node+0x80/0xf0 11:57:01 executing program 1: r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000140)='cgroup.type\x00', 0x2, 0x0) syncfs(r0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070") bind$alg(r1, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) dup2(r0, r2) r3 = accept$alg(r1, 0x0, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x200000, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100), 0x4) sendmmsg$alg(r3, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001340)=""/239, 0xef}], 0x1}}], 0x40000000000015c, 0x0, 0x0) [ 219.868485] kernfs_create_dir_ns+0x41/0x140 [ 219.872961] sysfs_create_dir_ns+0xbe/0x1d0 [ 219.872975] kobject_add_internal.part.0.cold+0x114/0x5ae [ 219.872988] kobject_add+0x11f/0x180 [ 219.872998] ? kset_create_and_add+0x180/0x180 [ 219.873014] ? mutex_unlock+0xd/0x10 [ 219.873027] device_add+0x383/0x1490 [ 219.873039] ? rcu_read_lock_sched_held+0x110/0x130 [ 219.873051] ? device_private_init+0x190/0x190 [ 219.873062] ? input_register_device+0x467/0xb20 [ 219.873072] input_register_device+0x60d/0xb20 [ 219.873088] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 219.882925] ? uinput_request_submit.part.0+0x290/0x290 [ 219.882954] ? __might_sleep+0x93/0xb0 [ 219.882963] ? __fget+0x210/0x370 [ 219.882976] ? uinput_compat_ioctl+0xa0/0xa0 [ 219.940392] uinput_ioctl+0x4a/0x60 [ 219.944084] do_vfs_ioctl+0x7ae/0x1060 [ 219.948110] ? selinux_file_mprotect+0x5d0/0x5d0 [ 219.952876] ? lock_downgrade+0x6e0/0x6e0 [ 219.957034] ? ioctl_preallocate+0x1c0/0x1c0 [ 219.961448] ? __fget+0x237/0x370 [ 219.964914] ? security_file_ioctl+0x89/0xb0 [ 219.969319] SyS_ioctl+0x8f/0xc0 [ 219.972680] ? do_vfs_ioctl+0x1060/0x1060 [ 219.976838] do_syscall_64+0x1e8/0x640 [ 219.980731] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 219.985592] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 219.990770] RIP: 0033:0x459879 [ 219.990775] RSP: 002b:00007fb32813ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 219.990785] RAX: ffffffffffffffda RBX: 00007fb32813ec90 RCX: 0000000000459879 [ 219.990790] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 219.990795] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 219.990800] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb32813f6d4 [ 219.990805] R13: 00000000004c460b R14: 00000000004d8938 R15: 0000000000000005 [ 220.014772] CPU: 0 PID: 9815 Comm: syz-executor.3 Not tainted 4.14.140 #36 [ 220.023955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 220.023959] Call Trace: [ 220.023975] dump_stack+0x138/0x197 [ 220.023992] should_fail.cold+0x10f/0x159 [ 220.024007] should_failslab+0xdb/0x130 [ 220.024019] kmem_cache_alloc+0x2d7/0x780 [ 220.038698] ? memcpy+0x46/0x50 [ 220.038712] ? kstrdup+0x5a/0x70 [ 220.038726] __kernfs_new_node+0x70/0x420 [ 220.045866] input: syz1 as /devices/virtual/input/input196 [ 220.055166] ? vprintk_func+0x65/0x159 [ 220.055181] kernfs_new_node+0x80/0xf0 [ 220.055193] kernfs_create_dir_ns+0x41/0x140 [ 220.055206] sysfs_create_dir_ns+0xbe/0x1d0 [ 220.061379] kobject_add_internal.part.0.cold+0x114/0x5ae [ 220.061394] kobject_add+0x11f/0x180 [ 220.061404] ? kset_create_and_add+0x180/0x180 [ 220.061417] ? mutex_unlock+0xd/0x10 [ 220.061429] device_add+0x383/0x1490 [ 220.061440] ? rcu_read_lock_sched_held+0x110/0x130 [ 220.080496] ? device_private_init+0x190/0x190 [ 220.080510] ? input_register_device+0x467/0xb20 [ 220.080523] input_register_device+0x60d/0xb20 [ 220.080541] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 220.090368] ? uinput_request_submit.part.0+0x290/0x290 [ 220.090394] ? __might_sleep+0x93/0xb0 [ 220.090406] ? __fget+0x210/0x370 [ 220.098328] ? uinput_compat_ioctl+0xa0/0xa0 [ 220.098338] uinput_ioctl+0x4a/0x60 [ 220.098350] do_vfs_ioctl+0x7ae/0x1060 [ 220.107136] ? selinux_file_mprotect+0x5d0/0x5d0 [ 220.107148] ? lock_downgrade+0x6e0/0x6e0 [ 220.107160] ? ioctl_preallocate+0x1c0/0x1c0 [ 220.116377] ? __fget+0x237/0x370 [ 220.116395] ? security_file_ioctl+0x89/0xb0 [ 220.116408] SyS_ioctl+0x8f/0xc0 [ 220.124702] ? do_vfs_ioctl+0x1060/0x1060 [ 220.124717] do_syscall_64+0x1e8/0x640 [ 220.124729] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 220.133465] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 220.133474] RIP: 0033:0x459879 [ 220.133479] RSP: 002b:00007fc30efd4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 220.133490] RAX: ffffffffffffffda RBX: 00007fc30efd4c90 RCX: 0000000000459879 [ 220.133495] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 220.133500] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 220.133505] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc30efd56d4 [ 220.133512] R13: 00000000004c460b R14: 00000000004d8938 R15: 0000000000000005 11:57:01 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x1) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x4, 0x100) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f00000000c0)=0x6) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x10001) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}) syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x71, 0x20000) r2 = syz_open_pts(r1, 0x10080) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) 11:57:01 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070") getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000140)=0xe8) syz_mount_image$ntfs(&(0x7f0000000080)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0xa77b, 0x4, &(0x7f0000000400)=[{&(0x7f0000001480)="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", 0x1000, 0x8001}, {&(0x7f00000001c0)="0250f53b4a92d3f4d970050da1441c2f4243c48888e50d8bded3bf5baeffc7f08567450b610e156244ca280c19f80d8f0b51f1a4c0387a36a85e0688514f5fc2271aaef79afc65063488dfdb73a5e8437eee9bb9239e3b38507ef0b47a38ed7311ca3616ff0dbce47b6019309fdc32132ea352a21291e63ac41c7b72263758e1", 0x80, 0x4}, {&(0x7f0000000240)="daccbe8480c7631ea589b52b97b37d108ff5980146d27ad352d9acbc27f4c73ed7d908a6921aaa4a30c3a24850b5db8822832765bee2e69d5c7a2b294e8d0f63d4a9f1b36ac2d1e84bd13bb9761602983ccbd060606985fc090e9387860e18bcfddd908464655dbe1ca02be3fd8a53508b8882199da34c10ce13e20e0012f53679d84e664592439f3314f31de46873977916b7ca7651b124c728204b92cb6ceafd50e2970b83739e3cca610835405369a47354bfb2a394415a034fcbbd48841250b2fcb479d00486cb328867533afa2b9ccab3be6c7678a7bdd9fa9c1103830bd3e657072c894f0682859fa6", 0xec, 0x5}, {&(0x7f0000000340)="69f6d84186b0d520aec18906c5c5dd36a791a095a44167c9e496fb5c59cf953b6f045ea0c0ec6a06784d9e4baf5e3be5190eea4da090b5ef3a2aeedc57074b96cb375962a40f231f7fca27a24471c2b6548650bd1fa73484a8a085e1d93ce211293b93d7f476cbac8d4fbc8a7be68d63d80816f2a6a07a5c93f008f982e23de86e64dafb05f2", 0x86, 0x8001}], 0x1001000, &(0x7f0000000680)={[{@case_sensitive_yes='case_sensitive=yes'}, {@utf8='utf8'}, {@errors_remount='errors=remount-ro'}, {@case_sensitive_yes='case_sensitive=yes'}, {@errors_remount='errors=remount-ro'}, {@nls={'nls', 0x3d, 'cp737'}}, {@errors_recover='errors=recover'}, {@uid={'uid', 0x3d, r2}}], [{@appraise_type='appraise_type=imasig'}, {@audit='audit'}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'lrw(aes)\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]}) bind$alg(r0, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r3 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001340)=""/239, 0xef}], 0x1}}], 0x40000000000015c, 0x0, 0x0) 11:57:01 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x6}, 0x18) 11:57:01 executing program 3 (fault-call:5 fault-nth:4): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) [ 220.271426] kobject_add_internal failed for input195 (error: -12 parent: input) 11:57:02 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x6}, 0x18) [ 220.346653] FAULT_INJECTION: forcing a failure. [ 220.346653] name failslab, interval 1, probability 0, space 0, times 0 [ 220.404593] CPU: 0 PID: 9847 Comm: syz-executor.3 Not tainted 4.14.140 #36 [ 220.411689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 220.421404] Call Trace: [ 220.424009] dump_stack+0x138/0x197 [ 220.427658] should_fail.cold+0x10f/0x159 [ 220.431919] should_failslab+0xdb/0x130 [ 220.435903] kmem_cache_alloc+0x2d7/0x780 [ 220.440051] ? save_trace+0x290/0x290 [ 220.440059] ? save_trace+0x290/0x290 [ 220.440072] __kernfs_new_node+0x70/0x420 [ 220.440084] kernfs_new_node+0x80/0xf0 [ 220.440096] __kernfs_create_file+0x46/0x323 [ 220.440106] sysfs_add_file_mode_ns+0x1e4/0x450 [ 220.440118] sysfs_create_file_ns+0x8e/0xb0 [ 220.440131] device_create_file+0xd7/0x110 [ 220.440143] ? acpi_bind_one+0x770/0x770 [ 220.440152] device_add+0x3be/0x1490 [ 220.440164] ? rcu_read_lock_sched_held+0x110/0x130 [ 220.440175] ? device_private_init+0x190/0x190 [ 220.440186] ? input_register_device+0x467/0xb20 [ 220.440197] input_register_device+0x60d/0xb20 [ 220.440214] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 220.440226] ? uinput_request_submit.part.0+0x290/0x290 [ 220.440249] ? __might_sleep+0x93/0xb0 [ 220.440260] ? __fget+0x210/0x370 [ 220.521245] ? uinput_compat_ioctl+0xa0/0xa0 [ 220.525825] uinput_ioctl+0x4a/0x60 [ 220.529482] do_vfs_ioctl+0x7ae/0x1060 [ 220.533463] ? selinux_file_mprotect+0x5d0/0x5d0 [ 220.538210] ? lock_downgrade+0x6e0/0x6e0 [ 220.542621] ? ioctl_preallocate+0x1c0/0x1c0 [ 220.547089] ? __fget+0x237/0x370 [ 220.550554] ? security_file_ioctl+0x89/0xb0 [ 220.554958] SyS_ioctl+0x8f/0xc0 [ 220.558354] ? do_vfs_ioctl+0x1060/0x1060 [ 220.562799] do_syscall_64+0x1e8/0x640 [ 220.566683] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 220.571522] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 220.576901] RIP: 0033:0x459879 [ 220.580230] RSP: 002b:00007fc30efd4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 220.588155] RAX: ffffffffffffffda RBX: 00007fc30efd4c90 RCX: 0000000000459879 [ 220.595601] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 11:57:02 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/dsp\x00', 0x625880ba5ce6bd87, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000500)='/dev/null\x00', 0x410b00, 0x0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000540)='/dev/cachefiles\x00', 0x20800, 0x0) r5 = syz_open_dev$dspn(&(0x7f0000000580)='/dev/dsp#\x00', 0x81, 0x8000) r6 = dup(0xffffffffffffffff) r7 = socket(0x0, 0x6, 0x40) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x78, r2, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x7a046565ed46b552}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6d2d}, @NBD_ATTR_SOCKETS={0x2c, 0x7, [{0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x4) ptrace$cont(0x18, r0, 0xfffffffffffff000, 0x100000000) getgroups(0x0, &(0x7f00000001c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) getgroups(0x3, &(0x7f00000003c0)=[0xee01, 0xffffffffffffffff, 0xffffffffffffffff]) getgroups(0x1, &(0x7f0000000400)=[0xee00]) setresgid(r10, r8, r9) unshare(0x30010000) r11 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x101, 0x40041) syz_init_net_socket$ax25(0x3, 0x0, 0xca) write$char_usb(r11, &(0x7f0000000040)="dc127b5489d6d2d54613309fea03", 0xe) getsockopt$inet_sctp_SCTP_ASSOCINFO(r11, 0x84, 0x1, &(0x7f0000000080)={0x0, 0xde9516c, 0x4, 0xffffffffffffffc6, 0x7fff, 0x6}, &(0x7f0000000140)=0x14) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r11, 0x84, 0x19, &(0x7f0000000180)={r12, 0x40}, 0x8) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x4206, r0) 11:57:02 executing program 4 (fault-call:5 fault-nth:5): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 11:57:02 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) [ 220.602861] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 220.610124] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc30efd56d4 [ 220.617487] R13: 00000000004c460b R14: 00000000004d8938 R15: 0000000000000005 11:57:02 executing program 3 (fault-call:5 fault-nth:5): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) [ 220.678907] FAULT_INJECTION: forcing a failure. [ 220.678907] name failslab, interval 1, probability 0, space 0, times 0 [ 220.691506] CPU: 0 PID: 9866 Comm: syz-executor.4 Not tainted 4.14.140 #36 [ 220.698840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 220.708583] Call Trace: [ 220.711185] dump_stack+0x138/0x197 [ 220.715337] should_fail.cold+0x10f/0x159 [ 220.719621] should_failslab+0xdb/0x130 [ 220.723728] kmem_cache_alloc+0x2d7/0x780 [ 220.727998] ? find_held_lock+0x35/0x130 [ 220.728010] ? sysfs_do_create_link_sd.isra.0+0x82/0x120 [ 220.728022] __kernfs_new_node+0x70/0x420 [ 220.732549] FAULT_INJECTION: forcing a failure. [ 220.732549] name failslab, interval 1, probability 0, space 0, times 0 [ 220.738158] kernfs_new_node+0x80/0xf0 [ 220.738172] kernfs_create_link+0x2c/0x170 [ 220.738183] sysfs_do_create_link_sd.isra.0+0x90/0x120 [ 220.738198] sysfs_create_link+0x65/0xc0 [ 220.771349] device_add+0x447/0x1490 [ 220.775962] ? device_private_init+0x190/0x190 [ 220.780668] ? input_register_device+0x467/0xb20 [ 220.785511] input_register_device+0x60d/0xb20 [ 220.791257] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 220.796455] ? uinput_request_submit.part.0+0x290/0x290 [ 220.802185] ? __might_sleep+0x93/0xb0 [ 220.806080] ? __fget+0x210/0x370 [ 220.809715] ? uinput_compat_ioctl+0xa0/0xa0 [ 220.814128] uinput_ioctl+0x4a/0x60 [ 220.817890] do_vfs_ioctl+0x7ae/0x1060 [ 220.822122] ? selinux_file_mprotect+0x5d0/0x5d0 [ 220.826880] ? lock_downgrade+0x6e0/0x6e0 [ 220.831033] ? ioctl_preallocate+0x1c0/0x1c0 [ 220.835532] ? __fget+0x237/0x370 [ 220.838999] ? security_file_ioctl+0x89/0xb0 [ 220.843504] SyS_ioctl+0x8f/0xc0 [ 220.846890] ? do_vfs_ioctl+0x1060/0x1060 [ 220.851279] do_syscall_64+0x1e8/0x640 [ 220.855242] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 220.860375] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 220.865654] RIP: 0033:0x459879 [ 220.868843] RSP: 002b:00007fb32813ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 220.877559] RAX: ffffffffffffffda RBX: 00007fb32813ec90 RCX: 0000000000459879 [ 220.884922] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 220.892408] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 220.899796] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb32813f6d4 [ 220.907338] R13: 00000000004c460b R14: 00000000004d8938 R15: 0000000000000005 [ 220.914720] CPU: 1 PID: 9875 Comm: syz-executor.3 Not tainted 4.14.140 #36 11:57:02 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x6, &(0x7f0000000000)="11dca50d6c0bcfe47bf070") bind$alg(r0, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000180), 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f00000000c0)={0xbc5, 0x598, 0x0, {r3, r4+10000000}, 0x101, 0x4}) recvmmsg(r2, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001340)=""/239, 0xef}], 0x1}}], 0x40000000000015c, 0x0, 0x0) 11:57:02 executing program 5: mq_open(&(0x7f0000000040)='ppp1trusted\'\x00', 0x1, 0x7ab5e52c2b2a6029, &(0x7f0000000080)={0x0, 0xff, 0x4, 0x2f43, 0x0, 0x7f, 0x5, 0x1}) clone(0x41bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() getgroups(0x2, &(0x7f00000006c0)=[0xee01, 0xee01]) setresgid(0x0, 0x0, r1) unshare(0x30010000) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast2}, @in=@broadcast}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f0000000000)=0xe8) ptrace(0x4206, r0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio\x00', 0x20000, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000700)={0x9, {{0x2, 0x4e21, @rand_addr=0x4000000000000000}}, 0x1, 0xa, [{{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xe}}}, {{0x2, 0x4e24, @remote}}, {{0x2, 0x4e21, @loopback}}, {{0x2, 0x4e21, @local}}, {{0x2, 0x4e22, @local}}, {{0x2, 0x4e24, @broadcast}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1d}}}, {{0x2, 0x4e20, @loopback}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x10}}}, {{0x2, 0x4e22, @remote}}]}, 0x590) [ 220.922091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 220.922095] Call Trace: [ 220.922110] dump_stack+0x138/0x197 [ 220.922130] should_fail.cold+0x10f/0x159 [ 220.922145] should_failslab+0xdb/0x130 [ 220.922156] kmem_cache_alloc+0x2d7/0x780 [ 220.922168] ? find_held_lock+0x35/0x130 [ 220.922179] ? sysfs_do_create_link_sd.isra.0+0x82/0x120 [ 220.933182] audit: type=1400 audit(1566820622.343:61): avc: denied { dac_override } for pid=9869 comm="syz-executor.5" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 220.934219] __kernfs_new_node+0x70/0x420 [ 220.934236] kernfs_new_node+0x80/0xf0 [ 220.946584] kernfs_create_link+0x2c/0x170 [ 220.946598] sysfs_do_create_link_sd.isra.0+0x90/0x120 [ 220.946610] sysfs_create_link+0x65/0xc0 [ 220.946621] device_add+0x447/0x1490 [ 220.946636] ? device_private_init+0x190/0x190 [ 220.955179] ? input_register_device+0x467/0xb20 [ 220.955193] input_register_device+0x60d/0xb20 11:57:02 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) [ 220.955209] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 220.955221] ? uinput_request_submit.part.0+0x290/0x290 [ 220.985771] ? __might_sleep+0x93/0xb0 [ 220.985781] ? __fget+0x210/0x370 [ 220.985796] ? uinput_compat_ioctl+0xa0/0xa0 [ 220.985804] uinput_ioctl+0x4a/0x60 [ 220.985815] do_vfs_ioctl+0x7ae/0x1060 [ 220.985826] ? selinux_file_mprotect+0x5d0/0x5d0 [ 220.985838] ? lock_downgrade+0x6e0/0x6e0 [ 220.994540] ? ioctl_preallocate+0x1c0/0x1c0 [ 220.994552] ? __fget+0x237/0x370 11:57:02 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000200)={{{@in=@broadcast, @in6=@ipv4={[], [], @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f0000000080)=0xe8) ioprio_set$uid(0x3, r1, 0x4) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}) r2 = syz_open_pts(r0, 0x0) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) [ 220.994570] ? security_file_ioctl+0x89/0xb0 [ 220.994581] SyS_ioctl+0x8f/0xc0 [ 221.005565] ? do_vfs_ioctl+0x1060/0x1060 [ 221.005577] do_syscall_64+0x1e8/0x640 [ 221.005584] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 221.005600] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 221.005608] RIP: 0033:0x459879 [ 221.005614] RSP: 002b:00007fc30efd4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 221.005624] RAX: ffffffffffffffda RBX: 00007fc30efd4c90 RCX: 0000000000459879 11:57:02 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) 11:57:02 executing program 3 (fault-call:5 fault-nth:6): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) [ 221.005629] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 221.005634] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 221.005639] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc30efd56d4 [ 221.005643] R13: 00000000004c460b R14: 00000000004d8938 R15: 0000000000000005 11:57:02 executing program 0: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) 11:57:02 executing program 4 (fault-call:5 fault-nth:6): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) [ 221.186098] FAULT_INJECTION: forcing a failure. [ 221.186098] name failslab, interval 1, probability 0, space 0, times 0 [ 221.218215] CPU: 1 PID: 9890 Comm: syz-executor.3 Not tainted 4.14.140 #36 [ 221.225647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 221.235247] Call Trace: [ 221.237851] dump_stack+0x138/0x197 [ 221.239354] FAULT_INJECTION: forcing a failure. [ 221.239354] name failslab, interval 1, probability 0, space 0, times 0 [ 221.241596] should_fail.cold+0x10f/0x159 [ 221.241613] should_failslab+0xdb/0x130 [ 221.241626] __kmalloc_track_caller+0x2ec/0x790 [ 221.241639] ? save_trace+0x290/0x290 [ 221.241649] ? __mutex_unlock_slowpath+0x71/0x800 [ 221.241657] ? __lock_is_held+0xb6/0x140 [ 221.241670] ? kstrdup_const+0x48/0x60 [ 221.241681] kstrdup+0x3a/0x70 [ 221.241694] kstrdup_const+0x48/0x60 [ 221.261624] __kernfs_new_node+0x2f/0x420 [ 221.261637] kernfs_new_node+0x80/0xf0 [ 221.261649] kernfs_create_link+0x2c/0x170 [ 221.261658] sysfs_do_create_link_sd.isra.0+0x90/0x120 [ 221.261668] sysfs_create_link+0x65/0xc0 [ 221.261680] device_add+0x735/0x1490 [ 221.270315] ? device_private_init+0x190/0x190 [ 221.270327] ? input_register_device+0x467/0xb20 [ 221.270338] input_register_device+0x60d/0xb20 [ 221.270354] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 221.270366] ? uinput_request_submit.part.0+0x290/0x290 [ 221.270391] ? __might_sleep+0x93/0xb0 [ 221.270401] ? __fget+0x210/0x370 [ 221.270414] ? uinput_compat_ioctl+0xa0/0xa0 [ 221.280349] uinput_ioctl+0x4a/0x60 [ 221.280362] do_vfs_ioctl+0x7ae/0x1060 [ 221.287645] ? selinux_file_mprotect+0x5d0/0x5d0 [ 221.287657] ? lock_downgrade+0x6e0/0x6e0 [ 221.287668] ? ioctl_preallocate+0x1c0/0x1c0 [ 221.287680] ? __fget+0x237/0x370 [ 221.309353] ? security_file_ioctl+0x89/0xb0 [ 221.309368] SyS_ioctl+0x8f/0xc0 [ 221.309378] ? do_vfs_ioctl+0x1060/0x1060 [ 221.343050] do_syscall_64+0x1e8/0x640 [ 221.343061] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 221.343077] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 221.359103] RIP: 0033:0x459879 [ 221.359109] RSP: 002b:00007fc30efd4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 221.359121] RAX: ffffffffffffffda RBX: 00007fc30efd4c90 RCX: 0000000000459879 11:57:03 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x101003, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x800000}) r1 = syz_open_pts(r0, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x100, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={{0xffffffffffffff01, 0x9, 0x8, 0xfa, 0xd88, 0x2aca}, 0x7}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) [ 221.359127] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 221.359133] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 221.359140] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc30efd56d4 [ 221.381805] R13: 00000000004c460b R14: 00000000004d8938 R15: 0000000000000005 [ 221.450960] CPU: 0 PID: 9893 Comm: syz-executor.4 Not tainted 4.14.140 #36 [ 221.468434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 221.468438] Call Trace: [ 221.468454] dump_stack+0x138/0x197 11:57:03 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070") bind$alg(r0, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001340)=""/239, 0xef}], 0x1}}], 0x40000000000015c, 0x0, 0x0) 11:57:03 executing program 0: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) 11:57:03 executing program 3 (fault-call:5 fault-nth:7): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) [ 221.468472] should_fail.cold+0x10f/0x159 [ 221.468492] should_failslab+0xdb/0x130 [ 221.481481] __kmalloc_track_caller+0x2ec/0x790 [ 221.481494] ? save_trace+0x290/0x290 [ 221.481504] ? __mutex_unlock_slowpath+0x71/0x800 [ 221.481512] ? __lock_is_held+0xb6/0x140 [ 221.481523] ? kstrdup_const+0x48/0x60 [ 221.481537] kstrdup+0x3a/0x70 [ 221.489600] kstrdup_const+0x48/0x60 [ 221.489612] __kernfs_new_node+0x2f/0x420 11:57:03 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x11000008912, &(0x7f0000000080)="11dca50d6c0bcfe47bf070") bind$alg(r0, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001340)=""/239, 0xef}], 0x1}}], 0x4000085, 0x0, 0x0) [ 221.489627] kernfs_new_node+0x80/0xf0 [ 221.489640] kernfs_create_link+0x2c/0x170 [ 221.489653] sysfs_do_create_link_sd.isra.0+0x90/0x120 [ 221.498889] sysfs_create_link+0x65/0xc0 [ 221.498901] device_add+0x735/0x1490 [ 221.498915] ? device_private_init+0x190/0x190 [ 221.498927] ? input_register_device+0x467/0xb20 [ 221.498940] input_register_device+0x60d/0xb20 [ 221.563337] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 221.563352] ? uinput_request_submit.part.0+0x290/0x290 [ 221.563382] ? __might_sleep+0x93/0xb0 [ 221.572832] FAULT_INJECTION: forcing a failure. [ 221.572832] name failslab, interval 1, probability 0, space 0, times 0 [ 221.573166] ? __fget+0x210/0x370 [ 221.573185] ? uinput_compat_ioctl+0xa0/0xa0 [ 221.573195] uinput_ioctl+0x4a/0x60 [ 221.573210] do_vfs_ioctl+0x7ae/0x1060 [ 221.617474] ? selinux_file_mprotect+0x5d0/0x5d0 [ 221.622664] ? lock_downgrade+0x6e0/0x6e0 [ 221.626838] ? ioctl_preallocate+0x1c0/0x1c0 [ 221.631459] ? __fget+0x237/0x370 [ 221.635526] ? security_file_ioctl+0x89/0xb0 [ 221.640116] SyS_ioctl+0x8f/0xc0 [ 221.643509] ? do_vfs_ioctl+0x1060/0x1060 [ 221.647764] do_syscall_64+0x1e8/0x640 [ 221.651777] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 221.657146] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 221.662345] RIP: 0033:0x459879 [ 221.665967] RSP: 002b:00007fb32813ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 221.675440] RAX: ffffffffffffffda RBX: 00007fb32813ec90 RCX: 0000000000459879 [ 221.683193] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 221.691310] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 221.699197] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb32813f6d4 [ 221.707531] R13: 00000000004c460b R14: 00000000004d8938 R15: 0000000000000005 [ 221.716048] CPU: 1 PID: 9907 Comm: syz-executor.3 Not tainted 4.14.140 #36 [ 221.724237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 221.724242] Call Trace: [ 221.724257] dump_stack+0x138/0x197 [ 221.724274] should_fail.cold+0x10f/0x159 [ 221.724288] should_failslab+0xdb/0x130 [ 221.724298] kmem_cache_alloc+0x2d7/0x780 [ 221.724305] ? memcpy+0x46/0x50 [ 221.724316] ? kstrdup+0x5a/0x70 [ 221.724329] __kernfs_new_node+0x70/0x420 [ 221.724341] kernfs_new_node+0x80/0xf0 [ 221.724353] kernfs_create_link+0x2c/0x170 [ 221.724362] sysfs_do_create_link_sd.isra.0+0x90/0x120 [ 221.724373] sysfs_create_link+0x65/0xc0 [ 221.741398] device_add+0x735/0x1490 [ 221.741414] ? device_private_init+0x190/0x190 [ 221.741427] ? input_register_device+0x467/0xb20 [ 221.741437] input_register_device+0x60d/0xb20 [ 221.741452] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 221.741464] ? uinput_request_submit.part.0+0x290/0x290 [ 221.741487] ? __might_sleep+0x93/0xb0 [ 221.755178] ? __fget+0x210/0x370 [ 221.755203] ? uinput_compat_ioctl+0xa0/0xa0 [ 221.755214] uinput_ioctl+0x4a/0x60 [ 221.762936] do_vfs_ioctl+0x7ae/0x1060 [ 221.762949] ? selinux_file_mprotect+0x5d0/0x5d0 [ 221.762962] ? lock_downgrade+0x6e0/0x6e0 [ 221.776434] ? ioctl_preallocate+0x1c0/0x1c0 [ 221.776450] ? __fget+0x237/0x370 [ 221.776467] ? security_file_ioctl+0x89/0xb0 [ 221.776478] SyS_ioctl+0x8f/0xc0 [ 221.786721] ? do_vfs_ioctl+0x1060/0x1060 [ 221.786735] do_syscall_64+0x1e8/0x640 [ 221.786745] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 221.786762] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 221.786772] RIP: 0033:0x459879 11:57:03 executing program 5: clone(0x41bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() getgroups(0x2, &(0x7f00000006c0)=[0xee01, 0xee01]) setresgid(0x0, 0x0, r1) unshare(0x30010000) socket$inet_icmp_raw(0x2, 0x3, 0x1) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0xf2, 0x248840) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) ptrace(0x4206, r0) 11:57:03 executing program 0: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) [ 221.795694] RSP: 002b:00007fc30efd4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 221.795705] RAX: ffffffffffffffda RBX: 00007fc30efd4c90 RCX: 0000000000459879 [ 221.795711] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 221.795718] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 221.795724] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc30efd56d4 [ 221.795730] R13: 00000000004c460b R14: 00000000004d8938 R15: 0000000000000005 11:57:03 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) 11:57:03 executing program 3 (fault-call:5 fault-nth:8): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 11:57:03 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x13) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000000000)={0x7, 0x4, [0x2]}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 11:57:03 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) [ 222.127722] input: syz1 as /devices/virtual/input/input203 [ 222.177260] FAULT_INJECTION: forcing a failure. [ 222.177260] name failslab, interval 1, probability 0, space 0, times 0 [ 222.206879] CPU: 1 PID: 9938 Comm: syz-executor.3 Not tainted 4.14.140 #36 [ 222.214404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 222.214411] Call Trace: [ 222.214430] dump_stack+0x138/0x197 [ 222.214450] should_fail.cold+0x10f/0x159 [ 222.214466] should_failslab+0xdb/0x130 [ 222.214478] kmem_cache_alloc+0x2d7/0x780 [ 222.214489] ? lock_downgrade+0x6e0/0x6e0 [ 222.214495] ? save_trace+0x290/0x290 [ 222.214506] __kernfs_new_node+0x70/0x420 [ 222.214518] kernfs_new_node+0x80/0xf0 [ 222.214529] __kernfs_create_file+0x46/0x323 [ 222.214540] sysfs_add_file_mode_ns+0x1e4/0x450 [ 222.214553] internal_create_group+0x232/0x7b0 11:57:03 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) [ 222.214569] sysfs_create_groups+0x97/0x140 [ 222.214581] device_add+0x828/0x1490 [ 222.214593] ? device_private_init+0x190/0x190 [ 222.249169] ? input_register_device+0x467/0xb20 [ 222.249184] input_register_device+0x60d/0xb20 [ 222.249204] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 222.249217] ? uinput_request_submit.part.0+0x290/0x290 [ 222.249240] ? __might_sleep+0x93/0xb0 [ 222.258409] ? __fget+0x210/0x370 [ 222.258427] ? uinput_compat_ioctl+0xa0/0xa0 [ 222.258437] uinput_ioctl+0x4a/0x60 [ 222.258449] do_vfs_ioctl+0x7ae/0x1060 [ 222.258462] ? selinux_file_mprotect+0x5d0/0x5d0 [ 222.258472] ? lock_downgrade+0x6e0/0x6e0 [ 222.258482] ? ioctl_preallocate+0x1c0/0x1c0 [ 222.276698] ? __fget+0x237/0x370 [ 222.276719] ? security_file_ioctl+0x89/0xb0 [ 222.276733] SyS_ioctl+0x8f/0xc0 [ 222.276742] ? do_vfs_ioctl+0x1060/0x1060 [ 222.276756] do_syscall_64+0x1e8/0x640 [ 222.288580] input: syz1 as /devices/virtual/input/input205 [ 222.289669] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 222.289690] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 222.289699] RIP: 0033:0x459879 [ 222.289706] RSP: 002b:00007fc30efd4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 222.289715] RAX: ffffffffffffffda RBX: 00007fc30efd4c90 RCX: 0000000000459879 [ 222.289723] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 222.306314] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 222.316729] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc30efd56d4 11:57:04 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x204, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000380)={0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x1000, 0x0, 0x9}) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x1) fsetxattr$security_smack_entry(r0, &(0x7f0000000040)='security.SMACK64EXEC\x00', &(0x7f0000000340)='\x00', 0x1, 0x2) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000300)={0x0, 0x0, 0x7f, 0x7, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x1, 0x773d1da2afb3f0de) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x5, 0x4e, 0x0, 0x9, 0xa0}, &(0x7f00000000c0)=0x98) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f00000002c0)) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000540)={r3, 0x200}, &(0x7f0000000180)=0x8) ioctl$CAPI_MANUFACTURER_CMD(r2, 0xc0104320, &(0x7f00000004c0)={0x0, &(0x7f0000000400)="f85430130871f548dc3adfb84f24c95c9fa5c295b1b0fd6192a6287f79f54c471a0814c2b2839e4705651a192dcad8dd4e488c6a775482be4b4ebcfb9c6e489a0c0b33183d5b08f7477622fe7fbec20e819f4edd267cc7245335a547aaec4fcaf454add1e207f328d58974647c861808bb233cbb58ea11622402fa4f364a427633682899ae34f0c20693cb51562e152263844723e135c28cbf64678d9c07dedccfbb9eeb04bcd746c62d3d927332954f035ea3c7bdd589c1f1dd3b7d"}) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) ioctl$TIOCSTI(r1, 0x5412, 0x2) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f0000000000)={0x3ff, 0xc8, 0x8001}) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000500)=[@in6={0xa, 0x4e23, 0x7f, @local, 0x7}], 0x1c) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) [ 222.316735] R13: 00000000004c460b R14: 00000000004d8938 R15: 0000000000000005 11:57:04 executing program 3 (fault-call:5 fault-nth:9): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 11:57:04 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) 11:57:04 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0x1, 0x80, 0x2, 0x2, 0x15, 0x7, 0x3f, 0x10001, 0x4, 0x1ff, 0x1, 0x1}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x7) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x8) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x111201, 0x0) [ 222.524281] FAULT_INJECTION: forcing a failure. [ 222.524281] name failslab, interval 1, probability 0, space 0, times 0 [ 222.576082] CPU: 1 PID: 9954 Comm: syz-executor.3 Not tainted 4.14.140 #36 [ 222.583738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 222.593619] Call Trace: [ 222.596338] dump_stack+0x138/0x197 [ 222.596358] should_fail.cold+0x10f/0x159 [ 222.596373] should_failslab+0xdb/0x130 [ 222.596386] kmem_cache_alloc+0x2d7/0x780 [ 222.604647] ? lock_downgrade+0x6e0/0x6e0 [ 222.604656] ? save_trace+0x290/0x290 [ 222.604671] __kernfs_new_node+0x70/0x420 [ 222.604689] kernfs_new_node+0x80/0xf0 [ 222.613316] __kernfs_create_file+0x46/0x323 [ 222.613330] sysfs_add_file_mode_ns+0x1e4/0x450 [ 222.613345] internal_create_group+0x232/0x7b0 [ 222.613361] sysfs_create_groups+0x97/0x140 [ 222.613372] device_add+0x828/0x1490 [ 222.613383] ? device_private_init+0x190/0x190 [ 222.613394] ? input_register_device+0x467/0xb20 [ 222.613515] input_register_device+0x60d/0xb20 [ 222.613530] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 222.613540] ? uinput_request_submit.part.0+0x290/0x290 [ 222.613558] ? __might_sleep+0x93/0xb0 [ 222.613565] ? __fget+0x210/0x370 [ 222.613575] ? uinput_compat_ioctl+0xa0/0xa0 [ 222.613582] uinput_ioctl+0x4a/0x60 [ 222.613595] do_vfs_ioctl+0x7ae/0x1060 [ 222.613606] ? selinux_file_mprotect+0x5d0/0x5d0 [ 222.613615] ? lock_downgrade+0x6e0/0x6e0 [ 222.613625] ? ioctl_preallocate+0x1c0/0x1c0 [ 222.613634] ? __fget+0x237/0x370 [ 222.613649] ? security_file_ioctl+0x89/0xb0 [ 222.613661] SyS_ioctl+0x8f/0xc0 [ 222.613667] ? do_vfs_ioctl+0x1060/0x1060 [ 222.613681] do_syscall_64+0x1e8/0x640 [ 222.627335] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 222.627356] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 222.627364] RIP: 0033:0x459879 [ 222.627370] RSP: 002b:00007fc30efd4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 222.627383] RAX: ffffffffffffffda RBX: 00007fc30efd4c90 RCX: 0000000000459879 [ 222.632686] input: syz1 as /devices/virtual/input/input207 [ 222.636461] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 222.636467] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 222.636472] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc30efd56d4 [ 222.636477] R13: 00000000004c460b R14: 00000000004d8938 R15: 0000000000000005 [ 222.873369] input: syz1 as /devices/virtual/input/input208 11:57:05 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070") bind$alg(r0, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000100)=0x5, 0x4) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r3 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001340)=""/239, 0xef}], 0x1}}], 0x40000000000015c, 0x0, 0x0) 11:57:05 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) 11:57:05 executing program 5: clone(0x41bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() getgroups(0x2, &(0x7f00000006c0)=[0xee01, 0xee01]) setresgid(0x0, 0x0, r1) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) fchdir(r2) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0xa000, 0x0) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x4206, r0) socket$isdn_base(0x22, 0x3, 0x0) fcntl$setown(r3, 0x8, r0) 11:57:05 executing program 3 (fault-call:5 fault-nth:10): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 11:57:05 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x212040, 0x0) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e23, 0x1, @empty, 0x9}}}, 0x84) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) r2 = dup(r1) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) 11:57:05 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x8201, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) 11:57:05 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x3ff, &(0x7f0000000000)="11dca50d6c0bcfe47bf070") bind$alg(r0, &(0x7f0000000500)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0xfffffffffffffc7a) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0xffffffff, 0x40000) recvmmsg(r1, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001340)=""/239, 0xef}], 0x1}}], 0x40000000000015c, 0x0, 0x0) 11:57:05 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 11:57:05 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) [ 223.460597] FAULT_INJECTION: forcing a failure. [ 223.460597] name failslab, interval 1, probability 0, space 0, times 0 11:57:05 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[@ANYRES16, @ANYRESOCT=r0, @ANYRESOCT, @ANYRESHEX=r0, @ANYRES16=0x0, @ANYRESOCT=r0, @ANYRES64=r0, @ANYRES32=r0, @ANYRES64=r0, @ANYRESDEC=r0], 0x83) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000080)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x1c6}], 0x2c3) [ 223.561064] input: syz1 as /devices/virtual/input/input212 [ 223.580796] CPU: 0 PID: 9984 Comm: syz-executor.3 Not tainted 4.14.140 #36 [ 223.589127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 223.599220] Call Trace: [ 223.602205] dump_stack+0x138/0x197 [ 223.606564] should_fail.cold+0x10f/0x159 11:57:05 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) 11:57:05 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x202, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f00000000c0)={0x15, 0xe3, &(0x7f0000000200)="8e81a531c4d22b4f9fff8f4bb9c4b4bf8379883da7cc2d0c02c6238a9b897586a70a40f6de577ae5559d6ddca25b12922369d1dce355dc0249c30956cc12cd479b3bc1510df2c0b5576179be69aabb95526933c3804b95f9afb546e9bbdda5aece97895164f630b996ff4abadf1a77f9208dc5cc1a020a19a636bac8293e2bb345c08dffb241e1b6d36f3caf4ad0dfcc3aa67cd83a64267015fe8cd2fba23e2b46508d5792302a85a9f24e3f1b10433bd12fb11b95339e57d150a80fbf75324d6212f69db808cc9c896a8fd3781efd49b2f59e2af20bbf21c2bfa9095d9155f9acffec"}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}) r2 = syz_open_pts(r0, 0x0) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x101000, 0x0) [ 223.610915] should_failslab+0xdb/0x130 [ 223.615533] kmem_cache_alloc+0x2d7/0x780 [ 223.619982] ? wait_for_completion+0x420/0x420 [ 223.625072] __kernfs_new_node+0x70/0x420 [ 223.630562] kernfs_new_node+0x80/0xf0 [ 223.634981] __kernfs_create_file+0x46/0x323 [ 223.640070] sysfs_add_file_mode_ns+0x1e4/0x450 [ 223.645167] internal_create_group+0x232/0x7b0 [ 223.651015] sysfs_create_groups+0x97/0x140 [ 223.656340] device_add+0x828/0x1490 11:57:05 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x119802, 0x0) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f00000000c0)=0x6, &(0x7f0000000140)=0x2) ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f0000000200)=0x2f) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000180)='\x00', 0x1) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}) r2 = syz_open_pts(r0, 0x0) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) [ 223.660528] ? device_private_init+0x190/0x190 [ 223.667164] ? input_register_device+0x467/0xb20 [ 223.672733] input_register_device+0x60d/0xb20 [ 223.678036] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 223.684459] ? uinput_request_submit.part.0+0x290/0x290 [ 223.684482] ? __might_sleep+0x93/0xb0 [ 223.684491] ? __fget+0x210/0x370 [ 223.684503] ? uinput_compat_ioctl+0xa0/0xa0 [ 223.684511] uinput_ioctl+0x4a/0x60 11:57:05 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x0, 0x10000001, 0x0, 0x3, 0x1e, 0x0, 0x0, 0x4167}) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}) pause() r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/55, 0xffffffffffffffad}], 0x1) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000140)='\x00'}, 0x30) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f00000001c0)=r3) [ 223.684521] do_vfs_ioctl+0x7ae/0x1060 [ 223.684534] ? selinux_file_mprotect+0x5d0/0x5d0 [ 223.718212] ? lock_downgrade+0x6e0/0x6e0 [ 223.723932] ? ioctl_preallocate+0x1c0/0x1c0 [ 223.729095] ? __fget+0x237/0x370 [ 223.732939] ? security_file_ioctl+0x89/0xb0 [ 223.737898] SyS_ioctl+0x8f/0xc0 [ 223.742022] ? do_vfs_ioctl+0x1060/0x1060 [ 223.747822] do_syscall_64+0x1e8/0x640 [ 223.752085] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 223.758093] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 223.763770] RIP: 0033:0x459879 [ 223.767173] RSP: 002b:00007fc30efd4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 223.775848] RAX: ffffffffffffffda RBX: 00007fc30efd4c90 RCX: 0000000000459879 [ 223.783701] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 223.791428] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 223.800528] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc30efd56d4 [ 223.809228] R13: 00000000004c460b R14: 00000000004d8938 R15: 0000000000000005 11:57:05 executing program 5: clone(0x80000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) ptrace$poke(0x4, r0, &(0x7f0000000040), 0x3) r1 = getpid() getgroups(0x2, &(0x7f00000006c0)=[0xee01, 0xee01]) setresgid(0x0, 0x0, r2) unshare(0x30010000) rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f00000000c0)) ptrace(0x4206, r1) 11:57:05 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070") bind$alg(r0, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001340)=""/239, 0xef}], 0x1}}], 0x40000000000015c, 0x0, 0x0) readlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=""/150, 0x96) 11:57:05 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) 11:57:05 executing program 3 (fault-call:5 fault-nth:11): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 11:57:05 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) [ 224.269823] input: syz1 as /devices/virtual/input/input214 [ 224.307715] FAULT_INJECTION: forcing a failure. [ 224.307715] name failslab, interval 1, probability 0, space 0, times 0 11:57:05 executing program 5: clone(0x41bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() getgroups(0x2, &(0x7f00000006c0)=[0xee01, 0xee01]) setresgid(0x0, 0x0, r1) unshare(0x30010000) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x18000, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', r2, &(0x7f0000000080)='./file0\x00') rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) prctl$PR_SVE_SET_VL(0x32, 0x24a96) ptrace(0x4206, r0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000000140)={'ah\x00'}, &(0x7f0000000180)=0x1e) 11:57:05 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) 11:57:06 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070") bind$alg(r0, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) recvmmsg(r0, &(0x7f0000000bc0)=[{{&(0x7f0000000100)=@rc, 0x80, &(0x7f0000000600)=[{&(0x7f0000000080)}, {&(0x7f00000001c0)=""/16, 0x10}, {&(0x7f0000000200)=""/11, 0xb}, {&(0x7f0000000240)=""/224, 0xe0}, {&(0x7f0000000340)=""/129, 0x81}, {&(0x7f0000000400)=""/59, 0x3b}, {&(0x7f0000000440)=""/74, 0x4a}, {&(0x7f0000000580)=""/68, 0x44}], 0x8, &(0x7f0000000680)=""/238, 0xee}, 0x5}, {{&(0x7f0000000780)=@ax25={{0x3, @rose}, [@remote, @null, @null, @rose, @remote, @null, @bcast]}, 0x80, &(0x7f0000000b40)=[{&(0x7f00000004c0)=""/12, 0xc}, {&(0x7f0000000800)=""/126, 0x7e}, {&(0x7f0000000880)=""/188, 0xbc}, {&(0x7f0000000940)=""/18, 0x12}, {&(0x7f0000000980)=""/89, 0x59}, {&(0x7f0000000a00)=""/77, 0x4d}, {&(0x7f0000000a80)=""/145, 0x91}], 0x7, &(0x7f0000001480)=""/4096, 0x1000}, 0xffff}], 0x2, 0x40, 0x0) r2 = accept$alg(r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000002480)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000080)=0x1008) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f00000034c0)=ANY=[@ANYRES32=r3, @ANYBLOB="00100000ce59d3239f326703717219812e5c0e78ac09b56cbd49294201adadee6da7c5cd1b21b77a6f010922b78b0f04d2b53e53f49b1e5ba5d6cd83c1ffeb871d869326f8de6b92615d4134eb03a2920afe24207af27501c645998ac336f043bc299385e7b8320496ab82d4f83c5b045e4690f0a183eb89c2f07b382380a362bbf90f5cef32af0be33ed65082d8ed6ffc11c12bb5c4297572405bbfec717f72a9437e7ec0f82bcc48fa1f84c2f3e04137091b61d2cb482dfda87a5bb632ac9488345a2abcd9a9bcea9505d64e9664b83bd789acdf5696a6828ecd587038e6746975b0109fb1b6456617771e781422fc3dc7e862ec93711a880a482b49bc45c98253806bc6b1c5c20b8641320f373b1756d2e7363fa5b36871a2fcd9cdcab44dcc6adada5b1417f2bad5d9174581f8ba0f760121d7d5ee7dfdeda6b1f7f5124935545556091b2b822cdb52de8a5ae24bf490ff6ff0cc27dbcdcae8736bbf1f1657e1397dea3cd4a118e0febd3ec6703ffdc2e8b9085dd23f62a8bcba0388ef0a7ef1d075681591424b3f18d730a12dff9d32267186adb1faf234678b36cb3b24a328b2b9918c17b9c8ec37a2a1d6eed4076ea5ef1c4c96d0aafa8d0d60b1d2db2a1755b03a3020fba666b6ed596ba78fe77e6c0d7722348ae2e03bf3831a16d2c56af11c9f1cc7d05bdb42ad59b9f997647a31b91c0ac216eca2a480df81342985ad760f7c747304d42622dec7ddc2f705815a6e9abf78f5cfcebe7bf3424c50a0cebe4b5ff80282e054d63b35c9f2697568e84ec514aa66aa46f3da277bd5d58702b2ecbd53faae9d9114aeb243ea214e3ae90ab7b827323ca49627b538948ad0fb9acec9c4f0c70d35ce5ae584414d73655ae5879fa892eb4123ff6bebb5dde6c29004dac0d742416ccb7446138dc1c0bd45c4118771361919c2d9d61c294b8530591e50f13f12583369528fd85e4522c7482cac068eddfe6177fbd9911aaafd9af48ca74f512d7c2dcf864abcb63121bb08f73325b9e2ec219eda6efdce6289f7da5b3f262d17c8b830bdcb708912e48795a7e0c9913a11b79a2f1fd82ca2dbe3f9f1b248d70a110c266773bfc26b33a00e49dbc4a270ac4e81d81073724a2c60ab1647437c638bd4a50d1258fa8727297a9ea2f69e8511adac47741c3d5bdf267887007b5a117d21646cee4a77129d6f649e802f6e82b9e5bc5e6bf70d6c74cea5afbc7d7b33b87dd7a65ff04fea5db831d9747c2d61690a0e9b2499d10eb74d40b6fa9e926267c558688163a6c454e7e467d9c93dd52fe71ec269585cc21515134fe03c099d126bf74d33b9671ddb85a04aeb78cd0ddd41a6d412aeefb6275b45336880a8a7befc1fb5c14ad1176de653fcea798eb4d638e8d20f39c63422f130700cc568052204f9cf7b9cfd6b95af696009f021204c3043678807952d3b96402734f8825926495a3b060dad331180d2153e491982059f198718469aed838951487afbbf48d7633cdb44b8035ac8986d23397cce5e44c6c82827282abff219451aba69c7fa60535b05006db3a2d610df9592c29246b321a243ee2274fcc0147fe112f33442a9dbc3843b2def13eecf3d3f6f34724b0177f9cbe8ab40efb91b0391d177ff0db540464464170347769f9c06caa5053da95b9f80e356392dc706d4a1bbd478da674496d006547aabfcff1fcb08086f4541a993ad85c84437187554690edb3fdb42ac9b8c5854fb621c8141ccd3101293e8e1fc8ba17728b7dafdea2ebcc2bbcf20a1ac2ee69cfb86f268b642f77efb811ee4ddcfeba5e7839ceeceb95249037954b583d33fe64db8f584c3ed2dc3d581bb9d4433cd21b8abce050d79648f7695afd4256443ce77bca88b80846e34deab6a753daad9121b8c51a2f4ad496793971675849399b13b0f4688c025e34ba3d9b1fb837ade2d108e85cf0192dd69cda452da881503b18ea79dcf5d5aa5b464e1912ab4d4f7ae771b749ae68583eb97fe20a6840b23e232671933baa58870fc10ba6287ba60a272e26dee279d8124b6825f0dc78dcb5b69d79c2ca455d1295731c024a201c714c1ef79a2aedb48833b28c2184ff29dd5b2a1ef494fc8e63c3ca8e55148bf252a62b3b05c373b6b65737a59414a7def473c7c9fbe64c4f8fa97ebb63e641686425e119b05b7967e011b0ded1631118853c2c3083d38b9311f56e1bafb8996812e9d74133ab72b6ed56a947eda52067e9f3825912201f7f3f3434ccd98a7349d09039aadd9fc8d49d63900af6345b946d67eb13cba03fd9d6b87e0c85adc0c9b2ede76a687aff51e66a5ca220b3789888c60210f57e53fdbf6ebd2436c61a15c9e9e1230ee17d85665fd3b44cd06f98dfb0840b4e2bd1f015249dbc5e8ceac334ea224815f4d750f4f6a5d6416688827134449f34d84ba5f146b69a30151b6b03f572aec1b0db748056c000d83a8de2fb727b0beb7e11e10bbcf3d9fbce3389edec56bbdf2db2140e649f2e92b95add72872d9524d6202e070a21cd5f8c12ed42974048373601f9870d5fe2f4c0e6a6a00ed5b10bbd1c09eed465cb680c4b6d9cc8adb385da7479471fa998d5687e1ea7c90b9f655078a3c816953767a65f47da65613227c50bdb9aec263ee7ac68dd1988ff502641bf40b455858e48d32315e2e591b9f0a745647a0e4dc954b2d1bf3e8e6d4fa6975dcb9f3e76067663f05aa41372e271cd149cf528c9ba768d0a470d35a479eb073860c341167b18277e00ba98859e3a88f078695e96050497c675d6e5de8ac428531c1b3281b58e79147b638a2c918f5e062232db8bd432c1754673fe7f4f94a76b36cade7fd2bc258a08ca7d39c4aa43c6509a7b9efe424c7061ad046de9f779863913cf6045571e6f54f490bdfc87aeae42796f201299d868d893e00103027c83149efa19522d14ed57e2cef67fdbf961944da1609750673628c8c6d7a2588268d83d11ae0ead515ad0c4d2f41152e9072f0affbc394c0f8553bba23f6d1874148b7519a79a152904dd02fa92afbbafb9af52652456f169ebb8421f16258d8c4a6769d819ed71ee2ae4a915dfa0eb295e3b22388653bba6dbda4e367c9502814c43d129f59334f9d6dae736d08209a3dbd5d4635c1caf63bbeb68a5ac414e7a62c720e75b1bb2d5617963ce503705c37a397667d4b27907119d31659b221fd35bb590ffffb29a5cd73f3065117e31122cc1869e82cca31bbe59b94e7877e08c43db753837fd8b3d1fb55bdf5c73dececa8b3fb995b1abdfa0e099393fe2d4c3449f8920096027b5336cce068ed2c3edf1137b5efaf19cbb07d8da6dcae1edfdda7d51317b5c5593e114051f72a6d00a96673cdc4030c7f82ecd57e26828e783071e292ccd1bb56eecd7eafbea66a31a7d9b88d50c9c6b0bcfb4ebd8bbae5cc7a99883b8309c633cd77880ffc29bfff1f591771370ff45e00cc2bdb4a534f163cd1641c76fee0a1aeeb64fbf68946a1e6ce73ff768dd4fadc6e063d696f6d3b8e4902b59e1a4efc289aec10a6facf893dedcd57ea0afde8484a007c10df6de539f0967ec7e4b266951b5b0b4580cff247040ee5aba764f9493e464e4defc856972e002ad099ae4212c78e23eecb300d104bd2a1b4d4c8541b2e6ab2a5a20ac21ead5bdb17f243ac05b046ac5dabf40dae5877b14f44c219d0bb75b4d56237a2f14bbe1fb21a71716b3c24604227525b45e74f8e03fcda8d6059e2872f97a206643aa26ad21974f275d136e15eeefc785c5708d594f56e42e3770b7fc0efce3363f0c95a22739b14853b273e2589797ce6be749e45f9103a955903f58a21b2e58da32a315121e40a0b0d1a5b1c5f81e0882d8160df0bbed8f6e9a587f1c81187ea9e200d7918e06447ad9eb068642968d5836f55fb0e30ecb8adbbdd73fed29330b48b4ff6c229df9793db5d761f9102c9ec141fe4029f1f2439ffc2d595a9e3b78417ad3fdff60267f7b1b3566d890613f57536eb9a90e901c951e8e803b2d639835947526f011f6cb16b4fb616fe4165b514d8263f82b4c6d8c6a05e7fa929c9076876ac79e9908cc3c1c7ccb873596e0ab4a74b7c4c2c5607d10ce7c12f1698fc3bd20ddbafab89b516d84f6d848eae17363cc6edd76e007f65c9df8c3a31c255ea096b9771c278b058746cec2dad449ba5b90a3b3e4c9213e203ec44685623bbd18c530b534e4cd6aafb20f7215b4b0171ef355da167f7e18b40deabd8b2516bc04d319b61ada57499632d5bf9b861a32b70d73fc89c5f956a2a6a4e30a4025dbff35fc241fd6440bcb70732fef2ec4825c25eeb212aacc36e25b1c635ced32d088b1dc4a34d0a8935f54c1c378fb22a848d3b13d9d3716d351a23c4a9184f16ab14503997b984edd9f7e2b78cf0c407da445250574a696d2e7b2f23fc3732fc34dbbdd8a518d021e40b202e72f12ed8ed131e117333ced3110fb7940f0b886f348441f9bf5ff3e52bc0d717ce3f626b9defa7d630cadaf368bc7b592fa23c09f24e2f0999dc1e462bc375d49ae9893906394d2db0417dee642dd6a38f1ff803ba58d47bacaa88b673252a3f9fae3d734ad5882e98b3a72e5ed992c3fd8596ee6c4308a95017392ec2ea2fdb23350a59405443a0dd4525b1f35953fb8e5da82bfe4de373534ed887d490b3e3cb176276fc05ec6ffcd756673646d9b9178b96177977e443f52d37c71e8b8532a6bdfb558de896dc9d9937b01026bd5da4212ed238fda61b772180101e9e7e4d2c7f9cbf6ba62281264f6640cb4df6b54abda55056d0067b30efdd45caa49bc126c523461b19de5cf8ca52cfe3baa1ca11297645862cf31413da2b8086687c419b2300fea51f1fd1e3c02845cd13c38aee08c2bbb2f05ea8f59c7c45431ed2799b955750e1198db2be5fb5e5e68a421ffd63f1f2b0b3b337be3d053fb630e649fdfd2aadaa05d521a803b15ac25ae65a5637ab784558b037d92169be07ad461651ab9dcd2b3230df1850969ff8a2766a0ce68af463abebb46256f67d255f4680a9d3f84ee4088922bfe561bb8ac0d41c3aefd234024f103fbe48ad0163563efb15638c0706aed586abed0ec307fc365de5f829bba2bf84f88a430ed0143e81b71506c45943103c6eb8d7b7eb3a88edaff12edd5bb2cb68637f8a9023f7d27ff4a73705ca12b5bb28a5ddb24c6a7b6bd18ff9f32cd139de82aa025387c52fd7d85ac454fad3c13fcce88548609aaa2c2659eb39ac12f659b68b67ae023db0cb507bb30f9c000540b6f35f09aac17242cfb1cd918c2c9ff233ca8e8099f007b8b4102b3cde06cec5266a8d10174e6dc5f555866c5f32ebfe94809ce8dd1a9a72b49ab8a34868ed2fe102b315d17a820776b88eb48f1b5a3cc9bc3696c2626e761053961f912eb0d99cf6e0455aabfb03d5a0a2d6b2a6b98436cd489cd4e0b50074ca78621d0a8b7da9f366770bdbf6193c81ac52f84a0f58259de41cd1ad37d75a92ef516910e55f623eaff4012a673a1015be31c2a7278390bc915e8b7bee6cb8c754a4d9619e3a653bd5f2c66ad18c977f3e4f7f41f7f9b155dda4d1d8f0ae118e8b4f811568157b1ce1b264ad838d7bf988978cf879ddb6ed689566ff19f759a5f5aaa55234777f060d2003666d078071a5d1a4d44f5d336894d513aca50afceafe1c5e635492d1cade8771c20af9e3d901950d9780cbae60185684127f51bde255a8e2b6f0dd2461bd5c745639c696247d7ef958f04dfca20b10de96a9a90dfa28711b7d4da58d74744588d045e1e797dafb20fc8b914500d2ca4f81"], &(0x7f0000000c40)=0x1008) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001340)=""/239, 0xef}], 0x1}}], 0x40000000000015c, 0x0, 0x0) [ 224.375439] CPU: 1 PID: 10040 Comm: syz-executor.3 Not tainted 4.14.140 #36 [ 224.383963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 224.394408] Call Trace: [ 224.397278] dump_stack+0x138/0x197 [ 224.401314] should_fail.cold+0x10f/0x159 [ 224.406161] should_failslab+0xdb/0x130 [ 224.410517] kmem_cache_alloc+0x2d7/0x780 [ 224.417086] ? wait_for_completion+0x420/0x420 [ 224.422680] __kernfs_new_node+0x70/0x420 [ 224.428234] kernfs_new_node+0x80/0xf0 [ 224.434238] __kernfs_create_file+0x46/0x323 [ 224.440297] sysfs_add_file_mode_ns+0x1e4/0x450 [ 224.446543] internal_create_group+0x232/0x7b0 [ 224.451823] sysfs_create_groups+0x97/0x140 [ 224.456983] device_add+0x828/0x1490 [ 224.462536] ? device_private_init+0x190/0x190 [ 224.468381] ? input_register_device+0x467/0xb20 [ 224.474906] input_register_device+0x60d/0xb20 [ 224.480954] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 224.486959] ? uinput_request_submit.part.0+0x290/0x290 [ 224.492361] ? __might_sleep+0x93/0xb0 [ 224.497122] ? __fget+0x210/0x370 [ 224.501347] ? uinput_compat_ioctl+0xa0/0xa0 [ 224.507527] uinput_ioctl+0x4a/0x60 [ 224.511520] do_vfs_ioctl+0x7ae/0x1060 [ 224.515512] ? selinux_file_mprotect+0x5d0/0x5d0 [ 224.520845] ? lock_downgrade+0x6e0/0x6e0 [ 224.526021] ? ioctl_preallocate+0x1c0/0x1c0 [ 224.530849] ? __fget+0x237/0x370 [ 224.534700] ? security_file_ioctl+0x89/0xb0 [ 224.539619] SyS_ioctl+0x8f/0xc0 [ 224.543074] ? do_vfs_ioctl+0x1060/0x1060 [ 224.547767] do_syscall_64+0x1e8/0x640 [ 224.551769] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 224.557232] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 224.563064] RIP: 0033:0x459879 [ 224.566470] RSP: 002b:00007fc30efd4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 11:57:06 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl(r1, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070") bind$alg(r0, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r3 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001340)=""/239, 0xef}], 0x1}}], 0x40000000000015c, 0x0, 0x0) 11:57:06 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) [ 224.575183] RAX: ffffffffffffffda RBX: 00007fc30efd4c90 RCX: 0000000000459879 [ 224.582738] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 224.590203] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 224.598798] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc30efd56d4 [ 224.606597] R13: 00000000004c460b R14: 00000000004d8938 R15: 0000000000000005 11:57:06 executing program 3 (fault-call:5 fault-nth:12): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 11:57:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x1) r1 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x200000) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@gettaction={0x30, 0x32, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x16, @TCA_ACT_INDEX={0x8, 0x3, 0xffff}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x800000000}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000010}, 0x24000080) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x80, 0x0) getsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f00000000c0), &(0x7f0000000140)=0x4) r3 = syz_open_pts(r0, 0x0) readv(r3, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) 11:57:06 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0xc004aea7, &(0x7f0000000000)=0x7947) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000040)=0x1, 0x4) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, &(0x7f0000000080)={0x55}) ioctl(r0, 0x0, &(0x7f0000000140)="a86f3d2706873dc0dc3271ed999a55fe5ecea3233549d3ba629583c2aecea78cbb587a67c8705b3bb9b147b0bb0afec647141940a384cd89191040907d30ad54c0a6934f3b7ac668a9ebbcaa050bf9888e6cdf39e5b36e628670ce144a601dc2fd81685dc79ebf5e7868c0195e9355b1eb62d5d98c29871aff97d9395030e892b462f2c8e61a1770499ff62ec1921947") ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 11:57:06 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, 0x0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) 11:57:06 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070") bind$alg(r0, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x40000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@loopback}}, &(0x7f00000002c0)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@remote}}, &(0x7f0000000400)=0xe8) lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}, {@msize={'msize', 0x3d, 0x3}}, {@debug={'debug', 0x3d, 0x1805}}, {@access_client='access=client'}, {@uname={'uname', 0x3d, 'skcipher\x00'}}], [{@uid_eq={'uid', 0x3d, r3}}, {@dont_appraise='dont_appraise'}, {@dont_appraise='dont_appraise'}, {@appraise='appraise'}, {@hash='hash'}, {@euid_lt={'euid<', r4}}, {@context={'context', 0x3d, 'root'}}, {@euid_eq={'euid', 0x3d, r5}}, {@fowner_lt={'fowner<', r6}}]}}) r7 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r7, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001340)=""/239, 0xef}], 0x1}}], 0x40000000000015c, 0x0, 0x0) 11:57:06 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, 0x0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) [ 224.751433] input: syz1 as /devices/virtual/input/input217 [ 224.789304] FAULT_INJECTION: forcing a failure. [ 224.789304] name failslab, interval 1, probability 0, space 0, times 0 11:57:06 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070") bind$alg(r0, &(0x7f0000000500)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(xtea-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000100), 0x0, 0x0) recvmmsg(r2, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001340)=""/239, 0xef}], 0x1}}], 0x40000000000015c, 0x0, 0x0) [ 224.821033] CPU: 0 PID: 10076 Comm: syz-executor.3 Not tainted 4.14.140 #36 [ 224.830740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 224.841955] Call Trace: [ 224.845464] dump_stack+0x138/0x197 [ 224.850638] should_fail.cold+0x10f/0x159 [ 224.856892] should_failslab+0xdb/0x130 [ 224.861801] kmem_cache_alloc+0x2d7/0x780 [ 224.868117] ? wait_for_completion+0x420/0x420 [ 224.874778] __kernfs_new_node+0x70/0x420 [ 224.879673] kernfs_new_node+0x80/0xf0 [ 224.885386] __kernfs_create_file+0x46/0x323 [ 224.892265] sysfs_add_file_mode_ns+0x1e4/0x450 [ 224.898076] internal_create_group+0x232/0x7b0 [ 224.903056] sysfs_create_groups+0x97/0x140 [ 224.907991] device_add+0x828/0x1490 [ 224.911961] ? device_private_init+0x190/0x190 [ 224.917151] ? input_register_device+0x467/0xb20 [ 224.922968] input_register_device+0x60d/0xb20 [ 224.928113] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 224.933707] ? uinput_request_submit.part.0+0x290/0x290 [ 224.939551] ? __might_sleep+0x93/0xb0 [ 224.943937] ? __fget+0x210/0x370 [ 224.947787] ? uinput_compat_ioctl+0xa0/0xa0 [ 224.947799] uinput_ioctl+0x4a/0x60 [ 224.947812] do_vfs_ioctl+0x7ae/0x1060 [ 224.947825] ? selinux_file_mprotect+0x5d0/0x5d0 [ 224.947837] ? lock_downgrade+0x6e0/0x6e0 [ 224.957197] ? ioctl_preallocate+0x1c0/0x1c0 [ 224.980090] ? __fget+0x237/0x370 [ 224.983660] ? security_file_ioctl+0x89/0xb0 [ 224.989203] SyS_ioctl+0x8f/0xc0 [ 224.993884] ? do_vfs_ioctl+0x1060/0x1060 [ 224.999352] do_syscall_64+0x1e8/0x640 [ 225.003712] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 225.010184] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 225.017004] RIP: 0033:0x459879 [ 225.020924] RSP: 002b:00007fc30efd4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 225.030135] RAX: ffffffffffffffda RBX: 00007fc30efd4c90 RCX: 0000000000459879 [ 225.041139] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 225.049265] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 225.057528] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc30efd56d4 [ 225.066474] R13: 00000000004c460b R14: 00000000004d8938 R15: 0000000000000005 11:57:06 executing program 5: clone(0x41bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() getgroups(0x2, &(0x7f00000006c0)=[0xee01, 0xee01]) setresgid(0x0, 0x0, r1) unshare(0x30010000) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) rt_sigsuspend(&(0x7f0000000000)={0x3}, 0x8) ptrace(0x4206, r0) 11:57:06 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070") bind$alg(r0, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) fchmod(r0, 0x2) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001340)=""/239, 0xef}], 0x1}}], 0x40000000000015c, 0x0, 0x0) 11:57:06 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, 0x0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) 11:57:06 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xfffffffffffff2f4, 0x602) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r1, 0x0, 0x2}, 0x14) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1a5]}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000080)={{0x80000000, 0x2, 0xffffffffffff91d0}, 'syz1\x00', 0x42}) r2 = dup(r0) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0xf) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) 11:57:06 executing program 3 (fault-call:5 fault-nth:13): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 11:57:06 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000140)=@v1={0x1000000, [{0x1f, 0x1}]}, 0xc, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070") bind$alg(r0, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001340)=""/239, 0xef}], 0x1}}], 0x40000000000015c, 0x0, 0x0) [ 225.172037] FAULT_INJECTION: forcing a failure. [ 225.172037] name failslab, interval 1, probability 0, space 0, times 0 [ 225.187123] input: syz1 as /devices/virtual/input/input221 [ 225.225666] CPU: 1 PID: 10117 Comm: syz-executor.3 Not tainted 4.14.140 #36 [ 225.233439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 225.233447] Call Trace: [ 225.246398] dump_stack+0x138/0x197 [ 225.250229] should_fail.cold+0x10f/0x159 [ 225.254762] should_failslab+0xdb/0x130 [ 225.254777] kmem_cache_alloc+0x2d7/0x780 [ 225.254792] ? wait_for_completion+0x420/0x420 [ 225.268160] __kernfs_new_node+0x70/0x420 [ 225.272933] kernfs_new_node+0x80/0xf0 [ 225.277039] __kernfs_create_file+0x46/0x323 [ 225.281840] sysfs_add_file_mode_ns+0x1e4/0x450 [ 225.287318] internal_create_group+0x232/0x7b0 [ 225.292050] sysfs_create_groups+0x97/0x140 [ 225.296603] device_add+0x828/0x1490 [ 225.300453] ? device_private_init+0x190/0x190 [ 225.300465] ? input_register_device+0x467/0xb20 [ 225.310636] input_register_device+0x60d/0xb20 [ 225.310655] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 225.310668] ? uinput_request_submit.part.0+0x290/0x290 [ 225.310690] ? __might_sleep+0x93/0xb0 [ 225.310699] ? __fget+0x210/0x370 [ 225.310711] ? uinput_compat_ioctl+0xa0/0xa0 [ 225.310720] uinput_ioctl+0x4a/0x60 [ 225.310734] do_vfs_ioctl+0x7ae/0x1060 [ 225.321496] ? selinux_file_mprotect+0x5d0/0x5d0 [ 225.321507] ? lock_downgrade+0x6e0/0x6e0 [ 225.321521] ? ioctl_preallocate+0x1c0/0x1c0 [ 225.321533] ? __fget+0x237/0x370 [ 225.321547] ? security_file_ioctl+0x89/0xb0 [ 225.321557] SyS_ioctl+0x8f/0xc0 [ 225.321565] ? do_vfs_ioctl+0x1060/0x1060 [ 225.321576] do_syscall_64+0x1e8/0x640 [ 225.321585] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 225.321601] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 225.331354] RIP: 0033:0x459879 [ 225.331359] RSP: 002b:00007fc30efd4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 225.331370] RAX: ffffffffffffffda RBX: 00007fc30efd4c90 RCX: 0000000000459879 [ 225.331376] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 225.331382] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 225.331387] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc30efd56d4 [ 225.331393] R13: 00000000004c460b R14: 00000000004d8938 R15: 0000000000000005 [ 225.449546] input: syz1 as /devices/virtual/input/input222 11:57:07 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x541241, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}) r1 = request_key(&(0x7f0000000080)='encrypted\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000140)='\xadsystemppp0\xc1{&systemOproc\x00', 0x0) r2 = add_key$keyring(&(0x7f00000009c0)='keyring\x00', &(0x7f0000000a00)={'syz', 0x1}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, r1, &(0x7f0000000900)=[{&(0x7f0000000200)="4a7af608436bf1d9d4c38cb1ff2c987a6364578563f500a1ec4f00e5c60975d58c1999f0b3ff0bc035d1c2859d7877c444befc84b5e73491d4540b08b12626016fa099d613dd5632ce208e50b4eaf7865e4960aef8bb3dafc99789fcdf031e309a303f490773536c2173ed3e6f76dd6f3f42ff8919ea2cbbf5b25a78e2fbece334b13eb383deeb10afcdd81ba87527c537f7265847bb62fb29161549ea32117dabd82a8df5785157efa0bd9a99a77b04b74ec6", 0xb3}, {&(0x7f00000002c0)="915faa6aed34dd579cf824a6d98169f0035e4502de91193fb48b9635cdf3acf2efd725df8636f954f164a74c4e49763aa4fc10face0b36a8d8d626ca9332b91d062d45e7cd7d5ea644b8a97dffa17aa9f16692a3d54c0869d4850db542b040247296b6e3e3506d", 0x67}, {&(0x7f0000000180)}, {&(0x7f0000000340)="d8be811b1acc6821b0381e8eb893906496a2b43089a11ce4733c98b2cc295145af0970763480dab45853d6effbc5b411d9784db28973c65b0729acd4d3a03ce028a298e1692513d41dec0d85f7d3ac8cc46f710bb75304b552221150ca8fe0a10abc60fc77713151b2574830cb2afed25b535e4b92e096d7077ddc6a3d6265a44c9c46cfb39c6a1873b94c36b86a90e86e27cb9a7a8a4ef5bb7de85af7372764a6bb082589f1f90ebd6c7accc03725e8d7b5a530948716da73eca5cf2fd9b41861e6931d781a73277a", 0xc9}, {&(0x7f00000004c0)="3c38a1119b152438f67a8f83324b693175803a895c6d4876c80aba4ff2ccf4b9f4f573de22074e846471ab9e18b8e1096a280f56747d558aa8138f4be348258fde59fc5115d1a22f954a17e21aa842c2e27a771059e90687946732a0d09d4edc02359bf6d5e70075c1243ef8f411828a3a76bcbc54456a26874c00775b33c1273837f8c2441ea23aceb926f99b2662e212116c9c3fc37b324188158952ca99d594898c6556f1f0f2d1cc7d3a02d97e4a", 0xb0}, {&(0x7f0000000580)="d4e638aa911ab26fe68cf17563c886c3149d07daf5994a2666f776d77cd1e9aad9f0e17a38bcee778c65325a58993a36b17e91e7c41b3b4b72f0b9585d007176d96bb5a1b5e062603283e9146b0726ff0d5f1d488f468e30bc11ad2fad5c15622f0613677c279637291dd9c66de9c346e37cc4fea82132f8ee2c4a69edde9bcff448120aacca664f3cb8576d6d9fa0f50303676d2caf879ac64538398a362ba746c750759f408f192319c28118e9ac0daaca76ef33cc7c34b0ff77e1078680343d717e", 0xc3}, {&(0x7f0000000440)="64fa8b015de50897", 0x8}, {&(0x7f0000000680)="fd79b700dc6a3050e442b2c1c5ba00d181c639bc0737dad731b9b51a75a376023ff3f305d35d6c89c5ea7d66ffe6cf3c6fc7682573ac81d68dd9c97a10537c9d4d33eb3404e10e761038c649040467ecb635e9431bac1f435304fbcf4f7d756e4861ed318cc1a3caaf768225", 0x6c}, {&(0x7f0000000700)="416dde8d5f354c8cfeca39ea2488fe44d12dca013396773967b05f5451ce6ccb4caaa6ecfc2bb1a7a3765de3e818ecfed156d2aee207768cf3a70633bea41028ed9e84ea87991a40b55ba71629240383a7a9ee439f34e041c3295e279c4654b857e99784e54722ae14e376e876c2d83c425bec886b1ad0134b6e82f3f69923366a1712edb73e87cb277cf430d6fdf95f5644bf033dd8b3031243e2675030a6462dea52035f146bb613980ad2911ac20c16a223f5cf071f1af580747c9795edb3cfeb467b886c06fe3d2614c7809b9bdda4236f3d2949b1a475e70f", 0xdb}, {&(0x7f0000000800)="cc10d1e2b75a7280045869aad15ffe80fcc7ab0a5870b8fd42a5ba6ab5e60ee1bb1ab432c4932fbaa14af695494c17ae74e032325ed15f2cb2878fd84883898f4cd32b0ad75b1ce5065ec65925c21cd892806954849b854752189e1a4edab5d1c3c5eeb3d10b6bd07e02f125025fcdf9dbc1a67e864805c2e58d306fb405179b9bddee5d4aa424019412c4ad3ec92fc3466118743226cb7478dfbfc21224448b25074356c369b00252f9302535efdcbadf06b22e15ba0ee93676f771e6e10e71cdeda7694f6ccda427f0bb6ab04f07f026a94a94577fb2e7ae31fb4bd29508bdc208d46618c3365e204233b7018d6543", 0xf0}], 0xa, r2) r3 = syz_open_pts(r0, 0x0) readv(r3, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) 11:57:07 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) 11:57:07 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070") bind$alg(r0, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x8) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001340)=""/239, 0xef}], 0x1}}], 0x40000000000015c, 0x0, 0x0) 11:57:07 executing program 3 (fault-call:5 fault-nth:14): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 11:57:07 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0xb448576463435459, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff3b94]}, 0x45c) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc671228ffa99af29) openat$cgroup(r1, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r3 = dup(r0) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x3) syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x84800) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000140)=""/171, &(0x7f00000000c0)=0xab) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) 11:57:07 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1e) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) [ 225.578293] FAULT_INJECTION: forcing a failure. [ 225.578293] name failslab, interval 1, probability 0, space 0, times 0 [ 225.617196] CPU: 0 PID: 10141 Comm: syz-executor.3 Not tainted 4.14.140 #36 [ 225.624703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 225.624709] Call Trace: [ 225.624727] dump_stack+0x138/0x197 [ 225.624744] should_fail.cold+0x10f/0x159 [ 225.624762] should_failslab+0xdb/0x130 [ 225.650207] kmem_cache_alloc+0x2d7/0x780 [ 225.650218] ? mutex_unlock+0xd/0x10 [ 225.650229] ? kernfs_activate+0x13a/0x190 [ 225.650244] __kernfs_new_node+0x70/0x420 [ 225.650261] kernfs_new_node+0x80/0xf0 [ 225.650271] kernfs_create_dir_ns+0x41/0x140 [ 225.650282] internal_create_group+0xea/0x7b0 [ 225.658632] sysfs_create_groups+0x97/0x140 [ 225.658648] device_add+0x828/0x1490 [ 225.658661] ? device_private_init+0x190/0x190 [ 225.658675] ? input_register_device+0x467/0xb20 [ 225.671914] input_register_device+0x60d/0xb20 [ 225.671935] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 225.671947] ? uinput_request_submit.part.0+0x290/0x290 [ 225.671970] ? __might_sleep+0x93/0xb0 [ 225.671983] ? __fget+0x210/0x370 [ 225.681667] ? uinput_compat_ioctl+0xa0/0xa0 [ 225.681677] uinput_ioctl+0x4a/0x60 [ 225.681690] do_vfs_ioctl+0x7ae/0x1060 [ 225.681704] ? selinux_file_mprotect+0x5d0/0x5d0 [ 225.681714] ? lock_downgrade+0x6e0/0x6e0 [ 225.681724] ? ioctl_preallocate+0x1c0/0x1c0 [ 225.681735] ? __fget+0x237/0x370 [ 225.681757] ? security_file_ioctl+0x89/0xb0 [ 225.695972] SyS_ioctl+0x8f/0xc0 [ 225.695982] ? do_vfs_ioctl+0x1060/0x1060 [ 225.695998] do_syscall_64+0x1e8/0x640 [ 225.696006] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 225.696022] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 225.709820] input: syz1 as /devices/virtual/input/input224 [ 225.713392] RIP: 0033:0x459879 [ 225.713397] RSP: 002b:00007fc30efd4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 225.713407] RAX: ffffffffffffffda RBX: 00007fc30efd4c90 RCX: 0000000000459879 [ 225.713412] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 225.713418] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 225.713424] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc30efd56d4 [ 225.713430] R13: 00000000004c460b R14: 00000000004d8938 R15: 0000000000000005 [ 225.892837] input: syz1 as /devices/virtual/input/input225 11:57:07 executing program 5: clone(0x41bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() getgroups(0x2, &(0x7f00000006c0)=[0xee01, 0xee01]) setresgid(0x0, 0x0, r1) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@initdev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@local}}, &(0x7f0000000600)=0xe8) lsetxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.capability\x00', &(0x7f0000000640)=@v3={0x3000000, [{0x20, 0xfffffffffffffff9}, {0x6, 0x42}], r2}, 0x18, 0x2) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000680)='/dev/dlm-monitor\x00', 0x80000, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000700)={0x0, 0xe2}, &(0x7f0000000740)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000780)={r4, 0x90, 0x1}, &(0x7f00000007c0)=0x8) unshare(0x30010000) r5 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getgid() getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)=ANY=[@ANYBLOB="e8470488", @ANYRES32=0x0], &(0x7f0000000080)=0x8) ioctl$VIDIOC_QUERY_DV_TIMINGS(r5, 0x80845663, &(0x7f0000000380)) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000840)={r6, 0x1f8}, &(0x7f0000000880)=0xfffffffffffffea7) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ioctl$VIDIOC_G_AUDOUT(r5, 0x80345631, &(0x7f0000000340)) ptrace(0x4206, r0) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/relabel\x00', 0x2, 0x0) fstat(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@empty, @in6=@empty, 0x4e20, 0x0, 0x4e24, 0x40, 0x2, 0xbfbc65fc12bfccaa, 0x80, 0x88, 0x0, r7}, {0x400, 0x1, 0x0, 0x2, 0x9, 0x5, 0xb690, 0x6}, {0x8, 0x3, 0x81c, 0x4}, 0x7, 0x6e6bb7, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0x4d5, 0x6c}, 0x2, @in6=@loopback, 0x3505, 0x1, 0xb38e2bd374661d28, 0x9, 0xa7, 0xb69, 0x22}}, 0xe8) 11:57:07 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) 11:57:07 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) 11:57:07 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070") bind$alg(r0, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x4924924924925e9, 0x0) recvmmsg(r2, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001340)=""/239, 0xef}], 0x1}}], 0x40000000000015c, 0x0, 0x0) 11:57:07 executing program 3 (fault-call:5 fault-nth:15): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 11:57:07 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}, 0x45c) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x40) r2 = dup(r0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x6) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) 11:57:07 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) 11:57:07 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f00000000c0)=""/39) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}) r2 = syz_open_pts(r0, 0x0) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) 11:57:07 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070") bind$alg(r0, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001340)=""/239, 0xef}], 0x1}}], 0x40000000000015c, 0x0, 0x0) prctl$PR_SVE_SET_VL(0x32, 0x8003b263) [ 226.026038] FAULT_INJECTION: forcing a failure. [ 226.026038] name failslab, interval 1, probability 0, space 0, times 0 [ 226.056579] input: syz1 as /devices/virtual/input/input227 [ 226.100758] CPU: 0 PID: 10165 Comm: syz-executor.3 Not tainted 4.14.140 #36 [ 226.110415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 226.110421] Call Trace: [ 226.110441] dump_stack+0x138/0x197 [ 226.110458] should_fail.cold+0x10f/0x159 [ 226.110473] should_failslab+0xdb/0x130 [ 226.110486] kmem_cache_alloc+0x2d7/0x780 [ 226.110494] ? mutex_unlock+0xd/0x10 [ 226.110503] ? kernfs_activate+0x13a/0x190 [ 226.110518] __kernfs_new_node+0x70/0x420 [ 226.110533] kernfs_new_node+0x80/0xf0 [ 226.110545] kernfs_create_dir_ns+0x41/0x140 [ 226.110556] internal_create_group+0xea/0x7b0 [ 226.110570] sysfs_create_groups+0x97/0x140 [ 226.110582] device_add+0x828/0x1490 [ 226.110595] ? device_private_init+0x190/0x190 [ 226.110606] ? input_register_device+0x467/0xb20 [ 226.110617] input_register_device+0x60d/0xb20 [ 226.110632] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 226.110644] ? uinput_request_submit.part.0+0x290/0x290 [ 226.124834] ? __might_sleep+0x93/0xb0 [ 226.124844] ? __fget+0x210/0x370 [ 226.124859] ? uinput_compat_ioctl+0xa0/0xa0 [ 226.138112] uinput_ioctl+0x4a/0x60 [ 226.138125] do_vfs_ioctl+0x7ae/0x1060 [ 226.138139] ? selinux_file_mprotect+0x5d0/0x5d0 [ 226.157060] ? lock_downgrade+0x6e0/0x6e0 [ 226.157073] ? ioctl_preallocate+0x1c0/0x1c0 [ 226.157084] ? __fget+0x237/0x370 11:57:07 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) 11:57:07 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070") bind$alg(r0, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r2 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x4, 0x1e500) ioctl$CAPI_CLR_FLAGS(r2, 0x80044325, &(0x7f0000000100)) r3 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001340)=""/239, 0xef}], 0x1}}], 0x40000000000015c, 0x0, 0x0) [ 226.171649] ? security_file_ioctl+0x89/0xb0 [ 226.171663] SyS_ioctl+0x8f/0xc0 [ 226.171672] ? do_vfs_ioctl+0x1060/0x1060 [ 226.171686] do_syscall_64+0x1e8/0x640 [ 226.171694] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 226.171710] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 226.180099] RIP: 0033:0x459879 [ 226.180105] RSP: 002b:00007fc30efd4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 226.180117] RAX: ffffffffffffffda RBX: 00007fc30efd4c90 RCX: 0000000000459879 11:57:07 executing program 5: clone(0x41bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() getgroups(0x2, &(0x7f00000006c0)=[0xee01, 0xee01]) setresgid(0x0, 0x0, r1) unshare(0x30010000) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x2e70000000, 0x4400) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f0000000040)=0x2) ptrace(0x4206, r0) 11:57:08 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) 11:57:08 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x480000, 0x0) setsockopt$inet6_buf(r1, 0x29, 0xff, &(0x7f0000000100)="9c922c0d15da8403f229f6fefeccbd4eb109184efbffa888a0b651a820a764b426bf7abf6100b335f3b0f6c1390698fdf6f655ca80580f3af17cfa53cdd23bbf1833677bdceb235a285c7718", 0x4c) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070") bind$alg(r0, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000240)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217acd94c9a1e03ad62005127000000000000e60000", 0xffffffffffffff86) r3 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) ioctl$sock_SIOCGSKNS(r3, 0x894c, &(0x7f00000001c0)=0x81) recvmmsg(r3, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001340)=""/239, 0xef}], 0x1}}], 0x40000000000015c, 0x0, 0x0) [ 226.180122] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 226.180128] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 226.180133] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc30efd56d4 [ 226.180138] R13: 00000000004c460b R14: 00000000004d8938 R15: 0000000000000005 11:57:08 executing program 3 (fault-call:5 fault-nth:16): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 11:57:08 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) 11:57:08 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070") bind$alg(r0, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r2 = accept$alg(r0, 0x0, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0xf319856d99e94e94) ioctl$VIDIOC_G_CTRL(r3, 0xc008561b, &(0x7f0000000100)={0x39, 0x79b}) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001340)=""/239, 0xef}], 0x1}}], 0x40000000000015c, 0x0, 0x0) [ 226.438337] FAULT_INJECTION: forcing a failure. [ 226.438337] name failslab, interval 1, probability 0, space 0, times 0 [ 226.483045] CPU: 1 PID: 10206 Comm: syz-executor.3 Not tainted 4.14.140 #36 [ 226.491163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 226.501206] Call Trace: [ 226.504016] dump_stack+0x138/0x197 [ 226.507767] should_fail.cold+0x10f/0x159 [ 226.511960] should_failslab+0xdb/0x130 [ 226.516231] kmem_cache_alloc+0x2d7/0x780 [ 226.520526] ? wait_for_completion+0x420/0x420 [ 226.525801] __kernfs_new_node+0x70/0x420 [ 226.529969] kernfs_new_node+0x80/0xf0 [ 226.529984] __kernfs_create_file+0x46/0x323 [ 226.529997] sysfs_add_file_mode_ns+0x1e4/0x450 [ 226.530012] internal_create_group+0x232/0x7b0 [ 226.539156] sysfs_create_groups+0x97/0x140 [ 226.539170] device_add+0x828/0x1490 [ 226.539184] ? device_private_init+0x190/0x190 [ 226.539200] ? input_register_device+0x467/0xb20 [ 226.568450] input_register_device+0x60d/0xb20 [ 226.573350] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 226.578968] ? uinput_request_submit.part.0+0x290/0x290 [ 226.584945] ? __might_sleep+0x93/0xb0 [ 226.584954] ? __fget+0x210/0x370 [ 226.584966] ? uinput_compat_ioctl+0xa0/0xa0 [ 226.584974] uinput_ioctl+0x4a/0x60 [ 226.584983] do_vfs_ioctl+0x7ae/0x1060 [ 226.584994] ? selinux_file_mprotect+0x5d0/0x5d0 [ 226.585004] ? lock_downgrade+0x6e0/0x6e0 [ 226.585012] ? ioctl_preallocate+0x1c0/0x1c0 [ 226.585023] ? __fget+0x237/0x370 [ 226.585042] ? security_file_ioctl+0x89/0xb0 [ 226.629028] SyS_ioctl+0x8f/0xc0 [ 226.629040] ? do_vfs_ioctl+0x1060/0x1060 [ 226.629054] do_syscall_64+0x1e8/0x640 [ 226.629066] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 226.642744] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 226.642753] RIP: 0033:0x459879 [ 226.642758] RSP: 002b:00007fc30efd4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 226.642768] RAX: ffffffffffffffda RBX: 00007fc30efd4c90 RCX: 0000000000459879 [ 226.642773] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 226.642778] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 226.642784] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc30efd56d4 [ 226.642790] R13: 00000000004c460b R14: 00000000004d8938 R15: 0000000000000005 [ 226.712054] input: syz1 as /devices/virtual/input/input229 11:57:08 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) write$binfmt_elf32(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x2df) ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f0000000000)) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 11:57:08 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070") bind$alg(r0, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r2 = accept$alg(r0, 0x0, 0x0) fcntl$getownex(r1, 0x10, &(0x7f00000001c0)={0x0, 0x0}) r4 = fcntl$dupfd(r0, 0x406, r2) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0xfffffffffffffffd, 0x400, 0x0, 0x0, 0x6fc, 0x10000, 0x2, 0x1, 0x80, 0x6, 0x8, 0x8, 0x8, 0x3, 0x7, 0x1, 0x9e, 0x40, 0xf14e, 0xf02, 0x80, 0x2, 0x1, 0x4, 0x3c9e, 0x0, 0x5c0, 0x74c9, 0x2, 0x3, 0x5, 0x7, 0x17, 0x5, 0x8, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000080), 0x8}, 0x7659cdda5b63f82c, 0x2, 0x0, 0x3, 0x81, 0x100000000000000, 0x404000000}, r3, 0xf, r4, 0x1) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) fcntl$getown(r2, 0x9) recvmmsg(r2, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001340)=""/239, 0xef}], 0x1}}], 0x40000000000015c, 0x0, 0x0) [ 226.825970] input: syz1 as /devices/virtual/input/input230 11:57:08 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x385, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) 11:57:08 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x6}, 0x18) 11:57:08 executing program 3 (fault-call:5 fault-nth:17): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 11:57:08 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x4, &(0x7f0000000000)="1158665d538f9e2a455500") r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x400000, 0x0) ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f00000001c0)) bind$alg(r0, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r2, 0x5386, &(0x7f0000000100)) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r3 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001340)=""/239, 0xef}], 0x1}}], 0x40000000000015c, 0x0, 0x0) [ 227.075976] FAULT_INJECTION: forcing a failure. [ 227.075976] name failslab, interval 1, probability 0, space 0, times 0 [ 227.112433] CPU: 0 PID: 10235 Comm: syz-executor.3 Not tainted 4.14.140 #36 [ 227.119683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 227.129740] Call Trace: [ 227.132345] dump_stack+0x138/0x197 [ 227.135985] should_fail.cold+0x10f/0x159 [ 227.140151] should_failslab+0xdb/0x130 [ 227.144173] kmem_cache_alloc+0x2d7/0x780 [ 227.148329] ? wait_for_completion+0x420/0x420 [ 227.152928] __kernfs_new_node+0x70/0x420 [ 227.157079] kernfs_new_node+0x80/0xf0 [ 227.160992] __kernfs_create_file+0x46/0x323 [ 227.165409] sysfs_add_file_mode_ns+0x1e4/0x450 [ 227.170090] internal_create_group+0x232/0x7b0 [ 227.174706] sysfs_create_groups+0x97/0x140 [ 227.179164] device_add+0x828/0x1490 [ 227.179179] ? device_private_init+0x190/0x190 [ 227.187534] ? input_register_device+0x467/0xb20 [ 227.187548] input_register_device+0x60d/0xb20 [ 227.187565] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 227.203622] ? uinput_request_submit.part.0+0x290/0x290 [ 227.209099] ? __might_sleep+0x93/0xb0 [ 227.212999] ? __fget+0x210/0x370 [ 227.216587] ? uinput_compat_ioctl+0xa0/0xa0 [ 227.221164] uinput_ioctl+0x4a/0x60 [ 227.224801] do_vfs_ioctl+0x7ae/0x1060 [ 227.229002] ? selinux_file_mprotect+0x5d0/0x5d0 [ 227.234099] ? lock_downgrade+0x6e0/0x6e0 [ 227.238237] ? ioctl_preallocate+0x1c0/0x1c0 [ 227.243209] ? __fget+0x237/0x370 [ 227.246754] ? security_file_ioctl+0x89/0xb0 [ 227.251282] SyS_ioctl+0x8f/0xc0 [ 227.254642] ? do_vfs_ioctl+0x1060/0x1060 [ 227.258842] do_syscall_64+0x1e8/0x640 [ 227.262823] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 227.267815] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 227.273018] RIP: 0033:0x459879 11:57:09 executing program 5: clone(0x41bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() getgroups(0x2, &(0x7f00000006c0)=[0xee01, 0xee01]) setresgid(0x0, 0x0, r1) unshare(0x30010000) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x4206, r0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000040)={@my=0x0}) 11:57:09 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x4) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 11:57:09 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070") bind$alg(r0, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001340)=""/239, 0xef}], 0x1}}], 0x40000000000015c, 0x0, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x400400, 0x0) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000740)={{{@in, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@local}}, &(0x7f0000000840)=0xe8) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000880)={0x0, @local, @multicast1}, &(0x7f00000008c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000900)={'team0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000c40)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000c80)={{{@in6=@empty, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@loopback}}, &(0x7f0000000d80)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000dc0)={{{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f0000000ec0)=0xe8) accept$packet(r3, &(0x7f0000007640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000007680)=0xfffffffffffffcd2) getpeername$packet(0xffffffffffffffff, &(0x7f00000076c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000007700)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000007740)={{{@in=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000007840)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000007880)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007b00)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6}}, &(0x7f0000007c00)=0xe8) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000008200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000081c0)={&(0x7f0000007c40)={0x570, r4, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0xe8, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x9}}}]}}, {{0x8, 0x1, r7}, {0x170, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffffffe}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x9a9}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r9}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0x174, 0x2, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0xe0cd}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x7ff}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0xe9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8}}}]}}, {{0x8, 0x1, r13}, {0x170, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r14}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}, {0x7c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x4c, 0x4, [{0x20, 0x8001, 0x4, 0xffff}, {0x8, 0x8, 0x3, 0x7}, {0xcd, 0x0, 0x10000}, {0x2e, 0xfffffffffffffff7, 0x7, 0x3}, {0x8, 0x2, 0x0, 0x9}, {0x0, 0x0, 0x4}, {0x7ff, 0x8001, 0x8, 0x20}, {0x9, 0x7, 0x8, 0x401}, {0x6, 0x3, 0xbc0, 0x9}]}}}]}}]}, 0x570}, 0x1, 0x0, 0x0, 0x90}, 0x40) 11:57:09 executing program 3 (fault-call:5 fault-nth:18): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 11:57:09 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x1) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000080)={0x838, 0x81, 0xd13}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) 11:57:09 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x6}, 0x18) [ 227.276210] RSP: 002b:00007fc30efd4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 227.284087] RAX: ffffffffffffffda RBX: 00007fc30efd4c90 RCX: 0000000000459879 [ 227.291551] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 227.299034] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 227.307772] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc30efd56d4 [ 227.315066] R13: 00000000004c460b R14: 00000000004d8938 R15: 0000000000000005 [ 227.357428] input: syz1 as /devices/virtual/input/input233 11:57:09 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070") bind$alg(r0, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001340)=""/239, 0xef}], 0x1}}], 0x40000000000015c, 0x0, 0x0) r3 = fcntl$dupfd(r0, 0x406, r0) ioctl$VFIO_IOMMU_GET_INFO(r3, 0x3b70, &(0x7f0000000080)={0x10}) 11:57:09 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES64=r0, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYPTR], @ANYRESOCT=r0, @ANYPTR, @ANYRES32=r0, @ANYBLOB, @ANYBLOB="a0aee5eb1a1a914c965ba97e93e1193cc7d595c31572334857e1f90563c1ef84dd06716cb1b5abf826897a0dae913292b8cfcfc833f1e5de194660261d0d263baef991567f883a1d49a239d623604df9cda293c4ed487eefade7c598706b67131c960acd9a4bf0b765496526aa9f24ae366e8a655124a9934be7da22d4bf38c4cdf5af237024cda5b35feeddcbd9b9688c65565c283f5e1eefc3e8eb89900ff6c4fad82000208a24ffe54dfa64d3e4d0bd39766adffcb4bfd6bc28074f8d566b1130d9dfbca0ede367daea0b78e1157b6341fa0155e8e71e672a1cf8e78f5ae675a494b936a4f75bcc00f778a92f"]], 0xfffffffffffffdbe) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) [ 227.439460] FAULT_INJECTION: forcing a failure. [ 227.439460] name failslab, interval 1, probability 0, space 0, times 0 [ 227.461681] CPU: 0 PID: 10266 Comm: syz-executor.3 Not tainted 4.14.140 #36 [ 227.469083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 227.479357] Call Trace: 11:57:09 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070") bind$alg(r0, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001340)=""/239, 0xef}], 0x1}}], 0x40000000000015c, 0x0, 0x0) 11:57:09 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x6}, 0x18) [ 227.482046] dump_stack+0x138/0x197 [ 227.494400] should_fail.cold+0x10f/0x159 [ 227.498569] should_failslab+0xdb/0x130 [ 227.502559] kmem_cache_alloc+0x2d7/0x780 [ 227.506712] ? mutex_unlock+0xd/0x10 [ 227.510606] ? kernfs_activate+0x13a/0x190 [ 227.514852] __kernfs_new_node+0x70/0x420 [ 227.524555] kernfs_new_node+0x80/0xf0 [ 227.528457] kernfs_create_dir_ns+0x41/0x140 [ 227.532877] internal_create_group+0xea/0x7b0 11:57:09 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1, &(0x7f0000000000)="11dca50d6c0bcfe47bf070") bind$alg(r0, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001340)=""/239, 0xef}], 0x1}}], 0x40000000000015c, 0x0, 0x0) [ 227.537392] sysfs_create_groups+0x97/0x140 [ 227.541726] device_add+0x828/0x1490 [ 227.545448] ? device_private_init+0x190/0x190 [ 227.550219] ? input_register_device+0x467/0xb20 [ 227.554996] input_register_device+0x60d/0xb20 [ 227.559588] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 227.559600] ? uinput_request_submit.part.0+0x290/0x290 [ 227.570156] ? __might_sleep+0x93/0xb0 [ 227.570168] ? __fget+0x210/0x370 [ 227.570184] ? uinput_compat_ioctl+0xa0/0xa0 [ 227.570194] uinput_ioctl+0x4a/0x60 [ 227.570204] do_vfs_ioctl+0x7ae/0x1060 11:57:09 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x8, 0x200) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000240)={0x0, 0x0, {0xffff, 0x4, 0x7, 0x7}}) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070") bind$alg(r1, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58) bind$alg(r1, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r3 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f00000001c0)=0x1) r4 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r4, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001340)=""/239, 0xef}], 0x1}}], 0x40000000000015c, 0x0, 0x0) [ 227.570216] ? selinux_file_mprotect+0x5d0/0x5d0 [ 227.570228] ? lock_downgrade+0x6e0/0x6e0 [ 227.598445] ? ioctl_preallocate+0x1c0/0x1c0 [ 227.602945] ? __fget+0x237/0x370 [ 227.606419] ? security_file_ioctl+0x89/0xb0 [ 227.610838] SyS_ioctl+0x8f/0xc0 [ 227.614199] ? do_vfs_ioctl+0x1060/0x1060 [ 227.614213] do_syscall_64+0x1e8/0x640 [ 227.614223] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 227.622234] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 227.622243] RIP: 0033:0x459879 [ 227.622249] RSP: 002b:00007fc30efd4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 227.622259] RAX: ffffffffffffffda RBX: 00007fc30efd4c90 RCX: 0000000000459879 [ 227.622264] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 227.622268] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 227.622274] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc30efd56d4 [ 227.622280] R13: 00000000004c460b R14: 00000000004d8938 R15: 0000000000000005 11:57:09 executing program 5: clone(0x41bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() getgroups(0x2, &(0x7f00000006c0)=[0xee01, 0xee01]) setresgid(0x0, 0x0, r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$addseals(r2, 0x409, 0x0) unshare(0x30010000) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x4206, r0) 11:57:09 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) 11:57:09 executing program 3 (fault-call:5 fault-nth:19): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 11:57:09 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x101483, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@empty, @in6=@dev}}, {{@in6=@initdev}, 0x0, @in6=@local}}, &(0x7f0000000100)=0xe8) ioctl(r1, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070") getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000140)={@ipv4={[], [], @multicast1}}, &(0x7f00000002c0)=0x14) bind$alg(r0, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r3 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001340)=""/239, 0xef}], 0x1}}], 0x40000000000015c, 0x0, 0x0) 11:57:09 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_POLL(r0, 0x0, 0x0) [ 228.301969] input: syz1 as /devices/virtual/input/input236 [ 228.323660] FAULT_INJECTION: forcing a failure. [ 228.323660] name failslab, interval 1, probability 0, space 0, times 0 [ 228.353858] CPU: 1 PID: 10305 Comm: syz-executor.3 Not tainted 4.14.140 #36 [ 228.361085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 228.370438] Call Trace: [ 228.370458] dump_stack+0x138/0x197 [ 228.370477] should_fail.cold+0x10f/0x159 [ 228.370491] should_failslab+0xdb/0x130 [ 228.370502] kmem_cache_alloc+0x2d7/0x780 [ 228.370515] ? __mutex_unlock_slowpath+0x71/0x800 [ 228.376709] ? __lock_is_held+0xb6/0x140 [ 228.384997] __kernfs_new_node+0x70/0x420 [ 228.402216] kernfs_new_node+0x80/0xf0 [ 228.406084] __kernfs_create_file+0x46/0x323 [ 228.410569] sysfs_add_file_mode_ns+0x1e4/0x450 [ 228.415389] internal_create_group+0x232/0x7b0 [ 228.420093] sysfs_create_groups+0x97/0x140 [ 228.424473] device_add+0x828/0x1490 [ 228.428186] ? device_private_init+0x190/0x190 [ 228.432752] ? input_register_device+0x467/0xb20 [ 228.437688] input_register_device+0x60d/0xb20 [ 228.442266] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 228.447454] ? uinput_request_submit.part.0+0x290/0x290 [ 228.453040] ? __might_sleep+0x93/0xb0 [ 228.456911] ? __fget+0x210/0x370 [ 228.460347] ? uinput_compat_ioctl+0xa0/0xa0 [ 228.464732] uinput_ioctl+0x4a/0x60 [ 228.468342] do_vfs_ioctl+0x7ae/0x1060 [ 228.472397] ? selinux_file_mprotect+0x5d0/0x5d0 [ 228.477134] ? lock_downgrade+0x6e0/0x6e0 [ 228.481282] ? ioctl_preallocate+0x1c0/0x1c0 [ 228.485788] ? __fget+0x237/0x370 [ 228.489329] ? security_file_ioctl+0x89/0xb0 [ 228.493763] SyS_ioctl+0x8f/0xc0 [ 228.497129] ? do_vfs_ioctl+0x1060/0x1060 [ 228.501271] do_syscall_64+0x1e8/0x640 [ 228.505325] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 228.510768] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 228.516033] RIP: 0033:0x459879 [ 228.519236] RSP: 002b:00007fc30efd4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 228.526959] RAX: ffffffffffffffda RBX: 00007fc30efd4c90 RCX: 0000000000459879 [ 228.534225] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 228.541578] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 11:57:10 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070") bind$alg(r0, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) r3 = accept(r1, 0x0, &(0x7f00000001c0)) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e20}}, [0xc1d, 0x100000000, 0x8001, 0x2, 0x1, 0x5, 0x8, 0x4, 0xffffffffffff02a0, 0x101, 0x7, 0x1000, 0x1, 0x5, 0x200]}, &(0x7f0000000300)=0x100) getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000340)={r4, 0x7f}, &(0x7f0000000380)=0x8) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='security.selinux\x00', &(0x7f0000000140)='system_u:object_r:random_device_t:s0\x00', 0x25, 0x2) recvmmsg(r2, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001340)=""/239, 0xef}], 0x1}}], 0x40000000000015c, 0x0, 0x0) 11:57:10 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_POLL(r0, 0x0, 0x0) 11:57:10 executing program 2: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000140)="85a39faba2efe3d1e239d1f034c1aa9858e3c010ddbdc1f3c508e5b140b45585289778d47de83d5b262a9f872f00a291e6a588b306902c3bc44c417bef45c73a19d3f350e634078f6c7af4dfd6e94dc030d8420e704c836b7adfffe0") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x7}) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x1) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}) r2 = syz_open_pts(r1, 0x0) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) [ 228.548921] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc30efd56d4 [ 228.556180] R13: 00000000004c460b R14: 00000000004d8938 R15: 0000000000000005 11:57:10 executing program 3 (fault-call:5 fault-nth:20): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) [ 228.610537] input: syz1 as /devices/virtual/input/input238 11:57:10 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070") bind$alg(r0, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x44de0627b80b79c4, 0x0) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000100)=0x2) recvmmsg(r2, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001340)=""/239, 0xef}], 0x1}}], 0x40000000000015c, 0x0, 0x0) 11:57:10 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000100)=r1, 0x4) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f0000000140)=0x7, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000880)={0x12e4, 0x28, 0x400, 0x70bd29, 0x25dfdbfd, {0x4}, [@generic="6a8432d426f257c3d20903b3a15e77e34e1688aac0056e4f05e2783685237097ff2b87900c8cd3810dd626356450d12d4cfa7869ad880e05d072f2cff86257ed772cf671302ecddf137c7268fe63e849686578b30163c8f925b9426cf86f2a2d2a0ddf4605b6e66b3822d170c8fadc114029490cef3b4e99a66b2e226eb2ba20eaeb5583fc593fa695077e986f884e06e7dd9ac52f791cd3fd00260bd10685a9d36ce929b06dd2ce49", @generic="58b884798a6120e0edc4b9520d0484abe92978ae11425f3e9d4e9931fc0d7766da8d1437065c43db32bfc61b606ffff84c11478c09e5f5ff2bd25a8392974ce9573c12", @generic="d21380166e68eb5ec80e247ae0bd439119b87fbc23157d4cde481246fb234e3ef1c9528e241f76bb43408b5c21cdeedca072399ded182919c636347951d4735d3a5ce40851c297d64ea8010d9f6c7c924044c965f390939a10be5a8710e19f391f6e0deb5b0bab1ffda21425ad49a696220bfd93c2d78efaf3", @generic="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", @generic="360a55643bcb87313487cf02", @generic="d6a5815e43f7f81e2db03034d8ce7cc31ba329926093b77abc21229aade43ddb1710eba93839ac480f4380ffc94bd04e29310a7a7110f7aa1735fee88f", @nested={0xcc, 0x12, [@generic="89b41ff381201623523e9a3499f5accd42c367d1df96508410790507386a3ad49cd5c8c52ecf6f104847f65b02d67708f2ce7201c9f0470e28b13f26a67d762df62403a53823e73e328f3d6e5bae866d101d278789b7abd18dbad370e826d0abd8591625a96f90e09d387393e0bc1e0ef0355d33af0aed3d2d4d9d62d0f1ae2c4af4791577ccb40aa8460eeaf03cd88a1a340ceaf8a4c6e5567db75ec5ad9437d97f8863ca797736891ede5599bcc1b8715c9afee378c93d3e8f1bd1140717099b1b802f6100cfa1"]}, @generic="c7786fd608f0da35c09704865aa19e5e192c51c45e39142cef428edf5e9bd9a698d40513603ccaad16408281a35b79b2ff12ecb1a4dce971862ff1ba3c399d79d29cd35491a90e40da281a", @typed={0x8, 0x96, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x12e4}}, 0x20000080) 11:57:10 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_POLL(r0, 0x0, 0x0) [ 228.679284] FAULT_INJECTION: forcing a failure. [ 228.679284] name failslab, interval 1, probability 0, space 0, times 0 [ 228.703293] CPU: 1 PID: 10328 Comm: syz-executor.3 Not tainted 4.14.140 #36 [ 228.710431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 228.710437] Call Trace: [ 228.710455] dump_stack+0x138/0x197 [ 228.710474] should_fail.cold+0x10f/0x159 [ 228.710491] should_failslab+0xdb/0x130 [ 228.710500] kmem_cache_alloc+0x2d7/0x780 [ 228.710513] ? wait_for_completion+0x420/0x420 [ 228.710530] __kernfs_new_node+0x70/0x420 [ 228.710544] kernfs_new_node+0x80/0xf0 [ 228.710558] __kernfs_create_file+0x46/0x323 [ 228.710570] sysfs_add_file_mode_ns+0x1e4/0x450 [ 228.760354] internal_create_group+0x232/0x7b0 [ 228.760374] sysfs_create_groups+0x97/0x140 [ 228.760386] device_add+0x828/0x1490 [ 228.760398] ? device_private_init+0x190/0x190 [ 228.760409] ? input_register_device+0x467/0xb20 [ 228.760420] input_register_device+0x60d/0xb20 [ 228.760437] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 228.760450] ? uinput_request_submit.part.0+0x290/0x290 [ 228.760461] ? fl_change+0x2660/0x4a20 [ 228.760482] ? __might_sleep+0x93/0xb0 [ 228.760492] ? __fget+0x210/0x370 [ 228.760508] ? uinput_compat_ioctl+0xa0/0xa0 [ 228.760516] uinput_ioctl+0x4a/0x60 [ 228.760526] do_vfs_ioctl+0x7ae/0x1060 [ 228.760537] ? selinux_file_mprotect+0x5d0/0x5d0 [ 228.760546] ? lock_downgrade+0x6e0/0x6e0 [ 228.760555] ? ioctl_preallocate+0x1c0/0x1c0 [ 228.760566] ? __fget+0x237/0x370 [ 228.760581] ? security_file_ioctl+0x89/0xb0 [ 228.760591] SyS_ioctl+0x8f/0xc0 [ 228.760599] ? do_vfs_ioctl+0x1060/0x1060 [ 228.760612] do_syscall_64+0x1e8/0x640 [ 228.760619] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 228.760635] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 228.778246] RIP: 0033:0x459879 [ 228.778252] RSP: 002b:00007fc30efd4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 228.778264] RAX: ffffffffffffffda RBX: 00007fc30efd4c90 RCX: 0000000000459879 [ 228.778269] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 228.778275] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 228.778281] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc30efd56d4 [ 228.778287] R13: 00000000004c460b R14: 00000000004d8938 R15: 0000000000000005 11:57:10 executing program 5: prctl$PR_SET_DUMPABLE(0x4, 0x2) clone(0x800041bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() getgroups(0x2, &(0x7f00000006c0)=[0xee01, 0xee01]) setresgid(0x0, 0x0, r1) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x20100, 0x0) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000140)={0x5, 0x47, &(0x7f0000000040)="7723b3a653810d3c6e863e269245be86950fcbdbcc83fce52abaae4358e540c2b6c0860da8b07f4b08e34e04ada2dfdcfb251108efbb298b800f8ec191c9ef6451b043b4d0de73"}) unshare(0x30010000) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x4206, r0) 11:57:10 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}) r1 = syz_open_pts(r0, 0x200) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) r2 = dup3(r1, r1, 0x80000) bind$rose(r2, &(0x7f00000002c0)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) 11:57:10 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070") bind$alg(r0, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001340)=""/239, 0xef}], 0x1}}], 0x40000000000015c, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x7, 0x200400) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$packet(r3, &(0x7f0000000140)={0x11, 0x15, r4, 0x1, 0x4, 0x6, @broadcast}, 0x14) 11:57:10 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) timerfd_create(0x7, 0x800) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x2006) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 11:57:10 executing program 3 (fault-call:5 fault-nth:21): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 11:57:10 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x6}, 0x18) [ 229.159809] input: syz1 as /devices/virtual/input/input242 [ 229.181076] FAULT_INJECTION: forcing a failure. [ 229.181076] name failslab, interval 1, probability 0, space 0, times 0 [ 229.194424] CPU: 1 PID: 10358 Comm: syz-executor.3 Not tainted 4.14.140 #36 11:57:10 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070") bind$alg(r0, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x80000, 0x0) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000140)={0x6, 0x1, 0x5}) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000100)={0x2, 0x2, 0x6, 0xffffffffd727bb5f, 0x546f, 0x855a, 0x6}) r3 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001340)=""/239, 0xef}], 0x1}}], 0x40000000000015c, 0x0, 0x0) 11:57:10 executing program 0 (fault-call:3 fault-nth:0): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) [ 229.201641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 229.211172] Call Trace: [ 229.211190] dump_stack+0x138/0x197 [ 229.211207] should_fail.cold+0x10f/0x159 [ 229.211222] should_failslab+0xdb/0x130 [ 229.211234] kmem_cache_alloc+0x2d7/0x780 [ 229.211244] ? wait_for_completion+0x420/0x420 [ 229.221841] __kernfs_new_node+0x70/0x420 [ 229.221854] kernfs_new_node+0x80/0xf0 [ 229.221867] __kernfs_create_file+0x46/0x323 [ 229.221879] sysfs_add_file_mode_ns+0x1e4/0x450 [ 229.221894] internal_create_group+0x232/0x7b0 11:57:10 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0xeb3, 0x3, &(0x7f0000000400)=[{&(0x7f0000000140)="57ae3fa7a9549825571219db3bff5d4cc2218e123206c84a32b99ce938dbe914cbde6ec28ddd105811fd70b01e0ec4b65d31b68b0ff99d3060746d2c3084ce9ae77c5c9f70c98055f45b61cc5c0a732b23d4aa5e73465360cb9ac51675a1d9eada397597d335635462a16aa5db1766c229d90545", 0x74, 0x10001}, {&(0x7f0000000200)="0367527d6f9db7eee06585b7a6d5763fe90143083567a575535bed0d0da5e4a989f33094ffe0751690759f17d23c82a0577aff395a3df441dd366c0d4377e367b1dd315a856cd133bb5b755e5f92d802a8dc8674806a9e09029cc4e2c31df069aefb85d856303a7d4d46c739d2b9e74ab5abf586f7e8977642383baede9026e22a12160316e1af528fe424d679dbcfb4e6a85e934771289232e4a71b1c0cf1fc3c20e770c106db0d96d9ac1af0f3135417d79dd3a19a97cadc6a67c4232e498fdb", 0xc1}, {&(0x7f0000000300)="b2abc4b6672e856db5b84fa679975759da3b6900f68693af6a86efd4a1d71d7675d04189ef97e1457011c8aa23211e61e272c2db20ff389c0962d47bf4292caed60e4c5063705a5c4b128d4c5b79e2a56d6a68e689cbc41198bcddb250e3d079868d943da5863b7099b8480670a15155c1e093c18249db714df2894171fcd04ab061ed19613028e2b57368f5b8559e363b753fdb66681268ba0d20f05938088bcc625400f52eee4ad4dcd35f111dead26033ebabde6f640fecec1b12a8bfbc15cdb901efc27bd8674fdf9c727aab7af476131cb69664bd6c7be16b", 0xdb, 0x7}], 0x40, &(0x7f0000000580)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c696f636861727365743d6d6163656c7469632c6572726f72733d636f6e74696e75652c66736d616769633d3078303030303030303030303030303230302c00f50810ccc67b013be2e838d73a12345b39cfab02f5c728241b75cf2efac564f8f64fcd307cb1ec54453bf6e3e0718b140206a79f67a82f6c2a00"]) ioctl$TIOCLINUX7(r0, 0x541c, &(0x7f00000004c0)={0x7, 0xe2f}) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xb7) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) [ 229.256768] sysfs_create_groups+0x97/0x140 [ 229.257103] device_add+0x828/0x1490 [ 229.257116] ? device_private_init+0x190/0x190 [ 229.257127] ? input_register_device+0x467/0xb20 [ 229.257141] input_register_device+0x60d/0xb20 [ 229.257157] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 229.257169] ? uinput_request_submit.part.0+0x290/0x290 [ 229.257193] ? __might_sleep+0x93/0xb0 [ 229.257201] ? __fget+0x210/0x370 [ 229.257212] ? uinput_compat_ioctl+0xa0/0xa0 [ 229.257220] uinput_ioctl+0x4a/0x60 [ 229.257231] do_vfs_ioctl+0x7ae/0x1060 [ 229.257244] ? selinux_file_mprotect+0x5d0/0x5d0 [ 229.257254] ? lock_downgrade+0x6e0/0x6e0 [ 229.257264] ? ioctl_preallocate+0x1c0/0x1c0 [ 229.257276] ? __fget+0x237/0x370 [ 229.257293] ? security_file_ioctl+0x89/0xb0 [ 229.257305] SyS_ioctl+0x8f/0xc0 [ 229.257314] ? do_vfs_ioctl+0x1060/0x1060 [ 229.257328] do_syscall_64+0x1e8/0x640 [ 229.257337] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 229.257354] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 229.257362] RIP: 0033:0x459879 [ 229.257368] RSP: 002b:00007fc30efd4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 229.257379] RAX: ffffffffffffffda RBX: 00007fc30efd4c90 RCX: 0000000000459879 [ 229.257385] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 229.257391] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 229.257396] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc30efd56d4 [ 229.257402] R13: 00000000004c460b R14: 00000000004d8938 R15: 0000000000000005 11:57:11 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x3, 0x101000) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000100)=0x6, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x10001, &(0x7f00000001c0)="11dca50d6c0bcfe47bf070") bind$alg(r0, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r3 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001340)=""/239, 0xef}], 0x1}}], 0x40000000000015c, 0x0, 0x0) [ 229.394122] FAT-fs (loop2): Unrecognized mount option "fsmagic=0x0000000000000200" or missing value 11:57:11 executing program 3 (fault-call:5 fault-nth:22): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) [ 229.489097] input: syz1 as /devices/virtual/input/input244 [ 229.507867] FAULT_INJECTION: forcing a failure. [ 229.507867] name failslab, interval 1, probability 0, space 0, times 0 [ 229.529293] CPU: 1 PID: 10385 Comm: syz-executor.0 Not tainted 4.14.140 #36 [ 229.536421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 229.538123] FAULT_INJECTION: forcing a failure. [ 229.538123] name failslab, interval 1, probability 0, space 0, times 0 [ 229.545777] Call Trace: [ 229.545798] dump_stack+0x138/0x197 [ 229.545815] should_fail.cold+0x10f/0x159 [ 229.545831] should_failslab+0xdb/0x130 [ 229.545853] kmem_cache_alloc_trace+0x2e9/0x790 [ 229.576026] ? trace_hardirqs_on+0x10/0x10 [ 229.580357] fuse_dev_do_write+0x936/0x2120 [ 229.584675] ? __might_fault+0x110/0x1d0 [ 229.588730] ? _parse_integer+0xe8/0x140 [ 229.592788] ? fuse_dev_read+0x1b0/0x1b0 [ 229.596842] ? trace_hardirqs_on+0x10/0x10 [ 229.601169] ? lock_downgrade+0x6e0/0x6e0 [ 229.605315] ? get_pid_task+0x98/0x140 [ 229.609198] ? __lock_acquire+0x5f7/0x4620 [ 229.613429] ? memset+0x32/0x40 [ 229.616741] fuse_dev_write+0x12e/0x1b0 [ 229.620799] ? fuse_dev_splice_write+0x9a0/0x9a0 [ 229.625554] ? trace_hardirqs_on+0x10/0x10 [ 229.629790] ? iov_iter_init+0xaf/0x1d0 [ 229.633758] __vfs_write+0x4a7/0x6b0 [ 229.637471] ? kernel_read+0x120/0x120 [ 229.641360] ? rw_verify_area+0xea/0x2b0 [ 229.645414] vfs_write+0x198/0x500 [ 229.648978] SyS_write+0xfd/0x230 [ 229.652422] ? SyS_read+0x230/0x230 [ 229.656042] ? do_syscall_64+0x53/0x640 [ 229.660042] ? SyS_read+0x230/0x230 [ 229.663661] do_syscall_64+0x1e8/0x640 [ 229.667536] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 229.672373] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 229.677553] RIP: 0033:0x459879 [ 229.680730] RSP: 002b:00007feb71f35c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 229.688522] RAX: ffffffffffffffda RBX: 00007feb71f35c90 RCX: 0000000000459879 [ 229.696046] RDX: 0000000000000018 RSI: 0000000020000080 RDI: 0000000000000003 [ 229.703306] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 229.710565] R10: 0000000000000000 R11: 0000000000000246 R12: 00007feb71f366d4 [ 229.717823] R13: 00000000004c9378 R14: 00000000004e06d8 R15: 0000000000000004 [ 229.725189] CPU: 0 PID: 10389 Comm: syz-executor.3 Not tainted 4.14.140 #36 [ 229.732290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 229.732295] Call Trace: [ 229.732312] dump_stack+0x138/0x197 [ 229.732327] should_fail.cold+0x10f/0x159 [ 229.732340] should_failslab+0xdb/0x130 [ 229.732354] kmem_cache_alloc+0x2d7/0x780 [ 229.752391] ? wait_for_completion+0x420/0x420 [ 229.752411] __kernfs_new_node+0x70/0x420 [ 229.752424] kernfs_new_node+0x80/0xf0 [ 229.752437] __kernfs_create_file+0x46/0x323 [ 229.752450] sysfs_add_file_mode_ns+0x1e4/0x450 [ 229.752465] internal_create_group+0x232/0x7b0 11:57:11 executing program 0 (fault-call:3 fault-nth:1): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) [ 229.752483] sysfs_create_groups+0x97/0x140 [ 229.773283] device_add+0x828/0x1490 [ 229.782348] ? device_private_init+0x190/0x190 [ 229.782359] ? input_register_device+0x467/0xb20 [ 229.782370] input_register_device+0x60d/0xb20 [ 229.782387] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 229.782398] ? uinput_request_submit.part.0+0x290/0x290 [ 229.782421] ? __might_sleep+0x93/0xb0 [ 229.782429] ? __fget+0x210/0x370 [ 229.782443] ? uinput_compat_ioctl+0xa0/0xa0 [ 229.791306] uinput_ioctl+0x4a/0x60 [ 229.791318] do_vfs_ioctl+0x7ae/0x1060 [ 229.791329] ? selinux_file_mprotect+0x5d0/0x5d0 [ 229.791339] ? lock_downgrade+0x6e0/0x6e0 [ 229.791348] ? ioctl_preallocate+0x1c0/0x1c0 [ 229.791359] ? __fget+0x237/0x370 [ 229.791375] ? security_file_ioctl+0x89/0xb0 [ 229.791387] SyS_ioctl+0x8f/0xc0 [ 229.791395] ? do_vfs_ioctl+0x1060/0x1060 [ 229.791406] do_syscall_64+0x1e8/0x640 [ 229.791416] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 229.799774] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 229.799783] RIP: 0033:0x459879 11:57:11 executing program 5: clone(0x41bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() getgroups(0x2, &(0x7f00000006c0)=[0xee01, 0xee01]) r2 = dup(0xffffffffffffffff) connect$bt_l2cap(r2, &(0x7f0000000180)={0x1f, 0x10000, {0x4, 0x9, 0x8001, 0x1, 0xc88, 0x1000}, 0x0, 0x51}, 0xe) setresgid(0x0, 0x0, r1) unshare(0x30010000) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) r3 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x4, 0x1) ioctl$TIOCGPTLCK(r3, 0x80045439, &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) ptrace(0x4206, r0) 11:57:11 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070") r2 = dup3(r1, r0, 0x80000) mq_timedsend(r2, &(0x7f0000001480)="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", 0x1000, 0x800, 0x0) bind$alg(r0, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r3 = accept$alg(r0, 0x0, 0x0) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x1, @empty}}, 0x1e) sendmmsg$alg(r3, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001340)=""/239, 0xef}], 0x1}}], 0x40000000000015c, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000100)=ANY=[@ANYBLOB="00000010", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f00000001c0)={r4, 0x6}, 0x8) 11:57:11 executing program 3 (fault-call:5 fault-nth:23): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 11:57:11 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f00000001c0)='syz0\x00') r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc]}, 0x45c) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r2 = dup(r1) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0xa) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000200), &(0x7f0000000240)=0x14) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000140)=0xfffffffffffffff7, 0x4) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f0000000000)) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) [ 229.799789] RSP: 002b:00007fc30efd4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 229.809183] RAX: ffffffffffffffda RBX: 00007fc30efd4c90 RCX: 0000000000459879 [ 229.809190] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 229.809196] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 229.809202] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc30efd56d4 [ 229.809208] R13: 00000000004c460b R14: 00000000004d8938 R15: 0000000000000005 [ 229.984124] FAULT_INJECTION: forcing a failure. [ 229.984124] name failslab, interval 1, probability 0, space 0, times 0 [ 230.014272] CPU: 1 PID: 10401 Comm: syz-executor.3 Not tainted 4.14.140 #36 [ 230.021430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 230.030884] Call Trace: 11:57:11 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070") bind$alg(r0, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) fgetxattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00', &(0x7f0000000100)=""/109, 0x6d) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000180), 0x0, 0x0) recvmmsg(r2, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001340)=""/239, 0xef}], 0x1}}], 0x40000000000015c, 0x0, 0x0) [ 230.033564] dump_stack+0x138/0x197 [ 230.033583] should_fail.cold+0x10f/0x159 [ 230.041357] should_failslab+0xdb/0x130 [ 230.041371] kmem_cache_alloc+0x2d7/0x780 [ 230.041382] ? wait_for_completion+0x420/0x420 [ 230.041398] __kernfs_new_node+0x70/0x420 [ 230.041532] kernfs_new_node+0x80/0xf0 [ 230.062501] __kernfs_create_file+0x46/0x323 [ 230.066919] sysfs_add_file_mode_ns+0x1e4/0x450 [ 230.066936] internal_create_group+0x232/0x7b0 [ 230.066953] sysfs_create_groups+0x97/0x140 [ 230.066965] device_add+0x828/0x1490 [ 230.084251] ? device_private_init+0x190/0x190 [ 230.084265] ? input_register_device+0x467/0xb20 [ 230.084279] input_register_device+0x60d/0xb20 [ 230.084296] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 230.084309] ? uinput_request_submit.part.0+0x290/0x290 [ 230.098419] ? __might_sleep+0x93/0xb0 [ 230.098431] ? __fget+0x210/0x370 [ 230.098447] ? uinput_compat_ioctl+0xa0/0xa0 [ 230.098459] uinput_ioctl+0x4a/0x60 [ 230.109132] do_vfs_ioctl+0x7ae/0x1060 [ 230.109147] ? selinux_file_mprotect+0x5d0/0x5d0 [ 230.109158] ? lock_downgrade+0x6e0/0x6e0 [ 230.109169] ? ioctl_preallocate+0x1c0/0x1c0 [ 230.109182] ? __fget+0x237/0x370 [ 230.109203] ? security_file_ioctl+0x89/0xb0 [ 230.120927] SyS_ioctl+0x8f/0xc0 [ 230.120939] ? do_vfs_ioctl+0x1060/0x1060 [ 230.120954] do_syscall_64+0x1e8/0x640 [ 230.120964] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 230.120980] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 230.120988] RIP: 0033:0x459879 [ 230.120992] RSP: 002b:00007fc30efd4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 11:57:11 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070") bind$alg(r0, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r2 = accept$alg(r0, 0x0, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x400400) setsockopt$inet6_tcp_buf(r3, 0x6, 0xd, &(0x7f00000001c0)="59a6278e8b5d983f1b1be6bc779b8352bfcc9331bded855511b65fe0595f5ae3c388562995ba76839aa43f3082a4a4acf0850bc58d0dced87d3453b72845f460c0f73811d08f9c201cb4654b89df7bc8c8bf1c2fc60525253c4efc5488baeb4fe4a69a0041b6e30f754b8f83b35153094aac141b3d04db0596d03258a4b033261b78fbbe8129dc47a7d3c67a9ab071204ffc63aa9b32cc4011580c6bd0f4f1cd63fdd62ce603350cb477cbfdcc797b0a8e47d93a996ab4dc50a22730064b50bec709a2ba6cf61c656594525f41e5623e8d8cb3658004214c5ad968a46f80ffd41fcbf1abcae0490c7255", 0xea) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) 11:57:11 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x100, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000080)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r2 = dup(r1) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00') [ 230.128576] RAX: ffffffffffffffda RBX: 00007fc30efd4c90 RCX: 0000000000459879 [ 230.128582] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 230.128589] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 230.128595] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc30efd56d4 [ 230.128601] R13: 00000000004c460b R14: 00000000004d8938 R15: 0000000000000005 [ 230.159571] FAT-fs (loop2): Unrecognized mount option "fsmagic=0x0000000000000200" or missing value 11:57:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x7711, 0xffffffffffffffff, 0x5, 0x40000000000006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000}) r1 = dup2(r0, r0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000340)={0x6, 0x0, [{0x0, 0x2, 0x0, 0x0, @adapter={0x1f, 0x3ff, 0x9, 0x5, 0x20}}, {0x7, 0xd729aa683019e652, 0x0, 0x0, @irqchip={0x2, 0x1ff}}, {0x7, 0x4, 0x0, 0x0, @sint={0x7c, 0x24a}}, {0x7, 0x4, 0x0, 0x0, @irqchip={0x101, 0xffffffff}}, {0x5, 0x2, 0x0, 0x0, @adapter={0xf, 0x0, 0xffff, 0x100000000, 0x6}}, {0x1, 0x3, 0x0, 0x0, @sint={0x4000000000000000, 0x1ff}}]}) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000100)=0x5, 0x4) r3 = syz_open_pts(r0, 0x0) lremovexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='security.apparmor\x00') readv(r3, &(0x7f0000000300)=[{&(0x7f0000000200)=""/223, 0xdf}], 0x1) r4 = getpid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000640)={0x0, 0x0}, &(0x7f0000000680)=0xc) getresuid(&(0x7f00000006c0)=0x0, &(0x7f0000000700), &(0x7f0000000740)) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000880)) syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f00000004c0)='./file0\x00', 0x3f, 0x1, &(0x7f0000000600)=[{&(0x7f0000000500)="27da2cebc7f754697df4f2b627a73656d2899b0c24d0a78a0f2a92157f560f7d2bcb04c3446c426692b00c5dcaa7fb5201eca542cc91c115384e4120111971f309c7109e7fca2aac45f391cd841d3283ac8d30e7276016c1764a55dd9d799acdda9b8fb50652073ae8f799588cc8f36ef9c6d97977833c06998719e7d4d42899974a3c73c1bdf645f96e791920e426bc59a7f22821dbe89a7677f664da10f0abe4fa1665fa0891a12cee77b3d5001958a48abcb6f5922fc1c84a03b9a0b6b5358b2648afb2abb6db6cb16d0dc1899d1fb79eb453326f7a", 0xd7, 0x100}], 0x4000, &(0x7f0000000780)={[{@discard='discard'}, {@resize_size={'resize', 0x3d, 0x20}}, {@errors_continue='errors=continue'}, {@integrity='integrity'}, {@noquota='noquota'}, {@usrquota='usrquota'}, {@grpquota='grpquota'}], [{@uid_gt={'uid>', r5}}, {@dont_measure='dont_measure'}, {@uid_gt={'uid>', r6}}, {@appraise_type='appraise_type=imasig'}, {@obj_type={'obj_type'}}, {@dont_appraise='dont_appraise'}, {@subj_user={'subj_user', 0x3d, '!vboxnet1+eth0ppp1*'}}]}) capset(&(0x7f0000000140)={0x20080522, r4}, &(0x7f0000000180)={0x100000000, 0x89, 0xfffffffffffffff8, 0x4, 0x5000000000, 0xffffffff}) 11:57:11 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@alg, &(0x7f0000000100)=0x80, 0x70d537df1944d6e1) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000140)) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000180)={{0x3c, @dev={0xac, 0x14, 0x14, 0x17}, 0x4e21, 0x2, 'none\x00', 0x4, 0x100, 0x39}, {@remote, 0x4e24, 0x0, 0x1, 0x1ff, 0x5}}, 0x44) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6, 0x0, {0x200}}, 0x454) 11:57:11 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070") bind$alg(r0, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r2 = accept$alg(r0, 0x0, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x80, 0x0) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000380)='fou\x00') sendmsg$FOU_CMD_GET(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r4, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e20}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}]}, 0x54}}, 0x20044840) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001340)=""/239, 0xef}], 0x1}}], 0x40000000000015c, 0x0, 0x0) 11:57:11 executing program 3 (fault-call:5 fault-nth:24): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) [ 230.318298] input: syz1 as /devices/virtual/input/input249 11:57:12 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) [ 230.367167] audit: type=1400 audit(1566820632.013:62): avc: denied { setopt } for pid=10429 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 230.397792] FAULT_INJECTION: forcing a failure. [ 230.397792] name failslab, interval 1, probability 0, space 0, times 0 [ 230.411122] JFS: discard option not supported on device [ 230.423613] jfs: Unrecognized mount option "uid>00000000004294967295" or missing value [ 230.447631] CPU: 0 PID: 10442 Comm: syz-executor.3 Not tainted 4.14.140 #36 [ 230.450632] audit: type=1400 audit(1566820632.013:63): avc: denied { getopt } for pid=10429 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 230.454820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 230.454827] Call Trace: [ 230.454849] dump_stack+0x138/0x197 [ 230.495286] should_fail.cold+0x10f/0x159 [ 230.499517] should_failslab+0xdb/0x130 [ 230.503501] kmem_cache_alloc+0x2d7/0x780 [ 230.507641] ? wait_for_completion+0x420/0x420 [ 230.512213] __kernfs_new_node+0x70/0x420 [ 230.516804] kernfs_new_node+0x80/0xf0 [ 230.520688] __kernfs_create_file+0x46/0x323 [ 230.525100] sysfs_add_file_mode_ns+0x1e4/0x450 [ 230.529917] internal_create_group+0x232/0x7b0 [ 230.534491] sysfs_create_groups+0x97/0x140 [ 230.538801] device_add+0x828/0x1490 [ 230.542510] ? device_private_init+0x190/0x190 [ 230.548044] ? input_register_device+0x467/0xb20 [ 230.552812] input_register_device+0x60d/0xb20 [ 230.557741] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 230.562936] ? uinput_request_submit.part.0+0x290/0x290 [ 230.568313] ? __might_sleep+0x93/0xb0 [ 230.572448] ? __fget+0x210/0x370 [ 230.575959] ? uinput_compat_ioctl+0xa0/0xa0 [ 230.580361] uinput_ioctl+0x4a/0x60 [ 230.583983] do_vfs_ioctl+0x7ae/0x1060 [ 230.587926] ? selinux_file_mprotect+0x5d0/0x5d0 [ 230.593098] ? lock_downgrade+0x6e0/0x6e0 [ 230.597226] ? ioctl_preallocate+0x1c0/0x1c0 [ 230.601622] ? __fget+0x237/0x370 [ 230.605077] ? security_file_ioctl+0x89/0xb0 [ 230.609475] SyS_ioctl+0x8f/0xc0 [ 230.612827] ? do_vfs_ioctl+0x1060/0x1060 [ 230.616981] do_syscall_64+0x1e8/0x640 [ 230.620881] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 230.625717] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 230.630935] RIP: 0033:0x459879 [ 230.634128] RSP: 002b:00007fc30efd4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 230.641831] RAX: ffffffffffffffda RBX: 00007fc30efd4c90 RCX: 0000000000459879 [ 230.649100] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 230.656731] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 230.664260] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc30efd56d4 [ 230.671530] R13: 00000000004c460b R14: 00000000004d8938 R15: 0000000000000005 [ 230.693249] input: syz1 as /devices/virtual/input/input251 [ 230.728087] JFS: discard option not supported on device [ 230.756662] jfs: Unrecognized mount option "uid>00000000004294967295" or missing value 11:57:12 executing program 5: clone(0x41bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) r0 = getpid() getgroups(0x2, &(0x7f00000006c0)=[0xee01, 0xee01]) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000040)={0x2}) setresgid(0x0, 0x0, r1) unshare(0x30010000) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x4206, r0) 11:57:12 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xfff, 0x200800) getpeername$llc(r2, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000140)=0x10) ioctl(r1, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070") bind$alg(r0, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="0a0775db102203b4f0a1253d660fb03a5d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000c343377d0000", 0x11) r3 = accept$alg(r0, 0x0, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r2, 0x0, 0x2d, &(0x7f00000001c0)={0x7fff, {{0x2, 0x4e23, @multicast1}}}, 0x88) sendmmsg$alg(r3, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001340)=""/239, 0xef}], 0x1}}], 0x40000000000015c, 0x0, 0x0) 11:57:12 executing program 3 (fault-call:5 fault-nth:25): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 11:57:12 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) 11:57:12 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000080)={0x200, 0x7, 0x7, 0x5be, 0x2, 0x7}) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) 11:57:12 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 11:57:12 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070") bind$alg(r0, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r2 = accept$alg(r0, 0x0, 0x0) r3 = dup2(r1, r0) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001340)=""/239, 0xef}], 0x10000000000001fa}}], 0x40000000000015c, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f0000000100)=0x100000000, 0x8) [ 230.830734] FAULT_INJECTION: forcing a failure. [ 230.830734] name failslab, interval 1, probability 0, space 0, times 0 [ 230.874925] CPU: 0 PID: 10466 Comm: syz-executor.3 Not tainted 4.14.140 #36 [ 230.882788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 230.882794] Call Trace: [ 230.882813] dump_stack+0x138/0x197 [ 230.882829] should_fail.cold+0x10f/0x159 [ 230.882851] should_failslab+0xdb/0x130 [ 230.882864] kmem_cache_alloc+0x2d7/0x780 [ 230.882875] ? wait_for_completion+0x420/0x420 [ 230.882890] __kernfs_new_node+0x70/0x420 [ 230.882901] kernfs_new_node+0x80/0xf0 [ 230.882913] __kernfs_create_file+0x46/0x323 [ 230.882923] sysfs_add_file_mode_ns+0x1e4/0x450 [ 230.882933] internal_create_group+0x232/0x7b0 [ 230.882947] sysfs_create_groups+0x97/0x140 [ 230.882957] device_add+0x828/0x1490 [ 230.882968] ? device_private_init+0x190/0x190 [ 230.882979] ? input_register_device+0x467/0xb20 [ 230.882991] input_register_device+0x60d/0xb20 [ 230.883008] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 230.883020] ? uinput_request_submit.part.0+0x290/0x290 [ 230.883043] ? __might_sleep+0x93/0xb0 [ 230.883050] ? __fget+0x210/0x370 [ 230.883062] ? uinput_compat_ioctl+0xa0/0xa0 [ 230.883072] uinput_ioctl+0x4a/0x60 [ 230.883083] do_vfs_ioctl+0x7ae/0x1060 [ 230.883093] ? selinux_file_mprotect+0x5d0/0x5d0 [ 230.883102] ? lock_downgrade+0x6e0/0x6e0 [ 230.883113] ? ioctl_preallocate+0x1c0/0x1c0 [ 230.883123] ? __fget+0x237/0x370 [ 230.883140] ? security_file_ioctl+0x89/0xb0 [ 230.883151] SyS_ioctl+0x8f/0xc0 [ 230.883159] ? do_vfs_ioctl+0x1060/0x1060 [ 230.883170] do_syscall_64+0x1e8/0x640 [ 230.883179] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 230.883194] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 230.883201] RIP: 0033:0x459879 [ 230.883207] RSP: 002b:00007fc30efd4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 230.883218] RAX: ffffffffffffffda RBX: 00007fc30efd4c90 RCX: 0000000000459879 [ 230.883224] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 230.883229] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 230.883235] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc30efd56d4 11:57:12 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) r1 = getuid() syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x9, 0x4, &(0x7f0000000580)=[{&(0x7f0000000100)="ca8488ae296fef1a9d6fff127569a376784f5d557de878c54d246df6a8069d53dca54948f918cc69ddafa26f23460ddfe14e167aab9fd54e2afb24a8ea8a50a35fc0d45267043810ddad5db8eb02b763ddb600887be4576764e614a095fca98a7bcd5a745b804057ed293c3dfcb20207a01435648334fbc23e21a3be5a40c6c409ee8b383909d4b4ff08fc94014aaaa70622e655d0efd809fb0c399b0ff2d448c46d221ac362087f51c48791feb3fd8f495bae704883e4fbc56ab9ebf157845d7e224f196804fd7b3c56e82d4389ff8cf824fb46864a4718de228a44d40d", 0xde}, {&(0x7f0000000240)="9a9d5779d816b0876d0badd84a5bd7f5da3507ac70abc627cb90f90d24", 0x1d}, {&(0x7f0000000340)="ddbdb23aa4d54992077c47ec49ac110b930f37df4302dd7c66422c94c623200733ea9003e23a9419469d0f639aa4e921c35f5868720abb7393d2a0df7cbd1bdaf2d7bc23390205b3f77beb95297440ec5083299d0f5bd55908b6c50fe60b4b2e558e9b73ee2dd5e28792c8f6ff7a06f65dcf35649463cf1acf92729a2a067d428952d4a4870b033a5468051da910036cb140975230e4c5e87375732d09e9ab78e9df41904583d328ec5ae3f561761a6d0b7109acb84edeabe8faf5a041", 0xbd, 0x3}, {&(0x7f0000000480)="fc8fc364fd7419dfc29e1115a53eec5d3e68128fc10e8c449f6474275595003c901b9bf4ff016646e3b3c13930bbb21da7a021421637cf0cf9121076e928f8aa9c05ad2f89ab4b5dc1e9e92682ef62a3e0d4f7b20e0151e60017d9a2ac3d9fc6c54558ca1fbd8c84b72731cf8ff33b8ab961220cae84644974548a33e93738c3e750106cfdb9225d007109afe4d0a140ace82b75a211185a953beaa990c7fb79fa65d8bdd2cd03e97cddb451cca86a41bd3726eeaff17077996f9d4d043cb1837a0f0e6eef1dbc6ebfd3f107922cb19579", 0xd1, 0x8}], 0x40002, &(0x7f0000000600)={[{@barrier='barrier'}, {@session={'session', 0x3d, 0x3}}, {@barrier='barrier'}, {@type={'type', 0x3d, "a821745b"}}, {@force='force'}, {@session={'session', 0x3d, 0x3f}}, {@session={'session', 0x3d, 0x2}}, {@umask={'umask', 0x3d, 0x8}}, {@uid={'uid', 0x3d, r1}}], [{@dont_measure='dont_measure'}, {@appraise='appraise'}]}) 11:57:12 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) listxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)=""/237, 0xed) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070") bind$alg(r0, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r2 = accept$alg(r0, 0x0, 0x0) syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="6e6f6469735c963d39853d"]) fcntl$addseals(r1, 0x409, 0x8) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001340)=""/239, 0xef}], 0x1}}], 0x40000000000015c, 0x0, 0x0) r3 = dup(r0) write$P9_RLOCK(r3, &(0x7f0000000080)={0x8, 0x35, 0x1, 0x1}, 0x8) ioctl$EVIOCGEFFECTS(r3, 0x80044584, &(0x7f00000001c0)=""/132) 11:57:12 executing program 3 (fault-call:5 fault-nth:26): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) [ 230.883240] R13: 00000000004c460b R14: 00000000004d8938 R15: 0000000000000005 [ 231.093171] input: syz1 as /devices/virtual/input/input253 11:57:12 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x2a0c0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) [ 231.182925] jfs: Unrecognized mount option "nodis\–=9…=" or missing value [ 231.195263] input: syz1 as /devices/virtual/input/input255 [ 231.212082] FAULT_INJECTION: forcing a failure. [ 231.212082] name failslab, interval 1, probability 0, space 0, times 0 11:57:12 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000fc0)=[{{&(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000080)=""/23, 0x17}, {&(0x7f0000000740)=""/218, 0xda}, {&(0x7f0000000400)=""/56, 0x38}, {&(0x7f0000000440)=""/50, 0x32}, {&(0x7f0000000840)=""/178, 0xb2}, {&(0x7f0000000900)=""/180, 0xb4}, {&(0x7f00000009c0)=""/149, 0x95}], 0x7, &(0x7f0000000b00)=""/165, 0xa5}, 0x7}, {{&(0x7f0000000bc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000c40)=""/246, 0xf6}, {&(0x7f0000000d40)=""/63, 0x3f}, {&(0x7f0000000d80)=""/237, 0xed}], 0x3, &(0x7f0000000ec0)=""/222, 0xde}, 0xf8b}], 0x2, 0x62, &(0x7f0000001040)) connect$x25(r1, &(0x7f0000001080)={0x9, @remote={[], 0x0}}, 0x12) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r0, 0x40000) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}) r2 = syz_open_pts(r0, 0x0) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @empty}}}}, &(0x7f0000000140)=0xe8) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)=0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)={0x270, 0x0, 0x1, 0x0, 0x70bd2c, 0x25dfdbff, {0x5, 0x0, 0x5}, [@typed={0x8, 0x6e, @u32=0x6}, @generic="72ddb91f48e2ad6946bbb1829d0d6a8c67f3e6191a5d82f2424e0c5507abdad88428f520ee67c11fc7b0003b9aefc5164f698ff4e63ab89187a3a5fbe477dca5f8b1ec85c9aabfc934688e8d728779f04658b1cb32ddb0ff072020dc3d04aa867232510e6a67", @generic="380249ca068784da9352857121204524663b1e0b8532fe5d378ded3c7b809423abda604556713040a0d893acbc02f5df1258a9b65ffe67e65d33892412", @typed={0x8, 0x89, @uid=r3}, @generic="88ed083e8ac2a5d3c485d3f5614ff8059f3103eff8a2274427be7705522cd79cabf6faf814a4a8652187cd8bc91e6a2031eb5238c14936d959ba352fe7a4bdaf7a22d59cd4d540283a27bdd9e998629ed1e2f9314fb92168d4a55327dce61f11faecc1a8391b54a07e152ebbec2cf314e1802f165914bfd3e7d42d434864be3c84bdd48d7776b696553ef7ee897a5639adf357ea53eee52b1d317ac053e9eb8e0c27d4af2e71583d27e8e399d02db14b8cda28237038fef76756587d201bd779b3b1ebbb88ee8d220e7f594a039c9a80ea", @generic="1b189ccb5e12d054f0edfb3b8e65955ce768b3c502107350dbfa0a0be8e0112a458921aede232e4ceb81bdbbaf70f51661846cd93c9c7a17121b450d8c8b77e8adb52a2f264f30bc794c58889db711382d32ba663c7e4dfe6509a279e02c0938693ef4eb92f9c4d63b916d83e12072c72de21e097e7a78085b4a33e4de3f361405a1003de248b438aa54a149664d19de624ee77165c0d79bd7bc386f1ac9df8a6804c56477a5043c346079e450b44770bc9141", @typed={0xc, 0x17, @u64=0xffff}, @typed={0x8, 0x73, @pid=r4}, @generic="374bd742452b399b612e808907f5813247"]}, 0x270}, 0x1, 0x0, 0x0, 0x44}, 0x4044004) [ 231.234930] CPU: 1 PID: 10501 Comm: syz-executor.3 Not tainted 4.14.140 #36 [ 231.242070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 231.242076] Call Trace: [ 231.242093] dump_stack+0x138/0x197 [ 231.242111] should_fail.cold+0x10f/0x159 [ 231.242127] should_failslab+0xdb/0x130 [ 231.242142] kmem_cache_alloc+0x2d7/0x780 [ 231.261952] ? wait_for_completion+0x420/0x420 [ 231.261973] __kernfs_new_node+0x70/0x420 [ 231.261989] kernfs_new_node+0x80/0xf0 [ 231.270307] __kernfs_create_file+0x46/0x323 [ 231.270321] sysfs_add_file_mode_ns+0x1e4/0x450 [ 231.270335] internal_create_group+0x232/0x7b0 [ 231.270352] sysfs_create_groups+0x97/0x140 [ 231.270364] device_add+0x828/0x1490 [ 231.270376] ? device_private_init+0x190/0x190 [ 231.270390] ? input_register_device+0x467/0xb20 [ 231.292161] input_register_device+0x60d/0xb20 [ 231.292182] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 231.292195] ? uinput_request_submit.part.0+0x290/0x290 [ 231.292220] ? __might_sleep+0x93/0xb0 [ 231.292229] ? __fget+0x210/0x370 [ 231.301835] ? uinput_compat_ioctl+0xa0/0xa0 [ 231.301843] uinput_ioctl+0x4a/0x60 [ 231.301854] do_vfs_ioctl+0x7ae/0x1060 [ 231.301866] ? selinux_file_mprotect+0x5d0/0x5d0 [ 231.301876] ? lock_downgrade+0x6e0/0x6e0 [ 231.301885] ? ioctl_preallocate+0x1c0/0x1c0 [ 231.319790] ? __fget+0x237/0x370 [ 231.334355] ? security_file_ioctl+0x89/0xb0 [ 231.334371] SyS_ioctl+0x8f/0xc0 [ 231.334380] ? do_vfs_ioctl+0x1060/0x1060 [ 231.334395] do_syscall_64+0x1e8/0x640 [ 231.334405] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 231.334422] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 231.392673] RIP: 0033:0x459879 [ 231.395944] RSP: 002b:00007fc30efd4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 231.403819] RAX: ffffffffffffffda RBX: 00007fc30efd4c90 RCX: 0000000000459879 [ 231.411252] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 231.418734] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 231.426110] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc30efd56d4 [ 231.433626] R13: 00000000004c460b R14: 00000000004d8938 R15: 0000000000000005 11:57:13 executing program 5: clone(0x41bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = getgid() getgroups(0x4079, &(0x7f00000006c0)=[0xee01, r1]) setresgid(0x0, 0x0, r2) unshare(0x30010000) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) r3 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x9a8, 0xa000) ioctl$TIOCSERGETLSR(r3, 0x5459, &(0x7f0000000180)) r4 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x1, 0x4000) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{0x8000, 0xffffffff, 0x1, 0x728000000000000}, {0x81, 0xe007, 0x1, 0x80000000}, {0x16, 0x1f, 0xff, 0xeb}, {0x1ff, 0x8, 0x856, 0x76c8}]}) ptrace(0x4206, r0) 11:57:13 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="66643d56a05cbf4c450e4494390167ca09987e3a7367fc9e5a6d5eaadefdfd7f532ace74b27436bf050ecb17e9a42612fd39c6e40467fa47a71bfab66eb22d05e8a245ee2d73250ee8879e265a41fa", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x10440, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000040)) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) 11:57:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x20, 0x200000) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000000c0)={0x3, [0x3, 0x7c3, 0x900000000000]}, &(0x7f0000000140)=0xa) socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="39000000140081ae00d175040f62b04a2b546fc54c1960b89c40ebb373585806dbb7d553b4a400"/57, 0x39}], 0x1}, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}) r3 = syz_open_pts(r0, 0x0) readv(r3, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) 11:57:13 executing program 3 (fault-call:5 fault-nth:27): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 11:57:13 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) link(0x0, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 11:57:13 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070") bind$alg(r0, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000002c0)={'raw\x00'}, &(0x7f0000000340)=0x54) openat$dsp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/dsp\x00', 0x200, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r2 = accept$alg(r0, 0x0, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x40, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e23, @local}}, [0x3f8, 0xffffff0000000000, 0x2, 0xffff, 0x92e, 0x3, 0x5, 0x4, 0xfffffffffffff801, 0x6f, 0x100000001, 0x6, 0x3ff, 0x7, 0x7d2]}, &(0x7f0000000480)=0x100) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000001c0)={r4, @in6={{0xa, 0x885, 0x4, @empty, 0xfffffffffffffeff}}, 0x7ce, 0x2b8}, &(0x7f0000000100)=0x90) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140)={r5, 0x4a53}, &(0x7f0000000280)=0x8) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001340)=""/239, 0xef}], 0x1}}], 0x40000000000015c, 0x0, 0x0) [ 231.707885] FAULT_INJECTION: forcing a failure. [ 231.707885] name failslab, interval 1, probability 0, space 0, times 0 11:57:13 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x2000, 0x0) sendmsg$rds(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/151, 0x97}, {&(0x7f00000001c0)=""/22, 0x16}, {&(0x7f0000000240)=""/51, 0x33}, {&(0x7f0000000480)=""/253, 0xfd}], 0x4, 0x0, 0x0, 0x4004}, 0x10) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000380)={'IDLETIMER\x00'}, &(0x7f00000003c0)=0x1e) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) 11:57:13 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070") bind$alg(r0, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) r2 = syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0x6ea3875d, 0x805c4) mq_getsetattr(r2, &(0x7f0000000100)={0xe21, 0x0, 0xfffffffffffffffb, 0x6, 0x1, 0x3f, 0x4, 0xfffffffffffffffd}, &(0x7f0000000140)) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r3 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001340)=""/239, 0xef}], 0x1}}], 0x40000000000015c, 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000080)={'HL\x00'}, &(0x7f00000001c0)=0x1e) [ 231.779823] input: syz1 as /devices/virtual/input/input257 [ 231.818799] CPU: 1 PID: 10534 Comm: syz-executor.3 Not tainted 4.14.140 #36 [ 231.825957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 231.835321] Call Trace: [ 231.837940] dump_stack+0x138/0x197 [ 231.841599] should_fail.cold+0x10f/0x159 [ 231.845764] should_failslab+0xdb/0x130 [ 231.849752] kmem_cache_alloc+0x2d7/0x780 [ 231.853909] ? wait_for_completion+0x420/0x420 [ 231.858505] __kernfs_new_node+0x70/0x420 [ 231.863013] kernfs_new_node+0x80/0xf0 [ 231.866912] __kernfs_create_file+0x46/0x323 [ 231.871329] sysfs_add_file_mode_ns+0x1e4/0x450 11:57:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x201, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x400, 0x0) accept4$unix(r1, &(0x7f0000000200), &(0x7f0000000280)=0x6e, 0x800) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)) socket$can_raw(0x1d, 0x3, 0x1) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}) r2 = syz_open_pts(r0, 0x0) sendmsg$nl_crypto(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@delrng={0x10, 0x14, 0x2, 0x70bd2c, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x408000, 0x0) setsockopt$packet_int(r3, 0x107, 0x9, &(0x7f0000000140)=0x5, 0x4) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) [ 231.876101] internal_create_group+0x232/0x7b0 [ 231.880924] sysfs_create_groups+0x97/0x140 [ 231.885253] device_add+0x828/0x1490 [ 231.888987] ? device_private_init+0x190/0x190 [ 231.893672] ? input_register_device+0x467/0xb20 [ 231.898442] input_register_device+0x60d/0xb20 [ 231.903030] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 231.908232] ? uinput_request_submit.part.0+0x290/0x290 [ 231.913704] ? __might_sleep+0x93/0xb0 [ 231.917597] ? __fget+0x210/0x370 [ 231.921104] ? uinput_compat_ioctl+0xa0/0xa0 [ 231.925624] uinput_ioctl+0x4a/0x60 [ 231.929415] do_vfs_ioctl+0x7ae/0x1060 [ 231.933311] ? selinux_file_mprotect+0x5d0/0x5d0 [ 231.938246] ? lock_downgrade+0x6e0/0x6e0 [ 231.942407] ? ioctl_preallocate+0x1c0/0x1c0 [ 231.946830] ? __fget+0x237/0x370 [ 231.950302] ? security_file_ioctl+0x89/0xb0 [ 231.954736] SyS_ioctl+0x8f/0xc0 [ 231.958366] ? do_vfs_ioctl+0x1060/0x1060 [ 231.962611] do_syscall_64+0x1e8/0x640 [ 231.966531] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 231.971473] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 231.976663] RIP: 0033:0x459879 11:57:13 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070") bind$alg(r0, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/status\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000004c0)=0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000580)={[], 0x2, 0x4, 0x3, 0x8000, 0x3ff, r3}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) getuid() r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-control\x00', 0xd6c2dec8c9e37e19, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000440), 0x4) write$RDMA_USER_CM_CMD_JOIN_MCAST(r4, &(0x7f0000000380)={0x16, 0x98, 0xfa00, {&(0x7f00000002c0), 0x0, r5, 0xce6e19d06f944a06, 0x1, @in={0x2, 0x4e20, @remote}}}, 0xa0) r6 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x1, 0x2) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e20, @multicast2}}, 0x6, 0x9, 0x1, 0x380000000000000, 0xaa}, &(0x7f0000000100)=0x98) setsockopt$inet_sctp_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000140)=@assoc_id=r7, 0x4) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x0, 0x1, 0x0) [ 231.980001] RSP: 002b:00007fc30efd4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 231.987723] RAX: ffffffffffffffda RBX: 00007fc30efd4c90 RCX: 0000000000459879 [ 231.995041] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 232.002321] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 232.009629] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc30efd56d4 [ 232.016911] R13: 00000000004c460b R14: 00000000004d8938 R15: 0000000000000005 11:57:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x8200, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x7, 0x1, 0x1, 0x0, 0x9, 0x1, 0x1000, 0x17a, 0x73, 0x20, 0x6, 0x623, 0x3, 0x4, 0x1a, 0x10}}) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCLINUX3(r2, 0x541c, &(0x7f0000000080)) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) 11:57:13 executing program 3 (fault-call:5 fault-nth:28): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) [ 232.126797] FAULT_INJECTION: forcing a failure. [ 232.126797] name failslab, interval 1, probability 0, space 0, times 0 [ 232.165346] CPU: 1 PID: 10569 Comm: syz-executor.3 Not tainted 4.14.140 #36 [ 232.172506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 232.181910] Call Trace: [ 232.184516] dump_stack+0x138/0x197 [ 232.188308] should_fail.cold+0x10f/0x159 [ 232.192466] should_failslab+0xdb/0x130 [ 232.196580] kmem_cache_alloc+0x2d7/0x780 [ 232.200748] ? mutex_unlock+0xd/0x10 [ 232.204593] ? kernfs_activate+0x13a/0x190 [ 232.208850] __kernfs_new_node+0x70/0x420 [ 232.213110] kernfs_new_node+0x80/0xf0 [ 232.217015] kernfs_create_dir_ns+0x41/0x140 [ 232.221426] internal_create_group+0xea/0x7b0 [ 232.225993] ? internal_create_group+0x49a/0x7b0 [ 232.230917] sysfs_create_group+0x20/0x30 [ 232.235153] dpm_sysfs_add+0x26/0x1b0 [ 232.235165] device_add+0x968/0x1490 [ 232.242744] ? device_private_init+0x190/0x190 [ 232.242755] ? input_register_device+0x467/0xb20 [ 232.242767] input_register_device+0x60d/0xb20 [ 232.242782] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 232.242794] ? uinput_request_submit.part.0+0x290/0x290 [ 232.242818] ? __might_sleep+0x93/0xb0 [ 232.242829] ? __fget+0x210/0x370 [ 232.256927] ? uinput_compat_ioctl+0xa0/0xa0 [ 232.256939] uinput_ioctl+0x4a/0x60 [ 232.256952] do_vfs_ioctl+0x7ae/0x1060 [ 232.256965] ? selinux_file_mprotect+0x5d0/0x5d0 [ 232.267687] ? lock_downgrade+0x6e0/0x6e0 [ 232.267701] ? ioctl_preallocate+0x1c0/0x1c0 [ 232.267713] ? __fget+0x237/0x370 [ 232.267731] ? security_file_ioctl+0x89/0xb0 [ 232.308827] SyS_ioctl+0x8f/0xc0 [ 232.312188] ? do_vfs_ioctl+0x1060/0x1060 [ 232.316344] do_syscall_64+0x1e8/0x640 [ 232.320321] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 232.327553] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 232.332850] RIP: 0033:0x459879 [ 232.336039] RSP: 002b:00007fc30efd4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 232.343744] RAX: ffffffffffffffda RBX: 00007fc30efd4c90 RCX: 0000000000459879 [ 232.351472] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 232.359000] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 232.366259] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc30efd56d4 [ 232.373524] R13: 00000000004c460b R14: 00000000004d8938 R15: 0000000000000005 [ 232.423268] input: syz1 as /devices/virtual/input/input259 11:57:14 executing program 5: clone(0x41bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() getgroups(0x2, &(0x7f00000006c0)=[0xee01, 0xee01]) setresgid(r1, r1, r1) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x8000, 0x0) setsockopt$inet_int(r2, 0x0, 0x3f, &(0x7f00000002c0)=0x455, 0x4) unshare(0x30010000) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x200000, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000040)=0xee) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r4, 0x7ff}, &(0x7f0000000240)=0x8) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x4206, r0) 11:57:14 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="a5238d3682a14090fd382bdaade3de4e50eb977f8d6a835ffb6e28bb4f4d894eb12da92812686005eac1668cd8d436bce8493bc19c67e6303a4887389581b137a1a51946621dc14385676cd0fcf060701d343ecf1d32dfc3519c579f75f2097dac77dbf7138229b35d473d2e9ff132d2ca57e074b5a1e8e2bee640d19f1cb33fdb9bb56bd3f118a4aabd1a6c2646e4ab405703116b27efb0b61c50866b7fd8e66c417c8e3cebb32694cc1a4e003e97bfca6d9e091aa68a8446d331d196b37f065ae979530000000000eefdaa358991b3808ffdd3c3f42f7c9cb990aa120000", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x78e6, 0x0) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000040)={0xd, 0x6, 0x0, {0xfffffffffffffffd}}, 0x18) 11:57:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0xa04a91142ba5d7aa, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000000c0)=0x5, 0x4) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}) r2 = syz_open_pts(r1, 0x602002) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) socket$inet6(0xa, 0x1, 0x0) 11:57:14 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070") ioctl$TCGETS(r0, 0x5401, &(0x7f0000000200)) bind$alg(r0, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) getgroups(0x4, &(0x7f0000000400)=[0xee01, 0xee01, 0xee01, 0xee00]) getresgid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) setregid(r2, r3) r4 = accept$alg(r0, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0x80087601, &(0x7f0000000240)) r5 = syz_open_dev$audion(&(0x7f00000005c0)='/dev/audio#\x00', 0x3f, 0x8000) recvfrom$packet(r5, &(0x7f0000000600)=""/122, 0x7a, 0x40010140, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) r6 = accept4(r0, &(0x7f0000000100)=@in={0x2, 0x0, @initdev}, &(0x7f0000000080)=0x80, 0x80800) fsetxattr$trusted_overlay_upper(r4, &(0x7f0000000680)='trusted.overlay.upper\x00', &(0x7f00000006c0)={0x0, 0xfb, 0x10c, 0x3, 0x2, "734126d0de251625e746cdf5fd56cbec", "5139431372a4b6b4e93f0a4dd9475e6eba71829ac39fd2fcafe7f91056d07a3842eeae7e8e83f4cf9701b0ae8a197feb9cd446d5a7819de8ae87d431aaa0e2717f94907b703b5c8bc9747deca03d6771640697cff4cf768380fda2e43f15cf94dd1c63e51efef49d8291bed292acf8b5c1dcca109dc044cf458c35fc3930d050f92746f04a4314a65e13084158c0968829fb0f7053aa9d8e64dc8dcdb36fa153879ead2e8e6ba9bf31b0d3ea4a31fb2d2b45cda9c7de50ef16855762e0941a0a7c7b6afa05763d77d1ac3abfa07bc26babfa6dea0c79b1ba1a23ad10909e3a8e8705f336dc8b166eb3623d34234b3793b8b0aed953ba75"}, 0x10c, 0x2) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x0, 0x550, 0x7, 0x6, 0x7, 0x10000, 0x2eb8}, 0x1c) recvmmsg(r4, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001340)=""/239, 0xef}], 0x1}}], 0x40000000000015c, 0x0, 0x0) r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r7, 0xc10c5541, &(0x7f00000002c0)={0x2, 0x9, 0x7, 0x0, 0x0, [], [], [], 0x3f, 0x8}) r8 = gettid() ioctl$VIDIOC_ENUMAUDOUT(r7, 0xc0345642, &(0x7f0000000580)={0x2, "21760a8f81ea29c85fda893033a02c31b33baff191a619f8f8bf722d6e8c3b65", 0x3, 0x1}) ptrace$cont(0x3f, r8, 0x0, 0x1f) 11:57:14 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 11:57:14 executing program 3 (fault-call:5 fault-nth:29): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 11:57:14 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r1 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x0, 0x101000) lsetxattr(&(0x7f00000020c0)='./file0/file0\x00', &(0x7f0000002100)=@random={'trusted.', 'syzkaller1\x00'}, &(0x7f0000002140)='/dev/cachefiles\x00', 0x10, 0x1) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) getresuid(&(0x7f00000003c0), &(0x7f0000001940)=0x0, &(0x7f0000001980)) stat(&(0x7f00000019c0)='./file0\x00', &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = gettid() stat(&(0x7f0000001e00)='./file0\x00', &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000001ec0)='./file0/file0\x00', &(0x7f0000001f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r1, &(0x7f0000002000)=[{&(0x7f0000000340)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000480)="ad5ef7112e6216f299c71a2fcfbc1af1a5da1df628bec6a5f24ef7e6197afec136f28f1ea7bac3438574c0e7e4972efb0384021b0329ed79f8d1d03a0bad61c457488732f6b371b628393161b7bc9ab3dfe3f2a724030599ca65ceec437ee81906cf7b6e3617e84f1a3fbb13c172139cc596d60791bbeb86dbf6386d6b49e875dee9e452f848a0df0013d06283c43a51b8835d18b96845c6d64991bf91eeb8999fc6325019be6b12b938d62af9df6da1136da994a50e76eccd685c7b72c0231ab795071a409861748e8145c888996fe5f84def414649c51816361157b0c7bcbb4913a111052ce74689c791a0291b958f28b0a644653000a43f9f1e07d9ba96", 0xff}, {&(0x7f0000000580)="9dbecc8b82ecd0b03ec9321e5fdc05084770648dc74d71d5a441087bdfbbde738cf5c662a9e0b49bd72c29ea7877a17fe64a77352548172875bc7467b0203a6ff9df93eb909b1756d0c22b1476c06a0ec120181640e554caba8dc4a5b945e86974a627b300d85dbf944a89fc0f932c6baf90f3", 0x73}], 0x2, 0x0, 0x0, 0x80}, {&(0x7f0000000600)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000018c0)=[{&(0x7f0000000680)="616ce98a4390c4131d9f9a6483f2a0213a576f203a8fc40ac9706080590f31bbb31c2a402d1439823838c885ae980bbfb199656cf55e7d30182ba3e5427c36f128cfbd54a46b1b5f66772e6de8d9139fe73da34bebc3a0bc90afbda89b86891cbf9e8ca0892ff21787be9cfdd6c10824dca26f3ce578fa490550dc7519861a60cc963563316a75538949517674ca61", 0x8f}, {&(0x7f0000000740)="5ffa1d24f93d7bf75f745d7791d2e6e3f2a23f8652836def893e674cb51c3bba55043e8742e12dbcdc6956da5f684f319a04b33014e4ea5a4f5a326abbf637fa06", 0x41}, {&(0x7f00000007c0)="6e8714231e611ff0832e09daac6efa894adf965f1f06609d64ed59f32654a6aec487bd4685bb8a564ab74149f090e80888a6acdd37b9bf3f7e9609593eb9c54e3e25d875e7219779a511d86391a081f24b5fbda95452277d", 0x58}, {&(0x7f0000000840)="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", 0x1000}, {&(0x7f0000000240)="df3660e288d103", 0x7}, {&(0x7f0000001840)="430570dda7900f8c3581a65aa11ad495b8be9ffc8a96257b4cc85a954d96317c30e26eb9689d56a9ec2b8a462107544ac2b9ef76729b623fda7e6d6738a56589f113b83422c84728", 0x48}], 0x6, &(0x7f0000001a80)=[@rights={{0x24, 0x1, 0x1, [r0, r0, r0, r0, r0]}}, @rights={{0x20, 0x1, 0x1, [r0, r0, r0, r0]}}, @rights={{0x2c, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r2, r3, r4}}}, @rights={{0x20, 0x1, 0x1, [r0, r0, r0, r0]}}], 0xb8, 0x4}, {&(0x7f0000001b40)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001dc0)=[{&(0x7f0000001bc0)="503773a995c67c469a9aca8573e6bb861b8d38c7edbc0831c7422e6355471e4df547555e249460edbf7f5d76445b16bc5c8a0070ab03de008e2b67049ef55821b50c33e3ae3133690756d09852e4df2173c2aefd3590311e45307fa9e93b6c3aed4ea8f775fb58b00108f47c0ab81d9658c0d7ca9d3243270bde05293e5a6673c55f085d0c2c1ecb21f9a87fc05bd9ba42b38c7305ba79d113ef13519b654e6c1f3c17424423efb432575363a0bfa59b31e8aa84573b16d1116ba361a3908429e0141feda6e5dd6eadfa105a8eb9063a49", 0xd1}, {&(0x7f0000001cc0)="be7d986b46ad54b109728e048627bbd175612bb277e1e429afbd407b9f3fa5b9521185dbbfbe0986861b13905c78cb93bbc52d3bcd80e7c57fabd6a0fad38aae3c84553bce5c32bf427e04e204087d6163cc37e1c976efa02fd259bde5c41ea08f710a3403885a1614f0cd6c937d3e693656b33dceff34ae05bf6f6d7cea11b7493662230f8f2115b488e6dc03ebcb39133f1994a504abf2509c46c4408240f59b81a062d89bbc2de8fdcf62338fa97555b2404112bf207783aaa604717d217eab7d", 0xc2}], 0x2, &(0x7f0000001f80)=[@cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @rights={{0x2c, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0]}}], 0x70}], 0x3, 0x80) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB='\x00'/10, @ANYRESDEC=0x0, @ANYBLOB]) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000000)={0xe4a6948e, 0x6, 0x0, {0x20000000000}}, 0x8fce183954b4e794) r8 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x4000, 0x0) ioctl$VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f0000000140)={0x1, 0x2, 0x3, "002ca317e5be73296ce62f0a5c98836e5530206e581ba53069e2107bf210ce60", 0x32315559}) r9 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x79d, 0x240840) ioctl$sock_inet_SIOCSIFDSTADDR(r9, 0x8918, &(0x7f0000000080)={'syzkaller1\x00', {0x2, 0x4e22, @local}}) 11:57:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x80000001, 0x80200) ioctl$SG_SET_DEBUG(r1, 0x227e, &(0x7f00000000c0)) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}) r2 = syz_open_pts(r0, 0x0) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) 11:57:14 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070") bind$alg(r0, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000001c0)=""/239, 0xef}], 0x1}}], 0x1, 0x4, 0x0) [ 232.587488] input: syz1 as /devices/virtual/input/input260 [ 232.617923] FAULT_INJECTION: forcing a failure. [ 232.617923] name failslab, interval 1, probability 0, space 0, times 0 11:57:14 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c00719b0fadc3dbb64889d72e87e9c4c3375a1ee69987cfdeb04549d42eb7563735e4b767bc3acd022696b5b76f1ccb006121ba9d415ebc2792ad1f1551cbae167b3d908256d811c9e0bc75af29487d1886c2b3471a361c9925a890c0a5f094a77dc67cfdbed91594fb6f0e02693cb3b8f61c71e1d6d46700396fe93b0c95e1648afb6e60e136120189ffb92bed33ff557933b2ce2d79c4bf6ddccc5c0d6c9810a461cfafdee6e5b54610fa1d3960d2ea63cb88a6d7d50bb15d370594d3c43f2342631e3dc78bb77d88a3e945d000000000000000"]) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000000)=0x4, &(0x7f0000000040)=0x4) [ 232.686299] CPU: 0 PID: 10604 Comm: syz-executor.3 Not tainted 4.14.140 #36 [ 232.693653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 232.703183] Call Trace: [ 232.705778] dump_stack+0x138/0x197 [ 232.709428] should_fail.cold+0x10f/0x159 [ 232.713589] should_failslab+0xdb/0x130 [ 232.717799] kmem_cache_alloc+0x2d7/0x780 [ 232.721957] ? kernfs_find_and_get_ns+0x4b/0x60 [ 232.726640] ? kernfs_find_and_get_ns+0x26/0x60 [ 232.731317] __kernfs_new_node+0x70/0x420 [ 232.731330] ? lock_downgrade+0x6e0/0x6e0 [ 232.731343] kernfs_new_node+0x80/0xf0 [ 232.731354] __kernfs_create_file+0x46/0x323 [ 232.731364] sysfs_add_file_mode_ns+0x1e4/0x450 [ 232.731376] sysfs_add_file+0x4f/0x60 [ 232.739769] sysfs_merge_group+0xe2/0x210 [ 232.739786] dpm_sysfs_add+0x121/0x1b0 [ 232.739797] device_add+0x968/0x1490 [ 232.739813] ? device_private_init+0x190/0x190 [ 232.748088] ? input_register_device+0x467/0xb20 [ 232.748102] input_register_device+0x60d/0xb20 11:57:14 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x40, 0x0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) [ 232.748121] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 232.748137] ? uinput_request_submit.part.0+0x290/0x290 [ 232.760940] ? __might_sleep+0x93/0xb0 [ 232.768765] ? __fget+0x210/0x370 [ 232.768786] ? uinput_compat_ioctl+0xa0/0xa0 [ 232.768795] uinput_ioctl+0x4a/0x60 [ 232.768807] do_vfs_ioctl+0x7ae/0x1060 [ 232.778154] ? selinux_file_mprotect+0x5d0/0x5d0 [ 232.778167] ? lock_downgrade+0x6e0/0x6e0 [ 232.778179] ? ioctl_preallocate+0x1c0/0x1c0 [ 232.778190] ? __fget+0x237/0x370 [ 232.778206] ? security_file_ioctl+0x89/0xb0 [ 232.834644] SyS_ioctl+0x8f/0xc0 [ 232.837995] ? do_vfs_ioctl+0x1060/0x1060 [ 232.842221] do_syscall_64+0x1e8/0x640 [ 232.846102] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 232.850970] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 232.856157] RIP: 0033:0x459879 [ 232.859421] RSP: 002b:00007fc30efd4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 232.867222] RAX: ffffffffffffffda RBX: 00007fc30efd4c90 RCX: 0000000000459879 [ 232.874763] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 11:57:14 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070") bind$alg(r0, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000580)={0x10000, {{0x2, 0x4e24, @multicast1}}, 0x0, 0x6, [{{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x4e24, @remote}}, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1f}}}]}, 0x390) recvmmsg(r2, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001340)=""/239, 0xef}], 0x1}}], 0x40000000000015c, 0x0, 0x0) [ 232.882034] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 232.889408] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc30efd56d4 [ 232.896854] R13: 00000000004c460b R14: 00000000004d8938 R15: 0000000000000005 11:57:14 executing program 5: clone(0x41bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() getgroups(0x2, &(0x7f00000006c0)=[0xee01, 0xee01]) setresgid(0x0, 0x0, r1) unshare(0x30010000) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) splice(r2, &(0x7f0000000000), r3, &(0x7f0000000040), 0x1f, 0x7) ptrace(0x4206, r0) r4 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x819, 0x40) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000140)=0x4, 0x4) 11:57:14 executing program 3 (fault-call:5 fault-nth:30): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 11:57:14 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0xa) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0) poll(&(0x7f0000000000)=[{r0}, {r0, 0x46}, {r0, 0x400}, {r1, 0x4}], 0x4, 0x7) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) fallocate(r0, 0x20, 0xfff, 0x2) 11:57:14 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070") bind$alg(r0, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001340)=""/239, 0xef}], 0x1}}], 0x40000000000015c, 0x0, 0x0) r3 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x3) ioctl$KDGETLED(r3, 0x4b31, &(0x7f0000000080)) 11:57:14 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c60726f7570a5d75707c5cb76f67dd9000000000000", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) statfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000000340)=""/4096) [ 233.363969] FAULT_INJECTION: forcing a failure. [ 233.363969] name failslab, interval 1, probability 0, space 0, times 0 [ 233.377540] input: syz1 as /devices/virtual/input/input263 [ 233.385126] CPU: 1 PID: 10643 Comm: syz-executor.3 Not tainted 4.14.140 #36 [ 233.392264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 233.401838] Call Trace: [ 233.404445] dump_stack+0x138/0x197 [ 233.408086] should_fail.cold+0x10f/0x159 [ 233.412247] should_failslab+0xdb/0x130 [ 233.416241] kmem_cache_alloc+0x2d7/0x780 [ 233.420394] ? mutex_unlock+0xd/0x10 [ 233.424117] ? kernfs_activate+0x13a/0x190 [ 233.428375] __kernfs_new_node+0x70/0x420 [ 233.432531] kernfs_new_node+0x80/0xf0 [ 233.436467] kernfs_create_dir_ns+0x41/0x140 [ 233.440888] internal_create_group+0xea/0x7b0 [ 233.445395] ? internal_create_group+0x49a/0x7b0 [ 233.450171] sysfs_create_group+0x20/0x30 [ 233.454326] dpm_sysfs_add+0x26/0x1b0 [ 233.458403] device_add+0x968/0x1490 [ 233.462136] ? device_private_init+0x190/0x190 [ 233.466741] ? input_register_device+0x467/0xb20 [ 233.466753] input_register_device+0x60d/0xb20 [ 233.466772] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 233.466785] ? uinput_request_submit.part.0+0x290/0x290 [ 233.466809] ? __might_sleep+0x93/0xb0 [ 233.490602] ? __fget+0x210/0x370 [ 233.494069] ? uinput_compat_ioctl+0xa0/0xa0 [ 233.498488] uinput_ioctl+0x4a/0x60 [ 233.502182] do_vfs_ioctl+0x7ae/0x1060 [ 233.506081] ? selinux_file_mprotect+0x5d0/0x5d0 11:57:15 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070") ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'team_slave_0\x00', r2}) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) timerfd_settime(r3, 0x1, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) bind$alg(r0, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r4 = accept$alg(r0, 0x0, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000340)=0x0) write$cgroup_pid(r3, &(0x7f0000000380)=r5, 0x12) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0xea5e8c75b96762d6, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x4924924924927cf, 0x0) read$alg(r4, &(0x7f0000000200)=""/72, 0x48) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000001c0)=0xc) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) recvmmsg(r4, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001340)=""/239, 0xef}], 0x1}}], 0x40000000000015c, 0x0, 0x0) 11:57:15 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x4, &(0x7f00000001c0)="11dca50d6c0bcfe47bf0705c5b63f9c7de20a43c2b902571d1a44f2e1b017c29fe008c09d4f8fdedfa43a7f5e88d54ea7d83c1a0d500e6b1fc415a6a25d6207314948a104adcc03f64aa240db6dec5f3456b9ed6bd7ab5b3e475e83ae2bd9ce35a98da5d22f92d2510c79bab2e7c00"/126) bind$alg(r0, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw-camellia-asm\x00'}, 0xffffffffffffff38) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001340)=""/239, 0xef}], 0x1}}], 0x40000000000015c, 0x0, 0x0) 11:57:15 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x40, 0x5, 0x4, 0x0, 0x13, 0x8, 0x4fb0, 0x200, 0x4, 0x6, 0x101, 0xfffffffffffffffc}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) [ 233.510873] ? lock_downgrade+0x6e0/0x6e0 [ 233.510889] ? ioctl_preallocate+0x1c0/0x1c0 [ 233.510899] ? __fget+0x237/0x370 [ 233.510916] ? security_file_ioctl+0x89/0xb0 [ 233.510928] SyS_ioctl+0x8f/0xc0 [ 233.524827] ? do_vfs_ioctl+0x1060/0x1060 [ 233.524841] do_syscall_64+0x1e8/0x640 [ 233.524850] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 233.524868] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 233.524876] RIP: 0033:0x459879 11:57:15 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070") r2 = accept4$x25(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x12, 0x800) ioctl$SIOCX25SENDCALLACCPT(r2, 0x89e9) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r3 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0xfb, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0xf}], 0x1, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x20010, r0, 0x0) recvmmsg(r3, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001340)=""/239, 0xef}], 0x1}}], 0x40000000000015c, 0x0, 0x0) 11:57:15 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x6, 0xb18ed64fe22b0816) getpeername$unix(r1, &(0x7f0000000100), &(0x7f0000000040)=0x6e) [ 233.524881] RSP: 002b:00007fc30efd4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 233.524891] RAX: ffffffffffffffda RBX: 00007fc30efd4c90 RCX: 0000000000459879 [ 233.524895] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 233.524900] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 233.524906] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc30efd56d4 [ 233.524910] R13: 00000000004c460b R14: 00000000004d8938 R15: 0000000000000005 11:57:15 executing program 3 (fault-call:5 fault-nth:31): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 11:57:15 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x205, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x319) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, &(0x7f0000000140)={0x80a, 0x8, "1e54c3621d20444ec214198aaf7fc8e53cdb3886b1f91683d7482f654a69f9d6", 0x9, 0x7fff, 0xdb5, 0x9, 0x21}) [ 233.654816] audit: type=1400 audit(1566820635.293:64): avc: denied { map } for pid=10665 comm="syz-executor.1" path="socket:[38797]" dev="sockfs" ino=38797 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=socket permissive=1 [ 233.695396] input: syz1 as /devices/virtual/input/input265 [ 233.758478] FAULT_INJECTION: forcing a failure. [ 233.758478] name failslab, interval 1, probability 0, space 0, times 0 [ 233.770516] CPU: 1 PID: 10681 Comm: syz-executor.3 Not tainted 4.14.140 #36 [ 233.777640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 233.787445] Call Trace: [ 233.787467] dump_stack+0x138/0x197 [ 233.787487] should_fail.cold+0x10f/0x159 [ 233.787501] should_failslab+0xdb/0x130 [ 233.793714] kmem_cache_alloc+0x2d7/0x780 [ 233.793725] ? wait_for_completion+0x420/0x420 [ 233.793744] __kernfs_new_node+0x70/0x420 [ 233.801847] kernfs_new_node+0x80/0xf0 [ 233.801863] __kernfs_create_file+0x46/0x323 [ 233.801873] sysfs_add_file_mode_ns+0x1e4/0x450 [ 233.801885] sysfs_add_file+0x4f/0x60 [ 233.801894] sysfs_merge_group+0xe2/0x210 [ 233.801907] dpm_sysfs_add+0x121/0x1b0 [ 233.801919] device_add+0x968/0x1490 [ 233.810719] ? device_private_init+0x190/0x190 [ 233.810733] ? input_register_device+0x467/0xb20 [ 233.810744] input_register_device+0x60d/0xb20 [ 233.810759] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 233.810771] ? uinput_request_submit.part.0+0x290/0x290 [ 233.818820] ? __might_sleep+0x93/0xb0 [ 233.818829] ? __fget+0x210/0x370 [ 233.818841] ? uinput_compat_ioctl+0xa0/0xa0 [ 233.827984] uinput_ioctl+0x4a/0x60 [ 233.827998] do_vfs_ioctl+0x7ae/0x1060 [ 233.828011] ? selinux_file_mprotect+0x5d0/0x5d0 [ 233.828023] ? lock_downgrade+0x6e0/0x6e0 [ 233.835939] ? ioctl_preallocate+0x1c0/0x1c0 [ 233.835953] ? __fget+0x237/0x370 [ 233.835971] ? security_file_ioctl+0x89/0xb0 [ 233.843656] SyS_ioctl+0x8f/0xc0 [ 233.843665] ? do_vfs_ioctl+0x1060/0x1060 [ 233.843679] do_syscall_64+0x1e8/0x640 [ 233.843688] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 233.843703] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 233.843712] RIP: 0033:0x459879 [ 233.934118] RSP: 002b:00007fc30efd4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 233.941804] RAX: ffffffffffffffda RBX: 00007fc30efd4c90 RCX: 0000000000459879 [ 233.949055] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 233.956413] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 233.963759] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc30efd56d4 [ 233.976849] R13: 00000000004c460b R14: 00000000004d8938 R15: 0000000000000005 11:57:15 executing program 5: clone(0x41bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() getgroups(0x2, &(0x7f00000006c0)=[0xee01, 0xee01]) setresgid(0x0, r1, r1) unshare(0x8000000) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x4206, r0) r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) sendto$inet(r2, &(0x7f0000000040)="19c706", 0x3, 0x800, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) 11:57:15 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070") recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/169, 0xa9}, {&(0x7f0000000080)=""/20, 0x14}, {&(0x7f0000000280)=""/16, 0x10}, {&(0x7f00000002c0)=""/129, 0x81}], 0x4, &(0x7f00000003c0)=""/48, 0x30}, 0x40000000) recvmsg$kcm(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)=""/172, 0xac}], 0x1, &(0x7f00000005c0)=""/211, 0xd3}, 0x21) bind$alg(r0, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r3 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000740)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80800004}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r4, @ANYBLOB="dc3129bd7000fedbdf250500000008000400050000000800050020000000240001000800010002000000080004004e2000000800050000000000080004004e200000440001000800080000000100080004004e2400000800090030000000080004004e200000080004004e2400000800050000000000080005000100000008000200160000000c000300080003000300000008000600000003000000050002000000d390953a531ca7da54e064504637db300adecc323bd1555e9bbee8eb569a"], 0xa8}, 0x1, 0x0, 0x0, 0x80c1}, 0x20000080) recvmmsg(r3, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001340)=""/239, 0xef}], 0x1}}], 0x40000000000015c, 0x0, 0x0) 11:57:15 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)={0x114, r1, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffffffffff80}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xc}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x29}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x28}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xc}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x8}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1000}]}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x19}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3c, 0xa}}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xd, 0x1a}}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x72d6351ac3fe6d1f}, 0x8000) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00']) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000080)={0x18, 0x6}, 0x18) 11:57:15 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}) r1 = dup3(r0, r0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e22, @multicast2}}, 0x6, 0x401, 0xc3, 0x6, 0x200}, &(0x7f0000000180)=0x98) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r2, 0x4}, 0x8) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000080), 0x2) r3 = syz_open_pts(r0, 0x0) readv(r3, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) 11:57:15 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x10001, 0x80}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f00000000c0)={r2, 0x7ff}, 0x8) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000000)=0x1) 11:57:15 executing program 3 (fault-call:5 fault-nth:32): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) [ 234.190463] input: syz1 as /devices/virtual/input/input267 [ 234.196723] FAULT_INJECTION: forcing a failure. [ 234.196723] name failslab, interval 1, probability 0, space 0, times 0 [ 234.226351] CPU: 0 PID: 10700 Comm: syz-executor.3 Not tainted 4.14.140 #36 [ 234.233498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 234.233504] Call Trace: [ 234.233521] dump_stack+0x138/0x197 [ 234.233538] should_fail.cold+0x10f/0x159 [ 234.233555] should_failslab+0xdb/0x130 [ 234.233574] kmem_cache_alloc+0x2d7/0x780 [ 234.233582] ? wait_for_completion+0x420/0x420 [ 234.233599] __kernfs_new_node+0x70/0x420 [ 234.233615] kernfs_new_node+0x80/0xf0 [ 234.233629] __kernfs_create_file+0x46/0x323 [ 234.233641] sysfs_add_file_mode_ns+0x1e4/0x450 [ 234.233654] sysfs_add_file+0x4f/0x60 11:57:15 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000080)=ANY=[@ANYBLOB="f9fff0ffffffffff080000000000835fea6137ee090000000000f70000000000"]) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) r2 = dup2(r1, r0) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f0000000200)) [ 234.233664] sysfs_merge_group+0xe2/0x210 [ 234.233676] dpm_sysfs_add+0x121/0x1b0 [ 234.233685] device_add+0x968/0x1490 [ 234.233698] ? device_private_init+0x190/0x190 [ 234.233709] ? input_register_device+0x467/0xb20 [ 234.233722] input_register_device+0x60d/0xb20 [ 234.283324] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 234.283339] ? uinput_request_submit.part.0+0x290/0x290 [ 234.283365] ? __might_sleep+0x93/0xb0 [ 234.283377] ? __fget+0x210/0x370 [ 234.291330] ? uinput_compat_ioctl+0xa0/0xa0 [ 234.291341] uinput_ioctl+0x4a/0x60 11:57:16 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000080)=0x1) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) socket$bt_rfcomm(0x1f, 0x3, 0x3) [ 234.291354] do_vfs_ioctl+0x7ae/0x1060 [ 234.291368] ? selinux_file_mprotect+0x5d0/0x5d0 [ 234.291379] ? lock_downgrade+0x6e0/0x6e0 [ 234.291389] ? ioctl_preallocate+0x1c0/0x1c0 [ 234.291400] ? __fget+0x237/0x370 [ 234.291416] ? security_file_ioctl+0x89/0xb0 [ 234.291430] SyS_ioctl+0x8f/0xc0 [ 234.323944] ? do_vfs_ioctl+0x1060/0x1060 [ 234.331353] do_syscall_64+0x1e8/0x640 [ 234.331361] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 234.331376] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 234.331384] RIP: 0033:0x459879 11:57:16 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}) r1 = syz_open_pts(r0, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000001700)='/dev/qat_adf_ctl\x00', 0xc9957247b35c32ef, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000001740)={'icmp\x00'}, &(0x7f0000001780)=0x1e) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000200)={{0x10000, 0x0, 0x0, 0x5, 0x1, 0x2, 0xc8cd, 0x6, 0x6, 0x4, 0x3f, 0x2}, {0x5000, 0x12000, 0xc, 0x8, 0x7, 0x7, 0x81, 0x2b, 0x1, 0x20, 0x7, 0x3}, {0x10000, 0x6000, 0xf, 0x2, 0x3, 0x2, 0x7, 0x8, 0x4, 0x400000000000, 0x100, 0x2}, {0x10000, 0x3000, 0xf, 0x4d, 0x5, 0x4b0bf6ac, 0x4, 0x0, 0x3eb8, 0x6, 0x4, 0xff}, {0x6000, 0x3000, 0xf, 0x2, 0x51, 0x7, 0x1ff, 0x1, 0x69, 0x8, 0x0, 0x3}, {0xdd2fe38462ca3468, 0xa510f3fa866637a7, 0x0, 0x400, 0x2, 0x8001, 0xce8, 0x3, 0x2, 0x2, 0x7, 0x4}, {0x2, 0xf000, 0x0, 0x1f, 0x9, 0x8f7, 0x4, 0xd0, 0xffffffff, 0x3ff, 0x1, 0xe6}, {0x10000, 0xd000, 0xe, 0x1f, 0x74d, 0x7fffffff, 0xb54e, 0xe7, 0x3b2, 0x10000, 0x7, 0x20}, {0xd000}, {0x10000, 0x5000}, 0x20, 0x0, 0x10000, 0x400, 0x0, 0x1, 0x5000, [0x80, 0x5, 0x3, 0x9]}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) 11:57:16 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x1) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x40, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000200)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}) r2 = syz_open_pts(r0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000240), &(0x7f0000000280)=0x4) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = accept(r3, 0x0, &(0x7f0000000080)) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x2ca, 0x0, 0x4b8d5413ba288c3a, 0x2}) ioctl$DRM_IOCTL_AGP_BIND(r4, 0x40106436, &(0x7f0000000140)={r5, 0xed1}) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) 11:57:16 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070") bind$alg(r0, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001340)=""/239, 0xef}], 0x1}}], 0x40000000000015c, 0x0, 0x0) [ 234.331388] RSP: 002b:00007fc30efd4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 234.331398] RAX: ffffffffffffffda RBX: 00007fc30efd4c90 RCX: 0000000000459879 [ 234.331405] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 234.411688] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 234.418972] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc30efd56d4 [ 234.426449] R13: 00000000004c460b R14: 00000000004d8938 R15: 0000000000000005 11:57:16 executing program 3 (fault-call:5 fault-nth:33): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) [ 234.502872] input: syz1 as /devices/virtual/input/input269 [ 234.528789] FAULT_INJECTION: forcing a failure. [ 234.528789] name failslab, interval 1, probability 0, space 0, times 0 [ 234.556485] CPU: 0 PID: 10728 Comm: syz-executor.3 Not tainted 4.14.140 #36 [ 234.563688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 234.573292] Call Trace: [ 234.575890] dump_stack+0x138/0x197 [ 234.579573] should_fail.cold+0x10f/0x159 [ 234.583739] should_failslab+0xdb/0x130 [ 234.587988] kmem_cache_alloc+0x2d7/0x780 [ 234.592232] ? wait_for_completion+0x420/0x420 [ 234.592254] __kernfs_new_node+0x70/0x420 [ 234.592266] kernfs_new_node+0x80/0xf0 [ 234.601015] __kernfs_create_file+0x46/0x323 [ 234.601029] sysfs_add_file_mode_ns+0x1e4/0x450 [ 234.601043] sysfs_add_file+0x4f/0x60 [ 234.601053] sysfs_merge_group+0xe2/0x210 [ 234.601065] dpm_sysfs_add+0x121/0x1b0 [ 234.601076] device_add+0x968/0x1490 [ 234.601088] ? device_private_init+0x190/0x190 [ 234.601100] ? input_register_device+0x467/0xb20 [ 234.639352] input_register_device+0x60d/0xb20 [ 234.644019] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 234.649209] ? uinput_request_submit.part.0+0x290/0x290 [ 234.654584] ? __might_sleep+0x93/0xb0 [ 234.658622] ? __fget+0x210/0x370 [ 234.662077] ? uinput_compat_ioctl+0xa0/0xa0 [ 234.666499] uinput_ioctl+0x4a/0x60 [ 234.670129] do_vfs_ioctl+0x7ae/0x1060 [ 234.674007] ? selinux_file_mprotect+0x5d0/0x5d0 [ 234.678838] ? lock_downgrade+0x6e0/0x6e0 [ 234.682976] ? ioctl_preallocate+0x1c0/0x1c0 [ 234.693597] ? __fget+0x237/0x370 [ 234.697074] ? security_file_ioctl+0x89/0xb0 [ 234.701486] SyS_ioctl+0x8f/0xc0 [ 234.704872] ? do_vfs_ioctl+0x1060/0x1060 [ 234.709125] do_syscall_64+0x1e8/0x640 [ 234.713186] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 234.718054] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 234.723386] RIP: 0033:0x459879 [ 234.726612] RSP: 002b:00007fc30efd4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 234.734537] RAX: ffffffffffffffda RBX: 00007fc30efd4c90 RCX: 0000000000459879 [ 234.741796] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 234.749150] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 234.756428] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc30efd56d4 [ 234.763843] R13: 00000000004c460b R14: 00000000004d8938 R15: 0000000000000005 11:57:16 executing program 5: clone(0x14004000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() getgroups(0x2, &(0x7f00000006c0)=[0xee01, 0xee01]) setresgid(0x0, 0x0, r1) unshare(0x30010000) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) r2 = add_key(&(0x7f0000000380)='cifs.idmap\x00', &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0xb, r2, &(0x7f0000000400)=""/246, 0xf6) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in=@remote, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in=@loopback}}, &(0x7f0000000080)=0xe8) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240), 0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000002c0)=0xc) sendmsg$nl_generic(r3, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000200}, 0xc, &(0x7f0000000300)={&(0x7f0000000700)={0x21b4, 0x30, 0x200, 0x70bd27, 0x25dfdbfd, {0x1a}, [@typed={0x8, 0x80, @uid=r4}, @nested={0x8, 0x82, [@typed={0x4, 0x8b, @binary}]}, @nested={0x10f8, 0x3d, [@generic="79f2c21bb5753fdf0eb9c1b9c4f05d507a9c2e686f3a526d33a16cfe32cfb0c7014bc9d0157ce7f42c6f8b84456e2937abf6fad8d269294c19c465de0126dcb019b2c7897f1974a56a55e9cf25a15b0b9af90717c0e7a925f9175da758e6e3bf9a0c55ecf76bb560ec551d15ef6e8ba7df6a996fb9", @generic="8640", @typed={0x14, 0x8c, @ipv6=@mcast2}, @typed={0x58, 0x4e, @binary="ea22b0f1e22030b66d212a15bf2b78d27d67856f69897adf284452100f28ce6a48e674aaacf8f3510d211e6a7b06d106184f67c2f66976cf4f5e18e15e1eb4ac54b7ac7b2caa6f625b373918ec697bb476"}, @generic="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", @typed={0x8, 0x3d, @u32=0x2}, @typed={0x8, 0x6f, @fd=r5}]}, @nested={0x1074, 0x5f, [@typed={0x1004, 0x40, @binary="9f7df4de6e7e613a4eb2a95f084f3d4b731d32609e070431125e253f517d53c4e122942ece2946d635ca32696e8fb040e575db9c6e76f7ee73e4ad7504cfbe75b7154ee2dfaa08818567caf78a7d7baffdbe5c11388395f43ee4eed96c8d12be1e37b2bcc3003eb90b4bcd763574cbf9ea976d42dbf1104ad593b3241904cab512e1d05f52bb476879eb719b2ed7036b47d7394b0ebda97fc7748c3d2c65433654e2708e6aa5ffb19a5fdb382806490be24e5517f3f2fea9a247df7980239e740294cf939b29efea42a333c65f097bc563e00dc1b6f606377bf576b6e6bca784cd91ceb0dbe28674e8e846ccb398c7797f080017e048d67b8e92a51ad82f825c42b8246a8eeac58ce0f4a98a3034ca5301abef8661ddf9e4131736c58b2accc41bdc7372fdfef0df7bbefb45585feadb5bfa6cdb4247c4fc6a9c65d82e8631d1fb43eef9e8c55ed4877439a294a2e858d89ebf3cefda5769c73b2c0f57d34944fd8d7c963418eaac353e85123df6b692d4002527f53712778a2e0e5865c290abb02b6d446b6bc7ad1bba0c3f0452b08f956017cba733cf68d2b7a81904f607f6c9b4e415cf603eeb574bbb8f2e2ca8dde7f8e55f40acb2072080cd281210cfec7959b7b8b225a142472dd336a5fbb742e0bdd889849af86d61f3e3a4d159f9597d2f5ed07aae72caa2690642eb4f8e6a280aa3772b3e58994955af718d0382f09cadb0cf7d8c698cd5b45b28991e1557c77d2c88258dd38bacf88a4aba2bd3fdfc5be7660595fdf6fb057af820ad6610c6ac1b0713e2834e33ede9feead386b3a873b6e373eb50d319f3228e9f6941273c3da8b1f83468ae769514968a999f87d5cc7d2eba5015a51b719a355f951ebc6230ed1a9d3849fd0b5b7ed79091bb97b4692ef3503b0e4842bd977ce8160275218cc8dbba635a3a92c82f110ec3c767a4e442f675afb554d09daf32967fa604b526c51c9964557cd04625271d40ebc71599b5a95f7f66be53edf6029dde09ba83e79c92a9c36f76d5fb52ec3a70b1ca24b11c2a44cc027259d38f117cd5c54030b77a6c8e232e393e2fa633a82e85e34d99990e1c2bf0f2f9258ed877d60f653ff1c4a4c27c350bd4b52ddb4c389218ec9610c7b21577162fe0bfe95336f037dd0a1d9d5d0bcd78eb71bb60b5c83233a2955cf7ea99576c377aba9d96b14c06bca98a962c4a67de66be0dfabd21c684e060a8369cbec149a3202044ca55eca133c552de0bb43428bd5136255f2c5a3a99d6a2ea198e18c5bc06a0d6377b6c16922145713b143779e4a795c60319e8feb90f85b0a11837e2afcc6bc4b3f71b9f06642131d0cc187d90fdac0705dfc4a39131bcf93583118bbb5659631dd3d3c0c73ac0aae172f6f0ec61465cc52e89bae6f02b08fe70718b31e13b563eeb00462a3b7cc35e1435d52a01ed930884cb8ff514cd49cdcc0f8584f9bed55f510c6cdb33f8d9bacf321073c64ea1e847c289bef6aa76ca64be7c39a7ecd3d6047a72d5c51f9561aa82d90a138490434d8f6e663cdb974ccfd56fe2f2b4a6b043335b3e450c88354233a1c2e7eb48a018a2e8b36d79082295d73d92c1e7a719d3798d020ce9cdc46f496d422d6adb709d52e9fc1a2c587409aa302d374a57d3c53c21e6b4ddb5cd9cdd4bb3a5048aa9bd2f158a4805b85d8be8516c0735352f4541243b61c07ee50ac7ae77c362f55e537ef16c8393dc82e57233ee2b320b9d249c26d47f4c5a327e811de6392deaf4d96b882af62e11e6f0bb39ae83de2e73c7a3ab46aecce56b58ab045461f24a1a0553a42b6d31f27314680572d9348413ae8880b5bb3166ae2249dfcbaa21dc164b18210690dc5859208d86fd6ac9ec7ff20246705b88533a3ada94788b93274388ce9f23f2ef6461641ddcac99250165088dc026e0a869bb7a08149e88255dd4352680f4d75329b325342cc651bf631eaf7de1da77113c8458a1abf3c09c34dfabeb652313d49be23c85794d0116be1261d42ff319b88963428296a1e997ff2006f9dfb643acc74f240815c56d429b3cf6c3ecbf15df3203c56a4e107a02f356f6c92185e4985d3ca6546ace98072c4a4af4b2b6be629f90b60e2f8524519237f75e35fc766965e94a443d238710646561f0fda96f6769261e69a0e04349e2485bc55dbacc5f6efea33a5ad0bf25a64135a559094c9e02bf8b91f9031fe03a63d7521ab271b466eac0ae0435240d3fafe90bdf5cc63abeca4f1179e843c68e1a09ade8379b6387c4abc50b76b3e2d21243cff9daa0b64e78973947de9a2d2e85319782d4f32a7636caff8d0d5d5e85aee1a201b4ecb10ef8e636a8f215f2a8abe1393cd884eedca042d5da52df9373385a1dc12a43a8364665158f8dd292590ba1d03b6bcfb1045939b16488568f474253613825c2cbe10a82c5cbfcb1b5e3b4dedf775a391d02c7da02fc0ff7211bc7cf83cb2d6eb25dcd86149698397477ca9d34f1cce217d7a83ae73c67cf7c2458741845eada2c3602c796f7e32812ba2295767a45af28c4f50e6fd5a716787927897f01be7b4a4479c652b21d32b584fac02611dc9d2821e831bf7f24352b7e5f00fe2699fecce7e56cdd943d630e02181a7136d58bd821ae8689bffdc7723956beb5f4970481cedf6faf196d69fdfcd765e8fa660c922962e19cac21121e40dc0eb24c3d0559d9997fa9cb382f3974d0c603a99290450a2f856c3312bc02729bad28a99761d828167bd74d65e606d7fc07f941b31aa80a9a6341c229b2d4f7629962f61b14386c7e624d50ecaeb3647d69d4550f78eb7e073fae8c1cbc15d49332c0b9ef6b75a15a6885f5bdac2b01c6b335a7de0209959952006197aff886d89fcc280b856c7a192ad08925fecf9c2b5153cf8896a27c5b0bdc5b6426c34eb0e682368f25e12b895f5d7f50a909cf6ff1aa04e657d987ebcd31214b255f00cfee72dcd03f3cb9d8f76145a475c86376be36fa9d0264b53129a9001b4ec7746308181ba53df5fe3f1726690347a9ba951c1b70c0f673807119ca80d9920f3e327dbff247050f51b5f4daa0cb024c82182f2864bef26c44994784dfef466ee95ddca66070cd4f0f5a40ff5577d84b1d7c49965f45fae89cd4db864d0048b8191acb01d4e2696821a1d3ab1f5c56e05a29fa1c36ea468a6f367ef05bae4b336245206b8842c087e4643de7a1a10f65c0b6cc6e983edd4715e42f43d8d55120645ce4745feb87384ffaafe28d3429090428a8da38f7bc89c5b4cb8e59dfb54612ef8c8978915378acfe20d6d80d1a0a772c8f5edc6fac27a8058c5c6c7771c4d09ff3bcd87298b4a60dff63c95abf9d299d03e03fbfe716e4f4bf33c815209920d78f0321d4ca39667dc7208d282d08ea0ada835ecacd01ea0caeedcd7f7cc1d144141edaeb0b3bec46c4cbe8b38f170afe588f9c8f7027f8837573fed6f680ac821655c1638bda51b076dbc242fe488704cf127ceb48eefd96e300fd1cea12a1db323d2d63c7c9c70b84f5f3b6fe44907f03c568e07493cb023e80cc327a96bd69dc465a3c431f24eee049298be8bf032849c9fd1987cab66ad171f95ea382016ede7506f916065e90bb7ca9bedb281c6b562628799392d2b33c720b4009216b9d8a9ff64c30280728021c7b079319c47bc4e299f17dd280ebadacf29522ef9da9ed494d48e44e81118a811919a2738a84d49a9bda7c2d4ef90d61fa78534675c96a2bebc42b622f0fc54859c7e4bcc5722b5e8cb876469571592385b4ec7bb8d18c111283abf88b49692e3d76894b30c2ee190432c59326ba78e5160d128fe6f8713560dbcb29ffefe5ba17749e5af66ab910f3c4c7410b7a5a77f7100a72ac901ceab7b9e1462d15bc4c0444c6a5a7bef7a2fe24d6473be1d604cf86c63d770e3ef50d6ef0c648bfdddf4bce7ffcaeec9140054ca888b96c72bf386ff9d21ce0cfa939ca689724f76926e9d2a9c1fe4a043ebb01e2b3db3a17097df177f543e76d2a0892e2b433a65f5cce6220634a65bac1893dd79f5f86195ecbc63bf55fe5e64c2459796136bed24f4e01fae2a56a1885882b90fa33b05562576a3a07cf6ff933852313cc28fedb9b952482576e1ea4a222a74df117fa9e1e280e0ef6ac51fba4efe0302345b54732309fbf63a8472f6880bfaa54fd18a5d6a5af3b5aeb247fc78c9ce76ba0251d4140d6aa3c2de9d8b0f448f2b01ebe23adcf370dbf31856edbe5bdfe2dbed39ae8a02418f47d87137ab584bbcb53dc0389cc800697e9bcdcd18e0a5fc38effadbfb75e9dd03ccf9dda857d95e84abd33dcb5424f2b7fc54253a39027f9382f47340137b881d6ecf24c9582b9662d07f86743d4e44b9c308732a182caa9bf5f2f0bbf7c36087446add50b7c25aeb772262c8f49f8decc26ac14fecd5cfb8d3fcf42e9b3853e1ea9afe465ac242fcb0830ccadf283fc5084e01f7f9f31ee8bee2dfe2132935773259521ad19b5e6806470e7db9f45edf5f9bd9aef53d0551a19171926bb28d372703495966db2b10ef3623ac7528f5d0d96917cb0650e2c668899bff04822c6debfbe1aa209c93564ae8618ba931c20059714c47420ab21c0e3077d74b4f4d3315de3fa935c04939e17f71f9d8ca0d0c6099826fd617d4715bd0a410056cc365ad8d6e003539d867d06e4c4cccaed84c9ad05fdb651a794d82f784a50549c459639d636186ad1327392a73f440ca96511f2d7a90576c8e67ce954fcac09798c0993d2865678c9068b9564ff9286b9ad16b23cba43fb436e6d955172fa0e46a7cb5e67b161a755156700ff08b1e285a21eed52e9aecd444927352e1a9e57b3824655c29b2061520d28a3f8abf09828d63ee0509db48fcee98cdfc13f49fc029053b0bb47d7c6f22fdb3377e2e061b088b858bc59ee0fcfe96fe142b03cc23534c7261b19a7415f41dcbcebf12a2a4ff235d7f3443eb6d5f133404a1c3d3deb8b3fa93a376bc211c21c5e022f8c83aba1252d01d3dac4804949e64927bf5cf04918f57219e6a8b57b5fbb94aff03bb0b85ad99f637ceabe3eab9b48249a77061a6da25ef945a802c553fbdd47825e13cecb0414bbf317988f060e7a47645d0127ec246d8c2ec1421cc37f73217db2a16249e6656090b63b580538541c5d3056f67db38dc238d9e48e2ca17207b5493ac66c0eb20b4288a18e45af35003f6a635c8e1139e86b683471501f9c71ee82a34fb3ce87641deb0b116c58aeb72726a19c1decb55b1ada3d855bb30b508842dbcfb7ffc4ba1434c2806faa75609565a0ce31683c2205133f9bf1a0adf0a2c0be86b9a7459bb8d92feb300aba0c24bd82c217caf9a05df39c5556a42725bb822ae185fd44298b3c172cdc347828eab4561d1159c297418d758e3dab20117a4fb9fedfaa72237ef5d41c03f97a84f713018f7719f4426c462023ed32b403b8b7980cb28266d21af0cac2a85a7852fc7731442baefea718f8aa36a7fd2e17d4052dc730854b6bedac0957d9cdc073774ae8fb3a1fc668b42e3db95feafd21e64bb420a482b14313df6dbcbda4ecc25b518fd0ff4244ca7613bb1520ecef7a0ce8cf754f65bb3f5e344fb05ba51c487b670fade38654dedce7f197a7d157413ee1d4b74f59a7f9575e48ab1bad25065fcfeaa62e1eb126616a4a2a816eb226431b08bfbc8451ebf0495c66d020ba4b48564305db7c4366fd0be6578e28b5aba54c93c0a36768ae302bdc283518e37122be137e9141441cef7d6cf35f5316588a9b3d0f76ceb2b1a61076e56f805b5cd4b0838125fbc31a64"}, @typed={0x6c, 0x5a, @binary="6a5d32f841385463374ff140a342d7b6ecbad2942bb3e721ab8a04d5a71856722c82d96c9842f41df025ee74c54e46bda39e3113a32768126e7db1ae280243d4da824353726ce954a80f9799ed6621c2027bf7ec15a5c1b89aec6e216e205ad414fe37e10ea3c2"}]}, @typed={0x14, 0x26, @ipv6=@empty}, @typed={0x8, 0x92, @fd=r6}, @typed={0x8, 0x71, @uid=r7}]}, 0x21b4}, 0x1, 0x0, 0x0, 0x4014}, 0x0) ptrace(0x4206, r0) 11:57:16 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070") bind$alg(r0, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001340)=""/239, 0xef}], 0x1}}], 0x40000000000015c, 0x0, 0x0) 11:57:16 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x1) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x80000, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000140)={{0x0, 0x3, 0x10001, 0x2, 0x32}, 0x8075, 0x0, 0x2}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}) r2 = syz_open_pts(r0, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f00000000c0)={0x0, 0x61, 0xffffffff, 0x2, 0x6}) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000200)={0x0, 0x800}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000280)={0x8000, 0x208, 0x2, 0x9, r3}, &(0x7f00000002c0)=0x10) 11:57:16 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4000, 0x0) mkdirat(r0, &(0x7f0000000100)='./file0\x00', 0x100) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x80, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="5500000000000000da00", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) openat$cgroup_ro(r0, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000080)={0x18, 0x6}, 0x18) 11:57:16 executing program 3 (fault-call:5 fault-nth:34): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 11:57:16 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x4, 0x8500) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f00000000c0), &(0x7f0000000140)=0x30) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r2 = dup(r0) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) ioctl$KVM_REINJECT_CONTROL(r2, 0xae71, &(0x7f0000000040)={0x8001}) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="07004000ddcb8100060034af17ad05000900482fac973ac825805edf4f14ae611ca4bc30a590cd5afdf58dc370c1e7b607e88256b89551417771e9b652e43d7452012cecab975e25ed1ce6485f16cd060700000000000000207fe4e1ccb795b9097c58fb674a2df4ac264d6c34b9526a1f820b90f16b9c0c97b3e5f5582ccb000000000000000000"], 0x12) [ 235.075361] FAULT_INJECTION: forcing a failure. [ 235.075361] name failslab, interval 1, probability 0, space 0, times 0 [ 235.089492] input: syz1 as /devices/virtual/input/input272 [ 235.110419] CPU: 0 PID: 10751 Comm: syz-executor.3 Not tainted 4.14.140 #36 11:57:16 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070") bind$alg(r0, &(0x7f0000000300)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x16e) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001340)=""/239, 0xef}], 0x1}}], 0x40000000000015c, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x40000, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f00000001c0)={0x0, @reserved}) 11:57:16 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f5f643d1d2847d9253d3da9165dd4270cbb2705c10cc389311b24b6", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) syz_open_dev$sndpcmc(&(0x7f0000003a40)='/dev/snd/pcmC#D#c\x00', 0x8, 0x8200) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000000240)=0x87) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000003a80)='/dev/loop#\x00', 0x3f, 0x503040) sendmmsg(r1, &(0x7f0000003940)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="ee27cae98189990b", 0x8}, {&(0x7f0000000700)="c23a4a64557fd7de4e78f22a331012068298b11ba531cbfd8d222455ec7c1b1fcbd8c1559ba1b667d02a4d666a94ae85c61f5398a75ffa9f1113943c92c116c07bb1b00e86a329ced006952f28d027f4837e86755d07bf47b281099d7569e58033376d9affea1b0218d8a1ae21c8da97fd4ed706a7e71c237f4abb9a301ed7acf6ad73ce69b068e27d5786a410673e88f3c1f974f908c40f27ef3935b0ee4309a0fae097066494ff1794a9f6c089715db7e798868faeeb53f3956eff6e7bd5a83309", 0xc2}], 0x2}}, {{&(0x7f0000000800)=@in6={0xa, 0x4e22, 0x6, @local, 0x7fffffff}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000880)="02e77eb8e36036e81605a46b2deb09fcfdcc7c0b860ec581954da251a3d186e1966e812159ddf5f617620b86748da3a36dada5394d51c36869beb28e815d2cb5a09ff0425e9dc8cfb91eb96711c1c5542a", 0x51}], 0x1, &(0x7f0000000940)=[{0x30, 0x113, 0x3, "39ec3c5f2259e3712b19879ff283da07472066cab8958f39dc81d56270eb0022"}, {0x88, 0x6, 0x400, "6e962dc3a1e9f9ac9cb12365ebfb3a3cd96bde14e1c283f3191c76616e6afbc51b7d390a7ab533b7f1839caf785870575b5739d9d5ec37fd35168a5d71661fa10fd431b3c795b70af8e5e81bb9819d9bb9135dc0833bd146aa11d0f2c9e839c602325d374945af1ab619d7e141dd1268fa2fbffc"}], 0xb8}}, {{&(0x7f0000000a00)=@llc={0x1a, 0x108, 0x2, 0x40, 0xdd04, 0x5, @dev={[], 0x11}}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000a80)="393aba04c9aa1ccfb4d8ab8ac3beb84ddc1c405aff75c24cc46dc96e93df808b127fefd44bcaf7ab5c7611718a549275de88b4ac7db9cccc3fde975f5a625a2b223087a01d3cbb9825629963d6eb5f53e370207c1ce58730e3290503fae4b8b45f23da631633325223900e3c138eaf0d0d380b98c483aadfc1b5d26df24cc51c52cb65893fd673c36788a346b2c4d65c0d7c0f595710fb21", 0x98}, {&(0x7f0000000b40)="67000a3fd8462977ec8b7f0901c970b684aa73921db918a1abad4a9b9847c8ef7893e4d336bc99763d6734259a1a39201db1b8b80eed6883819d627b0ff63c5c8e8482884a245b69ee9f3f273bad0640939624134f8476a11d67ebf1ddf30cb294a5a246c03873bafda67b537370cea0bd57cec635eb2ccf28033725f278e8e2c29c7a317382454580b7b219adebadf791a991dad662dd0b2d619c6c48ae44f5ca55ea8a7b8be32c20da69c3c8c90c5aa3e56927dcc170d2d943efc29d2e94e4babcb3e0556a467ca6f0aa882b9e91cf3e504ca8211d1dd569e47360e7f3c280509ab057", 0xe4}, {&(0x7f0000000c40)="f273a98649ff0ae4c62591d10b1c9924b37aaa78c2b0228ae286b8dedd5dfb00ffe9619f3061ecf4c674a1dc", 0x2c}, {&(0x7f0000000c80)="b614770ecb9c177654679f01ed843d062d8638d870ec8492f465a09cf9d0ce70f873e21b7c15e81e0e533d9312262209b38401bba7dd3042ad2d", 0x3a}, {&(0x7f0000000cc0)="fbe0bb7bb6c12878141473ab3b561df496796e2686764e1bb38695fe05977dc05cc75dd42dcd5a66fe8f44b678b18e4a97af6e", 0x33}, {&(0x7f0000000d00)="86", 0x1}, {&(0x7f0000000d40)="a1929efb9a7ebb0f85eb40753fb4d72b2c84cf229c33062888450f4730fb86d800625291ab8123e6a2df93e7eadb7cda81edde99bb2f0161167c759c8360bf7676da1ea7797400bc72aba07b1bb2f74d9867ff621ed1d8baa10df22034db1fbd5e04340aa52d2635077b", 0x6a}, {&(0x7f0000000dc0)="755289dda1432088ecfd2e4c21c5d0b66611e812bbedb8721731c1ce1b7d1ccee8cf148bf1f7c0585a90ea3715", 0x2d}, {&(0x7f0000000e00)="401ebfa785907a2eb0fa927512c54bbb8350ad3a646258ed61152299d582b2b88f3f7d71c15505016a6e349e180ddc11b6c9196027152dea6a0c4109326742403279de84292fe6caaf114f9110d133c0eab3fa4f8477987c50f61861d4119502800119c864d4296946588418f234cc63014a77a7fe21237e22c9e06befdadfb466ef84316c186647b0828b9f2962763322d979e4b3f6f734f2415c5a5cdc39633d4feca821ab36678264", 0xaa}], 0x9, &(0x7f0000000f80)=[{0x1010, 0xff, 0x1, "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"}, {0xb8, 0x110, 0x0, "7087a9bde9e574666c5575bd98d71c549f7d4f6ee67c41e6d13d6b3ee43a75b7e9500cf351b32f7b55c0f7e6753e15110be52e5d2772304c7470715fd496ba69df26d40535ccf0a96946b954f9760b17eeb752d5ad55d4c0bf50cb81c4501f4f7392a34397e5a7de6158ffd14e1cc9b16250cb566d99af78b916b454a83a5f9e69a4e376a7be5fc630b0d34a649d7eb1bc9b2b02e85466073fa9b313fb38fd863383a6fd656be8d0"}, {0x68, 0x6, 0x2b5, "dc4de529944e38190dc0065db9d690159b9a745e0a9eba0774ff31a187a6a1314d12658798508659f1a96ecdbb5f170a296c4d2b9b841037873babdaa95340b319b38d197aacbc3bb607a03261add0719c"}, {0x58, 0x119, 0x20, "012465471f539622f0ad70317e19df40a7ebd18ff5da734eaf79a584f75d76bb88f34cbbedb4d41776b801cc9a034ac2e3a1af52d43075f105ad3228db3b0cc2aee6"}, {0xd0, 0x88, 0xcabc, "d188387a1e1c0cea188fd960612d0d740ff23fe4bdc460d55d786883d450fc1a84e0c2132bcc0484ad86d387005a50f8935ded25f34aaac198dbc00a630c22eb326aeaaf86a53f5481ef53ff2356096946105d1b10911bd0067d20fad6b323782888004c82100f6b53ca1cffc938b3f2303682a218224865e4e07fb43b02e9c87f2bb303e0b9eadd446ac66a00a2ba4e207c68c91917ac49c7f996688ee0a0a8d8908ca197d438b04241506cd67319914e8333f865032612ea365de2e9"}], 0x1258}}, {{0x0, 0x0, &(0x7f0000002340)=[{&(0x7f0000002200)="349985e0c54426f8151353fb098d2db2f4f7557763ee6c2442a6fa1a4805bda4edf4047b97c4f0f49e", 0x29}, {&(0x7f0000002240)="21bdbcf5ee1110e358335c2a4aaf555ee37c4a58a31d5a25d3eddb41bb93bd14a25c4ed7a7619b5df2bb56fb17449ca2c45d60fe323671f3db2a1d704ef813650d25690e203b9efc50f81ef8325c9614bad8b932f35bc03b542ade941404d9183adae9bcbf5cdb790014d1bad4c3737559dcd9b3a1b3f539fa325e7df249f27cd5da785457b91bc08725697f71a80397525bd519f849d6810e9594b4ca18d8809a841b57b5eb341ff21dee1eda6538a04082a423662f85007c0be9f3bc0079dbf1bd62d9dd7ee4b96245907a6a79967a764b251349930077841c89f06457e837bc094ec15b82abeb685d94ad5106bdc1c8c5ed45bd", 0xf5}], 0x2, &(0x7f0000002380)=[{0x108, 0x0, 0x3, "f258fd5806a791941270ac305442c027836a8d678b0d91935c4161eea1275aa1e5a0af9fc371f148c39b4c723aac9d54494720679c3c0eaca234fb7f0fa2125e4c51acba1fea460b52e21e3ce9fc5d28f1c61861f56b14ee56a650200d97a2d768beeda6a4c841c11f28d97a0c5296eac31264dbdb68c6928fed311c01d1e7854b1bbd706613ca96729ae25242450d00b59d8c8023bea06d0ef8f17fcbf8fc2bb049fa0d43f49719e9559f17d73bc4b2046ecadd5b2b89a0e170ed42306ea1e751dfc033f84a5507fa2ce4ca6f24f20379bdae5bee8e500c2c618f43a32d89aaadcec72c6bdc655b659c3d2c6641b0b6e8bd51a115"}, {0xd8, 0x117, 0x9, "0be2452db75fd5caad6b9c95db0c3d698a7d857efa942c3f58d3d662dc82a36dd30fabb763f26ab11f7cc9ba244af3bca902c00fd54825a436356ebbb060c536b62a81fc3c17bd149ffc19c676a27929eb181bf13ea1bf9b820afb4680595dde1d1ae5e7b52a71d8c3474a80f000756c7b1f21c0620a00ca9b2e9d60e46c3720f5f3389bbac576395b81e88a0576b8a49644e54a4ef4e25aeff4b4e3e9db65a852326ac4bdc71e1f0f998b062b4d15e0b2d4e5e23d55cd7e48c2f77e69a4f1ef75"}, {0xb0, 0x1, 0x4, "729c44b1b5a5c77dc00481732831448865781f2dbdecf9cd7cce146877ae157576acd237473b7fe480c6c71103edeafbf019665604e7dc35d23f723dd6345fa61ef2fe64e694018d866893e6e4d547b9559051dc86185a47df5f5c7979e6a19d6450cd55191ee31f34bf00f7f3e2363c05ba1e7c322a79b250826a58f4100d93ca1c0db71d87fe7b18c6ba5b7b60b79e6f962340831f1edd7119494448"}, {0xb0, 0x0, 0x80, "85724e4037026b2089ab6e9227d00d61c0d060267bf2125fcaead21e19d4753f3b5802570284e6fdb6e40a1418cb02e29692056ede286541d6d31fd3d7c2d044f98325b333320e6540dc2639e5b8b71a93d289e11e0e4068ead0f875f788d938b1009c0a8f7f66bb8ba3b946829d2b13997e75e786f2c7b72348ca6172caedaf6a094e3726181c246d672b9e304366302e7ad30a069a06d45090303d91c999e1"}, {0x28, 0x103, 0x1, "0b342ed3877b536d469b8b313add42e6395bc100781c"}, {0xe0, 0x88, 0x4, "fff4937083a2c991edfceb6cd3583d9bd843e685bde3e1616fa1237fc47d41e0b7c9ca0278296944a9cf258f2629cc53334ba360a90d9da45b6cae7683a12405f7562a1a426f2db257e865b9f2577e34daadf5624fd0d2ce70961985cab127811b7b4a9854cffff63b7770bf6ba181ffc42d86833e03e31ed4d433c40961326088572c7cb2f5ddb52bafad968bf67a59e631dd9ca561d8d8dbf5dd8aacb93dddc8ce3d2f96ec7c12d46bc51244eb014f45901971ea18e2115ee772574176e67c9a0d243009c5fd577428d16d5735"}, {0x28, 0x0, 0x2, "4c126bd0a1884f5dfe52ba35222d066835a2d1c3d6a294fd"}, {0x1010, 0x11f, 0x81, "ba056618aefa4598a319f632f91d3f6a7ad22cdaab03874958b40eef5abd532eb43f99eb6c9a19b3a0e2dffab423245fd2b52db0977ab6efac3db60a656de321e48527297904557d03b8e5275d253f8955c4ac4338268e617158df589b289384eef92a288dc8832250dbee0d96d745f19e2932671f534b17bdf5d3ec202240f195e76d0aa35de154371d197c1439f5ad08fe2dc89ab89563277af0e599f716030454c3046cb2c298a93b1b587cbf1907c79bed56040b2bb76ad6c2c8972ae8b7344fa5323cedfb78a363565180a7b8bd4fbae0fbf3da0af6db99db04a0659bf18351d29bfa36fcac1f9b4deeafc8b747cf4b2f2caa073f19353edb5355095088eb96a24086ffae9fbbccd740b5852de58b8567d9e29ba9b0a1f2511d4b1541add1a6715c1e1133b5c32cbe148a6091a4bee57d2bb4067bbc50bdb048598a643a6b06e4003813cd243647c9e74442b0c95a3f4627a295d95a0bbf02edf150f33e7de9342fe501b77c5e5dc5b2b0d8c36cc7d47ee70c6e29f3c4735ab38ad7b8fcba682baa908897f5e7e385f915ec76733c3848171840013dc1e6949d1e393fec0332187037c76aed4b8c33e23d172bf1b1fab712d53e80332ec2c0e60aa3403483123341260301672fdb962d691829ade5bbd3e336200ccf4cd7275fb2b20740157c3792f0d18f35a6883067fa1abf812260ed77fcd20ed8a1fc26f9a8eda680160d7bc61827191384fb511f3e5759961904088d5969100c862d2419b79c01c7f3afb6719edff31dd9725fa853fcbc6c4687e7f03f375e462194cd4763e75fe45ef307aa311c3b1e8e139352dd57d2429628f0b89b3d4f2413ef0b865d06856acfc157f521e82e7c7402f2fc0a30ba6d11aac3e0326d4a10306c4c1f70040677ab61c0eb812522cad5a36d0fd7ae368bb1e819c324477843339eedea67f80d5bf86362c21c6dbd05f5a60df1c25dc295b1b0765096c629dc452be4ce0ad09b1aeadb2344da5961d00e1dcf56be4f95df5eb5795395721abf5c02c7b650a909be9453c57741177543ed66543c98a85f0f3e4244d14b8634b7b0966ec95e101ec3d6e6655929bf6bb813bd55a2b9c2f56e1b03637fd144de84ea47c3e84a260f8de6be37457a55e1b46fdc7fa4c06f5a5181d3aba94ba8d6cfb7b476ff0eeeed40bd1822e1263be37de16e837c101a2e2f2f8e1fb2b27136715d6a66e95b2ddfbdd9386977b84adc0af0ea30c00c8aec10f0369b3a91cb98d06ec51f3d114cdd8c138206e2f265220e3cef80d68002a9c55d298c74f1fde2728785ecc7993be9a29195e951d6f16cae8bfc85322c17c2689a3f8a0458f5c8c9c4f793ff42b59c3f7ee5df5c524e4287390bde95a7ce3d63ef69c32fb3044c254469d05a2d764c5047895f0adb2c6702a3e1fcdca2c71d45f7dd6addb74354362a81037275d794634257b37c99b6737f44e378abe18a01cfbe8df83b98aaf29a7ad4a35f45faf678804f458a82d3ab0e5f80752d0173d3f448b9a26d6586242e8b973c3157c7af6fcdb9669c7adade7c58e71c711acd6f10a1aa8f1fb43513857908682c6ab69a453cab5538d9cc85ba6dae8aa441b4c3f8c2e2c5c2e0c85763381503e75d0d52dfc0a6a7391a85e87143ce6e7239ceb82414fa73451950ab43a20936e4bde0e608b965d3be912d1b70861bd8c91e6c7e7fcb824e858f2515809e9683e339b1829129f235acec86723ccbb7f49e2ffd22adea41c612c99c5e72f3852b4e9aae46e9c5af544555d6ce22c9b278a7096401fd38614c845253709aa091cc63d5b02216a959a0874b754849dc3772c6cf376c4613b9a84942c292b9aa29b2837c7da4ecabe1d2d394f97b00b74a2a62afdbd9542dfaa2dafc9d9208102736c5d70a3268470e30e384dbca1295e0d3d5dab6d7eeb2128ab122ae928f12c6b17a82389145f60603b9df1fed2743ceaa21ee5f24b648a02a267cb8506f023197d4cb5042a9b7f9273f17c27dc740b7b9c456b75ed4b36b4ff3e2f0549f26bace7d61270e753c37dc9981fdcd8db2268647feec0f1697d9188630c79e78daec0533f6fe2957b734f906d06b30066bce578f6e25c272c8c42cc6778557e002ebf405ea0d893630f124b878ecab9b62745cab504473a31252234642374955a8b67a12e3f206939322b22275be02fb9726c3f87a9718bc56345ef87c133f0d417036b57b6b77eb2cf315fa98854acbc489be5951bae193556e1186d7e11fbf6a87a458d8fb2b21de8d047e0664a036e90c03d98cf5502a46b2ece826d911f493995248ad6e1a1a46658e2467952ed6728b729304840850d3ef429c63d1b968fbe62ef01be5d7a5068d2aadf928c6b0f0775e98479f448b6359678dc63cf0085e7ce9108c06272c8d1907cacdc16cac87422be84bd038b01fcc5690cf958246951a52f0fd99324bc2ec11f152b5820b26649146e8b9f6eb397cf7dacf27cf681b6fb5b49dc00583186ffe464c60f79aae715e2ed4a2329e31a3373d08242f4ea498581a8b374d2d08e610b5735da7cf71807f997e6172d116e1a742488b3ea0921b09fcaafc2942af8be04b7fef500bc5350e66b29e19612df206de97f7f73e51efd7590797a3a642aab3665ca503e972e22fadbddaf964822b1157d277fe40c7b570d989af0bf983e63a375e6f23ee2c065f22801ab42ed3eeafd1e6f94fd9ff240eef10a970b432a6c2d695ded270b22648decbf43a059fa968274b8b30d7d7263d36a379088c99943ceb68904e85e93252c3c763f5da3e18cb2a7860517f7339bdad21dd162eb6238535afbcbdc515403b404f22507aebec128eaaa325843dbe385d962b63ade561bc0e9c4cee0f20d5330c6bfc94b9ee6862e137a0001d547deebf55e2176ed50d3db83ad6b2e2742ae057079b4ee406216c417c11d582bc77b37597a8b929050fe877ad7892a96ee9aa77226c6ff107dc5258d0d6cf52f6b93bf9743cd54a5351aa7eca42925ab2ae9b289e7a3bb5f866f0f59da6fbab9fedf512a0c36e8c86354e8715d47296668aaeea71a16c622de2dfb74b9d7d655e62bcdb8ef705e022e9e9485631c51362be7e60a9f13cc622432d9ab7b59e3cf8577f21d9f6151892a3276e8bebc21ae4db00ca2bf4a34e3f867d63c57a85e21e3b7aff32e17e3b3fcc3c33c0a736c30be6ccc1312a2dea1ef8bfe9076825b8ac4430572527c85608169a0bb6705315fb9c5780fcdbb6c6074cef834b8d554d8c0ae5bf13932822d2f63230a3a44d88607f653a908d93373b2c9e0c4ebd1c47fcc61bdef039e710d11813bef7fe1dfce64ebd9c2f8e94f2a6fceab79e7de1ae18249d483827f0876106229eb8c8717ec455e70f9ba6da06ed8a8eb3a2fa9037f30ac82760eba7449c091b635345766d2b1e8674731295846e2d779713547404b1708759e79ae31bed0e2d5ea69ba9429a6dc96e7aa75932d328c880404e6f17033a1885f84d987f70d6a98a40bb9e111f27053cfcd35a9844a4faf9e6892b89cf54b4897937ee273579bddbd3e868b1e97e5dfb19e710522aef9e232c0f8035e81ad5dd6ba2de6090e1cf54c8dad9d8def522fb4b5f2c67ff713de697e6482b3c39d2faf90468505a4438571499133e7fdecdac23096d663a9e21aa90f423c0c11d2d8718a7bc495ac1614dc90b83328838076a0141b4d3fde3a6bd621c825bba1fab54c7923c7a54630b87048d8c02844b310944cde1deefc3e75a3fb8e5c5fbb2143df2b314af132b43c98954dc0562d361cfc2afcfae65084a987528c732e4df941e1d2c3c9b9457a52510a6fee3ee5ce8a9c6568beaf74066fe3575eea0fcd6663daa4ff2ac837da792c3d3a821c59e62b600340390e661cc47303c673dfe1539a6006a60e1cd922c10ce581f92147e3f262ae5991c0a14310979514dc614a559ecf21ec8333b1338f454f223e2f3677a7fcea76801a3be7b870a6716d1305d17fcf26178be0b27dfc8d15a002c073c03feef9d53a8d6d8a7fed1997c327afadd008ea144ad3376d1e152c7b82ea78edf5fb14591da4219aa69b6eec42f77b88f2c91c997bde998ef5d2eb5327ef7129fa8307d5943c643e6561459db190c690b449d6cefb3d521f48bfe8c40454561eda5ca85ea50dbb1379186a69cd9cc7db15209a9bfa1c678c741969325ad81a27bc3adb11fe3987e0f44a2f15517088ba420d1b6deedf11adf1ec6a6f4b2f5e3e602e38555df3612314a8d540a9b2c8dc6c3a1a8789f9a02c41f8ca6aa925c8589adb895efcf0f442a4065425dd1029cd726c00e00872a3872d7a42293e834dd14d3934c519b5b03947842c309271c0bec73cc6627d8d74d48bc43a87836f9359a13cf4cf9bd630621c652fde3d081bbc67d35ddc5882294b37be63a4b66b0d8f5f7e89ff36f9cd199fef1d2fca1487c6b4a0190a622bb126e724390c7a32599b3db8cbd30972e277e874376e16fb8c90d98ad99ceb387ff9bfaf028985af7da162e4d0ad32951f7cc8580224d026373e8054c87cf45113dff009d09d82511d3e7b293bd7dbd856c352a5e19eee0cd2cf64256e92b7346a30613d22ff4d9633995e8edb294cdb0d8741fd6ac6cf0650a20d9b5f835680b79dbba9f6a596c6e8d5d89727156dda8e59a3a4853d98e71f1a4a7daf4308326b46a3ae663264c2dea459d7d4cf9f8c79036a84d93c390bf9a1bbf2385f9d4190396574cebe5cfc67fc1eda7cff70d39a39578f9aae6774b33db9a7e2f2ec74f8f16ef1f7290f84fc0e2f162cef9cf9c539d2dcc34005f0c0ac4e815b0d22f83d4c6edf014b5f008c3fc3af2699149e0379a79da5a62f7013d96a53d057c3bbf0ef050e144a3e8acbbc7fc360041a58b2ffd6d946d5a1255d5daa5cf92b7069f23d81e4d3850f49043d29a4bdd62125fbca7b6ef613950dda100797b2b7a665574ca64df9198e5f26cd527c0af2df2b72dfa1a6dad4800436e7e3255dd666aefa56472ac17f2b15152afeb5fa048101a420b61603c4326e91fe0663232121c56702731cd6e015a31edb55158fad7c80235f90c2c3c7a2ed8d10a17535b39ea12a7affd4e4145b873a59dfe44786530e64a4d23ab5686115d8c426395206f910ffec2211ea33c43fdd5e0942f6dfe3d0c7acf7b317c43929426e7a2ff635524070f2b4250601d353d20de5834664c2e32174d09b1fa3bd2fcf537c8a01942689728f4dd2152915b2d9b5065f237c2e041e0d4424ec51524a47239fdd9fb8864393fabe4a7dfd30bea4accc245c30254d83921c9f149da9971fc8dd32af1001e25ce2feb46b6045fe9917c8d37abc2a88dd4fc0edac10051afff0582c08e63b5f25227eb42050840da599ccc3d2906b861bc2be494f91955253a58fc732ee55a4e1a43a96b396154f9d1d27323b0ef97898c9a854bbc4ece87282f0b3b846e1e6c0849cb3c2015dd676dbaf8cae829eac386c686a9ba31aac2947f52f779e171a9c104ed8d05c3f59fba15b5d5ecfe1877aa380b75f832ae34a17cbb8960f125f176b4b6df58c9707ddac464eff95b1db53eb878d513f0dcd059df01de2e3b6531c86f99f497c90151bde2de9898277b0c2ca1ed8707cadd8e0835cf9520fe126f58cff3b5debd64e486639bcbd3ca25b7d76c7719a83fe016af33e27317f285299e2711dea63ae35d6d367f3cbc3be156bf470946a8ad059c7f37b992b4e782b67e24de527da9ac0d77fc3b820233efe5efc0bc589d185d16b5ff6c5ff42fa6db3adb781de5eea999f7d4a3d9d5414416f6d0320ba4893ef6fa4b4d9e9e1645"}, {0x60, 0x0, 0x0, "f0bb6876254b6723b6798520584ce5a010d63053199028f8729d9c6c83fd7280def3408afcb3b5236529d12bad157f2148e7e70954889edb06797752639be9f3d5b56129f35aeb83e1f25986a14288"}, {0xd0, 0x6, 0xca, "1acb64826d58247a445e21b07fec1bf07ba8268e942178ff082a367acf4ec090c34bc8b36f9d653c935e0a8c3fd40170f971528bcb2962ff21f7d235e219bdd736dd7d01f4076748bf46249d76a7d90c1a7836d99436d7997e24d2094a9c685bd704daa1ede529f0549429628ac072a468a24e1e4674d5360b666d2f90d4679c2ca903a8e278442f614908e0fc04cdc2f87f60a626caff94daf4661245e117e9100373cf728782f96146a41a0962cb3b1735514140de0f7e1e1d"}], 0x15b0}}], 0x4, 0x40000) fcntl$setlease(r0, 0x400, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000340)=""/193, 0xc1}, {&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)=""/215, 0xd7}, {&(0x7f0000000600)=""/251, 0xfb}], 0x4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [], 0xa, "386b393a4d720f9cee38dbcad9718210c0cf8a6a5733910580a0716e93fb39a1424f77545c0c66b0c4"}, 0x34) [ 235.117614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 235.127060] Call Trace: [ 235.129683] dump_stack+0x138/0x197 [ 235.133365] should_fail.cold+0x10f/0x159 [ 235.137645] should_failslab+0xdb/0x130 [ 235.141637] kmem_cache_alloc+0x2d7/0x780 [ 235.145971] ? wait_for_completion+0x420/0x420 [ 235.150664] __kernfs_new_node+0x70/0x420 [ 235.154825] kernfs_new_node+0x80/0xf0 [ 235.154840] __kernfs_create_file+0x46/0x323 [ 235.154856] sysfs_add_file_mode_ns+0x1e4/0x450 [ 235.168095] sysfs_add_file+0x4f/0x60 [ 235.171917] sysfs_merge_group+0xe2/0x210 [ 235.176283] dpm_sysfs_add+0x121/0x1b0 [ 235.176296] device_add+0x968/0x1490 [ 235.176309] ? device_private_init+0x190/0x190 [ 235.176322] ? input_register_device+0x467/0xb20 [ 235.193788] input_register_device+0x60d/0xb20 [ 235.193804] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 235.193813] ? uinput_request_submit.part.0+0x290/0x290 [ 235.193836] ? __might_sleep+0x93/0xb0 [ 235.193845] ? __fget+0x210/0x370 [ 235.193858] ? uinput_compat_ioctl+0xa0/0xa0 11:57:16 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000040)={0xfffffffffffffdd1, 0x6, 0x0, {0x8}}, 0x18) [ 235.193866] uinput_ioctl+0x4a/0x60 [ 235.193877] do_vfs_ioctl+0x7ae/0x1060 [ 235.193893] ? selinux_file_mprotect+0x5d0/0x5d0 [ 235.235536] ? lock_downgrade+0x6e0/0x6e0 [ 235.239727] ? ioctl_preallocate+0x1c0/0x1c0 [ 235.239740] ? __fget+0x237/0x370 [ 235.239757] ? security_file_ioctl+0x89/0xb0 [ 235.239769] SyS_ioctl+0x8f/0xc0 11:57:16 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000080)) getuid() [ 235.239778] ? do_vfs_ioctl+0x1060/0x1060 [ 235.239792] do_syscall_64+0x1e8/0x640 [ 235.239801] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 235.239818] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 235.239826] RIP: 0033:0x459879 [ 235.239832] RSP: 002b:00007fc30efd4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 235.239842] RAX: ffffffffffffffda RBX: 00007fc30efd4c90 RCX: 0000000000459879 [ 235.239848] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 235.239854] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 11:57:16 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070") bind$alg(r0, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r2 = accept$alg(r0, 0x0, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x80, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r3, 0xab07, 0x80000000) restart_syscall() sendmmsg$alg(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001340)=""/239, 0xef}], 0x1}}], 0x40000000000015c, 0x0, 0x0) 11:57:17 executing program 3 (fault-call:5 fault-nth:35): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) [ 235.239860] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc30efd56d4 [ 235.239865] R13: 00000000004c460b R14: 00000000004d8938 R15: 0000000000000005 [ 235.383217] FAULT_INJECTION: forcing a failure. [ 235.383217] name failslab, interval 1, probability 0, space 0, times 0 [ 235.401395] input: syz1 as /devices/virtual/input/input274 [ 235.409188] CPU: 1 PID: 10780 Comm: syz-executor.3 Not tainted 4.14.140 #36 [ 235.416416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 235.425871] Call Trace: [ 235.428557] dump_stack+0x138/0x197 [ 235.432296] should_fail.cold+0x10f/0x159 [ 235.436467] should_failslab+0xdb/0x130 [ 235.440760] kmem_cache_alloc_trace+0x2e9/0x790 [ 235.440782] ? devm_device_remove_groups+0x50/0x50 [ 235.440796] kobject_uevent_env+0x378/0xc23 [ 235.440809] ? wait_for_completion+0x420/0x420 [ 235.450527] kobject_uevent+0x20/0x26 [ 235.450541] device_add+0xa3e/0x1490 [ 235.450556] ? device_private_init+0x190/0x190 [ 235.450568] ? input_register_device+0x467/0xb20 [ 235.450579] input_register_device+0x60d/0xb20 [ 235.450596] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 235.450606] ? uinput_request_submit.part.0+0x290/0x290 [ 235.450629] ? __might_sleep+0x93/0xb0 [ 235.497832] ? __fget+0x210/0x370 [ 235.501427] ? uinput_compat_ioctl+0xa0/0xa0 [ 235.505830] uinput_ioctl+0x4a/0x60 [ 235.509702] do_vfs_ioctl+0x7ae/0x1060 [ 235.513874] ? selinux_file_mprotect+0x5d0/0x5d0 [ 235.518677] ? lock_downgrade+0x6e0/0x6e0 [ 235.522918] ? ioctl_preallocate+0x1c0/0x1c0 [ 235.527421] ? __fget+0x237/0x370 [ 235.531103] ? security_file_ioctl+0x89/0xb0 [ 235.535795] SyS_ioctl+0x8f/0xc0 [ 235.539175] ? do_vfs_ioctl+0x1060/0x1060 [ 235.543431] do_syscall_64+0x1e8/0x640 [ 235.547322] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 235.553466] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 235.558652] RIP: 0033:0x459879 [ 235.561832] RSP: 002b:00007fc30efd4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 235.569953] RAX: ffffffffffffffda RBX: 00007fc30efd4c90 RCX: 0000000000459879 [ 235.577559] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 235.585550] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 235.593247] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc30efd56d4 [ 235.600951] R13: 00000000004c460b R14: 00000000004d8938 R15: 0000000000000005 [ 235.609872] input: syz1 as /devices/virtual/input/input273 11:57:17 executing program 5: clone(0x41bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() getgroups(0x2, &(0x7f00000006c0)=[0xee01, 0xee01]) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000003c0)='ip6_vti0\x00', 0x10) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000280)={0x10001, 0x0, &(0x7f0000ffc000/0x3000)=nil}) time(&(0x7f0000000240)) r4 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r4, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r4, &(0x7f0000005fc0), 0x800000000000059, 0x0) setresgid(0x0, 0x0, r1) getsockopt$inet_dccp_buf(r2, 0x21, 0xd, &(0x7f0000000180)=""/86, &(0x7f0000000200)=0x56) unshare(0x30010000) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x4206, r0) 11:57:17 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="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"]) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) 11:57:17 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070") bind$alg(r0, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r2 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x627, 0x40) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000100)=0xfffffffffffffffa, 0x4) r3 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001340)=""/239, 0xef}], 0x1}}], 0x40000000000015c, 0x0, 0x0) 11:57:17 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 11:57:17 executing program 3 (fault-call:5 fault-nth:36): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) [ 236.047678] FAULT_INJECTION: forcing a failure. [ 236.047678] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 236.059999] CPU: 1 PID: 10800 Comm: syz-executor.3 Not tainted 4.14.140 #36 [ 236.060007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 236.060010] Call Trace: [ 236.060030] dump_stack+0x138/0x197 [ 236.060048] should_fail.cold+0x10f/0x159 [ 236.060063] __alloc_pages_nodemask+0x1d6/0x7a0 [ 236.060080] ? __alloc_pages_slowpath+0x2930/0x2930 [ 236.077018] cache_grow_begin+0x80/0x400 [ 236.077035] kmem_cache_alloc_trace+0x6b2/0x790 [ 236.077053] ? devm_device_remove_groups+0x50/0x50 [ 236.077064] kobject_uevent_env+0x378/0xc23 [ 236.077072] ? wait_for_completion+0x420/0x420 [ 236.077087] kobject_uevent+0x20/0x26 [ 236.077095] device_add+0xa3e/0x1490 [ 236.077108] ? device_private_init+0x190/0x190 [ 236.081148] input: syz1 as /devices/virtual/input/input276 [ 236.083308] ? input_register_device+0x467/0xb20 11:57:17 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070") bind$alg(r0, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x80000, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000140)=@srh={0x29, 0x2, 0x4, 0x1, 0x4, 0x497ba91226cf1436, 0x1, [@loopback]}, 0x18) r4 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0xffff, 0x22880) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000001480)={0x3, 0x0, 0x2080, {0xd2979ca260a77c77, 0x1f002, 0x1}, [], "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", "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"}) recvmmsg(r2, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001340)=""/239, 0xef}], 0x1}}], 0x40000000000015c, 0x0, 0x0) [ 236.083322] input_register_device+0x60d/0xb20 [ 236.083338] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 236.083352] ? uinput_request_submit.part.0+0x290/0x290 [ 236.092484] ? __might_sleep+0x93/0xb0 [ 236.092495] ? __fget+0x210/0x370 [ 236.092511] ? uinput_compat_ioctl+0xa0/0xa0 [ 236.092520] uinput_ioctl+0x4a/0x60 [ 236.092530] do_vfs_ioctl+0x7ae/0x1060 [ 236.092542] ? selinux_file_mprotect+0x5d0/0x5d0 [ 236.092552] ? lock_downgrade+0x6e0/0x6e0 [ 236.092563] ? ioctl_preallocate+0x1c0/0x1c0 [ 236.102074] ? __fget+0x237/0x370 [ 236.102092] ? security_file_ioctl+0x89/0xb0 [ 236.102105] SyS_ioctl+0x8f/0xc0 [ 236.102114] ? do_vfs_ioctl+0x1060/0x1060 [ 236.102128] do_syscall_64+0x1e8/0x640 [ 236.102141] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 236.111849] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 236.111858] RIP: 0033:0x459879 [ 236.111864] RSP: 002b:00007fc30efd4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 236.111876] RAX: ffffffffffffffda RBX: 00007fc30efd4c90 RCX: 0000000000459879 11:57:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x2000, 0x0) write$FUSE_OPEN(r1, &(0x7f0000000200)={0x20, 0x0, 0x8, {0x0, 0x6}}, 0x20) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f00000000c0), &(0x7f0000000140)=0x4) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x1) ioctl$TIOCSCTTY(r0, 0x540e, 0xac0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}) r2 = syz_open_pts(r0, 0x0) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000180)=0x7e) 11:57:17 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x4000, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r0, 0x800455d1, &(0x7f0000000100)) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x9, 0xecc21809a9a414ce) mkdirat(r2, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) syz_open_pts(r1, 0x20040) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000780)=""/254) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000080)={0x18, 0x6}, 0x18) 11:57:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x1) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000140)=""/64) ioctl$TIOCSCTTY(r0, 0x540e, 0x40) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_dev$amidi(&(0x7f0000000300)='/dev/amidi#\x00', 0x2, 0x80) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000340)={0x4, 0x0, [{0x8001, 0x1, 0x0, 0x0, @sint={0x2, 0xf67}}, {0x1f35, 0x2, 0x0, 0x0, @msi={0x8000, 0x1000, 0xcf}}, {0xfffffffffffffff8, 0x5, 0x0, 0x0, @msi={0xed, 0x100, 0x7}}, {0x3, 0x1, 0x0, 0x0, @adapter={0x9, 0x4df7, 0x7fffffff, 0x6d, 0x6}}]}) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/status\x00', 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000180)={0x10, 0x3, 0x0, {0xfffffffffffffffe, 0x4, 0x0, 'vboxnet1\'@'}}, 0x2b) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x6c57}, &(0x7f00000000c0)=0x90) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000002c0)={r3, 0xffffffffffff9030}, 0x8) r4 = syz_open_pts(r0, 0x0) readv(r4, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) socket$vsock_dgram(0x28, 0x2, 0x0) [ 236.111880] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 236.111885] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 236.111891] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc30efd56d4 [ 236.111896] R13: 00000000004c460b R14: 00000000004d8938 R15: 0000000000000005 [ 236.154351] Dead loop on virtual device ip6_vti0, fix it urgently! [ 236.285444] Dead loop on virtual device ip6_vti0, fix it urgently! 11:57:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)) r1 = msgget$private(0x0, 0x200) msgctl$IPC_RMID(r1, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x1) r2 = eventfd(0x20) r3 = fcntl$dupfd(r0, 0x406, r2) mq_getsetattr(r3, &(0x7f00000000c0)={0x1, 0x3, 0x1621, 0x0, 0x0, 0x100000001, 0x400000000000000}, &(0x7f0000000140)) ioctl$NBD_SET_TIMEOUT(r3, 0xab09, 0x8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$KDMKTONE(r0, 0x4b30, 0x794a) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}) r4 = syz_open_pts(r0, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={0x0, 0x800}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000240)={r5, @in6={{0xa, 0x4e20, 0x8, @loopback, 0x8}}, 0x100000001, 0x9}, &(0x7f0000000300)=0x90) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) readv(r4, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) fsetxattr(r3, &(0x7f0000000340)=@known='trusted.overlay.impure\x00', &(0x7f0000000380)='\x00', 0x1, 0x2) close(r3) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) 11:57:18 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070") bind$alg(r0, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x2802, 0x0) ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f0000000100)) recvmmsg(r2, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001340)=""/239, 0xef}], 0x1}}], 0x40000000000015c, 0x0, 0x0) [ 236.296287] Dead loop on virtual device ip6_vti0, fix it urgently! [ 236.307210] Dead loop on virtual device ip6_vti0, fix it urgently! [ 236.319626] Dead loop on virtual device ip6_vti0, fix it urgently! [ 236.330516] Dead loop on virtual device ip6_vti0, fix it urgently! 11:57:18 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x4) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) [ 236.361497] input: syz1 as /devices/virtual/input/input275 [ 236.388605] QAT: Invalid ioctl [ 236.404389] QAT: Invalid ioctl [ 236.456082] input: syz1 as /devices/virtual/input/input278 [ 236.467559] QAT: Invalid ioctl [ 236.480983] QAT: Invalid ioctl 11:57:18 executing program 5: clone(0x41bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() getgroups(0x2, &(0x7f00000006c0)=[0xee01, 0xee01]) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x8e46, 0x4000) ioctl$VIDIOC_G_PRIORITY(r2, 0x80045643, 0x2) setresgid(0x0, 0x0, r1) unshare(0x30010000) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x4206, r0) 11:57:18 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070") bind$alg(r0, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r2 = accept$alg(r0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r4, 0xc0845658, &(0x7f0000000580)={0x0, @bt={0x3, 0x6, 0x1, 0x3, 0x3, 0x81, 0x800, 0xff, 0x4, 0x401, 0x9, 0x100000001, 0x401, 0x1, 0x2, 0x2e}}) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r5, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x30, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2776}]}]}, 0x44}}, 0x10) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001340)=""/239, 0xef}], 0x1}}], 0x40000000000015c, 0x0, 0x0) r6 = syz_open_dev$mouse(&(0x7f0000000440)='/dev/input/mouse#\x00', 0x3, 0x400) setsockopt$ax25_int(r6, 0x101, 0x9, &(0x7f0000000480)=0x7, 0x4) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0xfd, "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"}, &(0x7f0000000080)=0x121) 11:57:18 executing program 3 (fault-call:5 fault-nth:37): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 11:57:18 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) 11:57:18 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x740, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f0000000280)={0x7, 0x4, [0x3]}) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)) truncate(&(0x7f0000000080)='./file0\x00', 0x1ff) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x400, 0x100) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000200)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f0000000140)={0x10, 0x20, &(0x7f00000000c0)="28c396f01601330a61dcae1fbe8edbd92fd6cf63fa496530b82a7246c592cc91c1acfa6da41a8492b675aa", {0x7, 0x9c, 0x50424752, 0x6, 0xd4, 0x8001, 0x9, 0x2}}) r3 = syz_open_pts(r0, 0x0) readv(r3, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) 11:57:18 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$KVM_KVMCLOCK_CTRL(r1, 0xaead) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x300000c, 0x3, 0x40000) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) [ 236.725381] FAULT_INJECTION: forcing a failure. [ 236.725381] name failslab, interval 1, probability 0, space 0, times 0 [ 236.743176] mmap: syz-executor.4 (10859) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.txt. [ 236.760493] CPU: 0 PID: 10856 Comm: syz-executor.3 Not tainted 4.14.140 #36 [ 236.767853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 236.777492] Call Trace: [ 236.780183] dump_stack+0x138/0x197 [ 236.783824] should_fail.cold+0x10f/0x159 [ 236.787999] should_failslab+0xdb/0x130 [ 236.791979] kmem_cache_alloc_node+0x287/0x780 [ 236.791997] __alloc_skb+0x9c/0x500 [ 236.792007] ? skb_scrub_packet+0x4b0/0x4b0 [ 236.792018] ? netlink_has_listeners+0x20a/0x330 [ 236.792031] kobject_uevent_env+0x781/0xc23 [ 236.792046] kobject_uevent+0x20/0x26 [ 236.792056] device_add+0xa3e/0x1490 [ 236.792068] ? device_private_init+0x190/0x190 [ 236.792078] ? input_register_device+0x467/0xb20 [ 236.792090] input_register_device+0x60d/0xb20 [ 236.792107] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 236.792119] ? uinput_request_submit.part.0+0x290/0x290 [ 236.792143] ? __might_sleep+0x93/0xb0 [ 236.792150] ? __fget+0x210/0x370 [ 236.792163] ? uinput_compat_ioctl+0xa0/0xa0 [ 236.800731] uinput_ioctl+0x4a/0x60 [ 236.800745] do_vfs_ioctl+0x7ae/0x1060 [ 236.800756] ? selinux_file_mprotect+0x5d0/0x5d0 [ 236.800767] ? lock_downgrade+0x6e0/0x6e0 [ 236.800777] ? ioctl_preallocate+0x1c0/0x1c0 [ 236.800789] ? __fget+0x237/0x370 [ 236.800805] ? security_file_ioctl+0x89/0xb0 [ 236.887722] SyS_ioctl+0x8f/0xc0 [ 236.891107] ? do_vfs_ioctl+0x1060/0x1060 [ 236.895371] do_syscall_64+0x1e8/0x640 [ 236.899342] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 236.904180] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 236.909372] RIP: 0033:0x459879 [ 236.912548] RSP: 002b:00007fc30efd4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 11:57:18 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070") bind$alg(r0, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001340)=""/239, 0xef}], 0x1, 0x0, 0xfffffffffffffdf8}}], 0x1, 0x100000002, 0x0) [ 236.920258] RAX: ffffffffffffffda RBX: 00007fc30efd4c90 RCX: 0000000000459879 [ 236.927525] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 236.934795] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 236.942057] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc30efd56d4 [ 236.949515] R13: 00000000004c460b R14: 00000000004d8938 R15: 0000000000000005 [ 236.970468] input: syz1 as /devices/virtual/input/input281 11:57:18 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070") bind$alg(r0, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0xff63) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001340)=""/239, 0xef}], 0x1}}], 0x40000000000015c, 0x0, 0x0) 11:57:18 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@empty}}, &(0x7f0000000000)=0xe8) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x800}}, {@blksize={'blksize', 0x3d, 0x200}}, {@blksize={'blksize'}}, {@blksize={'blksize', 0x3d, 0x800}}]}}) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0xfffffffffffffef3) 11:57:18 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070") bind$alg(r0, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000100), 0x0, 0x0) recvmmsg(r2, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001340)=""/239, 0xef}], 0x1}}], 0x40000000000015c, 0x0, 0x0) [ 236.986812] input: syz1 as /devices/virtual/input/input280 11:57:18 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x6, 0x40) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0x7f, 0x2, 0xf1, 0x3ff, 0x10000, 0x7, 0x9, {0x0, @in={{0x2, 0x4e22, @rand_addr=0x100000001}}, 0x1, 0x1000, 0xffffffffffff3eff, 0x6, 0x9}}, &(0x7f0000000100)=0xb0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000280)={r1, @in={{0x2, 0x4e20, @local}}}, &(0x7f0000000140)=0x84) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1cd, &(0x7f0000000000)="11dc810d6c0bcfe47bf070") bind$alg(r2, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r4 = accept$alg(r2, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r4, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001340)=""/239, 0xef}], 0x1}}], 0x40000000000015c, 0x0, 0x0) 11:57:18 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x200, 0x1) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x10) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) [ 237.156262] input: syz1 as /devices/virtual/input/input283 11:57:19 executing program 5: clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x9, 0x400080) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000040)={0x9, 0x1f, 0x101, 0x0, 0x8, 0x100}) getgroups(0x2, &(0x7f00000006c0)=[0xee01, 0xee01]) openat(r1, &(0x7f0000000240)='./file0\x00', 0x800, 0x22) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000280), &(0x7f00000002c0)=0x14) setresgid(0x0, 0x0, r2) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000080)=0x10001, 0x4) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000140)={0x8, 0x6, 0x101, 0x4, 0x0, 0xfffffffffffffffc, 0x100000001, 0x8000, 0x0, 0x10001, 0x7}, 0xb) unshare(0x10000000) setsockopt$inet6_tcp_buf(r1, 0x6, 0x1c, &(0x7f0000000300)="b11d078aea1cb684ef75376c42b504e51a3bb12ad9362dd1640dd6d6873b70c012bcefb397f8681426332556cd45665a9add9861d1f7589d13242a5fbb2bb635b9428c9f405eba1d6185f305bdcfd2ea1be836a5fa566b759acc239da42d9c94704f10e743a6a00648ec97aa98399a0d0f47b27c5751696c047268b7c0563d8b98ddb0887a67b2eee91bab5080464db470f9b86986ffd853c1303dbfc3c4562b145b94d4c6e7e980f07620aac751bf84ee756f59", 0xb4) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x14f, 0x74b}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000200)={r3, 0x23, 0x8, 0xf76}, 0x10) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x4206, r0) 11:57:19 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x6}, 0x18) 11:57:19 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070") bind$alg(r0, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001340)=""/239, 0xef}], 0x1}}], 0x40000000000015c, 0x0, 0x0) r3 = accept4(r0, &(0x7f0000000100)=@ipx, &(0x7f0000000080)=0x80, 0x80800) accept$inet6(r3, &(0x7f00000001c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000200)=0x1c) 11:57:19 executing program 3 (fault-call:5 fault-nth:38): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 11:57:19 executing program 4: alarm(0x5) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 11:57:19 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x200, 0x0) write$P9_RREADLINK(r0, &(0x7f00000000c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)) syncfs(r1) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x80000, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x1) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}) r2 = syz_open_pts(r1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) [ 237.573117] FAULT_INJECTION: forcing a failure. [ 237.573117] name failslab, interval 1, probability 0, space 0, times 0 [ 237.592653] CPU: 1 PID: 10905 Comm: syz-executor.3 Not tainted 4.14.140 #36 [ 237.599815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 237.609176] Call Trace: [ 237.611777] dump_stack+0x138/0x197 [ 237.615411] should_fail.cold+0x10f/0x159 [ 237.619575] should_failslab+0xdb/0x130 11:57:19 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x200, 0x1) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x10) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) [ 237.623572] kmem_cache_alloc_node_trace+0x280/0x770 [ 237.628689] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 237.634152] __kmalloc_node_track_caller+0x3d/0x80 [ 237.639094] __kmalloc_reserve.isra.0+0x40/0xe0 [ 237.643778] __alloc_skb+0xcf/0x500 [ 237.647420] ? skb_scrub_packet+0x4b0/0x4b0 [ 237.651746] ? netlink_has_listeners+0x20a/0x330 [ 237.651761] kobject_uevent_env+0x781/0xc23 [ 237.651776] kobject_uevent+0x20/0x26 [ 237.651787] device_add+0xa3e/0x1490 [ 237.651804] ? device_private_init+0x190/0x190 [ 237.660961] ? input_register_device+0x467/0xb20 [ 237.660974] input_register_device+0x60d/0xb20 [ 237.660991] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 237.661003] ? uinput_request_submit.part.0+0x290/0x290 [ 237.661026] ? __might_sleep+0x93/0xb0 [ 237.661036] ? __fget+0x210/0x370 [ 237.702269] ? uinput_compat_ioctl+0xa0/0xa0 [ 237.706755] uinput_ioctl+0x4a/0x60 [ 237.710547] do_vfs_ioctl+0x7ae/0x1060 [ 237.714739] ? selinux_file_mprotect+0x5d0/0x5d0 [ 237.719733] ? lock_downgrade+0x6e0/0x6e0 [ 237.723985] ? ioctl_preallocate+0x1c0/0x1c0 [ 237.728406] ? __fget+0x237/0x370 [ 237.732030] ? security_file_ioctl+0x89/0xb0 [ 237.736678] SyS_ioctl+0x8f/0xc0 [ 237.740237] ? do_vfs_ioctl+0x1060/0x1060 [ 237.744608] do_syscall_64+0x1e8/0x640 [ 237.748599] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 237.753566] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 237.758976] RIP: 0033:0x459879 [ 237.762246] RSP: 002b:00007fc30efd4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 11:57:19 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800, 0x100) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000040)=0x8) clone(0x41bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() getgroups(0x2, &(0x7f00000006c0)=[0xee01, 0xee01]) setresgid(0x0, 0x0, r2) unshare(0x30010000) rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f00000000c0)) ptrace(0x4206, r1) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x101080, 0x0) 11:57:19 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x400) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000100)={0x0, 0xb9, "47e4085d0032cc63e47c1b81e4b2d95e8c5f0408851db7f1c323f145cde9a9f7da69da55e7bc8efc31b601cf2b2698da7ea3ccdefc8a8a645348b38860dd4ea80c9870f83bd828da12238b593b58982da80126c6f87b343a098d27d9b0e1a98216403ba04de4545b4c29a8389a2feeab9fd992d01a3390f9eb50f11ab62770e5d424008011a270cce533d0b457558e49537b0dd5cf8b77055903eeea7108646a7fbcb49e9564d99b1bafa7e56d8c62841452a5598e186cd0d6"}, &(0x7f0000000040)=0xc1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000240)={r1, 0xb8, &(0x7f0000000340)=[@in6={0xa, 0x4e20, 0x4, @empty, 0x20}, @in6={0xa, 0x4e20, 0x200, @mcast1, 0x6}, @in6={0xa, 0x4e24, 0x3f, @loopback, 0x6}, @in={0x2, 0x4e24, @rand_addr=0x3}, @in6={0xa, 0x4e22, 0xba1, @mcast2, 0x100}, @in6={0xa, 0x4e21, 0x10000, @rand_addr="a099b64ec7bedef9b7a98b84b3e47193", 0x8}, @in6={0xa, 0x4e24, 0x2, @loopback, 0x3}]}, &(0x7f00000002c0)=0x10) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000080)={0x18, 0x6}, 0x18) [ 237.770121] RAX: ffffffffffffffda RBX: 00007fc30efd4c90 RCX: 0000000000459879 [ 237.777471] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 237.784927] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 237.792286] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc30efd56d4 [ 237.799851] R13: 00000000004c460b R14: 00000000004d8938 R15: 0000000000000005 [ 237.811471] input: syz1 as /devices/virtual/input/input286 [ 237.817327] input: syz1 as /devices/virtual/input/input285 11:57:19 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x200, 0x1) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x10) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 11:57:19 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x400, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000040)={'stack ', 'fuse\x00'}, 0xb) 11:57:19 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x1) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f0000000880)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000008c0)={{{@in=@multicast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@local}}, &(0x7f00000009c0)=0xe8) mount$fuse(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000140)='fuse\x00', 0x810010, &(0x7f0000000a00)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x200}}, {@max_read={'max_read', 0x3d, 0x5e0}}, {@default_permissions='default_permissions'}], [{@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@appraise_type='appraise_type=imasig'}, {@uid_eq={'uid', 0x3d, r4}}, {@subj_user={'subj_user', 0x3d, 'security.evm\x00'}}, {@euid_eq={'euid', 0x3d, r5}}]}}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) setxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.evm\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="db000100008000000000"], 0xa, 0x1) [ 237.899443] input: syz1 as /devices/virtual/input/input287 [ 237.916485] input: syz1 as /devices/virtual/input/input288 11:57:19 executing program 3 (fault-call:5 fault-nth:39): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 11:57:19 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) link(0x0, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) [ 238.018069] input: syz1 as /devices/virtual/input/input289 [ 238.025866] FAULT_INJECTION: forcing a failure. [ 238.025866] name failslab, interval 1, probability 0, space 0, times 0 [ 238.052445] CPU: 0 PID: 10940 Comm: syz-executor.3 Not tainted 4.14.140 #36 [ 238.059688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 238.069224] Call Trace: [ 238.071825] dump_stack+0x138/0x197 [ 238.075474] should_fail.cold+0x10f/0x159 [ 238.079718] should_failslab+0xdb/0x130 [ 238.083797] kmem_cache_alloc_node+0x287/0x780 [ 238.088506] __alloc_skb+0x9c/0x500 [ 238.092233] ? skb_scrub_packet+0x4b0/0x4b0 [ 238.096688] ? netlink_has_listeners+0x20a/0x330 [ 238.101828] kobject_uevent_env+0x781/0xc23 [ 238.106171] kobject_uevent+0x20/0x26 [ 238.110065] device_add+0xa3e/0x1490 [ 238.113820] ? device_private_init+0x190/0x190 [ 238.118519] ? input_register_device+0x467/0xb20 [ 238.123418] input_register_device+0x60d/0xb20 [ 238.128096] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 238.133297] ? uinput_request_submit.part.0+0x290/0x290 [ 238.133323] ? __might_sleep+0x93/0xb0 [ 238.133331] ? __fget+0x210/0x370 [ 238.133344] ? uinput_compat_ioctl+0xa0/0xa0 [ 238.133352] uinput_ioctl+0x4a/0x60 [ 238.133362] do_vfs_ioctl+0x7ae/0x1060 [ 238.133372] ? selinux_file_mprotect+0x5d0/0x5d0 [ 238.133385] ? lock_downgrade+0x6e0/0x6e0 [ 238.158517] ? ioctl_preallocate+0x1c0/0x1c0 [ 238.158529] ? __fget+0x237/0x370 [ 238.158546] ? security_file_ioctl+0x89/0xb0 [ 238.180277] SyS_ioctl+0x8f/0xc0 [ 238.184014] ? do_vfs_ioctl+0x1060/0x1060 [ 238.188303] do_syscall_64+0x1e8/0x640 [ 238.192221] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 238.192239] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 238.192246] RIP: 0033:0x459879 [ 238.192262] RSP: 002b:00007fc30efd4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 238.214696] RAX: ffffffffffffffda RBX: 00007fc30efd4c90 RCX: 0000000000459879 [ 238.222157] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 238.229426] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 238.236687] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc30efd56d4 [ 238.243974] R13: 00000000004c460b R14: 00000000004d8938 R15: 0000000000000005 [ 238.252473] input: syz1 as /devices/virtual/input/input290 [ 238.258779] input: syz1 as /devices/virtual/input/input291 11:57:20 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="66643d95cceebf1c59d6ca42612407c813e1abf3c9c5a343c406494be05c880595c1337b409c00f32146a592c0f4ecdd78674cec06df26b2408e9898e22e010180ffffeed6831c476568d1d9304f19", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) 11:57:20 executing program 4: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0xe44a57ece1e259ec}, 0x10) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) [ 238.310311] input: syz1 as /devices/virtual/input/input292 11:57:20 executing program 3 (fault-call:5 fault-nth:40): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 11:57:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000240)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x800, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140), 0x10) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000}) r2 = syz_open_pts(r0, 0x0) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) [ 238.377191] input: syz1 as /devices/virtual/input/input293 11:57:20 executing program 1 (fault-call:5 fault-nth:0): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) [ 238.469260] FAULT_INJECTION: forcing a failure. [ 238.469260] name failslab, interval 1, probability 0, space 0, times 0 [ 238.513020] FAULT_INJECTION: forcing a failure. [ 238.513020] name failslab, interval 1, probability 0, space 0, times 0 [ 238.515249] CPU: 0 PID: 10964 Comm: syz-executor.3 Not tainted 4.14.140 #36 [ 238.531774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 238.541219] Call Trace: [ 238.543816] dump_stack+0x138/0x197 [ 238.547464] should_fail.cold+0x10f/0x159 [ 238.551724] should_failslab+0xdb/0x130 [ 238.556049] kmem_cache_alloc_node+0x287/0x780 [ 238.560769] __alloc_skb+0x9c/0x500 [ 238.564396] ? skb_scrub_packet+0x4b0/0x4b0 [ 238.568715] ? netlink_has_listeners+0x20a/0x330 [ 238.573556] kobject_uevent_env+0x781/0xc23 [ 238.577892] kobject_uevent+0x20/0x26 [ 238.581803] device_add+0xa3e/0x1490 [ 238.585602] ? device_private_init+0x190/0x190 [ 238.590187] ? input_register_device+0x467/0xb20 [ 238.595025] input_register_device+0x60d/0xb20 [ 238.599721] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 238.604911] ? uinput_request_submit.part.0+0x290/0x290 [ 238.610397] ? __might_sleep+0x93/0xb0 [ 238.614290] ? __fget+0x210/0x370 [ 238.617747] ? uinput_compat_ioctl+0xa0/0xa0 [ 238.622168] uinput_ioctl+0x4a/0x60 [ 238.625792] do_vfs_ioctl+0x7ae/0x1060 [ 238.629686] ? selinux_file_mprotect+0x5d0/0x5d0 [ 238.634573] ? lock_downgrade+0x6e0/0x6e0 [ 238.638740] ? ioctl_preallocate+0x1c0/0x1c0 [ 238.643152] ? __fget+0x237/0x370 [ 238.646612] ? security_file_ioctl+0x89/0xb0 [ 238.651015] SyS_ioctl+0x8f/0xc0 [ 238.654472] ? do_vfs_ioctl+0x1060/0x1060 [ 238.658618] do_syscall_64+0x1e8/0x640 [ 238.662510] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 238.667357] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 238.672554] RIP: 0033:0x459879 [ 238.675734] RSP: 002b:00007fc30efd4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 238.683555] RAX: ffffffffffffffda RBX: 00007fc30efd4c90 RCX: 0000000000459879 [ 238.690818] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 238.698345] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 238.705636] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc30efd56d4 [ 238.712998] R13: 00000000004c460b R14: 00000000004d8938 R15: 0000000000000005 [ 238.721569] CPU: 1 PID: 10971 Comm: syz-executor.1 Not tainted 4.14.140 #36 [ 238.728791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 238.738421] Call Trace: [ 238.741111] dump_stack+0x138/0x197 [ 238.744922] should_fail.cold+0x10f/0x159 [ 238.749098] should_failslab+0xdb/0x130 [ 238.753095] __kmalloc+0x2f0/0x7a0 [ 238.756657] ? avc_has_extended_perms+0x8ec/0xe40 [ 238.756671] ? get_pid_task+0x98/0x140 [ 238.756684] ? input_register_device+0x467/0xb20 [ 238.756695] input_register_device+0x467/0xb20 [ 238.756717] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 238.765524] ? uinput_request_submit.part.0+0x290/0x290 [ 238.765552] ? __might_sleep+0x93/0xb0 [ 238.765560] ? __fget+0x210/0x370 [ 238.765573] ? uinput_compat_ioctl+0xa0/0xa0 [ 238.775077] uinput_ioctl+0x4a/0x60 [ 238.775090] do_vfs_ioctl+0x7ae/0x1060 [ 238.775103] ? selinux_file_mprotect+0x5d0/0x5d0 [ 238.775112] ? lock_downgrade+0x6e0/0x6e0 11:57:20 executing program 5: pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000140)=""/188, &(0x7f0000000200)=0xbc) clone(0x41bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() getgroups(0x2, &(0x7f0000000000)=[0xee01, 0xee01]) setresgid(0x0, 0x0, r3) unshare(0x30010000) getsockname$netrom(r0, &(0x7f0000000240)={{0x3, @default}, [@bcast, @null, @bcast, @null, @null, @netrom, @remote, @null]}, &(0x7f00000002c0)=0x48) rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f00000000c0)) prctl$PR_SET_TIMERSLACK(0x1d, 0x9) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000080)) ptrace(0x10, r2) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x2f9) 11:57:20 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="11ff000000000000003d", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r1 = getpgrp(0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) rt_tgsigqueueinfo(r1, r2, 0x400, &(0x7f0000000480)={0x33, 0x9e58, 0xc5}) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x101000, 0x0) pipe(&(0x7f00000001c0)) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_stats\x00', 0x0, 0x0) pipe(&(0x7f00000002c0)) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x20440, 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000340)=0x0) r5 = getpgrp(0xffffffffffffffff) rt_tgsigqueueinfo(r4, r5, 0x8, &(0x7f0000000100)={0x2a, 0x8, 0x3f}) 11:57:20 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000040)) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) [ 238.775122] ? ioctl_preallocate+0x1c0/0x1c0 [ 238.780553] input: syz1 as /devices/virtual/input/input294 [ 238.785844] ? __fget+0x237/0x370 [ 238.785862] ? security_file_ioctl+0x89/0xb0 [ 238.785875] SyS_ioctl+0x8f/0xc0 [ 238.785884] ? do_vfs_ioctl+0x1060/0x1060 [ 238.785899] do_syscall_64+0x1e8/0x640 [ 238.843839] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 238.843860] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 238.843869] RIP: 0033:0x459879 [ 238.843875] RSP: 002b:00007fd831d8ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 238.843886] RAX: ffffffffffffffda RBX: 00007fd831d8ac90 RCX: 0000000000459879 [ 238.843895] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 238.853914] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 238.853920] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd831d8b6d4 [ 238.853925] R13: 00000000004c460b R14: 00000000004d8938 R15: 0000000000000005 11:57:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)) ioctl$TCFLSH(r0, 0x540b, 0x60a) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x1) r1 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x2, 0x2) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x2, r2, 0x1}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x7}) r3 = syz_open_pts(r0, 0x0) readv(r3, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) [ 238.928124] input: syz1 as /devices/virtual/input/input296 11:57:20 executing program 3 (fault-call:5 fault-nth:41): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 11:57:20 executing program 1 (fault-call:5 fault-nth:1): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 11:57:20 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000000)={0x18, 0x1, 0x0, {0x9c0}}, 0x18) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x408000, 0x0) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000100)=""/203) accept4$vsock_stream(r1, &(0x7f0000000240)={0x28, 0x0, 0x2710, @my=0x0}, 0x10, 0x347ab785e0d830ef) 11:57:20 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0xa) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) [ 239.032692] FAULT_INJECTION: forcing a failure. [ 239.032692] name failslab, interval 1, probability 0, space 0, times 0 [ 239.063869] CPU: 0 PID: 10999 Comm: syz-executor.1 Not tainted 4.14.140 #36 [ 239.073088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 239.073093] Call Trace: [ 239.073111] dump_stack+0x138/0x197 [ 239.073128] should_fail.cold+0x10f/0x159 [ 239.073143] should_failslab+0xdb/0x130 [ 239.073156] kmem_cache_alloc_trace+0x2e9/0x790 [ 239.073174] device_private_init+0x4a/0x190 [ 239.073182] device_add+0xd1a/0x1490 [ 239.073201] ? rcu_read_lock_sched_held+0x110/0x130 [ 239.073211] ? __kmalloc+0x376/0x7a0 [ 239.073223] ? device_private_init+0x190/0x190 [ 239.073234] ? input_register_device+0x467/0xb20 11:57:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000700)='/dev/audio#\x00', 0x1f, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000780)='team\x00') getsockname$packet(0xffffffffffffffff, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000800)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@loopback}}, &(0x7f0000000940)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000980)={@mcast1, 0x0}, &(0x7f00000009c0)=0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000a00)={@rand_addr, @loopback, 0x0}, &(0x7f0000000a40)=0xc) getpeername$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000ac0)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000b00)={'syzkaller0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000b80)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000000cc0)=0xe8) accept$packet(0xffffffffffffffff, &(0x7f0000003b40)={0x11, 0x0, 0x0}, &(0x7f0000003b80)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003bc0)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@remote}}, &(0x7f0000003cc0)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000003d00)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6}}, &(0x7f0000003e00)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000004540)={0x0, @local, @multicast1}, &(0x7f0000004580)=0xc) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000045c0)={@multicast2, @dev, 0x0}, &(0x7f0000004600)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@initdev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in=@loopback}}, &(0x7f0000004740)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000004e80)={'team0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000004ec0)={@local, @rand_addr, 0x0}, &(0x7f0000004f00)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000004fc0)={'eql\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000005000)={{{@in6=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000005100)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000005140)={'nlmon0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005180)={{{@in=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000005280)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000052c0)={{{@in6=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f00000053c0)=0xe8) getpeername$packet(0xffffffffffffffff, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000005440)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000054c0)={{{@in, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f00000055c0)=0xe8) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000005fc0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4cdee7af30a59c98}, 0xc, &(0x7f0000005f80)={&(0x7f0000005600)={0x96c, r2, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x160, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r4}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x9305}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffffff8}}}]}}, {{0x8, 0x1, r6}, {0x80, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r9}, {0x230, 0x2, [{0x6c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x3c, 0x4, [{0x7ff, 0xa135, 0x2, 0x48bf0d6d}, {0x3, 0x4, 0x7f, 0x8001}, {0x3, 0xfffffffffffffffe, 0x0, 0x400}, {0x48a844e, 0x6, 0xa0b, 0x8}, {0x1, 0x0, 0x5, 0x7}, {0x95, 0xe081, 0x9}, {0x6, 0x800, 0x40, 0x8}]}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x14, 0x4, [{0x5, 0x7fffffff, 0x9, 0x7}, {0x7, 0x8, 0x80000000, 0x3f}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r10}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r11}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r12}}}]}}, {{0x8, 0x1, r13}, {0x164, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x40}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x1ff}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x101}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x1ff}}, {0x8, 0x7, 0x8000}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r15}, {0xb8, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r16}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r17}, {0x80, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r18}}}]}}, {{0x8, 0x1, r19}, {0x44, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r20}}}]}}, {{0x8, 0x1, r21}, {0x80, 0x2, [{0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0xc, 0x4, [{0x400, 0x7, 0x4, 0x8}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r22}}, {0x8}}}]}}, {{0x8, 0x1, r23}, {0x15c, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x3f}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x2035}}, {0x8, 0x6, r24}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x2171db35}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x6331166b}}}]}}, {{0x8, 0x1, r25}, {0x3c, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x9}}}]}}]}, 0x96c}, 0x1, 0x0, 0x0, 0x40}, 0x80) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}) r26 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$sock_linger(r26, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x6}, 0x8) syz_open_pts(r0, 0x0) readv(r26, &(0x7f0000000200)=[{&(0x7f0000000180)}], 0xed) [ 239.073246] input_register_device+0x60d/0xb20 [ 239.073262] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 239.073274] ? uinput_request_submit.part.0+0x290/0x290 [ 239.073296] ? __might_sleep+0x93/0xb0 [ 239.073308] ? __fget+0x210/0x370 [ 239.086590] ? uinput_compat_ioctl+0xa0/0xa0 [ 239.086601] uinput_ioctl+0x4a/0x60 [ 239.094468] do_vfs_ioctl+0x7ae/0x1060 [ 239.094481] ? selinux_file_mprotect+0x5d0/0x5d0 [ 239.094495] ? lock_downgrade+0x6e0/0x6e0 [ 239.103226] ? ioctl_preallocate+0x1c0/0x1c0 [ 239.103237] ? __fget+0x237/0x370 [ 239.103252] ? security_file_ioctl+0x89/0xb0 [ 239.103263] SyS_ioctl+0x8f/0xc0 [ 239.103271] ? do_vfs_ioctl+0x1060/0x1060 [ 239.103282] do_syscall_64+0x1e8/0x640 [ 239.103294] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 239.111340] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 239.111349] RIP: 0033:0x459879 [ 239.111353] RSP: 002b:00007fd831d8ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 239.111362] RAX: ffffffffffffffda RBX: 00007fd831d8ac90 RCX: 0000000000459879 [ 239.111367] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 239.111372] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 239.111376] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd831d8b6d4 [ 239.111382] R13: 00000000004c460b R14: 00000000004d8938 R15: 0000000000000005 [ 239.121326] FAULT_INJECTION: forcing a failure. [ 239.121326] name failslab, interval 1, probability 0, space 0, times 0 [ 239.171059] CPU: 1 PID: 11002 Comm: syz-executor.3 Not tainted 4.14.140 #36 [ 239.186602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 239.186607] Call Trace: [ 239.186624] dump_stack+0x138/0x197 [ 239.186641] should_fail.cold+0x10f/0x159 [ 239.186654] should_failslab+0xdb/0x130 [ 239.194595] kmem_cache_alloc_node+0x287/0x780 [ 239.194615] __alloc_skb+0x9c/0x500 [ 239.194625] ? skb_scrub_packet+0x4b0/0x4b0 [ 239.203437] ? netlink_has_listeners+0x20a/0x330 [ 239.203454] kobject_uevent_env+0x781/0xc23 [ 239.203472] kobject_uevent+0x20/0x26 [ 239.203484] device_add+0xa3e/0x1490 [ 239.220101] ? device_private_init+0x190/0x190 [ 239.220115] ? input_register_device+0x467/0xb20 [ 239.220126] input_register_device+0x60d/0xb20 [ 239.220142] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 239.220154] ? uinput_request_submit.part.0+0x290/0x290 [ 239.290772] ? __might_sleep+0x93/0xb0 [ 239.290782] ? __fget+0x210/0x370 [ 239.290798] ? uinput_compat_ioctl+0xa0/0xa0 [ 239.290806] uinput_ioctl+0x4a/0x60 [ 239.290819] do_vfs_ioctl+0x7ae/0x1060 [ 239.295085] FAULT_INJECTION: forcing a failure. [ 239.295085] name failslab, interval 1, probability 0, space 0, times 0 [ 239.298924] ? selinux_file_mprotect+0x5d0/0x5d0 [ 239.298937] ? lock_downgrade+0x6e0/0x6e0 [ 239.298950] ? ioctl_preallocate+0x1c0/0x1c0 [ 239.298966] ? __fget+0x237/0x370 [ 239.400918] ? security_file_ioctl+0x89/0xb0 [ 239.405323] SyS_ioctl+0x8f/0xc0 [ 239.408808] ? do_vfs_ioctl+0x1060/0x1060 [ 239.412966] do_syscall_64+0x1e8/0x640 [ 239.416875] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 239.421719] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 239.426917] RIP: 0033:0x459879 11:57:20 executing program 1 (fault-call:5 fault-nth:2): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 11:57:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c3}) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) [ 239.430100] RSP: 002b:00007fc30efd4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 239.437824] RAX: ffffffffffffffda RBX: 00007fc30efd4c90 RCX: 0000000000459879 [ 239.445393] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 239.452652] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 239.459914] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc30efd56d4 [ 239.467359] R13: 00000000004c460b R14: 00000000004d8938 R15: 0000000000000005 [ 239.474643] CPU: 0 PID: 11011 Comm: syz-executor.1 Not tainted 4.14.140 #36 [ 239.481834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 239.481839] Call Trace: [ 239.481854] dump_stack+0x138/0x197 [ 239.481872] should_fail.cold+0x10f/0x159 [ 239.481885] should_failslab+0xdb/0x130 [ 239.493990] __kmalloc_track_caller+0x2ec/0x790 [ 239.494002] ? ___preempt_schedule+0x16/0x18 [ 239.494016] ? kstrdup_const+0x48/0x60 [ 239.494027] kstrdup+0x3a/0x70 [ 239.497812] input: syz1 as /devices/virtual/input/input299 [ 239.501849] kstrdup_const+0x48/0x60 [ 239.501861] __kernfs_new_node+0x2f/0x420 [ 239.501872] ? vprintk_func+0x65/0x159 [ 239.501883] kernfs_new_node+0x80/0xf0 [ 239.501894] kernfs_create_dir_ns+0x41/0x140 [ 239.501905] sysfs_create_dir_ns+0xbe/0x1d0 [ 239.501922] kobject_add_internal.part.0.cold+0x114/0x5ae [ 239.505968] input: syz1 as /devices/virtual/input/input298 [ 239.510538] kobject_add+0x11f/0x180 [ 239.510549] ? kset_create_and_add+0x180/0x180 [ 239.510564] ? mutex_unlock+0xd/0x10 [ 239.510577] device_add+0x383/0x1490 [ 239.510588] ? rcu_read_lock_sched_held+0x110/0x130 [ 239.510599] ? device_private_init+0x190/0x190 [ 239.510610] ? input_register_device+0x467/0xb20 [ 239.510622] input_register_device+0x60d/0xb20 [ 239.510638] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 239.510650] ? uinput_request_submit.part.0+0x290/0x290 [ 239.525582] ? __might_sleep+0x93/0xb0 [ 239.525592] ? __fget+0x210/0x370 [ 239.525609] ? uinput_compat_ioctl+0xa0/0xa0 [ 239.525619] uinput_ioctl+0x4a/0x60 11:57:21 executing program 5: clone(0x41bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() getresgid(&(0x7f0000000080)=0x0, &(0x7f0000000140), &(0x7f0000000180)) getgroups(0x2, &(0x7f00000001c0)=[r1, 0xee01]) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x3, 0x100) sendmsg$inet(r3, &(0x7f0000000500)={&(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000200)="b5b58ac7736c528f2c5e226794f99b816d3ff6430564f8c3206685b5d10eea842b2ae6299120bd41a724f0d16ff01b3b14d63f047a01f00cd7f69bbedc0221ca2e8e30883d4440b01118eb3f9d6a412ae02346f36d844b9bbda7976016acc417f47e8c6f5911cfbd8e62", 0x6a}, {&(0x7f0000000280)="31d1ce8f891d58f20f3db2e852c9b47005f29618be05bc30bca826860ea063ce6d0fa195a9235edf911c98419b576800bc63471d2a57b209112b82d662d7c0b389599d6dbf0709728b4abc8a99b84cdfba3caf5154d1", 0x56}], 0x2, &(0x7f0000000340)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x101}}, @ip_retopts={{0x68, 0x0, 0x7, {[@ra={0x94, 0x6, 0x3}, @rr={0x7, 0x17, 0x3, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @multicast2, @remote, @local]}, @timestamp={0x44, 0x14, 0x5, 0x0, 0x3, [{[@local], 0xffffffffffffcdbe}, {[@multicast2], 0x3}]}, @cipso={0x86, 0x11, 0xad, [{0x1, 0xb, "a209e234ea9748ac71"}]}, @ra={0x94, 0x6, 0x7fff}, @ssrr={0x89, 0xf, 0x3, [@broadcast, @broadcast, @loopback]}]}}}, @ip_retopts={{0x58, 0x0, 0x7, {[@cipso={0x86, 0x14, 0x81, [{0x7, 0xb, "c2214a96ba5f150717"}, {0x1, 0x3, "bd"}]}, @timestamp={0x44, 0x14, 0x0, 0x0, 0x1826, [{[@initdev={0xac, 0x1e, 0x1, 0x0}], 0x7}, {[], 0x8}, {[], 0x10000}]}, @timestamp={0x44, 0x18, 0x1000000, 0x0, 0x10000, [{[@multicast1], 0xd7b7}, {[], 0x9}, {[@dev={0xac, 0x14, 0x14, 0x2b}], 0xffffffff}]}, @ssrr={0x89, 0x7, 0x1f, [@multicast1]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x396}}, @ip_retopts={{0x4c, 0x0, 0x7, {[@rr={0x7, 0x13, 0x9, [@multicast1, @dev={0xac, 0x14, 0x14, 0x15}, @local, @empty]}, @timestamp={0x44, 0x18, 0x1ff, 0x1, 0x0, [{[@loopback], 0x7}, {[@rand_addr=0x5], 0x6}, {[], 0x2}]}, @generic={0x82, 0x11, "eced317311e97617aaafbee387146f"}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffffffffffffffff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x100000000}}], 0x188}, 0x80) setresgid(0x0, 0x0, r2) unshare(0x30010000) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x4206, r0) [ 239.525629] do_vfs_ioctl+0x7ae/0x1060 [ 239.525641] ? selinux_file_mprotect+0x5d0/0x5d0 [ 239.525650] ? lock_downgrade+0x6e0/0x6e0 [ 239.525659] ? ioctl_preallocate+0x1c0/0x1c0 [ 239.525670] ? __fget+0x237/0x370 [ 239.525684] ? security_file_ioctl+0x89/0xb0 [ 239.525695] SyS_ioctl+0x8f/0xc0 [ 239.534534] ? do_vfs_ioctl+0x1060/0x1060 [ 239.534549] do_syscall_64+0x1e8/0x640 [ 239.534556] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 239.534571] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 239.534579] RIP: 0033:0x459879 [ 239.534585] RSP: 002b:00007fd831d8ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 239.534597] RAX: ffffffffffffffda RBX: 00007fd831d8ac90 RCX: 0000000000459879 [ 239.534601] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 239.534606] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 239.534610] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd831d8b6d4 [ 239.534615] R13: 00000000004c460b R14: 00000000004d8938 R15: 0000000000000005 11:57:21 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x1) r1 = syz_open_dev$mouse(&(0x7f0000000380)='/dev/input/mouse#\x00', 0x1, 0x4000) write$P9_RCREATE(r1, &(0x7f00000003c0)={0x18, 0x73, 0x1, {{0x6c, 0x1, 0x4}, 0x10000}}, 0x18) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}) ioctl$TCFLSH(r0, 0x540b, 0x0) r2 = dup2(r0, r0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@ipv4={[], [], @initdev}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8) getsockname$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000340)=0x14) accept$packet(r2, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000500)={0x180, r3, 0x200, 0x70bd2c, 0x25dfdbff, {}, [{{0x8, 0x1, r4}, {0x164, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r5}}}, {0x7c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x4c, 0x4, [{0x0, 0x3, 0x73dc, 0x7d}, {0x80000000, 0x100000000, 0x10000, 0xd5}, {0x2, 0x1, 0x40, 0x800}, {0x5, 0x8ac9, 0x6, 0x8}, {0x32b6, 0x6, 0xffffffffffffff6d, 0xfffffffffffffffa}, {0x7a80, 0x6, 0x0, 0x2}, {0x4, 0xfffffffffffffffd, 0x800, 0xd182}, {0x7, 0x3, 0x40, 0xdd}, {0x800, 0x100, 0x20}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x596}}}]}}]}, 0x180}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r7 = syz_open_pts(r2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x4000, 0x0) readv(r7, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) write(r7, &(0x7f00000000c0), 0x0) [ 239.626699] kobject_add_internal failed for input300 (error: -12 parent: input) 11:57:21 executing program 3 (fault-call:5 fault-nth:42): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 11:57:21 executing program 1 (fault-call:5 fault-nth:3): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 11:57:21 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) r1 = dup(r0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0xf) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000009c0)={0x7, 0x8000, 0xfffffffffffff038, 0x6, 0x0}, &(0x7f0000000a00)=0x10) sendmsg$inet_sctp(r1, &(0x7f0000000ac0)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0xfffffffffffffff9, @mcast1, 0xfffffffffffffffe}, 0x1c, &(0x7f0000000940)=[{&(0x7f0000000040)="55e615520ead02aa4d62ce2513d4f3e6a66f4d8ded91c015f9efdacbf1661d11c56231841f9832e3f3d3c0542967a30a56d03d0e83b585885252921e28c4111e9c7929f87aae81e94efb9f4b4db8bfe71ff1a98100a5069cb3c247a641c4f0194f4b31a64d0cd2f533f1f4233d1ef22678cc7b6f24c3bfdc81906db7fd83bcbc", 0x80}, {&(0x7f0000000140)="53f1d6c7559b04f477bbd89e0c3e9a7cf4a3432fb86b8c882bb721bde216b165f091d794bbc91a642af08a8eb7162e6ae3535ad2fa461a6404f8f95b08327dca3bc546b5e587819eb535855ad98b35532a2fd3119f2f88d54d4e74c6401ddc9d355c60130e80dba1beef1a48d82d639ea0cad337a315b58b344ca72f8a8afbc6f35c1096090361d30d88fa815d987811c2c4", 0x92}, {&(0x7f0000000200)="f9e45543c7780f4ae91f846d30e3c04231e97dc1811a9a4951783cefd0ed419e4af6c772108d97ffa1a9d8ac837680526d19339392c74d409e347e59a22994988b7f624ef0c62a75e342c0b83686ad8a92895b81f9119bec44ac401ab84e47af19e3f9bcb319d7b5ccd380d58503ea253d7b7ff34e03af2330fc4fa985c9abe23822e79e730ec2288c904f6cf2dd5fce29588f3d73c30b4c0fc7501df65fb41003d18bbd54", 0xa5}, {&(0x7f00000000c0)="4e9c13a31f2a580ebc8541bada3f1c5a02b59914a7cab4aa115e38b522a0d713827fcd6d66ccec12", 0x28}, {&(0x7f00000002c0)="97d239b64d655fe1165dc3c84c8c19022c27f9d606fe66633bb16b3a573a4d7ad7eda01a27ac308c9ce03f94f68bc3c93553449713300a9932fcf95ec231ff83303abf95def42e5ea81f64b6924a6f33821a20f9205acea068af48a795a10f1fa840b23a27720603b5f7ba1c9567f1163512ea48a326b4878d06a4d4e1fb5aa57622e3acd1e530cfad4af79ba77a6c554ce71722614f76305fb3ea313b82da37222357232d8609e2038a0b8c3d78d09aa7b75f21", 0xb4}, {&(0x7f0000000380)="f4c95807b3faddd86e345632f6e21a36115011f87a139171ffd00263dc5b98416d9e2ac854e702f8f5c9db47454df4c90b3767df06d99f293d3f3d97fce4df94088aea6e1f50ae05d6f38ec1ad16aeff7470b19684579f7fd0", 0x59}, {&(0x7f0000000880)="1bccfeca4f72eef17f9267f043f3b7b5b1ed35684ab695846681729e5272d049a94da4766b52e296241c772978ffbaad1e22498435c8060d998d4b064dd1a401ffb2ba9163ba083272376deb2d229d63f92783f86e6a3ce6ebbc4a2d446c506f3cc42339fa60c68dc420f63afe9f2f9447e01c38774c8cdd49cec5509d6cef322e96f1699d00910b39cd91f72dd76781", 0x90}], 0x7, &(0x7f0000000a40)=[@authinfo={0x18}, @dstaddrv6={0x20, 0x84, 0x8, @loopback}, @sndrcv={0x30, 0x84, 0x1, {0x100000001, 0x40, 0x200, 0x20, 0x0, 0xffffffff, 0xfffffffffffff926, 0x4, r2}}], 0x68, 0x44000}, 0x4000) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 11:57:21 executing program 2: ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000040)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x1) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x20200, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) sendto$netrom(r0, &(0x7f0000000200)="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", 0xfa, 0x20000080, &(0x7f0000000140)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f00000000c0)) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) 11:57:21 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet6(0xa, 0x3, 0x7f) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000100)={r2, 0xc3, "129ce6325ef241039e9a9e1d2b52110831eff8d77e6a416fd02ef1d611652f600cf8a3a4474bc06725db85e66ca03a2ca7206abcdf14e4e4b81d9cde1dea620cf08554d66f0094c29af0ac4d9833448a46756700184f2dd28dcece5294afbcb1025101537302a61c2a9c83ffba760b8b24089ca3626323f847eb8ed6e9af4c5d371f2d246b5707cbb3ab8bc77e0e7b92585093f1fe4f6e7fa734499ff01c71edce33873fa7ddf09c490602a7c21fb32b87a03228611ce5e3acc6991ebbcd00d74084a2"}, &(0x7f0000000240)=0xcb) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) [ 239.856543] FAULT_INJECTION: forcing a failure. [ 239.856543] name failslab, interval 1, probability 0, space 0, times 0 [ 239.891782] FAULT_INJECTION: forcing a failure. [ 239.891782] name failslab, interval 1, probability 0, space 0, times 0 [ 239.934083] CPU: 1 PID: 11036 Comm: syz-executor.1 Not tainted 4.14.140 #36 [ 239.941453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 239.941459] Call Trace: [ 239.941477] dump_stack+0x138/0x197 [ 239.941496] should_fail.cold+0x10f/0x159 [ 239.941512] should_failslab+0xdb/0x130 [ 239.961339] kmem_cache_alloc+0x2d7/0x780 [ 239.961349] ? memcpy+0x46/0x50 [ 239.961363] ? kstrdup+0x5a/0x70 [ 239.961377] __kernfs_new_node+0x70/0x420 [ 239.961388] ? vprintk_func+0x65/0x159 [ 239.984541] kernfs_new_node+0x80/0xf0 [ 239.988434] kernfs_create_dir_ns+0x41/0x140 [ 239.992929] sysfs_create_dir_ns+0xbe/0x1d0 [ 239.997253] kobject_add_internal.part.0.cold+0x114/0x5ae [ 240.002793] kobject_add+0x11f/0x180 [ 240.006499] ? kset_create_and_add+0x180/0x180 [ 240.011166] ? mutex_unlock+0xd/0x10 [ 240.014879] device_add+0x383/0x1490 [ 240.018732] ? rcu_read_lock_sched_held+0x110/0x130 [ 240.023744] ? device_private_init+0x190/0x190 [ 240.028319] ? input_register_device+0x467/0xb20 [ 240.033071] input_register_device+0x60d/0xb20 [ 240.037748] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 240.042939] ? uinput_request_submit.part.0+0x290/0x290 [ 240.048526] ? __might_sleep+0x93/0xb0 [ 240.052501] ? __fget+0x210/0x370 [ 240.055954] ? uinput_compat_ioctl+0xa0/0xa0 [ 240.060646] uinput_ioctl+0x4a/0x60 [ 240.064354] do_vfs_ioctl+0x7ae/0x1060 [ 240.068239] ? selinux_file_mprotect+0x5d0/0x5d0 [ 240.073105] ? lock_downgrade+0x6e0/0x6e0 [ 240.077315] ? ioctl_preallocate+0x1c0/0x1c0 [ 240.081808] ? __fget+0x237/0x370 [ 240.085299] ? security_file_ioctl+0x89/0xb0 [ 240.089792] SyS_ioctl+0x8f/0xc0 [ 240.093238] ? do_vfs_ioctl+0x1060/0x1060 [ 240.097832] do_syscall_64+0x1e8/0x640 [ 240.101804] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 240.106921] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 240.112233] RIP: 0033:0x459879 [ 240.115412] RSP: 002b:00007fd831d8ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 240.123112] RAX: ffffffffffffffda RBX: 00007fd831d8ac90 RCX: 0000000000459879 11:57:21 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x80000) getgroups(0x5, &(0x7f0000000200)=[0xee00, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xee00]) getresgid(&(0x7f0000000240)=0x0, &(0x7f0000000280), &(0x7f00000002c0)) getgroups(0x2, &(0x7f0000000300)=[0xee01, 0xee01]) getresgid(&(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)=0x0) r6 = getgid() stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x7, &(0x7f0000000580)=[r2, r3, r4, r5, 0x0, r6, r7]) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x3, 0x1, 0x40000000000, 0x1, 0x0}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={r8, 0x7}, 0x8) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}) r9 = syz_open_pts(r0, 0x0) readv(r9, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) [ 240.130377] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 240.137641] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 240.144902] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd831d8b6d4 [ 240.152166] R13: 00000000004c460b R14: 00000000004d8938 R15: 0000000000000005 [ 240.159629] CPU: 0 PID: 11038 Comm: syz-executor.3 Not tainted 4.14.140 #36 [ 240.162503] kobject_add_internal failed for input302 (error: -12 parent: input) [ 240.166747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 240.166752] Call Trace: [ 240.166767] dump_stack+0x138/0x197 [ 240.166782] should_fail.cold+0x10f/0x159 [ 240.166796] should_failslab+0xdb/0x130 [ 240.166808] kmem_cache_alloc_node+0x287/0x780 [ 240.166824] __alloc_skb+0x9c/0x500 [ 240.166832] ? skb_scrub_packet+0x4b0/0x4b0 [ 240.166843] ? netlink_has_listeners+0x20a/0x330 [ 240.166855] kobject_uevent_env+0x781/0xc23 [ 240.166873] kobject_uevent+0x20/0x26 [ 240.183950] device_add+0xa3e/0x1490 [ 240.183963] ? device_private_init+0x190/0x190 [ 240.183974] ? input_register_device+0x467/0xb20 [ 240.183985] input_register_device+0x60d/0xb20 [ 240.184001] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 240.184012] ? uinput_request_submit.part.0+0x290/0x290 [ 240.184040] ? __might_sleep+0x93/0xb0 [ 240.190252] ? __fget+0x210/0x370 [ 240.190266] ? uinput_compat_ioctl+0xa0/0xa0 [ 240.190274] uinput_ioctl+0x4a/0x60 [ 240.190285] do_vfs_ioctl+0x7ae/0x1060 [ 240.190296] ? selinux_file_mprotect+0x5d0/0x5d0 [ 240.190308] ? lock_downgrade+0x6e0/0x6e0 [ 240.198487] ? ioctl_preallocate+0x1c0/0x1c0 [ 240.198497] ? __fget+0x237/0x370 [ 240.198515] ? security_file_ioctl+0x89/0xb0 [ 240.294321] SyS_ioctl+0x8f/0xc0 [ 240.297705] ? do_vfs_ioctl+0x1060/0x1060 [ 240.301910] do_syscall_64+0x1e8/0x640 [ 240.305998] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 240.310962] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 240.316153] RIP: 0033:0x459879 [ 240.319341] RSP: 002b:00007fc30efd4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 240.327538] RAX: ffffffffffffffda RBX: 00007fc30efd4c90 RCX: 0000000000459879 11:57:22 executing program 1 (fault-call:5 fault-nth:4): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) [ 240.334815] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 240.342199] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 240.349471] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc30efd56d4 [ 240.356845] R13: 00000000004c460b R14: 00000000004d8938 R15: 0000000000000005 [ 240.367780] input: syz1 as /devices/virtual/input/input304 [ 240.375770] input: syz1 as /devices/virtual/input/input303 [ 240.424904] FAULT_INJECTION: forcing a failure. [ 240.424904] name failslab, interval 1, probability 0, space 0, times 0 [ 240.438286] CPU: 0 PID: 11054 Comm: syz-executor.1 Not tainted 4.14.140 #36 [ 240.445511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 240.445517] Call Trace: [ 240.445533] dump_stack+0x138/0x197 [ 240.445551] should_fail.cold+0x10f/0x159 [ 240.465543] should_failslab+0xdb/0x130 [ 240.469514] kmem_cache_alloc+0x2d7/0x780 [ 240.469527] ? save_trace+0x290/0x290 [ 240.469537] ? save_trace+0x290/0x290 [ 240.477606] __kernfs_new_node+0x70/0x420 [ 240.477622] kernfs_new_node+0x80/0xf0 [ 240.477634] __kernfs_create_file+0x46/0x323 [ 240.485563] sysfs_add_file_mode_ns+0x1e4/0x450 [ 240.485578] sysfs_create_file_ns+0x8e/0xb0 [ 240.485596] device_create_file+0xd7/0x110 [ 240.493964] ? acpi_bind_one+0x770/0x770 [ 240.493977] device_add+0x3be/0x1490 [ 240.493989] ? rcu_read_lock_sched_held+0x110/0x130 [ 240.494000] ? device_private_init+0x190/0x190 [ 240.513617] input: syz1 as /devices/virtual/input/input306 [ 240.515015] ? input_register_device+0x467/0xb20 [ 240.515028] input_register_device+0x60d/0xb20 [ 240.515049] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 240.530269] ? uinput_request_submit.part.0+0x290/0x290 [ 240.530294] ? __might_sleep+0x93/0xb0 [ 240.530302] ? __fget+0x210/0x370 [ 240.530315] ? uinput_compat_ioctl+0xa0/0xa0 [ 240.530325] uinput_ioctl+0x4a/0x60 [ 240.530335] do_vfs_ioctl+0x7ae/0x1060 [ 240.530347] ? selinux_file_mprotect+0x5d0/0x5d0 11:57:22 executing program 5: clone(0x41bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() getgroups(0x2, &(0x7f00000006c0)=[0xee01, 0xee01]) r2 = open(&(0x7f0000000180)='./file0\x00', 0x10000, 0x100) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4) setresgid(0x0, 0x0, r1) unshare(0x30010000) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) r3 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x5, 0x4a80) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000200)) connect$netrom(r3, &(0x7f0000000040)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x5}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}, 0x48) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000140)=0x10000, 0x4) ptrace(0x4206, r0) [ 240.530359] ? lock_downgrade+0x6e0/0x6e0 [ 240.539764] ? ioctl_preallocate+0x1c0/0x1c0 [ 240.539779] ? __fget+0x237/0x370 [ 240.539795] ? security_file_ioctl+0x89/0xb0 [ 240.550680] SyS_ioctl+0x8f/0xc0 [ 240.550689] ? do_vfs_ioctl+0x1060/0x1060 [ 240.550704] do_syscall_64+0x1e8/0x640 [ 240.550713] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 240.550731] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 240.550739] RIP: 0033:0x459879 [ 240.550744] RSP: 002b:00007fd831d8ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 11:57:22 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0x80000, 0x6) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000000)={0x0, 0x94, "4fe845d2a3028264f2ae98138cdeff8a480b6ae0ed932206b4582db2eca4ab023d8b121c9740367bafde9b9f92c1a1a216f19c95f21f8f31ff9e200b5a4e64119ca8c17ed17fff507018551c7469f78de63320d6773e250ac505320d6b97e9f4b0d5da9f5b834fe3c06f52e4c7a777ebb56b7345eaa07bce4880d82b841122c44f11bd64479d843cc47a48f861a2bb4279f41549"}, &(0x7f00000000c0)=0x9c) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000140)={r2, 0x2}, 0x8) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r3 = dup(r0) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) [ 240.550754] RAX: ffffffffffffffda RBX: 00007fd831d8ac90 RCX: 0000000000459879 [ 240.550760] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 240.550764] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 240.550769] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd831d8b6d4 [ 240.550774] R13: 00000000004c460b R14: 00000000004d8938 R15: 0000000000000005 11:57:22 executing program 1 (fault-call:5 fault-nth:5): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 11:57:22 executing program 3 (fault-call:5 fault-nth:43): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 11:57:22 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75032f9665d83f77f3b22c705f69643d", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) [ 240.727755] input: syz1 as /devices/virtual/input/input307 [ 240.779293] FAULT_INJECTION: forcing a failure. [ 240.779293] name failslab, interval 1, probability 0, space 0, times 0 [ 240.792426] FAULT_INJECTION: forcing a failure. [ 240.792426] name failslab, interval 1, probability 0, space 0, times 0 [ 240.804080] CPU: 0 PID: 11082 Comm: syz-executor.1 Not tainted 4.14.140 #36 [ 240.811385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 240.820759] Call Trace: [ 240.820778] dump_stack+0x138/0x197 [ 240.820795] should_fail.cold+0x10f/0x159 [ 240.820811] should_failslab+0xdb/0x130 [ 240.820824] kmem_cache_alloc+0x2d7/0x780 [ 240.820834] ? find_held_lock+0x35/0x130 [ 240.820845] ? sysfs_do_create_link_sd.isra.0+0x82/0x120 [ 240.820856] __kernfs_new_node+0x70/0x420 [ 240.820869] kernfs_new_node+0x80/0xf0 [ 240.820880] kernfs_create_link+0x2c/0x170 [ 240.820889] sysfs_do_create_link_sd.isra.0+0x90/0x120 [ 240.820899] sysfs_create_link+0x65/0xc0 [ 240.870842] device_add+0x447/0x1490 [ 240.874692] ? device_private_init+0x190/0x190 [ 240.879271] ? input_register_device+0x467/0xb20 [ 240.884052] input_register_device+0x60d/0xb20 [ 240.888642] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 240.893832] ? uinput_request_submit.part.0+0x290/0x290 [ 240.899205] ? __might_sleep+0x93/0xb0 [ 240.903106] ? __fget+0x210/0x370 [ 240.906591] ? uinput_compat_ioctl+0xa0/0xa0 [ 240.911007] uinput_ioctl+0x4a/0x60 [ 240.914651] do_vfs_ioctl+0x7ae/0x1060 [ 240.918545] ? selinux_file_mprotect+0x5d0/0x5d0 [ 240.923439] ? lock_downgrade+0x6e0/0x6e0 [ 240.927679] ? ioctl_preallocate+0x1c0/0x1c0 [ 240.932090] ? __fget+0x237/0x370 [ 240.935653] ? security_file_ioctl+0x89/0xb0 [ 240.940062] SyS_ioctl+0x8f/0xc0 [ 240.943422] ? do_vfs_ioctl+0x1060/0x1060 [ 240.947565] do_syscall_64+0x1e8/0x640 [ 240.951442] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 240.956288] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 240.961469] RIP: 0033:0x459879 [ 240.964909] RSP: 002b:00007fd831d8ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 240.972643] RAX: ffffffffffffffda RBX: 00007fd831d8ac90 RCX: 0000000000459879 [ 240.979995] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 240.987253] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 240.994513] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd831d8b6d4 [ 241.001776] R13: 00000000004c460b R14: 00000000004d8938 R15: 0000000000000005 [ 241.009062] CPU: 1 PID: 11080 Comm: syz-executor.3 Not tainted 4.14.140 #36 [ 241.016169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 241.025787] Call Trace: [ 241.028381] dump_stack+0x138/0x197 [ 241.028400] should_fail.cold+0x10f/0x159 [ 241.028416] should_failslab+0xdb/0x130 [ 241.028428] kmem_cache_alloc_node+0x287/0x780 [ 241.036186] __alloc_skb+0x9c/0x500 [ 241.036196] ? skb_scrub_packet+0x4b0/0x4b0 [ 241.036209] ? netlink_has_listeners+0x20a/0x330 [ 241.036225] kobject_uevent_env+0x781/0xc23 [ 241.044783] kobject_uevent+0x20/0x26 [ 241.052697] device_add+0xa3e/0x1490 [ 241.052709] ? device_private_init+0x190/0x190 [ 241.052720] ? input_register_device+0x467/0xb20 11:57:22 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB='\t\x00']) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000040)={0x18, 0x6}, 0xfe3d) 11:57:22 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = semget(0x1, 0x4, 0x2) semop(r0, &(0x7f0000000240)=[{0x1, 0x289f, 0x1000}, {0x2, 0x6}], 0x2) r1 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x9, 0x20000) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f00000001c0)={r2}) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) getsockopt$netrom_NETROM_T4(r3, 0x103, 0x6, &(0x7f0000000040)=0x3, &(0x7f0000000100)=0x4) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c00773b95f01f7598975bbbc86b59448e6fca827278c1816621364d203149a05d97e191408584951c138e937f9ce05e0ff7adf6f573f78671f5fd13fae13c3e0fa47304eb2fc3ba71d7aeed32409932eb"]) write$FUSE_NOTIFY_POLL(r4, &(0x7f0000000080)={0x18, 0x6}, 0x18) [ 241.052732] input_register_device+0x60d/0xb20 [ 241.083288] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 241.088502] ? uinput_request_submit.part.0+0x290/0x290 [ 241.093981] ? __might_sleep+0x93/0xb0 [ 241.097874] ? __fget+0x210/0x370 [ 241.101420] ? uinput_compat_ioctl+0xa0/0xa0 [ 241.101432] uinput_ioctl+0x4a/0x60 [ 241.101445] do_vfs_ioctl+0x7ae/0x1060 [ 241.101459] ? selinux_file_mprotect+0x5d0/0x5d0 [ 241.101469] ? lock_downgrade+0x6e0/0x6e0 [ 241.101478] ? ioctl_preallocate+0x1c0/0x1c0 [ 241.101490] ? __fget+0x237/0x370 [ 241.101506] ? security_file_ioctl+0x89/0xb0 [ 241.109532] SyS_ioctl+0x8f/0xc0 [ 241.109543] ? do_vfs_ioctl+0x1060/0x1060 [ 241.109558] do_syscall_64+0x1e8/0x640 [ 241.109567] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 241.109583] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 241.109593] RIP: 0033:0x459879 [ 241.118285] RSP: 002b:00007fc30efd4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 241.118296] RAX: ffffffffffffffda RBX: 00007fc30efd4c90 RCX: 0000000000459879 11:57:22 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) delete_module(&(0x7f0000000340)='nbd\x00', 0xa00) r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffffffc, 0x400) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00') sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, r1, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x810}, 0x4040000) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r2, 0xc040563e, &(0x7f0000000380)={0x1, 0x0, 0x5d007e6506a5662a, 0x2, {0x6, 0x81, 0x6, 0x8}}) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000580)) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000080)={0x18, 0x6}, 0x18) open(&(0x7f0000000000)='./file0\x00', 0x1, 0x2c578c5e1ac1c056) 11:57:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000080)) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x0, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r2, 0x10f, 0x83, &(0x7f0000000140), &(0x7f0000000180)=0x4) 11:57:22 executing program 1 (fault-call:5 fault-nth:6): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) [ 241.118301] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 241.118307] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 241.118313] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc30efd56d4 [ 241.118319] R13: 00000000004c460b R14: 00000000004d8938 R15: 0000000000000005 [ 241.205126] input: syz1 as /devices/virtual/input/input308 [ 241.269910] input: syz1 as /devices/virtual/input/input310 [ 241.284602] FAULT_INJECTION: forcing a failure. [ 241.284602] name failslab, interval 1, probability 0, space 0, times 0 [ 241.301864] CPU: 0 PID: 11103 Comm: syz-executor.1 Not tainted 4.14.140 #36 [ 241.309023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 241.318473] Call Trace: [ 241.318493] dump_stack+0x138/0x197 [ 241.318511] should_fail.cold+0x10f/0x159 [ 241.318528] should_failslab+0xdb/0x130 [ 241.318541] __kmalloc_track_caller+0x2ec/0x790 [ 241.318551] ? save_trace+0x290/0x290 [ 241.318559] ? __mutex_unlock_slowpath+0x71/0x800 [ 241.318570] ? __lock_is_held+0xb6/0x140 [ 241.324976] ? store_rps_dev_flow_table_cnt+0x1a0/0x300 [ 241.324990] ? kstrdup_const+0x48/0x60 [ 241.325003] kstrdup+0x3a/0x70 [ 241.325020] kstrdup_const+0x48/0x60 [ 241.325034] __kernfs_new_node+0x2f/0x420 [ 241.338049] kernfs_new_node+0x80/0xf0 [ 241.338064] kernfs_create_link+0x2c/0x170 [ 241.338075] sysfs_do_create_link_sd.isra.0+0x90/0x120 [ 241.338086] sysfs_create_link+0x65/0xc0 [ 241.338099] device_add+0x735/0x1490 [ 241.338114] ? device_private_init+0x190/0x190 [ 241.338124] ? input_register_device+0x467/0xb20 [ 241.338137] input_register_device+0x60d/0xb20 [ 241.346777] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 241.346792] ? uinput_request_submit.part.0+0x290/0x290 [ 241.346820] ? __might_sleep+0x93/0xb0 [ 241.346827] ? __fget+0x210/0x370 [ 241.346840] ? uinput_compat_ioctl+0xa0/0xa0 [ 241.360257] uinput_ioctl+0x4a/0x60 [ 241.360272] do_vfs_ioctl+0x7ae/0x1060 [ 241.360286] ? selinux_file_mprotect+0x5d0/0x5d0 [ 241.360297] ? lock_downgrade+0x6e0/0x6e0 [ 241.360307] ? ioctl_preallocate+0x1c0/0x1c0 [ 241.360318] ? __fget+0x237/0x370 [ 241.360333] ? security_file_ioctl+0x89/0xb0 [ 241.360344] SyS_ioctl+0x8f/0xc0 [ 241.360351] ? do_vfs_ioctl+0x1060/0x1060 11:57:23 executing program 1 (fault-call:5 fault-nth:7): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) [ 241.360366] do_syscall_64+0x1e8/0x640 [ 241.367351] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 241.367371] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 241.367380] RIP: 0033:0x459879 [ 241.367386] RSP: 002b:00007fd831d8ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 241.367397] RAX: ffffffffffffffda RBX: 00007fd831d8ac90 RCX: 0000000000459879 [ 241.367403] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 241.367409] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 11:57:23 executing program 5: clone(0x41bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() getgroups(0x2, &(0x7f00000006c0)=[0xee01, 0xee01]) setresgid(0x0, 0x0, r1) unshare(0x30010000) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x4206, r0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in=@dev, @in6=@ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@multicast2}}, &(0x7f0000000000)=0xe8) getresuid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000240)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@remote, 0x4e21, 0x0, 0x4e23, 0x5, 0xa, 0xa0, 0xa0, 0x11, r3, r4}, {0x5, 0x6, 0xd557, 0x0, 0x1, 0x9, 0x100, 0x6}, {0x2, 0xff, 0x8, 0x400}, 0x2, 0x6e6bbc, 0x3, 0x1, 0x3}, {{@in6=@mcast2, 0x4d5, 0x7bdbe9173ab94856}, 0x2, @in6=@ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x3504, 0x4, 0x0, 0x4, 0x7fff, 0x0, 0x4}}, 0xe8) 11:57:23 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$KIOCSOUND(r1, 0x4b2f, 0x91b4) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r2 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000140)="7507a9b93ac7cd9b991fb64942a7538d09f587393f7267fd79f239da0f04ff9f97383810111eadfa48021dd80006e0831a0378299bc78f7d14efc6d4eb64385786d5f8969606912e30e1c9fa7cf8330471b94f7d5fc924f620aeffbfa70c20746c01ee120e278b047b59bb89df58dad3c895807349e7c7324b44f395c4aed1833f0bc875813ce7ee3c51a26d5c4da970a01787a2321a49bf0e026b57b027274d2f610f96b2fd64e6f09463cf0bcd619e5fd79dc8a43cf8b0c45c37d57bb7b83c606002b771c4", 0xc6, 0xfffffffffffffffe) keyctl$setperm(0x5, r2, 0x200000) 11:57:23 executing program 3 (fault-call:5 fault-nth:44): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) [ 241.367414] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd831d8b6d4 [ 241.367423] R13: 00000000004c460b R14: 00000000004d8938 R15: 0000000000000005 [ 241.546116] FAULT_INJECTION: forcing a failure. [ 241.546116] name failslab, interval 1, probability 0, space 0, times 0 [ 241.594155] input: syz1 as /devices/virtual/input/input313 [ 241.633343] CPU: 0 PID: 11120 Comm: syz-executor.1 Not tainted 4.14.140 #36 [ 241.640583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 241.650125] Call Trace: [ 241.652716] dump_stack+0x138/0x197 [ 241.656345] should_fail.cold+0x10f/0x159 [ 241.656363] should_failslab+0xdb/0x130 [ 241.656378] kmem_cache_alloc+0x2d7/0x780 [ 241.656386] ? memcpy+0x46/0x50 [ 241.656399] ? kstrdup+0x5a/0x70 [ 241.664518] __kernfs_new_node+0x70/0x420 [ 241.664533] kernfs_new_node+0x80/0xf0 [ 241.664547] kernfs_create_link+0x2c/0x170 [ 241.664558] sysfs_do_create_link_sd.isra.0+0x90/0x120 [ 241.664568] sysfs_create_link+0x65/0xc0 [ 241.664581] device_add+0x735/0x1490 [ 241.677601] FAULT_INJECTION: forcing a failure. [ 241.677601] name failslab, interval 1, probability 0, space 0, times 0 [ 241.679488] ? device_private_init+0x190/0x190 [ 241.679502] ? input_register_device+0x467/0xb20 [ 241.679515] input_register_device+0x60d/0xb20 [ 241.679534] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 241.679548] ? uinput_request_submit.part.0+0x290/0x290 [ 241.738554] ? __might_sleep+0x93/0xb0 11:57:23 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) fstat(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}}) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) [ 241.742443] ? __fget+0x210/0x370 [ 241.745983] ? uinput_compat_ioctl+0xa0/0xa0 [ 241.750388] uinput_ioctl+0x4a/0x60 [ 241.754011] do_vfs_ioctl+0x7ae/0x1060 [ 241.757901] ? selinux_file_mprotect+0x5d0/0x5d0 [ 241.762665] ? lock_downgrade+0x6e0/0x6e0 [ 241.766807] ? ioctl_preallocate+0x1c0/0x1c0 [ 241.771332] ? __fget+0x237/0x370 [ 241.774801] ? security_file_ioctl+0x89/0xb0 [ 241.779219] SyS_ioctl+0x8f/0xc0 [ 241.782600] ? do_vfs_ioctl+0x1060/0x1060 [ 241.786764] do_syscall_64+0x1e8/0x640 [ 241.790657] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 241.795536] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 241.800725] RIP: 0033:0x459879 [ 241.804081] RSP: 002b:00007fd831d8ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 241.811903] RAX: ffffffffffffffda RBX: 00007fd831d8ac90 RCX: 0000000000459879 [ 241.819256] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 241.826607] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 241.833874] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd831d8b6d4 [ 241.841234] R13: 00000000004c460b R14: 00000000004d8938 R15: 0000000000000005 [ 241.848539] CPU: 1 PID: 11132 Comm: syz-executor.3 Not tainted 4.14.140 #36 [ 241.855687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 241.855692] Call Trace: [ 241.855708] dump_stack+0x138/0x197 [ 241.855722] should_fail.cold+0x10f/0x159 [ 241.855736] should_failslab+0xdb/0x130 [ 241.867743] kmem_cache_alloc_node+0x287/0x780 [ 241.867762] __alloc_skb+0x9c/0x500 [ 241.867771] ? skb_scrub_packet+0x4b0/0x4b0 [ 241.892671] ? netlink_has_listeners+0x20a/0x330 [ 241.897503] kobject_uevent_env+0x781/0xc23 [ 241.901944] kobject_uevent+0x20/0x26 [ 241.905734] device_add+0xa3e/0x1490 [ 241.909444] ? device_private_init+0x190/0x190 [ 241.914020] ? input_register_device+0x467/0xb20 [ 241.918765] input_register_device+0x60d/0xb20 [ 241.923551] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 241.928919] ? uinput_request_submit.part.0+0x290/0x290 [ 241.934310] ? __might_sleep+0x93/0xb0 [ 241.938203] ? __fget+0x210/0x370 [ 241.941738] ? uinput_compat_ioctl+0xa0/0xa0 [ 241.946136] uinput_ioctl+0x4a/0x60 [ 241.949746] do_vfs_ioctl+0x7ae/0x1060 [ 241.953771] ? selinux_file_mprotect+0x5d0/0x5d0 [ 241.958879] ? lock_downgrade+0x6e0/0x6e0 [ 241.963026] ? ioctl_preallocate+0x1c0/0x1c0 [ 241.967623] ? __fget+0x237/0x370 [ 241.971096] ? security_file_ioctl+0x89/0xb0 [ 241.976001] SyS_ioctl+0x8f/0xc0 [ 241.979382] ? do_vfs_ioctl+0x1060/0x1060 [ 241.983541] do_syscall_64+0x1e8/0x640 [ 241.987516] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 241.992725] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 241.998100] RIP: 0033:0x459879 [ 242.001617] RSP: 002b:00007fc30efd4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 242.009319] RAX: ffffffffffffffda RBX: 00007fc30efd4c90 RCX: 0000000000459879 [ 242.016725] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 242.024198] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 242.031972] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc30efd56d4 11:57:23 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = add_key(&(0x7f0000000140)='trusted\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r2 = request_key(&(0x7f0000000200)='asymmetric\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)='selinux\x00', 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000340)="42b158c1a4de013cef06fc7ca61e9b2d1ed1a81ec397da9d9b5f98d073d5e03e0eb9c6fc34a5e588e3a4742ccd8f6c6531ae69115ab582b2e854f1c777b2b70ccf", 0x41, 0xfffffffffffffff9) keyctl$dh_compute(0x17, &(0x7f00000003c0)={r1, r2, r3}, &(0x7f00000004c0)=""/135, 0x87, &(0x7f0000000440)={&(0x7f0000000400)={'tgr192\x00'}, &(0x7f0000000580)="c9801950bee3095a0a85ba1c2d0a4bfc435e3e295d3ad54c128195af1c34d7e4ea5b606b2747207cf08d76afdf13c1134308bdf16c39d4b21be8c50486857630b2ce0bf8ff3d4ba1472b38ce37f78f345a6aa4859f4f2c609cc48894d558fb4a81981e756dc0d0087cb3d50a527ba984477ab3acf643116f3f61e8abd3c9465b811e1522d99289c43ef03c57b386fc8348e650899807a906d8940afd7e21438adb5e436f018bbaa33c686f31bcec08b3d170676e79", 0xb5}) accept$packet(r0, 0x0, &(0x7f0000000080)) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x800, 0x2) accept$alg(r4, 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}) r5 = syz_open_pts(r0, 0x0) readv(r5, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) 11:57:23 executing program 1 (fault-call:5 fault-nth:8): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) [ 242.039905] R13: 00000000004c460b R14: 00000000004d8938 R15: 0000000000000005 [ 242.052716] input: syz1 as /devices/virtual/input/input314 11:57:23 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000000)={0x34, 0x6, 0x0, {0x1, 0x2, 0xb, 0x0, '{^selfwlan1'}}, 0x34) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="677f"]) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) prctl$PR_SET_UNALIGN(0x6, 0x1) [ 242.118646] input: syz1 as /devices/virtual/input/input315 [ 242.158564] FAULT_INJECTION: forcing a failure. [ 242.158564] name failslab, interval 1, probability 0, space 0, times 0 [ 242.171526] CPU: 1 PID: 11146 Comm: syz-executor.1 Not tainted 4.14.140 #36 [ 242.179003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 242.179009] Call Trace: [ 242.179028] dump_stack+0x138/0x197 [ 242.179048] should_fail.cold+0x10f/0x159 [ 242.179064] should_failslab+0xdb/0x130 [ 242.179078] kmem_cache_alloc+0x2d7/0x780 [ 242.191122] ? lock_downgrade+0x6e0/0x6e0 [ 242.191132] ? save_trace+0x290/0x290 [ 242.191148] __kernfs_new_node+0x70/0x420 [ 242.191160] kernfs_new_node+0x80/0xf0 [ 242.191173] __kernfs_create_file+0x46/0x323 [ 242.191185] sysfs_add_file_mode_ns+0x1e4/0x450 [ 242.191198] internal_create_group+0x232/0x7b0 [ 242.198971] sysfs_create_groups+0x97/0x140 [ 242.198985] device_add+0x828/0x1490 [ 242.199000] ? device_private_init+0x190/0x190 [ 242.199018] ? input_register_device+0x467/0xb20 [ 242.199030] input_register_device+0x60d/0xb20 [ 242.207187] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 11:57:23 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1a) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) [ 242.207201] ? uinput_request_submit.part.0+0x290/0x290 [ 242.207227] ? __might_sleep+0x93/0xb0 [ 242.207238] ? __fget+0x210/0x370 [ 242.215247] ? uinput_compat_ioctl+0xa0/0xa0 [ 242.215257] uinput_ioctl+0x4a/0x60 [ 242.215270] do_vfs_ioctl+0x7ae/0x1060 [ 242.215283] ? selinux_file_mprotect+0x5d0/0x5d0 [ 242.215295] ? lock_downgrade+0x6e0/0x6e0 [ 242.215308] ? ioctl_preallocate+0x1c0/0x1c0 [ 242.223328] ? __fget+0x237/0x370 [ 242.223347] ? security_file_ioctl+0x89/0xb0 [ 242.223361] SyS_ioctl+0x8f/0xc0 11:57:24 executing program 3 (fault-call:5 fault-nth:45): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) [ 242.223370] ? do_vfs_ioctl+0x1060/0x1060 [ 242.223383] do_syscall_64+0x1e8/0x640 [ 242.232430] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 242.232453] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 242.232462] RIP: 0033:0x459879 [ 242.232468] RSP: 002b:00007fd831d8ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 242.232479] RAX: ffffffffffffffda RBX: 00007fd831d8ac90 RCX: 0000000000459879 [ 242.232484] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 242.232489] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 11:57:24 executing program 5: clone(0x41bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() getgroups(0x2, &(0x7f00000006c0)=[0xee01, 0xee01]) setresgid(0x0, 0x0, r1) unshare(0x100) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x4206, r0) [ 242.232493] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd831d8b6d4 [ 242.232499] R13: 00000000004c460b R14: 00000000004d8938 R15: 0000000000000005 [ 242.384261] input: syz1 as /devices/virtual/input/input317 [ 242.396011] FAULT_INJECTION: forcing a failure. [ 242.396011] name failslab, interval 1, probability 0, space 0, times 0 [ 242.411362] CPU: 0 PID: 11154 Comm: syz-executor.3 Not tainted 4.14.140 #36 [ 242.418511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 242.427870] Call Trace: [ 242.430474] dump_stack+0x138/0x197 [ 242.434113] should_fail.cold+0x10f/0x159 [ 242.438281] should_failslab+0xdb/0x130 [ 242.442310] kmem_cache_alloc_node+0x287/0x780 [ 242.447004] __alloc_skb+0x9c/0x500 [ 242.450634] ? skb_scrub_packet+0x4b0/0x4b0 [ 242.454967] ? netlink_has_listeners+0x20a/0x330 [ 242.459734] kobject_uevent_env+0x781/0xc23 [ 242.464161] kobject_uevent+0x20/0x26 [ 242.467966] device_add+0xa3e/0x1490 [ 242.471686] ? device_private_init+0x190/0x190 [ 242.476365] ? input_register_device+0x467/0xb20 [ 242.486224] input_register_device+0x60d/0xb20 [ 242.491980] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 242.503701] ? uinput_request_submit.part.0+0x290/0x290 [ 242.509093] ? __might_sleep+0x93/0xb0 [ 242.512982] ? __fget+0x210/0x370 [ 242.516446] ? uinput_compat_ioctl+0xa0/0xa0 [ 242.520968] uinput_ioctl+0x4a/0x60 [ 242.524770] do_vfs_ioctl+0x7ae/0x1060 [ 242.528666] ? selinux_file_mprotect+0x5d0/0x5d0 [ 242.533424] ? lock_downgrade+0x6e0/0x6e0 [ 242.537664] ? ioctl_preallocate+0x1c0/0x1c0 [ 242.542119] ? __fget+0x237/0x370 [ 242.545583] ? security_file_ioctl+0x89/0xb0 [ 242.549996] SyS_ioctl+0x8f/0xc0 [ 242.553361] ? do_vfs_ioctl+0x1060/0x1060 [ 242.557512] do_syscall_64+0x1e8/0x640 [ 242.561516] ? trace_hardirqs_off_thunk+0x1a/0x1c 11:57:24 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67546f5f6978191a7613f52008d9efb3bce0be3b22153cb719cd4a46c5e64e0f3ca7ec3ad0d177fe7de0faf1748ea05593939318807e849450ae40acd6b7036028d13876fff65f5821db57b6eb7ed400e605be02b010bbb1201bc83127c82dbd718a830bd25086005efdc4b3f77b304b5a008854c9d7bdd2310e9bcc5522b036d9bd61e9b937", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) timerfd_create(0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='ip6_vti0\x00', 0x10) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x8, @ipv4={[], [], @remote}}, 0x1c) connect$l2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0xffffffff00000000) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f00000000c0)=""/35) socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x372}}, 0x5c9, 0x6, 0xe8, 0x6, 0x6}, &(0x7f00000002c0)=0x98) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) 11:57:24 executing program 1 (fault-call:5 fault-nth:9): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) [ 242.566365] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 242.571586] RIP: 0033:0x459879 [ 242.574774] RSP: 002b:00007fc30efd4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 242.582482] RAX: ffffffffffffffda RBX: 00007fc30efd4c90 RCX: 0000000000459879 [ 242.589755] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 242.597118] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 242.604390] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc30efd56d4 [ 242.611662] R13: 00000000004c460b R14: 00000000004d8938 R15: 0000000000000005 [ 242.636884] FAULT_INJECTION: forcing a failure. [ 242.636884] name failslab, interval 1, probability 0, space 0, times 0 [ 242.648819] CPU: 0 PID: 11166 Comm: syz-executor.1 Not tainted 4.14.140 #36 [ 242.655941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 242.665301] Call Trace: [ 242.667897] dump_stack+0x138/0x197 [ 242.671547] should_fail.cold+0x10f/0x159 [ 242.675804] should_failslab+0xdb/0x130 [ 242.679913] kmem_cache_alloc+0x2d7/0x780 [ 242.684063] ? wait_for_completion+0x420/0x420 [ 242.695080] __kernfs_new_node+0x70/0x420 [ 242.699236] kernfs_new_node+0x80/0xf0 [ 242.699251] __kernfs_create_file+0x46/0x323 [ 242.699262] sysfs_add_file_mode_ns+0x1e4/0x450 [ 242.699275] internal_create_group+0x232/0x7b0 [ 242.705453] input: syz1 as /devices/virtual/input/input318 [ 242.707548] sysfs_create_groups+0x97/0x140 [ 242.707562] device_add+0x828/0x1490 [ 242.707576] ? device_private_init+0x190/0x190 [ 242.716795] ? input_register_device+0x467/0xb20 [ 242.716810] input_register_device+0x60d/0xb20 [ 242.716827] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 242.716839] ? uinput_request_submit.part.0+0x290/0x290 [ 242.726860] ? __might_sleep+0x93/0xb0 [ 242.744427] ? __fget+0x210/0x370 [ 242.744447] ? uinput_compat_ioctl+0xa0/0xa0 [ 242.744456] uinput_ioctl+0x4a/0x60 [ 242.744467] do_vfs_ioctl+0x7ae/0x1060 [ 242.755200] ? selinux_file_mprotect+0x5d0/0x5d0 [ 242.755212] ? lock_downgrade+0x6e0/0x6e0 [ 242.755224] ? ioctl_preallocate+0x1c0/0x1c0 [ 242.755235] ? __fget+0x237/0x370 [ 242.766969] ? security_file_ioctl+0x89/0xb0 [ 242.766986] SyS_ioctl+0x8f/0xc0 [ 242.766995] ? do_vfs_ioctl+0x1060/0x1060 [ 242.767009] do_syscall_64+0x1e8/0x640 [ 242.774491] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 242.774507] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 242.774516] RIP: 0033:0x459879 [ 242.774522] RSP: 002b:00007fd831d8ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 242.774533] RAX: ffffffffffffffda RBX: 00007fd831d8ac90 RCX: 0000000000459879 11:57:24 executing program 1 (fault-call:5 fault-nth:10): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) [ 242.774538] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 242.774545] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 242.783416] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd831d8b6d4 [ 242.783422] R13: 00000000004c460b R14: 00000000004d8938 R15: 0000000000000005 11:57:24 executing program 0: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001940)={{{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@remote}}, &(0x7f0000001a40)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001a80)={{{@in6=@ipv4={[], [], @remote}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000001b80)=0xe8) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x1, 0x8, &(0x7f0000001880)=[{&(0x7f0000000380)="bc98d4eaf50c36ee8e2ad9df57e1f13974a0e1c1eda09a736778fc1def372d2b3a7baf67fb3d1e5e53901df2f1", 0x2d, 0x2}, {&(0x7f0000000540)="eed8a1acb097c4b058e206ea42a0b7950ae1a7f966fda75ba6b4d43c85d5b66ca8c13963b6781ed414e49a0a5c3e65b60465253ab727b823e17ce097b47942d151009701f7f3cee1681dedf2cc3d6c51069cccc0422c0878029cb4db7f5c617f105cce5dfa882de9f691ef0e549a05188cf4e220b2757ac13afac41542d511a9a827bbad2f6dad3b7e827aa089559a0660813a4b311d4a25cd6345885139c830270aa329f7689ab4702eb4ce119a243ca512f13a5498ff110f706fb438fc4d567ab0f9711d8dd2718faea4c0b0070c9a3764c6fdf9d711d0fbe1f42be6bc75d1ddd5fda41298d40a", 0xe8, 0x6}, {&(0x7f0000000640)="506e6d224d621c0ad10e467e39de6ef820193af0999e112a0424e04443dde2d6689dba846baf5b4d239c733293d30930f6940d1276c2a010a0d22fa6a48dfcf0a3eba515bb3eca8d664e833d587ea124661c49eb6c12e532fdd163ebd098cc96a37380d035d434bc1092c0ccfa91e1c8c964af5389bcc71c", 0x78, 0x7f}, {&(0x7f00000006c0)="5f5137efc5e31e3d831be86f715a8eaf8ca59140a7af8ec9e56124b94b41d78b414b21eac8195b9add164d30b811847900efb5cb8753fd37a2cf244000171291be8e3a8abc66188026c1b262c0f2e14126724c40099b29ace88f19c17b343f101231c8db7f3137c35497755b8519a7f0a37ed8089640e615c12db933793b0450ac9b603a836b5618b06e4b699fac1ee68645714e596d2edcdec894bcc96b31facc27f8ae875239d97bfbe330ca913411c4c71d4a1f72a220e6c0a0ef2ca8f42502cafba1a09c7f6882c4681b446ebede4486197d343be77d9d7cae77d32e091fa33aa83ffd30d824908f2201acd4b4847b152d80cc98e514f299ab0e9a4877d3aa0ca9ba876422c26ec153d528d258b68398b5ed67e4b833211e2645aed7109314b2e0496860d27045c6f9d9328e12288cd94d18dd96fbc4b8ca081a6d24638a15ccb0f7f890cbffd457aba49d619722ed8ceb3512ea4f0f1215cf06fcc60a6d360993ffb5835c63a6aca45c978cdee837cddef8492d6cb645cf38feb120200872ddca0926e065b47807b60b6d426b2b5b4fc557a21d20c646643c5c03c3e9c4f9787fc6e6587e3e4c4e7ccdb916c2acaac699163b5ac4c8881fbc9338d62b6c768ac5172230439d01dbeb87aca17ad1fbff6f0e3975a61e7c9e2528a5bdbf2c4c67d37b993e0cf6c31cb58ce6cb4e225994d447512734fc04d4d200e4833d513f0081dddb1abc8188252c7f17ca3e0be0bd826b5b9805f5f21566e1d11976445c9854f3b8f54a07b65f76a5e6d23d2ddd001ff22e9a5ea4d4309691a5c83286a95c0e214d9aa78d8484c499fc36eec83a69566dbe144ab81624a9c790ab23f774257cb0183128d32bfb8541608b759713c7493bae444c42c4cb65f09e6e181f3458b8a712a5c749cc93fff010359a20f827a8515c231708839d47b72280d329b995da81bdbb9e4688f8c6fd4fe5040f3646b988610f0566cd6510f701f927d4dd72a11847731d1960fd7b42ade0c6ceea4f935b57084504cbbb0f65c3b0f2266c5b3af2798f8d568dc707c5d5c3a44671bdb52ce9c81aebbe57d87ff717c51b4952435b998b01aff7e7059c91199401195c4aa0507e3aa342291558270bef41d5dc5e2307db0087b95b30ab508ff7bbca7516882f9f72e88365d74ad3f0f1e16885401c2207bfee33f63242665a4dad9bd7dcdaba32af9a2730925fe1730999d4e324ddd1e1d6b87969f9d19ae862a7902913e494d1654af251403318711f8a4af310b29b81b49208bda4987fb097a4f88171963e0d698013d4ad6d1574c0afeda91fa1e22823eb5f2f41e518baa3c1b6a4caec6c0dcab05b57ffc3c359533a18c9456f0bbe73ab1372c2a784dfe15ea2bc6beb46b32a62e998fc2c62cde838acb458b93bbcbcbe0c82c67ca72fdb4d7631b2dd109a56d3bac9240b89be879dbef0839c856707663a3b259296b9c46fe1e3687fb65e5389cfb47b3d72bd850b8bde736dd0931c3c7f2db1c1faa1ddea4145ea9898adfa7c25df83d6680fbc44239ef1afc73b95350539f1bd1521124b763ccc91445703c3c305f616c5a3ab8cad1cb4b8f477b437bf53afaa29207fea56574e7f76d6d6c9cde04acaea112cbe40e41dcbdadfd81ba969f72706569ffc8a69e53f4cfa2589c39e4f4a60b137400106a3be31e59bee04d86eaaa3033cfa194416deb52ce0390f09f7d1913cb117e63355e31e95e1f5ace199604f39f166026205f4b358003776786260159cfe15b75a637d900efdf7f5e8890c62fceee1605506b5dd53c5405b5439e9fc7a5994e350b37098aee0decb81c773f18ecdbee37879e5ab8aced5cc4a33278bbd8ea1e283fcb0f2d377b4864af6281d398c705a1e39ca761698e7f78e927471edc84a467b376428250487432da4589a0d552d01d8cada78e127538ddeb9e9d5db3d5c9db998661c4507fbabc8a2882f5aa5c4e9f8bc05362f1af661d4acd6b6196155c6b57a555a765e9024fe8b9a5ae2cdf733566d4c6b4cc85c8180b3ca17f8380781cb8508460be8597ff5e0b6a4ae5ed317dde15df1e07fc21e9637501dad9d10dd3d22e8bf8ce55aa309db91baf3e34141fa18e9b484dfd347ec14b1d16ec43b5a1314a17568ea08f51b11e111ac41f79628f1a28bf98e11cca3569e8022acdb8a7ff6e9de003f25709c3952a39f3b1039ad3d207d635e3c36cb458bcc44c9e68829e784a31e36e1478ef1b7066c1c305e4e6f42641d36604d837759f606723825b2d8758732d4a46abe0b3aa34c3a3e7cf95847fe7ff9be5068392e1621ab141e857550417f48628fb3704fa3994b1f3f06384fc470cfd6af26051445b56530a35c668d98526b99231296a6789304a39ab14d130354f2836fa7d5f4aa1626f095240634880082cd95723ec9ec2a43ae444e5dca5f4acfab5f760ca65a503b0cefcc95d5d4a5183f16ce4061709c97f3682cbd98bf9655b33aedd3c5a3e7b224265fc6f2c98ca0893d3e141b08716b4fa44052619b9bf1aea74466719348ed43fd39e7228826e892e93a4dfaa2bd1dc620a15dab15be3a4f2e676dca8e55b722438e915cb65e590b1dcf2b95c5beabcb488d1d9bdda456ad5aaaee07540581d38bc1cbff5061152c49d690d956e4e8d28e2b68b5c94c732ff9a3a707b4fde11e8f3069f1f5df5dc54018db2abce4e08f8c976a20da0f5414acc2dafb0d313a2da23bb72b233b255621a64f234ed125bf4fdc27dca4313a6327b686079340de4b1fd116763907db36b014006f01004328c960ff7e16b05410ab4e5c13a42987e067ddb4790f66467a7301fe3c00ff152505acd1cc05ef9c7914c2a5f67bd2f25ea9e382180e1d2779b2c5882da870dee57a93ac313f92e9210af0092b134078ec1a2a48986d83f471a488fb0b20f11c0520de97d80207e90629218a6ba73fcefb0342891d38fb19dd5809f927be7296f91d5c7845e09632a0f73281fd0389f906de5d2e9303c8ac4bc86b8cffb396fc18fc7c6456f9df73e1d09f7511fc02c07352841446b60872e3cb32f54ba7f00d1acccd51e754541b949086a4a86f85ca68b8741c0e3f10f09ca29e7ae1672a62987c117e1b48599c73d998ff4629c00a4a712852ae0f78d6a42132f12a54ce7f5a44781914f532c62c9eea421691ad1462ad3eb041fe5e12e3c31c9e00acef49c7e7a02d79eadf3cf6a1791644f26530b8826b3a6a1f7189c08caa681d8a7f758c0ff6f6866c01a1962187ba3244ce60740a81c83531c25f7e9448baf55656efbd3b77f4a8e33c2e54e8b02e555b5cfe0cd2b6b46c7e1b47ffd56982fb083e333627c1da48b48daf54cb2ccf9c0f7096bc58e34e41d2801f6fdf0c4d896e6ed89e4630bec92ef57654902fdd1f48a1d9fa52e49eec7de1715c1c1d9a17ce19c8e014b0302a05f058a04b39fd84a05f1351a95d2a0746ad603864bb1b69661a5113f6d60ffab296be4a4691a5cee7e9feed5a4711cf7d5d86e6496972552a11939876dadd1bfb82a8cf48c93aa52735ec0f8aae690ff353f707457914fffb713ca1fa185f8b505273bea69d17ac31e71deb039ecb50b50f355e9cf19c641617247f95a948de9c5ad5b07712b2fc5e68ca955e256c2f8d483752ab21f6bb3288f729d40a00dee586d20bcdf05b5e1fdd37579bf0f1040e29b6a256e7ed2f54718104b8a383b95c1a955cc17a60fdcdfa9ddc19aad9e966db06611a535a770ced56115004148ed3bca12960e83760cae75bf3c88fc92b4d23671adc8b3afd1164a6fad8eabda1f466e89a7da78941569c14cc239dcd68261fcdb1aa4461bbf6375930ad21a30a9e794e586be5b81ef25f202f70246913c25fe286b5d2915965e402fa69bf9e0baef03f5686bf7a6f58eb84e51d8b2094246d6674023d14e2963550b8dcdc95be640fe7878de9228484c5daf51617269f9c41ef165c207f7fd6948099fd81ba13aa52820ef79c37c525216296a8e758575772fff7e3683d06caddc20f0d773a61625475d53ced38876947eaa567854bfe3df86a96276cf0074e68a41ef7c869dbe34b1f571b6c2bdf9584290370f30ea32be5da21072a97ea7d4386acd30f3046ea077228e9d4869e466c626193183a4650333a35711add8db6baa4966abd37ad677b774fcb0be19659107078b18c573bbc3c65bd0400a2918089d23c8efde682f5d57398dd7ae1702c8df3b113fc63768bbde82d64b86f268dcbfe67602eee980938b373b692f2dafa3fde54df07ab1bed204d5c7420d6488821cb99964eb525847d0eb2adffc2b542a986fa1507e4dc6cc4484c43a852889ed5d8d0cb2511d8355a8c35a702ef6668d481dbe10f5038713038cc7869f162d7b9bad870850354daff4247c01e0d653cb7ed4dbd76872eb5595bbb4f51ec33f9a5e9e4bdc6109c51b0b610343f1822ee6c54a7bcc2181feb18a9bc48b8d142f6ba04bfadb8d1aafd00965134b926f55348d8e4d2403fbe8f21591d49e090b8263d95366b93f71fcd233f0826cc79fd6bed1140875bc246d61e1ecd37b83a3507db14291c3446b3565198273765fe708b1d65ebe667e74c5dfc378eec38f1ed5e829f44b6288a37322de749169b193a0de9bec7f72a593bbc70538ffef190033fa039b63f9ca8a081d5bbcb03fd612de59ceeee3663b6dc44522eb9f60fbbb8ec9bd9341bb9118255ba1cb331fbc745e8bf0548f43539d33818e14208395b544a6bcfea9a7f1aff28b187be8cf2d8494d5c9ed863911a27c241734485d501a49a8d6fca295335eb3d9ce1e9a471d571f8d39afffce365addd40c61331b3beefb76f05522976d6c2716e27a058807ef7635950aca70510291dfcf879ba71c0f1d31657e65c0da2a11205f7950a8168f90010e3fdbbb692341737ba677417d4c7650f0c0908f137a591f6753a3a6397cfba31de841d2ad7729831739f51cf507bb412ca39fb16aed154cf24216272d6385ac0e4325cf06fda6b6d635963f329cff4b28029842ed7c1b734c01e9be087ea13b019ea4396d865dce793bfcba58ee2b7b8d87cec1de6acb2b8eb0c33d780e746e04ded307f2f9d403ee8806ba1225510e7276677e2ce420cec8b97d5fb13559328c0aff2459a071f760dfbde623b616a19f5342619b79ea5d0f32143478b434d218785d10e2fa1b086e82491f7fa7446d1a366240dbc9b076a766d15201927c3384ae76179ae48f3a93b9f0a4ae255b01e31c132aa59ea285f44b898c7d7fda9c063145de33b57fb6ec047e7f7b5619fe9f5a0c3cc53e3e4ce48eea68d3ac333b9b7c9cc211023be3bb3bef20ca58e89bff18b3defd5d5732e83a75978c4a3c48cf69c793bd43df3adec6e02f32bfc76f0f74fc653103cfeaa758926ddf095bd06f207844775aedfd502f7d6d5158fc528d9351f8a492eb6740ecb25c9161aff1ca4bfe4d36a43a9e946d84425c5de69e5240315bbb661ca2787fe1c85dc303eceae1e90d11e8ab35f7c8a8966fe53f6cddfff4b9be61bddda4110f9409021fe59082c98ddf5fcf1d389ea30fe0077de2655a33ee390855bcc391a20593ce3334c1a989c5ee1f5b3e9ac7fa7717563939323e4667c78d7f97b67c792e39330b14ff695534cd21b2c9ca3c98e996b718a188a8d6892cf79f3dd5764b9bc69ae353ae8f28429793024aae279a2657cf132390ce03fa3e38191e5dc0c3f700309e7da6c98914d18f2d16ba83d18196a98b91b7353a91bdde742ea43f7f06aed2b0d59edb30658882774b812e9a1faa456a4ca10fbf8bcec07a5550f3c5a6ea4d0c1a4adf6", 0x1000, 0x1}, {&(0x7f00000003c0)="5f9a7545ca2cc9559fd592a5be13ce0ba94a1a5d", 0x14, 0x4}, {&(0x7f00000016c0)="9521cf2d81ebf14654d1e2bef7334d6892d5bf747d176a1150120310b723952300c202709a0db6882247d9d6d5f5497e89a7b4dde0bdc2b0e646572b1486226e80d0c4434da5bc42ae4cca5bb2917b6aa0ede13e81827abbc6098c5342162a0084984e07764629cd44fe49a7841caf0aeb77ec1fbde71119dcb993129e5b9b97337fffdc", 0x84, 0x10000}, {&(0x7f0000001780)="0dff41c4819b9a18f89abb8d402a7c206e5aeeebd72bcc85e65622c5b328199c9e42eb38405115244005ef1613581d30d037e572d85603322aefa5cc8c1403f9b17f593c6cf6bca6b876dcbed8105c93dd1c09dfab425914014900fc2e8fb22feae535cb7010e2d16dd85f1909572366cfdaaad0986c003c0d9c7517d30f969dded404c194cc44b7a7c8e2db12d8d5c67c7ac21772aac16b54ec80a0163add46d7", 0xa1, 0x2}, {&(0x7f0000001840)="bfd7cda222647d96bac9b4c23391fbb524e2878e502b7c2f2941d8d04af84c41692a9872ed1b7879436299f5544d5dc80ae8780ebdd76c528db1101c", 0x3c, 0x1fffffffe0000000}], 0x30, &(0x7f0000001bc0)={[{@dots='dots'}, {@dots='dots'}, {@fat=@dmask={'dmask', 0x3d, 0x8}}, {@fat=@codepage={'codepage', 0x3d, '866'}}, {@dots='dots'}], [{@obj_type={'obj_type', 0x3d, 'proc'}}, {@euid_lt={'euid<', r0}}, {@smackfshat={'smackfshat', 0x3d, 'syz1\x00'}}, {@fowner_lt={'fowner<', r1}}]}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/hash_stats\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000180)='fuse\x00', 0xffffffffffffffff}, 0x30) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000400)={{0x3, 0x7, 0xec, 0x1d8c71ab, '\x00', 0x1f}, 0x6, 0x400, 0x4, r3, 0x5, 0x3f, 'syz1\x00', &(0x7f0000000240)=['fuse\x00', '/dev/fuse\x00', '-(,.,%\x00', '/dev/fuse\x00', '/dev/fuse\x00'], 0x2a, [], [0x6, 0x3, 0x5, 0x6]}) ioperm(0xffffffffffffffff, 0x800, 0x100000001) r4 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x8, 0x401) getsockopt$inet_sctp_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f0000000040), &(0x7f0000000100)=0x4) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000340)=ANY=[]) write$FUSE_NOTIFY_POLL(r5, &(0x7f0000000080)={0x18, 0x6}, 0x18) 11:57:24 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x34, r2, 0x20, 0x70bd27, 0x25dfdbfe, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0x4, 0x4, @udp='udp:syz0\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x12e0d9f0bf038b76) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}) r3 = syz_open_pts(r0, 0x0) readv(r3, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) [ 242.968601] FAULT_INJECTION: forcing a failure. [ 242.968601] name failslab, interval 1, probability 0, space 0, times 0 [ 243.011200] CPU: 0 PID: 11176 Comm: syz-executor.1 Not tainted 4.14.140 #36 [ 243.018347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 243.027715] Call Trace: [ 243.027737] dump_stack+0x138/0x197 [ 243.034048] should_fail.cold+0x10f/0x159 [ 243.038219] should_failslab+0xdb/0x130 [ 243.042337] kmem_cache_alloc+0x2d7/0x780 [ 243.046492] ? wait_for_completion+0x420/0x420 [ 243.051086] __kernfs_new_node+0x70/0x420 [ 243.055231] kernfs_new_node+0x80/0xf0 [ 243.059122] __kernfs_create_file+0x46/0x323 [ 243.063525] sysfs_add_file_mode_ns+0x1e4/0x450 [ 243.068380] internal_create_group+0x232/0x7b0 [ 243.072959] sysfs_create_groups+0x97/0x140 [ 243.077279] device_add+0x828/0x1490 [ 243.080975] ? device_private_init+0x190/0x190 [ 243.085702] ? input_register_device+0x467/0xb20 [ 243.090465] input_register_device+0x60d/0xb20 [ 243.095183] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 243.100466] ? uinput_request_submit.part.0+0x290/0x290 [ 243.105938] ? __might_sleep+0x93/0xb0 [ 243.109903] ? __fget+0x210/0x370 [ 243.114099] ? uinput_compat_ioctl+0xa0/0xa0 [ 243.118500] uinput_ioctl+0x4a/0x60 [ 243.122115] do_vfs_ioctl+0x7ae/0x1060 [ 243.125983] ? selinux_file_mprotect+0x5d0/0x5d0 [ 243.130729] ? lock_downgrade+0x6e0/0x6e0 [ 243.134871] ? ioctl_preallocate+0x1c0/0x1c0 [ 243.139273] ? __fget+0x237/0x370 [ 243.142721] ? security_file_ioctl+0x89/0xb0 [ 243.147116] SyS_ioctl+0x8f/0xc0 [ 243.150469] ? do_vfs_ioctl+0x1060/0x1060 [ 243.154615] do_syscall_64+0x1e8/0x640 [ 243.158495] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 243.163330] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 243.168506] RIP: 0033:0x459879 [ 243.171679] RSP: 002b:00007fd831d8ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 243.179395] RAX: ffffffffffffffda RBX: 00007fd831d8ac90 RCX: 0000000000459879 [ 243.186654] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 243.194005] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 243.201260] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd831d8b6d4 11:57:24 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 11:57:24 executing program 5: clone(0x41bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() getgroups(0x2, &(0x7f00000006c0)=[0xee01, 0xee01]) setresgid(0x0, 0x0, r1) unshare(0x30010000) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) r2 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x7, 0xc0) symlinkat(&(0x7f0000000000)='./file0\x00', r2, &(0x7f0000000080)='./file0\x00') ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r2, 0x80045700, &(0x7f0000000140)) ptrace(0x4206, r0) [ 243.208533] R13: 00000000004c460b R14: 00000000004d8938 R15: 0000000000000005 11:57:24 executing program 1 (fault-call:5 fault-nth:11): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 11:57:24 executing program 3 (fault-call:5 fault-nth:46): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) [ 243.284454] input: syz1 as /devices/virtual/input/input322 11:57:25 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x80, 0x80000) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000140)={0x0, 0x1272}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000001c0)={r2, 0xfffffffffffffbff}, &(0x7f0000000240)=0x8) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000340)={r3, @in6={{0xa, 0x4e21, 0x77b, @mcast1, 0x4}}, 0x9, 0x1000, 0x3, 0x6, 0x1}, 0x98) [ 243.332649] FAULT_INJECTION: forcing a failure. [ 243.332649] name failslab, interval 1, probability 0, space 0, times 0 [ 243.354756] FAULT_INJECTION: forcing a failure. [ 243.354756] name failslab, interval 1, probability 0, space 0, times 0 [ 243.385273] CPU: 0 PID: 11204 Comm: syz-executor.1 Not tainted 4.14.140 #36 [ 243.392431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 243.401796] Call Trace: [ 243.404399] dump_stack+0x138/0x197 [ 243.408149] should_fail.cold+0x10f/0x159 [ 243.412304] should_failslab+0xdb/0x130 [ 243.416276] kmem_cache_alloc+0x2d7/0x780 [ 243.420419] ? wait_for_completion+0x420/0x420 [ 243.425033] __kernfs_new_node+0x70/0x420 [ 243.429278] kernfs_new_node+0x80/0xf0 [ 243.433171] __kernfs_create_file+0x46/0x323 [ 243.437580] sysfs_add_file_mode_ns+0x1e4/0x450 [ 243.442249] internal_create_group+0x232/0x7b0 [ 243.446837] sysfs_create_groups+0x97/0x140 [ 243.451266] device_add+0x828/0x1490 [ 243.454983] ? device_private_init+0x190/0x190 [ 243.459647] ? input_register_device+0x467/0xb20 [ 243.464397] input_register_device+0x60d/0xb20 [ 243.468975] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 243.474278] ? uinput_request_submit.part.0+0x290/0x290 [ 243.479657] ? __might_sleep+0x93/0xb0 [ 243.483626] ? __fget+0x210/0x370 [ 243.487089] ? uinput_compat_ioctl+0xa0/0xa0 [ 243.491500] uinput_ioctl+0x4a/0x60 [ 243.495123] do_vfs_ioctl+0x7ae/0x1060 [ 243.499101] ? selinux_file_mprotect+0x5d0/0x5d0 [ 243.503852] ? lock_downgrade+0x6e0/0x6e0 [ 243.508033] ? ioctl_preallocate+0x1c0/0x1c0 [ 243.512435] ? __fget+0x237/0x370 [ 243.515890] ? security_file_ioctl+0x89/0xb0 [ 243.520768] SyS_ioctl+0x8f/0xc0 [ 243.524128] ? do_vfs_ioctl+0x1060/0x1060 [ 243.528361] do_syscall_64+0x1e8/0x640 [ 243.532247] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 243.537095] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 243.542290] RIP: 0033:0x459879 [ 243.542295] RSP: 002b:00007fd831d8ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 243.542305] RAX: ffffffffffffffda RBX: 00007fd831d8ac90 RCX: 0000000000459879 [ 243.542310] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 243.542314] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 243.542319] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd831d8b6d4 [ 243.542324] R13: 00000000004c460b R14: 00000000004d8938 R15: 0000000000000005 [ 243.556510] CPU: 1 PID: 11206 Comm: syz-executor.3 Not tainted 4.14.140 #36 [ 243.568060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 243.568064] Call Trace: [ 243.568080] dump_stack+0x138/0x197 [ 243.568097] should_fail.cold+0x10f/0x159 [ 243.568112] should_failslab+0xdb/0x130 [ 243.621315] kmem_cache_alloc_node+0x287/0x780 [ 243.625983] __alloc_skb+0x9c/0x500 [ 243.629627] ? skb_scrub_packet+0x4b0/0x4b0 [ 243.634013] ? netlink_has_listeners+0x20a/0x330 [ 243.638751] kobject_uevent_env+0x781/0xc23 [ 243.643071] kobject_uevent+0x20/0x26 [ 243.646890] device_add+0xa3e/0x1490 [ 243.650603] ? device_private_init+0x190/0x190 [ 243.655175] ? input_register_device+0x467/0xb20 [ 243.660030] input_register_device+0x60d/0xb20 [ 243.664602] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 243.669784] ? uinput_request_submit.part.0+0x290/0x290 [ 243.675156] ? __might_sleep+0x93/0xb0 [ 243.679055] ? __fget+0x210/0x370 [ 243.682518] ? uinput_compat_ioctl+0xa0/0xa0 [ 243.686919] uinput_ioctl+0x4a/0x60 [ 243.690556] do_vfs_ioctl+0x7ae/0x1060 [ 243.694439] ? selinux_file_mprotect+0x5d0/0x5d0 [ 243.699179] ? lock_downgrade+0x6e0/0x6e0 [ 243.703423] ? ioctl_preallocate+0x1c0/0x1c0 [ 243.707843] ? __fget+0x237/0x370 [ 243.711468] ? security_file_ioctl+0x89/0xb0 [ 243.715885] SyS_ioctl+0x8f/0xc0 [ 243.719244] ? do_vfs_ioctl+0x1060/0x1060 [ 243.723389] do_syscall_64+0x1e8/0x640 [ 243.727356] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 243.732214] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 243.737388] RIP: 0033:0x459879 [ 243.740567] RSP: 002b:00007fc30efd4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 243.748263] RAX: ffffffffffffffda RBX: 00007fc30efd4c90 RCX: 0000000000459879 [ 243.755607] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 243.762878] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 243.770133] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc30efd56d4 [ 243.777409] R13: 00000000004c460b R14: 00000000004d8938 R15: 0000000000000005 11:57:25 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) fcntl$setlease(r0, 0x400, 0x996b86ceee1ba616) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) 11:57:25 executing program 1 (fault-call:5 fault-nth:12): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) [ 243.785888] input: syz1 as /devices/virtual/input/input324 [ 243.798688] input: syz1 as /devices/virtual/input/input325 11:57:25 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x3}) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}) readv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) 11:57:25 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x1, 0x0) 11:57:25 executing program 3 (fault-call:5 fault-nth:47): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) [ 243.934328] FAULT_INJECTION: forcing a failure. [ 243.934328] name failslab, interval 1, probability 0, space 0, times 0 [ 243.940631] FAULT_INJECTION: forcing a failure. [ 243.940631] name failslab, interval 1, probability 0, space 0, times 0 [ 243.961868] CPU: 0 PID: 11229 Comm: syz-executor.3 Not tainted 4.14.140 #36 [ 243.969012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 243.978364] Call Trace: [ 243.980956] dump_stack+0x138/0x197 [ 243.984596] should_fail.cold+0x10f/0x159 [ 243.988767] should_failslab+0xdb/0x130 [ 243.992744] kmem_cache_alloc_node_trace+0x280/0x770 [ 243.997843] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 244.003730] __kmalloc_node_track_caller+0x3d/0x80 [ 244.008745] __kmalloc_reserve.isra.0+0x40/0xe0 [ 244.013415] __alloc_skb+0xcf/0x500 [ 244.017032] ? skb_scrub_packet+0x4b0/0x4b0 [ 244.021353] ? netlink_has_listeners+0x20a/0x330 [ 244.026110] kobject_uevent_env+0x781/0xc23 [ 244.030525] kobject_uevent+0x20/0x26 [ 244.034320] device_add+0xa3e/0x1490 [ 244.038040] ? device_private_init+0x190/0x190 [ 244.043401] ? input_register_device+0x467/0xb20 [ 244.048157] input_register_device+0x60d/0xb20 [ 244.052741] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 244.057947] ? uinput_request_submit.part.0+0x290/0x290 [ 244.063505] ? __might_sleep+0x93/0xb0 [ 244.067405] ? __fget+0x210/0x370 [ 244.070912] ? uinput_compat_ioctl+0xa0/0xa0 [ 244.075330] uinput_ioctl+0x4a/0x60 [ 244.078958] do_vfs_ioctl+0x7ae/0x1060 11:57:25 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0xffffffffffffff2a}], 0x1) [ 244.082832] ? selinux_file_mprotect+0x5d0/0x5d0 [ 244.082842] ? lock_downgrade+0x6e0/0x6e0 [ 244.082851] ? ioctl_preallocate+0x1c0/0x1c0 [ 244.082863] ? __fget+0x237/0x370 [ 244.082879] ? security_file_ioctl+0x89/0xb0 [ 244.082889] SyS_ioctl+0x8f/0xc0 [ 244.082897] ? do_vfs_ioctl+0x1060/0x1060 [ 244.082911] do_syscall_64+0x1e8/0x640 [ 244.082919] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 244.082934] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 244.082942] RIP: 0033:0x459879 [ 244.082948] RSP: 002b:00007fc30efd4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 244.082958] RAX: ffffffffffffffda RBX: 00007fc30efd4c90 RCX: 0000000000459879 [ 244.082964] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 244.082968] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 244.082972] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc30efd56d4 [ 244.082977] R13: 00000000004c460b R14: 00000000004d8938 R15: 0000000000000005 [ 244.096127] CPU: 1 PID: 11228 Comm: syz-executor.1 Not tainted 4.14.140 #36 11:57:25 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x8000, 0x0) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x2) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002e80)='/dev/dlm-monitor\x00', 0x1, 0x0) getsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000002ec0), &(0x7f0000002f00)=0x4) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000080)={0x18, 0x6}, 0x18) 11:57:25 executing program 5: clone(0x41bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() getgroups(0x2, &(0x7f00000006c0)=[0xee01, 0xee01]) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={0x7f}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) fchown(r2, r3, r1) setresgid(0x0, 0x0, r1) unshare(0x30010000) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x4206, r0) [ 244.100100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 244.100104] Call Trace: [ 244.100119] dump_stack+0x138/0x197 [ 244.100136] should_fail.cold+0x10f/0x159 [ 244.106651] input: syz1 as /devices/virtual/input/input326 [ 244.107889] should_failslab+0xdb/0x130 [ 244.107903] kmem_cache_alloc+0x2d7/0x780 [ 244.107912] ? wait_for_completion+0x420/0x420 [ 244.107927] __kernfs_new_node+0x70/0x420 [ 244.115700] input: syz1 as /devices/virtual/input/input327 [ 244.116062] kernfs_new_node+0x80/0xf0 11:57:25 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x1) r1 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f00000000c0)=0xffff, 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}) r2 = syz_open_pts(r0, 0x0) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) [ 244.126082] __kernfs_create_file+0x46/0x323 [ 244.136960] sysfs_add_file_mode_ns+0x1e4/0x450 [ 244.136976] internal_create_group+0x232/0x7b0 [ 244.136992] sysfs_create_groups+0x97/0x140 [ 244.151517] device_add+0x828/0x1490 [ 244.151533] ? device_private_init+0x190/0x190 [ 244.151546] ? input_register_device+0x467/0xb20 [ 244.151557] input_register_device+0x60d/0xb20 [ 244.151574] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 244.151587] ? uinput_request_submit.part.0+0x290/0x290 [ 244.151610] ? __might_sleep+0x93/0xb0 [ 244.166119] ? __fget+0x210/0x370 [ 244.166137] ? uinput_compat_ioctl+0xa0/0xa0 [ 244.166146] uinput_ioctl+0x4a/0x60 [ 244.166158] do_vfs_ioctl+0x7ae/0x1060 [ 244.180525] ? selinux_file_mprotect+0x5d0/0x5d0 [ 244.180538] ? lock_downgrade+0x6e0/0x6e0 [ 244.180551] ? ioctl_preallocate+0x1c0/0x1c0 [ 244.180561] ? __fget+0x237/0x370 [ 244.180577] ? security_file_ioctl+0x89/0xb0 [ 244.180588] SyS_ioctl+0x8f/0xc0 [ 244.180599] ? do_vfs_ioctl+0x1060/0x1060 [ 244.192537] do_syscall_64+0x1e8/0x640 [ 244.192547] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 244.192566] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 244.192573] RIP: 0033:0x459879 [ 244.192580] RSP: 002b:00007fd831d8ac78 EFLAGS: 00000246 [ 244.250550] ORIG_RAX: 0000000000000010 [ 244.250558] RAX: ffffffffffffffda RBX: 00007fd831d8ac90 RCX: 0000000000459879 [ 244.250563] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 244.250570] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 244.250576] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd831d8b6d4 11:57:26 executing program 1 (fault-call:5 fault-nth:13): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) [ 244.250582] R13: 00000000004c460b R14: 00000000004d8938 R15: 0000000000000005 [ 244.401312] FAULT_INJECTION: forcing a failure. [ 244.401312] name failslab, interval 1, probability 0, space 0, times 0 [ 244.447998] CPU: 1 PID: 11257 Comm: syz-executor.1 Not tainted 4.14.140 #36 [ 244.455270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 244.464626] Call Trace: [ 244.467228] dump_stack+0x138/0x197 [ 244.470984] should_fail.cold+0x10f/0x159 [ 244.475247] should_failslab+0xdb/0x130 [ 244.479318] kmem_cache_alloc+0x2d7/0x780 [ 244.483470] ? mutex_unlock+0xd/0x10 [ 244.487186] ? kernfs_activate+0x13a/0x190 [ 244.491561] __kernfs_new_node+0x70/0x420 11:57:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f00000000c0)={0x40, 0x1, 0x1}) accept4$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000003c0)=0x14, 0x80000) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000300)={r2, 0x1, 0x6}, 0x10) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}) r3 = syz_open_pts(r0, 0x0) fdatasync(r0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000200)="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") readv(r3, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x19) 11:57:26 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000000)) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) [ 244.495726] kernfs_new_node+0x80/0xf0 [ 244.499627] kernfs_create_dir_ns+0x41/0x140 [ 244.504313] internal_create_group+0xea/0x7b0 [ 244.508818] sysfs_create_groups+0x97/0x140 [ 244.513147] device_add+0x828/0x1490 [ 244.516871] ? device_private_init+0x190/0x190 [ 244.521457] ? input_register_device+0x467/0xb20 [ 244.526317] input_register_device+0x60d/0xb20 [ 244.530912] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 244.536118] ? uinput_request_submit.part.0+0x290/0x290 [ 244.541499] ? __might_sleep+0x93/0xb0 11:57:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) setsockopt$sock_void(r1, 0x1, 0x24, 0x0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4}) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x1) fremovexattr(r0, &(0x7f0000000080)=@random={'btrfs.', '\x00'}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}) r2 = syz_open_pts(r0, 0x0) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) 11:57:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3ff}) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000200)={0x3, 0x9, 0xffffffffffffee2d, {0x0, 0x1c9c380}, 0x8001, 0x1f}) r3 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x0, 0x2) bind$tipc(r3, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x2, {{0x0, 0x3}, 0x1}}, 0x10) [ 244.541510] ? __fget+0x210/0x370 [ 244.541528] ? uinput_compat_ioctl+0xa0/0xa0 [ 244.548831] uinput_ioctl+0x4a/0x60 [ 244.548844] do_vfs_ioctl+0x7ae/0x1060 [ 244.548857] ? selinux_file_mprotect+0x5d0/0x5d0 [ 244.548866] ? lock_downgrade+0x6e0/0x6e0 [ 244.548876] ? ioctl_preallocate+0x1c0/0x1c0 [ 244.574020] ? __fget+0x237/0x370 [ 244.577497] ? security_file_ioctl+0x89/0xb0 [ 244.581914] SyS_ioctl+0x8f/0xc0 [ 244.585285] ? do_vfs_ioctl+0x1060/0x1060 [ 244.589445] do_syscall_64+0x1e8/0x640 [ 244.593332] ? trace_hardirqs_off_thunk+0x1a/0x1c 11:57:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[@ANYRES16=r0, @ANYRESDEC=r0, @ANYBLOB="ead4aa61", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES64=r0, @ANYRESHEX=r0], 0x40) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) [ 244.598180] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 244.603371] RIP: 0033:0x459879 [ 244.606564] RSP: 002b:00007fd831d8ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 244.614279] RAX: ffffffffffffffda RBX: 00007fd831d8ac90 RCX: 0000000000459879 [ 244.621723] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 244.629695] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 244.636975] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd831d8b6d4 [ 244.644257] R13: 00000000004c460b R14: 00000000004d8938 R15: 0000000000000005 [ 244.792433] input: syz1 as /devices/virtual/input/input330 11:57:26 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x151002, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000040)=0x8, 0x4) r2 = dup(r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000000140)={{0x6, 0xff}, 'port1\x00', 0x74, 0x80000, 0x7, 0x416, 0xffffffffffffff88, 0x4, 0x6699c276, 0x0, 0x4, 0x8}) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0xd) 11:57:26 executing program 1 (fault-call:5 fault-nth:14): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 11:57:26 executing program 3 (fault-call:5 fault-nth:48): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 11:57:26 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x208000, 0x0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00') r2 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x3, 0x181000) r3 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0xffffffff, 0x600) r4 = open(&(0x7f00000003c0)='./file0\x00', 0x400, 0x100) r5 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000a00)={0x4, {{0x2, 0x4e24, @broadcast}}}, 0x88) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000440)='/dev/audio\x00', 0x40000, 0x0) r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000480)='/dev/dlm-monitor\x00', 0x400, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000007c0)=[{{&(0x7f00000004c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000540)=""/57, 0x39}], 0x1, &(0x7f00000005c0)=""/81, 0x51}, 0x1ff}, {{&(0x7f0000000640)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f00000006c0)=""/10, 0xa}], 0x1, &(0x7f0000000740)=""/126, 0x7e}, 0x3}], 0x2, 0x2103, 0x0) r9 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000840)='/dev/vsock\x00', 0x400040, 0x0) r10 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880)='/dev/autofs\x00', 0x10000, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000009c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0xa4, r1, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7ff}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SOCKETS={0xc, 0x7, [{0x8, 0x1, r2}]}, @NBD_ATTR_SOCKETS={0x44, 0x7, [{0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8, 0x1, r9}, {0x8, 0x1, r10}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4}, 0x800) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r11, @ANYBLOB="2c726f57746d6f64653d30303030303030303030303070303030303034303030302c757365725f69643de816b5dbe7d2", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$FUSE_NOTIFY_POLL(r11, &(0x7f0000000080)={0x18, 0x6}, 0x18) [ 244.915550] FAULT_INJECTION: forcing a failure. [ 244.915550] name failslab, interval 1, probability 0, space 0, times 0 [ 244.928606] FAULT_INJECTION: forcing a failure. [ 244.928606] name failslab, interval 1, probability 0, space 0, times 0 [ 244.952221] CPU: 0 PID: 11289 Comm: syz-executor.3 Not tainted 4.14.140 #36 [ 244.959361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 244.968738] Call Trace: [ 244.971349] dump_stack+0x138/0x197 [ 244.974992] should_fail.cold+0x10f/0x159 [ 244.979142] should_failslab+0xdb/0x130 [ 244.983124] kmem_cache_alloc_node+0x287/0x780 [ 244.987723] __alloc_skb+0x9c/0x500 [ 244.991353] ? skb_scrub_packet+0x4b0/0x4b0 [ 244.995669] ? netlink_has_listeners+0x20a/0x330 [ 245.000512] kobject_uevent_env+0x781/0xc23 [ 245.004836] kobject_uevent+0x20/0x26 [ 245.008721] device_add+0xa3e/0x1490 [ 245.012432] ? device_private_init+0x190/0x190 [ 245.017105] ? input_register_device+0x467/0xb20 [ 245.021855] input_register_device+0x60d/0xb20 [ 245.026609] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 245.031880] ? uinput_request_submit.part.0+0x290/0x290 [ 245.037335] ? __might_sleep+0x93/0xb0 [ 245.041902] ? __fget+0x210/0x370 [ 245.045363] ? uinput_compat_ioctl+0xa0/0xa0 [ 245.049761] uinput_ioctl+0x4a/0x60 [ 245.053557] do_vfs_ioctl+0x7ae/0x1060 [ 245.057440] ? selinux_file_mprotect+0x5d0/0x5d0 [ 245.062193] ? lock_downgrade+0x6e0/0x6e0 [ 245.066338] ? ioctl_preallocate+0x1c0/0x1c0 [ 245.070753] ? __fget+0x237/0x370 [ 245.074209] ? security_file_ioctl+0x89/0xb0 [ 245.078616] SyS_ioctl+0x8f/0xc0 [ 245.081988] ? do_vfs_ioctl+0x1060/0x1060 [ 245.086133] do_syscall_64+0x1e8/0x640 [ 245.090101] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 245.094944] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 245.100130] RIP: 0033:0x459879 [ 245.103308] RSP: 002b:00007fc30efd4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 245.111009] RAX: ffffffffffffffda RBX: 00007fc30efd4c90 RCX: 0000000000459879 [ 245.118270] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 245.125529] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 245.132880] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc30efd56d4 [ 245.140146] R13: 00000000004c460b R14: 00000000004d8938 R15: 0000000000000005 [ 245.147610] CPU: 1 PID: 11290 Comm: syz-executor.1 Not tainted 4.14.140 #36 [ 245.154712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 245.154716] Call Trace: [ 245.154732] dump_stack+0x138/0x197 [ 245.154748] should_fail.cold+0x10f/0x159 [ 245.164402] input: syz1 as /devices/virtual/input/input331 [ 245.166658] should_failslab+0xdb/0x130 [ 245.166670] kmem_cache_alloc+0x2d7/0x780 [ 245.166681] ? __mutex_unlock_slowpath+0x71/0x800 [ 245.174410] ? __lock_is_held+0xb6/0x140 [ 245.174426] __kernfs_new_node+0x70/0x420 [ 245.174439] kernfs_new_node+0x80/0xf0 [ 245.183997] __kernfs_create_file+0x46/0x323 [ 245.184010] sysfs_add_file_mode_ns+0x1e4/0x450 [ 245.184024] internal_create_group+0x232/0x7b0 [ 245.192977] sysfs_create_groups+0x97/0x140 [ 245.192991] device_add+0x828/0x1490 [ 245.193004] ? device_private_init+0x190/0x190 [ 245.193017] ? input_register_device+0x467/0xb20 [ 245.201393] input_register_device+0x60d/0xb20 [ 245.209657] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 245.246277] ? uinput_request_submit.part.0+0x290/0x290 [ 245.251676] ? __might_sleep+0x93/0xb0 [ 245.255567] ? __fget+0x210/0x370 [ 245.259021] ? uinput_compat_ioctl+0xa0/0xa0 [ 245.263518] uinput_ioctl+0x4a/0x60 11:57:26 executing program 5: clone(0x41bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40080}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xb4, r4, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xef03}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xde}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x14}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller0\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x410}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x1d}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) clock_nanosleep(0x3, 0xe569661530448c0f, &(0x7f0000000040)={r1, r2+10000000}, &(0x7f0000000080)) getgroups(0x2, &(0x7f00000006c0)=[0xee01, 0xee01]) setresgid(0x0, 0x0, r5) unshare(0x30010000) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x4206, r0) 11:57:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000180)={0x77e, 0x0, 0x0, 0x0, 0x15}) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) getsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f00000000c0), &(0x7f0000000140)=0x4) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) 11:57:26 executing program 0: r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x200, 0x40) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f6f746d6f6c653d5a42e4d49e3ef3238e12df8e6330303a303030303034303030302c757365725f6b643d", @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643da4c7dc60ab0bb80437f88ab39c3e8b2e214bb9696373b0a8308a90cd6b22cb167d40b40edf592f54a5b7a41189c46d500c6f2afb30602525d22fd374fbe1f2031e09aec2ba34e986b44a54a2e50192336ab71f621b347e4534b87b5c6f8f55fa5bbac7633acc89abba826f6548b388b62d8b1485ff9d83f45329e6e9b211e4989bba7fa7ad55c76fc5a2ea43d33209789c6b6e344b72e31f923db104fe2e4140da47f92145bd1564273eaecf0fccfa4062cbfbbf8bf1af05b2c309c7b93137a6669404a36c77ed577cf77eeaf884d876dce17e11a1541859cf419147406cb43e66e2cba76762d7ddccf87798ab3cb7be24b39ae8dff0e8f8e39e5e970c8fbbc2a1b1e434f3817c96cd055748fc0ceb1c4fb8225c0aa85a3252852509f7259ee5e668b11ff6e935623df4719eb391655f3f1af858fca5ab8861eb0dc95d054a65cd", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r2 = msgget$private(0x0, 0x244) msgctl$IPC_RMID(r2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000080)={0x18, 0x6}, 0x18) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000100)={0x0, 0xeb, 0x5, 0x2, 0xd, 0x4}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000001c0)={r3, 0x5}, &(0x7f0000000240)=0x8) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000000)) 11:57:26 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) r2 = dup(r0) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) [ 245.263530] do_vfs_ioctl+0x7ae/0x1060 [ 245.263542] ? selinux_file_mprotect+0x5d0/0x5d0 [ 245.263552] ? lock_downgrade+0x6e0/0x6e0 [ 245.263561] ? ioctl_preallocate+0x1c0/0x1c0 [ 245.263574] ? __fget+0x237/0x370 [ 245.287935] ? security_file_ioctl+0x89/0xb0 [ 245.292396] SyS_ioctl+0x8f/0xc0 [ 245.295770] ? do_vfs_ioctl+0x1060/0x1060 [ 245.299935] do_syscall_64+0x1e8/0x640 [ 245.303837] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 245.308696] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 245.313993] RIP: 0033:0x459879 11:57:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) [ 245.317186] RSP: 002b:00007fd831d8ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 245.324905] RAX: ffffffffffffffda RBX: 00007fd831d8ac90 RCX: 0000000000459879 [ 245.332278] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 245.332283] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 245.332288] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd831d8b6d4 [ 245.332293] R13: 00000000004c460b R14: 00000000004d8938 R15: 0000000000000005 11:57:27 executing program 1 (fault-call:5 fault-nth:15): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 11:57:27 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) [ 245.369116] input: syz1 as /devices/virtual/input/input335 11:57:27 executing program 3 (fault-call:5 fault-nth:49): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) [ 245.411316] FAULT_INJECTION: forcing a failure. [ 245.411316] name failslab, interval 1, probability 0, space 0, times 0 [ 245.455070] CPU: 0 PID: 11320 Comm: syz-executor.1 Not tainted 4.14.140 #36 [ 245.462392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 245.471751] Call Trace: [ 245.474348] dump_stack+0x138/0x197 [ 245.477992] should_fail.cold+0x10f/0x159 [ 245.482156] should_failslab+0xdb/0x130 [ 245.486137] kmem_cache_alloc+0x2d7/0x780 [ 245.490291] ? wait_for_completion+0x420/0x420 [ 245.494880] __kernfs_new_node+0x70/0x420 [ 245.499036] kernfs_new_node+0x80/0xf0 [ 245.502924] __kernfs_create_file+0x46/0x323 [ 245.507330] sysfs_add_file_mode_ns+0x1e4/0x450 [ 245.512003] internal_create_group+0x232/0x7b0 [ 245.516590] sysfs_create_groups+0x97/0x140 [ 245.520915] device_add+0x828/0x1490 [ 245.524638] ? device_private_init+0x190/0x190 [ 245.529329] ? input_register_device+0x467/0xb20 [ 245.534095] input_register_device+0x60d/0xb20 [ 245.538710] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 245.543907] ? uinput_request_submit.part.0+0x290/0x290 [ 245.549299] ? __might_sleep+0x93/0xb0 [ 245.549309] ? __fget+0x210/0x370 [ 245.549325] ? uinput_compat_ioctl+0xa0/0xa0 [ 245.549339] uinput_ioctl+0x4a/0x60 [ 245.561144] do_vfs_ioctl+0x7ae/0x1060 [ 245.561157] ? selinux_file_mprotect+0x5d0/0x5d0 [ 245.561168] ? lock_downgrade+0x6e0/0x6e0 [ 245.561178] ? ioctl_preallocate+0x1c0/0x1c0 [ 245.561192] ? __fget+0x237/0x370 [ 245.561210] ? security_file_ioctl+0x89/0xb0 [ 245.561223] SyS_ioctl+0x8f/0xc0 [ 245.561230] ? do_vfs_ioctl+0x1060/0x1060 [ 245.561243] do_syscall_64+0x1e8/0x640 11:57:27 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x8002, 0x0) getsockname$inet(r1, &(0x7f0000000040)={0x2, 0x0, @broadcast}, &(0x7f0000000100)=0x10) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x6, 0x6, 0x0, {0xffffffffffffffff}}, 0xef) [ 245.561252] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 245.561272] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 245.573513] RIP: 0033:0x459879 [ 245.573518] RSP: 002b:00007fd831d8ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 245.573528] RAX: ffffffffffffffda RBX: 00007fd831d8ac90 RCX: 0000000000459879 [ 245.573533] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 245.573538] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 245.573544] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd831d8b6d4 [ 245.573550] R13: 00000000004c460b R14: 00000000004d8938 R15: 0000000000000005 [ 245.616429] FAULT_INJECTION: forcing a failure. [ 245.616429] name failslab, interval 1, probability 0, space 0, times 0 [ 245.650008] CPU: 1 PID: 11326 Comm: syz-executor.3 Not tainted 4.14.140 #36 [ 245.659981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 245.659986] Call Trace: [ 245.660001] dump_stack+0x138/0x197 [ 245.660018] should_fail.cold+0x10f/0x159 [ 245.660033] should_failslab+0xdb/0x130 [ 245.660046] kmem_cache_alloc_node_trace+0x280/0x770 [ 245.660060] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 245.660074] __kmalloc_node_track_caller+0x3d/0x80 [ 245.660087] __kmalloc_reserve.isra.0+0x40/0xe0 [ 245.660098] __alloc_skb+0xcf/0x500 [ 245.660108] ? skb_scrub_packet+0x4b0/0x4b0 [ 245.660119] ? netlink_has_listeners+0x20a/0x330 [ 245.660131] kobject_uevent_env+0x781/0xc23 [ 245.660148] kobject_uevent+0x20/0x26 [ 245.660158] device_add+0xa3e/0x1490 [ 245.660176] ? device_private_init+0x190/0x190 [ 245.660187] ? input_register_device+0x467/0xb20 [ 245.660199] input_register_device+0x60d/0xb20 [ 245.660215] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 245.660227] ? uinput_request_submit.part.0+0x290/0x290 [ 245.660250] ? __might_sleep+0x93/0xb0 [ 245.660259] ? __fget+0x210/0x370 [ 245.660271] ? uinput_compat_ioctl+0xa0/0xa0 [ 245.660280] uinput_ioctl+0x4a/0x60 [ 245.660291] do_vfs_ioctl+0x7ae/0x1060 [ 245.660301] ? selinux_file_mprotect+0x5d0/0x5d0 [ 245.660315] ? lock_downgrade+0x6e0/0x6e0 [ 245.678876] ? ioctl_preallocate+0x1c0/0x1c0 [ 245.678889] ? __fget+0x237/0x370 [ 245.678909] ? security_file_ioctl+0x89/0xb0 [ 245.690851] SyS_ioctl+0x8f/0xc0 [ 245.690862] ? do_vfs_ioctl+0x1060/0x1060 [ 245.690876] do_syscall_64+0x1e8/0x640 [ 245.690885] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 245.690902] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 245.698653] RIP: 0033:0x459879 [ 245.698659] RSP: 002b:00007fc30efd4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 245.698670] RAX: ffffffffffffffda RBX: 00007fc30efd4c90 RCX: 0000000000459879 [ 245.698677] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 245.698682] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 245.698690] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc30efd56d4 [ 245.874893] R13: 00000000004c460b R14: 00000000004d8938 R15: 0000000000000005 11:57:27 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = dup(0xffffffffffffffff) ioctl$TUNSETLINK(r0, 0x400454cd, 0x103) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000080)={0x18, 0x6}, 0x18) 11:57:27 executing program 1 (fault-call:5 fault-nth:16): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) [ 245.909427] input: syz1 as /devices/virtual/input/input337 11:57:27 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) dup(r0) r1 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x5, 0x101000) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000140)=0x3e2, 0x4) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, 0x0, 0x0) write$P9_RATTACH(r2, &(0x7f0000000100)={0x14}, 0x14) fcntl$setstatus(r2, 0x4, 0x6000) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x2, 0x1, 0x0, r2, &(0x7f0000000000), 0x40492}]) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x145140, 0x0) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f00000001c0)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0xa16501ee78e89910, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r4, 0x800442d3, &(0x7f0000000040)={0x6, 0x3f, 0x371, @dev={[], 0x26}, 'rose0\x00'}) write$binfmt_aout(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="0701000000000000000000080000003f066b00007cee3a0000000000def93a23a853a06e1c6f04c2970848820be0faf26a8b16e71e9a0000000060a4976080ab757dd39390325280065b0c45d21db39e1aaf35a13d3f44b6bcf8934a358a4a1271bf19c48d652e47b000"/115], 0x4c) ioctl$VIDIOC_RESERVED(r4, 0x5601, 0x0) [ 245.971813] FAULT_INJECTION: forcing a failure. [ 245.971813] name failslab, interval 1, probability 0, space 0, times 0 [ 245.995632] CPU: 1 PID: 11340 Comm: syz-executor.1 Not tainted 4.14.140 #36 [ 246.002773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 246.012554] Call Trace: [ 246.015147] dump_stack+0x138/0x197 [ 246.018894] should_fail.cold+0x10f/0x159 [ 246.023125] should_failslab+0xdb/0x130 [ 246.027156] kmem_cache_alloc+0x2d7/0x780 [ 246.031301] ? wait_for_completion+0x420/0x420 [ 246.035890] __kernfs_new_node+0x70/0x420 [ 246.040042] kernfs_new_node+0x80/0xf0 [ 246.043918] __kernfs_create_file+0x46/0x323 [ 246.048330] sysfs_add_file_mode_ns+0x1e4/0x450 [ 246.052990] internal_create_group+0x232/0x7b0 [ 246.057647] sysfs_create_groups+0x97/0x140 [ 246.062317] device_add+0x828/0x1490 [ 246.066024] ? device_private_init+0x190/0x190 [ 246.070613] ? input_register_device+0x467/0xb20 [ 246.075439] input_register_device+0x60d/0xb20 [ 246.080022] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 246.085215] ? uinput_request_submit.part.0+0x290/0x290 [ 246.090572] ? __might_sleep+0x93/0xb0 [ 246.094472] ? __fget+0x210/0x370 [ 246.097921] ? uinput_compat_ioctl+0xa0/0xa0 [ 246.102314] uinput_ioctl+0x4a/0x60 [ 246.105924] do_vfs_ioctl+0x7ae/0x1060 [ 246.109792] ? selinux_file_mprotect+0x5d0/0x5d0 [ 246.114528] ? lock_downgrade+0x6e0/0x6e0 [ 246.118662] ? ioctl_preallocate+0x1c0/0x1c0 [ 246.123053] ? __fget+0x237/0x370 [ 246.126603] ? security_file_ioctl+0x89/0xb0 [ 246.131000] SyS_ioctl+0x8f/0xc0 [ 246.134347] ? do_vfs_ioctl+0x1060/0x1060 [ 246.138565] do_syscall_64+0x1e8/0x640 [ 246.142445] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 246.148379] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 246.153581] RIP: 0033:0x459879 [ 246.156760] RSP: 002b:00007fd831d8ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 246.164457] RAX: ffffffffffffffda RBX: 00007fd831d8ac90 RCX: 0000000000459879 11:57:27 executing program 5: r0 = socket$packet(0x11, 0x3a9447291c069ad6, 0x300) clone(0x41bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() getgroups(0x2, &(0x7f00000006c0)=[0xee01, 0xee01]) setresgid(0x0, 0x0, r2) unshare(0x30010000) write(r0, &(0x7f0000000700)="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", 0x1000) rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f00000000c0)) ptrace(0x4206, r1) 11:57:27 executing program 4: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x2000000, &(0x7f0000000040)={&(0x7f0000000100)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) fsetxattr$security_evm(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=@ng={0x4, 0x5}, 0x2, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r2 = dup(r1) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) 11:57:27 executing program 1 (fault-call:5 fault-nth:17): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 11:57:27 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3f, 0x5}) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000200)=@req={0x28, &(0x7f0000000180)={'veth1_to_hsr\x00', @ifru_ivalue=0x3f}}) prctl$PR_SET_TSC(0x1a, 0x2) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r2 = open(&(0x7f0000000140)='./file0\x00', 0x280000, 0x8) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f00000000c0)=0x10001, 0x4) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x200440, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) readv(r3, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) [ 246.171715] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 246.178979] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 246.186495] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd831d8b6d4 [ 246.193759] R13: 00000000004c460b R14: 00000000004d8938 R15: 0000000000000005 11:57:27 executing program 3 (fault-call:5 fault-nth:50): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) [ 246.337643] FAULT_INJECTION: forcing a failure. [ 246.337643] name failslab, interval 1, probability 0, space 0, times 0 [ 246.375289] FAULT_INJECTION: forcing a failure. [ 246.375289] name failslab, interval 1, probability 0, space 0, times 0 [ 246.375654] CPU: 0 PID: 11361 Comm: syz-executor.3 Not tainted 4.14.140 #36 [ 246.393742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 246.403094] Call Trace: [ 246.405680] dump_stack+0x138/0x197 [ 246.409329] should_fail.cold+0x10f/0x159 [ 246.413475] should_failslab+0xdb/0x130 [ 246.417451] kmem_cache_alloc_node+0x287/0x780 [ 246.422816] __alloc_skb+0x9c/0x500 [ 246.426436] ? skb_scrub_packet+0x4b0/0x4b0 [ 246.430796] ? netlink_has_listeners+0x20a/0x330 [ 246.435549] kobject_uevent_env+0x781/0xc23 [ 246.439874] kobject_uevent+0x20/0x26 [ 246.443668] device_add+0xa3e/0x1490 [ 246.447380] ? device_private_init+0x190/0x190 [ 246.451960] ? input_register_device+0x467/0xb20 [ 246.456710] input_register_device+0x60d/0xb20 [ 246.461290] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 246.466477] ? uinput_request_submit.part.0+0x290/0x290 [ 246.471851] ? __might_sleep+0x93/0xb0 [ 246.475751] ? __fget+0x210/0x370 [ 246.479297] ? uinput_compat_ioctl+0xa0/0xa0 [ 246.483692] uinput_ioctl+0x4a/0x60 [ 246.487309] do_vfs_ioctl+0x7ae/0x1060 [ 246.491193] ? selinux_file_mprotect+0x5d0/0x5d0 [ 246.495970] ? lock_downgrade+0x6e0/0x6e0 [ 246.500131] ? ioctl_preallocate+0x1c0/0x1c0 [ 246.504538] ? __fget+0x237/0x370 [ 246.507989] ? security_file_ioctl+0x89/0xb0 [ 246.512393] SyS_ioctl+0x8f/0xc0 [ 246.515756] ? do_vfs_ioctl+0x1060/0x1060 [ 246.520438] do_syscall_64+0x1e8/0x640 [ 246.524316] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 246.529243] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 246.534421] RIP: 0033:0x459879 [ 246.537774] RSP: 002b:00007fc30efd4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 246.545474] RAX: ffffffffffffffda RBX: 00007fc30efd4c90 RCX: 0000000000459879 [ 246.552743] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 246.560002] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 246.567262] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc30efd56d4 [ 246.574540] R13: 00000000004c460b R14: 00000000004d8938 R15: 0000000000000005 11:57:28 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0x80000, 0x6) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000000)={0x0, 0x94, "4fe845d2a3028264f2ae98138cdeff8a480b6ae0ed932206b4582db2eca4ab023d8b121c9740367bafde9b9f92c1a1a216f19c95f21f8f31ff9e200b5a4e64119ca8c17ed17fff507018551c7469f78de63320d6773e250ac505320d6b97e9f4b0d5da9f5b834fe3c06f52e4c7a777ebb56b7345eaa07bce4880d82b841122c44f11bd64479d843cc47a48f861a2bb4279f41549"}, &(0x7f00000000c0)=0x9c) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000140)={r2, 0x2}, 0x8) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r3 = dup(r0) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) [ 246.581930] CPU: 1 PID: 11364 Comm: syz-executor.1 Not tainted 4.14.140 #36 [ 246.589044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 246.598394] Call Trace: [ 246.600975] dump_stack+0x138/0x197 [ 246.600992] should_fail.cold+0x10f/0x159 [ 246.601005] should_failslab+0xdb/0x130 [ 246.601019] kmem_cache_alloc+0x2d7/0x780 [ 246.617019] ? wait_for_completion+0x420/0x420 [ 246.621712] __kernfs_new_node+0x70/0x420 [ 246.625852] kernfs_new_node+0x80/0xf0 [ 246.629853] __kernfs_create_file+0x46/0x323 [ 246.634259] sysfs_add_file_mode_ns+0x1e4/0x450 [ 246.638916] internal_create_group+0x232/0x7b0 [ 246.643580] sysfs_create_groups+0x97/0x140 [ 246.647889] device_add+0x828/0x1490 [ 246.651766] ? device_private_init+0x190/0x190 [ 246.656332] ? input_register_device+0x467/0xb20 [ 246.661160] input_register_device+0x60d/0xb20 [ 246.665736] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 246.670917] ? uinput_request_submit.part.0+0x290/0x290 [ 246.676305] ? __might_sleep+0x93/0xb0 [ 246.680175] ? __fget+0x210/0x370 [ 246.683625] ? uinput_compat_ioctl+0xa0/0xa0 [ 246.694562] uinput_ioctl+0x4a/0x60 [ 246.698184] do_vfs_ioctl+0x7ae/0x1060 [ 246.702056] ? selinux_file_mprotect+0x5d0/0x5d0 [ 246.706795] ? lock_downgrade+0x6e0/0x6e0 [ 246.710931] ? ioctl_preallocate+0x1c0/0x1c0 [ 246.715326] ? __fget+0x237/0x370 [ 246.718770] ? security_file_ioctl+0x89/0xb0 [ 246.723178] SyS_ioctl+0x8f/0xc0 [ 246.726524] ? do_vfs_ioctl+0x1060/0x1060 [ 246.730657] do_syscall_64+0x1e8/0x640 [ 246.734524] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 246.739462] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 246.744665] RIP: 0033:0x459879 [ 246.747849] RSP: 002b:00007fd831d8ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 246.755633] RAX: ffffffffffffffda RBX: 00007fd831d8ac90 RCX: 0000000000459879 [ 246.762888] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 246.770231] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 246.777483] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd831d8b6d4 [ 246.784756] R13: 00000000004c460b R14: 00000000004d8938 R15: 0000000000000005 [ 246.798219] input: syz1 as /devices/virtual/input/input342 [ 246.805497] input: syz1 as /devices/virtual/input/input340 11:57:28 executing program 1 (fault-call:5 fault-nth:18): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) [ 246.854260] input: syz1 as /devices/virtual/input/input343 11:57:28 executing program 3 (fault-call:5 fault-nth:51): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) [ 246.912966] FAULT_INJECTION: forcing a failure. [ 246.912966] name failslab, interval 1, probability 0, space 0, times 0 [ 246.925898] CPU: 0 PID: 11383 Comm: syz-executor.1 Not tainted 4.14.140 #36 [ 246.933026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 246.942396] Call Trace: [ 246.942418] dump_stack+0x138/0x197 [ 246.942436] should_fail.cold+0x10f/0x159 [ 246.942453] should_failslab+0xdb/0x130 [ 246.942466] kmem_cache_alloc+0x2d7/0x780 [ 246.942473] ? wait_for_completion+0x420/0x420 [ 246.942487] __kernfs_new_node+0x70/0x420 [ 246.942498] kernfs_new_node+0x80/0xf0 [ 246.942509] __kernfs_create_file+0x46/0x323 [ 246.942520] sysfs_add_file_mode_ns+0x1e4/0x450 [ 246.942533] internal_create_group+0x232/0x7b0 [ 246.942549] sysfs_create_groups+0x97/0x140 [ 246.942561] device_add+0x828/0x1490 [ 246.942578] ? device_private_init+0x190/0x190 [ 246.978292] ? input_register_device+0x467/0xb20 [ 246.978307] input_register_device+0x60d/0xb20 [ 246.978327] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 246.978340] ? uinput_request_submit.part.0+0x290/0x290 [ 246.978364] ? __might_sleep+0x93/0xb0 [ 246.987579] ? __fget+0x210/0x370 [ 246.987598] ? uinput_compat_ioctl+0xa0/0xa0 [ 246.987608] uinput_ioctl+0x4a/0x60 [ 246.987621] do_vfs_ioctl+0x7ae/0x1060 [ 246.987633] ? selinux_file_mprotect+0x5d0/0x5d0 [ 246.987649] ? lock_downgrade+0x6e0/0x6e0 [ 246.995781] ? ioctl_preallocate+0x1c0/0x1c0 [ 247.009751] ? __fget+0x237/0x370 [ 247.009772] ? security_file_ioctl+0x89/0xb0 11:57:28 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d30303030303000003030303030303030303034303030302c757b65a272a3506c", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x10800, 0x0) ioctl$BLKRESETZONE(r1, 0x40101283, &(0x7f00000001c0)={0x80000001, 0x400}) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0xd0f2, 0x2, 0x5, 0x28, 0x0}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000100)={r2, 0xb0}, &(0x7f0000000140)=0x8) 11:57:28 executing program 5: clone(0x41bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() getgroups(0x2, &(0x7f00000006c0)=[0xee01, 0xee01]) setresgid(0x0, 0x0, r1) unshare(0x30010000) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x6, 0x800) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x4000, 0x1}) ptrace(0x4206, r0) [ 247.009786] SyS_ioctl+0x8f/0xc0 [ 247.009796] ? do_vfs_ioctl+0x1060/0x1060 [ 247.009813] do_syscall_64+0x1e8/0x640 [ 247.017793] input: syz1 as /devices/virtual/input/input345 [ 247.020333] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 247.020353] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 247.020362] RIP: 0033:0x459879 [ 247.020368] RSP: 002b:00007fd831d8ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 247.020379] RAX: ffffffffffffffda RBX: 00007fd831d8ac90 RCX: 0000000000459879 11:57:28 executing program 1 (fault-call:5 fault-nth:19): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) [ 247.020384] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 247.020389] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 247.020394] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd831d8b6d4 [ 247.020399] R13: 00000000004c460b R14: 00000000004d8938 R15: 0000000000000005 [ 247.138884] FAULT_INJECTION: forcing a failure. [ 247.138884] name failslab, interval 1, probability 0, space 0, times 0 [ 247.163770] CPU: 1 PID: 11386 Comm: syz-executor.3 Not tainted 4.14.140 #36 [ 247.170894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 247.180240] Call Trace: [ 247.180258] dump_stack+0x138/0x197 [ 247.180276] should_fail.cold+0x10f/0x159 [ 247.180292] should_failslab+0xdb/0x130 [ 247.180304] kmem_cache_alloc_trace+0x2e9/0x790 [ 247.180315] ? __bitmap_subset+0x98/0x160 [ 247.180331] rfkill_connect+0x49/0x150 [ 247.180348] input_attach_handler+0x154/0x1a0 11:57:28 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'user.', 'group_id'}) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) [ 247.186544] input_register_device.cold+0xbf/0x202 [ 247.194664] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 247.194679] ? uinput_request_submit.part.0+0x290/0x290 [ 247.194703] ? __might_sleep+0x93/0xb0 [ 247.203495] ? __fget+0x210/0x370 [ 247.203510] ? uinput_compat_ioctl+0xa0/0xa0 [ 247.203520] uinput_ioctl+0x4a/0x60 [ 247.203532] do_vfs_ioctl+0x7ae/0x1060 [ 247.203545] ? selinux_file_mprotect+0x5d0/0x5d0 [ 247.203557] ? lock_downgrade+0x6e0/0x6e0 [ 247.203568] ? ioctl_preallocate+0x1c0/0x1c0 [ 247.203578] ? __fget+0x237/0x370 [ 247.211065] input: syz1 as /devices/virtual/input/input346 [ 247.211972] ? security_file_ioctl+0x89/0xb0 [ 247.211988] SyS_ioctl+0x8f/0xc0 [ 247.211998] ? do_vfs_ioctl+0x1060/0x1060 [ 247.227455] do_syscall_64+0x1e8/0x640 [ 247.227466] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 247.227483] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 247.227493] RIP: 0033:0x459879 [ 247.234801] RSP: 002b:00007fc30efd4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 11:57:28 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000000), 0x4) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) [ 247.234814] RAX: ffffffffffffffda RBX: 00007fc30efd4c90 RCX: 0000000000459879 [ 247.234820] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 247.234826] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 247.234832] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc30efd56d4 [ 247.234838] R13: 00000000004c460b R14: 00000000004d8938 R15: 0000000000000005 [ 247.259262] FAULT_INJECTION: forcing a failure. [ 247.259262] name failslab, interval 1, probability 0, space 0, times 0 [ 247.283218] CPU: 1 PID: 11399 Comm: syz-executor.1 Not tainted 4.14.140 #36 11:57:29 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./file0\x00', 0x200) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000100)={0x7ff, 0x38, "2a8800e5e107f28583777db43683ace410202d88bcb41100db143fe11ee01bb391482e86531a73d0a985be53128fedf885ff4655fed72abc"}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000080)={0x18, 0x6}, 0x18) [ 247.291739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 247.291744] Call Trace: [ 247.291763] dump_stack+0x138/0x197 [ 247.291783] should_fail.cold+0x10f/0x159 [ 247.291799] should_failslab+0xdb/0x130 [ 247.291812] kmem_cache_alloc+0x2d7/0x780 [ 247.291820] ? mutex_unlock+0xd/0x10 [ 247.291830] ? kernfs_activate+0x13a/0x190 [ 247.291842] __kernfs_new_node+0x70/0x420 [ 247.291855] kernfs_new_node+0x80/0xf0 [ 247.291867] kernfs_create_dir_ns+0x41/0x140 [ 247.291877] internal_create_group+0xea/0x7b0 [ 247.291894] sysfs_create_groups+0x97/0x140 [ 247.291906] device_add+0x828/0x1490 [ 247.291918] ? device_private_init+0x190/0x190 [ 247.300274] ? input_register_device+0x467/0xb20 [ 247.300287] input_register_device+0x60d/0xb20 [ 247.300307] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 247.300321] ? uinput_request_submit.part.0+0x290/0x290 [ 247.300348] ? __might_sleep+0x93/0xb0 [ 247.315387] ? __fget+0x210/0x370 [ 247.315406] ? uinput_compat_ioctl+0xa0/0xa0 [ 247.315417] uinput_ioctl+0x4a/0x60 [ 247.315428] do_vfs_ioctl+0x7ae/0x1060 [ 247.315442] ? selinux_file_mprotect+0x5d0/0x5d0 [ 247.355954] ? lock_downgrade+0x6e0/0x6e0 [ 247.373529] ? ioctl_preallocate+0x1c0/0x1c0 [ 247.373542] ? __fget+0x237/0x370 [ 247.373561] ? security_file_ioctl+0x89/0xb0 [ 247.373574] SyS_ioctl+0x8f/0xc0 [ 247.373583] ? do_vfs_ioctl+0x1060/0x1060 [ 247.373601] do_syscall_64+0x1e8/0x640 [ 247.373608] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 247.373626] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 247.379986] RIP: 0033:0x459879 [ 247.379991] RSP: 002b:00007fd831d8ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 247.380002] RAX: ffffffffffffffda RBX: 00007fd831d8ac90 RCX: 0000000000459879 [ 247.380008] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 11:57:29 executing program 1 (fault-call:5 fault-nth:20): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) [ 247.380014] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 247.380020] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd831d8b6d4 [ 247.380027] R13: 00000000004c460b R14: 00000000004d8938 R15: 0000000000000005 [ 247.406524] input: syz1 as /devices/virtual/input/input348 [ 247.445743] input: failed to attach handler rfkill to device input345, error: -12 11:57:29 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x6}, 0x18) 11:57:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000044d564b000000001100000000000000ad6f20ec3f99363fe86d45d18c4294f69729d13fae46a46421255177b5166b060e76a7846f82feefb57305f830848ba0ed617433a469b3c1bb164af2236c53c58d7230f4543757c7f61615e21046bffbca42bced7330d3b34fd48d10470da0e7e6cf7e0bfa3af8b71de40bd45800000000000000"]) [ 247.661518] FAULT_INJECTION: forcing a failure. [ 247.661518] name failslab, interval 1, probability 0, space 0, times 0 [ 247.681058] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 247.697338] CPU: 0 PID: 11417 Comm: syz-executor.1 Not tainted 4.14.140 #36 [ 247.704716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 247.704721] Call Trace: [ 247.704738] dump_stack+0x138/0x197 [ 247.704755] should_fail.cold+0x10f/0x159 [ 247.704768] should_failslab+0xdb/0x130 [ 247.704779] kmem_cache_alloc+0x2d7/0x780 [ 247.704791] ? __mutex_unlock_slowpath+0x71/0x800 [ 247.704800] ? __lock_is_held+0xb6/0x140 [ 247.704812] __kernfs_new_node+0x70/0x420 [ 247.704824] kernfs_new_node+0x80/0xf0 [ 247.704835] __kernfs_create_file+0x46/0x323 [ 247.704845] sysfs_add_file_mode_ns+0x1e4/0x450 [ 247.704857] internal_create_group+0x232/0x7b0 [ 247.704872] sysfs_create_groups+0x97/0x140 [ 247.704884] device_add+0x828/0x1490 [ 247.704897] ? device_private_init+0x190/0x190 [ 247.704909] ? input_register_device+0x467/0xb20 [ 247.704920] input_register_device+0x60d/0xb20 [ 247.704936] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 247.704947] ? uinput_request_submit.part.0+0x290/0x290 [ 247.704967] ? __might_sleep+0x93/0xb0 [ 247.737790] ? __fget+0x210/0x370 [ 247.737809] ? uinput_compat_ioctl+0xa0/0xa0 [ 247.737819] uinput_ioctl+0x4a/0x60 [ 247.737829] do_vfs_ioctl+0x7ae/0x1060 [ 247.737842] ? selinux_file_mprotect+0x5d0/0x5d0 [ 247.746152] ? lock_downgrade+0x6e0/0x6e0 [ 247.746166] ? ioctl_preallocate+0x1c0/0x1c0 [ 247.746179] ? __fget+0x237/0x370 [ 247.746194] ? security_file_ioctl+0x89/0xb0 [ 247.838343] SyS_ioctl+0x8f/0xc0 [ 247.841896] ? do_vfs_ioctl+0x1060/0x1060 [ 247.846032] do_syscall_64+0x1e8/0x640 [ 247.850104] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 247.854960] entry_SYSCALL_64_after_hwframe+0x42/0xb7 11:57:29 executing program 3 (fault-call:5 fault-nth:52): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) [ 247.860140] RIP: 0033:0x459879 [ 247.863311] RSP: 002b:00007fd831d8ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 247.871003] RAX: ffffffffffffffda RBX: 00007fd831d8ac90 RCX: 0000000000459879 [ 247.878512] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 247.885776] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 247.893050] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd831d8b6d4 [ 247.900303] R13: 00000000004c460b R14: 00000000004d8938 R15: 0000000000000005 11:57:29 executing program 1 (fault-call:5 fault-nth:21): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 11:57:29 executing program 5: clone(0x41bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() getgroups(0x2, &(0x7f00000006c0)=[0xee01, 0xee01]) setresgid(0x0, 0x0, r1) unshare(0x30010000) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x4206, r0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x2400, 0x0) write$P9_RSTATFS(r2, &(0x7f0000000040)={0x43, 0x9, 0x2, {0x8b6, 0x7ff, 0x9, 0x8, 0xa928, 0xfffffffffffffb35, 0x3, 0x3, 0x100}}, 0x43) [ 248.004807] input: syz1 as /devices/virtual/input/input350 [ 248.026203] FAULT_INJECTION: forcing a failure. [ 248.026203] name failslab, interval 1, probability 0, space 0, times 0 [ 248.048237] input: syz1 as /devices/virtual/input/input352 11:57:29 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r1 = fcntl$dupfd(r0, 0x406, r0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f0000000000)=@generic={0x11, "b83d2f4205ba81275233e925c15f8f38259aea06c4640e7331d1ff5f27562cd1cc24301905fbacaf9677badcb8028a9e6b9ebea026f42cec4b50c6ae1fb0afca2aaf7e33e36a8b948bd9a55652b9751720b8afce48caf46f0890009677a31188edda826d95ba0eb6a705fed37deab74a3bebbd442a6702f3775c16736075"}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000100)="be77e90b98af6722316ec1f63c019b8da838f3317a47d28069d9466b", 0x1c}, {&(0x7f0000000480)="8d10422ae450e3402ac943bbdd79c02a22323c0a483c9fff903d94c3c2bc33702617f7199b6b3ffa7bcdd58d40428692ed47296769632c3f40eca822b9a9b9518b978d528ac1f0995f302e6fae22d71835f2b42e3dbdd53f03915f347727e424290650f955d8f948111c81b5dc3e0085d088fc6a22ed6d74ae1bd2fdff9ac44effd9606c512f010eb10e9ab7096b396689df77ea6a7e98c130fadf77109fddc50b7b149f6a14be66b671a9760546e5be9c5962949550c6d2f8fc924b58e29ecb185d48f146b888d8f9f365e87e7e6e4d0cb832e6c294fb55c1476ee2ed2b83", 0xdf}, {&(0x7f0000000140)="ccef4b2c1cd2907164e75958dc02b8109a6095733d654a54998bb5d0da95c0af49078ca50b17868c7219b03afcdc82de7ce2ebcbb49a153f242d5331d67c8f4d44bfb8d802162eb05b75bd295505e94c4335ff4d9feac16fe255668995b2dca6936e9d388756121cb44348d8f50d1786455d8a556ee6488adc54afd2e9fd0f6d1d3c2e229edd318914d6b22c5d68d10e177026dd95ad5911f795f4bd5de1a183194599a84187e87fc457bc52ad", 0xad}, {&(0x7f0000000580)="5f5fb2a72dd8396d3ba4b5f1731259bcea6315e677fefb4fb94a5fd2183c08146e82bcdc9f284325885283bd831500a213e4bbe783aff8ba5c21837d7d88d2dcc1566577898837204991b94aa29f6712b4df96580cb5327949f98059c9415db7a2f8db967de380af2214b183085b359b7a25f4214de3bb9d0e0ea2d688896308793d7794360caefe2f84a29d157f4a18988a9992d0b36e9329dc788f1c94c1b9b447b2303419898e26629b4f1d72c360354ecdaeb5c21c2f31d9916824235a1499c5e9e40a08bfeb621f9eb2b8831e59b02aae6d9699b08b46b9ce70fc0c2f4c786679cd222f1ac64cd693e59d847fc828b3db66d8107b2f", 0xf8}, {&(0x7f0000000680)="7b4f4b29caea82a9c5e8827390a17e0176a438ecc94ae920a3408c0967dde9c78d0aa8050eea2720eb257b905a84307243f64243580ec35bb525b144c5db64918443539dfd0c36d2285b31cacab75bbb48cc7d623248138566863a97d2d852fdf3b02b7edffd1f5d2e1a3cb011f05a985e1ed4bd71570c0c9afc34542a25275a9742a4b4982f1075baf345df4ee867f141a2a1e6abfabff5006d2fff13e7ad0211eb22387dff5b1f94e891fadc751707fc4dae418da90074cf03c48bee767fba7851d5825dc1cbc20b14ff17b6bbe7a96bfde4d3a31b266b", 0xd8}, {&(0x7f0000000340)="95320513599b8f3b619b3c9cf56308acd8d4b899eaa5ed8c59730b313e7ce451e0763b0900e9ea86d1c3fe27007b519a805e8406c06e2e2cf2bd3888bb311cfa9e27d4e957f783bbbe3126d53f8f8a8917e5bc8dbcb18a1a16234b194abec85704a531365dcfabc7505ac934a1f0637ec23c5bd022ef65e4d6b743a6df13af43b18f2274ae699d0775c191fbbbb33fbfa8", 0x91}], 0x6, &(0x7f0000000800)=[{0x40, 0x1, 0xffff, "168c695c502cb19a27e92bf413e9acc2405adc7ca9e5deac4346c87cebf8f869eb003b6f6ce56fca747ea8025f"}, {0x48, 0xb63842a537b52124, 0x0, "ec5c96b32b4a1a0b44d5f670d03eaa66e3868596f1b28474ad022803c2d38771fd83b6ec0feed09c25c55ebe32f561ed4ce193bba1"}, {0x30, 0x29, 0x6, "d953fa25d62ec616773f02b031290739ae460ebabe6172956ddf"}, {0x18, 0x10a, 0x6, "11ccd6b63d6eca"}], 0xd0}, 0x40000) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) [ 248.067637] CPU: 1 PID: 11435 Comm: syz-executor.1 Not tainted 4.14.140 #36 [ 248.074780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 248.084147] Call Trace: [ 248.084169] dump_stack+0x138/0x197 [ 248.084187] should_fail.cold+0x10f/0x159 [ 248.084205] should_failslab+0xdb/0x130 [ 248.094668] kmem_cache_alloc+0x2d7/0x780 [ 248.094680] ? wait_for_completion+0x420/0x420 [ 248.094697] __kernfs_new_node+0x70/0x420 [ 248.094709] kernfs_new_node+0x80/0xf0 11:57:29 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fuse\x00', 0x2, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x3, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f00000001c0)=0x4, 0x4) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000180)={&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000100)=""/109, 0x6d}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="66643d1cfa542b90790da59b7901dfae6273334c713b8faec13aed6bc79623d4520d24ea3e1b4e190c18d39063fe2b50bd71109ace9323f3de7ff8ee50c90e5d070635400e2d28314a4153fe4e13542a34b6b8972bb4b1ec2ca7c7bb88c6bdb92077289ca394a9d12e40320cbac4cd68fb2c", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) [ 248.112360] __kernfs_create_file+0x46/0x323 [ 248.112375] sysfs_add_file_mode_ns+0x1e4/0x450 [ 248.112389] internal_create_group+0x232/0x7b0 [ 248.112404] sysfs_create_groups+0x97/0x140 [ 248.112416] device_add+0x828/0x1490 [ 248.112429] ? device_private_init+0x190/0x190 [ 248.143067] ? input_register_device+0x467/0xb20 [ 248.147841] input_register_device+0x60d/0xb20 [ 248.152446] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 248.157797] ? uinput_request_submit.part.0+0x290/0x290 [ 248.163261] ? __might_sleep+0x93/0xb0 11:57:29 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x60000, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000100)={0xfffffffffffffe71, 0x6, 0x0, {0x3}}, 0xffbb) [ 248.167184] ? __fget+0x210/0x370 [ 248.170654] ? uinput_compat_ioctl+0xa0/0xa0 [ 248.175348] uinput_ioctl+0x4a/0x60 [ 248.179076] do_vfs_ioctl+0x7ae/0x1060 [ 248.182982] ? selinux_file_mprotect+0x5d0/0x5d0 [ 248.187925] ? lock_downgrade+0x6e0/0x6e0 [ 248.192088] ? ioctl_preallocate+0x1c0/0x1c0 [ 248.196507] ? __fget+0x237/0x370 [ 248.199977] ? security_file_ioctl+0x89/0xb0 [ 248.204397] SyS_ioctl+0x8f/0xc0 [ 248.207778] ? do_vfs_ioctl+0x1060/0x1060 [ 248.211939] do_syscall_64+0x1e8/0x640 [ 248.215875] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 248.221178] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 248.221186] RIP: 0033:0x459879 [ 248.221194] RSP: 002b:00007fd831d8ac78 EFLAGS: 00000246 [ 248.229951] ORIG_RAX: 0000000000000010 [ 248.229958] RAX: ffffffffffffffda RBX: 00007fd831d8ac90 RCX: 0000000000459879 [ 248.229968] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 248.229975] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 11:57:29 executing program 2: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/108, 0x6c}], 0x1) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x2, 0x2) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f00000000c0)) [ 248.229981] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd831d8b6d4 [ 248.229987] R13: 00000000004c460b R14: 00000000004d8938 R15: 0000000000000005 11:57:30 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000040)=0x9, 0x4) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) 11:57:30 executing program 1 (fault-call:5 fault-nth:22): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 11:57:30 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x400, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0xa) read$FUSE(r0, &(0x7f0000000480), 0x1000) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) [ 248.336638] FAULT_INJECTION: forcing a failure. [ 248.336638] name failslab, interval 1, probability 0, space 0, times 0 [ 248.368578] CPU: 1 PID: 11436 Comm: syz-executor.3 Not tainted 4.14.140 #36 [ 248.375725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 248.375730] Call Trace: [ 248.375748] dump_stack+0x138/0x197 [ 248.375765] should_fail.cold+0x10f/0x159 [ 248.387701] should_failslab+0xdb/0x130 [ 248.387716] kmem_cache_alloc_trace+0x2e9/0x790 [ 248.387733] evdev_connect+0x76/0x4a0 [ 248.395501] input_attach_handler+0x154/0x1a0 [ 248.395519] input_register_device.cold+0xbf/0x202 [ 248.395535] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 248.408360] ? uinput_request_submit.part.0+0x290/0x290 [ 248.408386] ? __might_sleep+0x93/0xb0 11:57:30 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x5cbde4be88586963, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) [ 248.414319] input: syz1 as /devices/virtual/input/input353 [ 248.418128] ? __fget+0x210/0x370 [ 248.418146] ? uinput_compat_ioctl+0xa0/0xa0 [ 248.418157] uinput_ioctl+0x4a/0x60 [ 248.451075] do_vfs_ioctl+0x7ae/0x1060 [ 248.451088] ? selinux_file_mprotect+0x5d0/0x5d0 [ 248.451098] ? lock_downgrade+0x6e0/0x6e0 [ 248.451108] ? ioctl_preallocate+0x1c0/0x1c0 [ 248.459809] ? __fget+0x237/0x370 [ 248.459828] ? security_file_ioctl+0x89/0xb0 [ 248.476231] SyS_ioctl+0x8f/0xc0 [ 248.479604] ? do_vfs_ioctl+0x1060/0x1060 [ 248.483833] do_syscall_64+0x1e8/0x640 [ 248.487919] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 248.492798] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 248.498018] RIP: 0033:0x459879 [ 248.501186] RSP: 002b:00007fc30efd4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 248.508897] RAX: ffffffffffffffda RBX: 00007fc30efd4c90 RCX: 0000000000459879 [ 248.516168] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 248.523443] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 11:57:30 executing program 3 (fault-call:5 fault-nth:53): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) [ 248.530754] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc30efd56d4 [ 248.538035] R13: 00000000004c460b R14: 00000000004d8938 R15: 0000000000000005 [ 248.550314] input: failed to attach handler evdev to device input352, error: -12 [ 248.561216] input: syz1 as /devices/virtual/input/input354 11:57:30 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d30303030512b9a6a3030303030303030303034303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) [ 248.629772] input: syz1 as /devices/virtual/input/input355 [ 248.675298] FAULT_INJECTION: forcing a failure. [ 248.675298] name failslab, interval 1, probability 0, space 0, times 0 [ 248.686966] CPU: 1 PID: 11478 Comm: syz-executor.3 Not tainted 4.14.140 #36 [ 248.694081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 248.694088] Call Trace: [ 248.694104] dump_stack+0x138/0x197 [ 248.694121] should_fail.cold+0x10f/0x159 [ 248.706576] should_failslab+0xdb/0x130 [ 248.706590] kmem_cache_alloc_trace+0x2e9/0x790 [ 248.706608] evdev_connect+0x76/0x4a0 [ 248.714360] input_attach_handler+0x154/0x1a0 [ 248.714376] input_register_device.cold+0xbf/0x202 [ 248.714395] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 248.718530] input: syz1 as /devices/virtual/input/input356 [ 248.723175] ? uinput_request_submit.part.0+0x290/0x290 [ 248.723202] ? __might_sleep+0x93/0xb0 [ 248.723212] ? __fget+0x210/0x370 [ 248.723224] ? uinput_compat_ioctl+0xa0/0xa0 [ 248.723232] uinput_ioctl+0x4a/0x60 [ 248.723243] do_vfs_ioctl+0x7ae/0x1060 [ 248.731630] ? selinux_file_mprotect+0x5d0/0x5d0 [ 248.731642] ? lock_downgrade+0x6e0/0x6e0 [ 248.731653] ? ioctl_preallocate+0x1c0/0x1c0 [ 248.731663] ? __fget+0x237/0x370 [ 248.731679] ? security_file_ioctl+0x89/0xb0 [ 248.741817] SyS_ioctl+0x8f/0xc0 [ 248.741826] ? do_vfs_ioctl+0x1060/0x1060 [ 248.741840] do_syscall_64+0x1e8/0x640 [ 248.741848] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 248.741865] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 248.741872] RIP: 0033:0x459879 [ 248.741879] RSP: 002b:00007fc30efd4c78 EFLAGS: 00000246 11:57:30 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000140)={0xa08, {{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, {{0xa, 0x4e24, 0x6, @mcast1, 0x5}}}, 0x108) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) [ 248.752838] ORIG_RAX: 0000000000000010 [ 248.752845] RAX: ffffffffffffffda RBX: 00007fc30efd4c90 RCX: 0000000000459879 [ 248.752850] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 248.752855] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 248.752861] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc30efd56d4 [ 248.752867] R13: 00000000004c460b R14: 00000000004d8938 R15: 0000000000000005 [ 248.754240] input: failed to attach handler evdev to device input355, error: -12 11:57:30 executing program 5: clone(0x41bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() getgroups(0x2, &(0x7f00000006c0)=[0xee01, 0xee01]) unshare(0x30010000) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x4206, r0) [ 248.875174] input: syz1 as /devices/virtual/input/input357 11:57:30 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video35\x00', 0x2, 0x0) signalfd4(r0, &(0x7f0000000180)={0x4}, 0x8, 0x800) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="6ad55183490719eceedf346964"]) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x6}, 0x18) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000340)={0xc0000000, 0xb, "db8f5ebfe3c6bc527ae9e4581276cdb7b20def6c901714e894c593c51029059f", 0x4, 0x8, 0x1, 0x7, 0x3, 0x7, 0xfffffffffffffffd, 0x100000000, [0x80, 0x11, 0x3, 0x5]}) 11:57:30 executing program 3 (fault-call:5 fault-nth:54): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 11:57:30 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) [ 248.933538] input: syz1 as /devices/virtual/input/input358 11:57:30 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='fuse\x00', 0x1020000, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d30303030303049303030303030303030303034453030302cf57365725f9b643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',allow_other,\x00']) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) 11:57:30 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x6, 0x80000000000003, 0x3}, 0x2c) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) r2 = syz_open_dev$vbi(0x0, 0x0, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000180)=0xc) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)=0xa31) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @remote, 0x5}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) socket$tipc(0x1e, 0x2, 0x0) sendto(r4, &(0x7f0000000200), 0x40900, 0x0, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000340)={0x18fb40000000000, {{0xa, 0x4e22, 0x7, @mcast1, 0x1}}}, 0x84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0485510, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000300)={'bcsf0\x00', 0x0}) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x3) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/policy\x00', 0x0, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, &(0x7f0000000080)={0x64, 0x0, 0x3ff, 0x103}) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x402c560b, 0x0) r5 = dup2(r0, 0xffffffffffffffff) ioctl$KVM_GET_REG_LIST(r5, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0400000002000000e13f0000001c0000070000000000000005000000000000000500000000000000"]) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000140)={0x0, 0x0, 0x1, r8, 0x3}) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x2, r8, 0x2}) [ 249.020613] input: syz1 as /devices/virtual/input/input359 [ 249.045945] input: syz1 as /devices/virtual/input/input360 [ 249.055708] input: syz1 as /devices/virtual/input/input361 11:57:30 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x9948421d3f482c37, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) [ 249.131412] FAULT_INJECTION: forcing a failure. [ 249.131412] name failslab, interval 1, probability 0, space 0, times 0 [ 249.149326] CPU: 1 PID: 11508 Comm: syz-executor.3 Not tainted 4.14.140 #36 [ 249.156580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 249.166046] Call Trace: [ 249.166065] dump_stack+0x138/0x197 [ 249.166085] should_fail.cold+0x10f/0x159 [ 249.166099] should_failslab+0xdb/0x130 [ 249.166110] __kmalloc+0x2f0/0x7a0 [ 249.172314] ? lock_downgrade+0x6e0/0x6e0 [ 249.172322] ? mutex_trylock+0x1c0/0x1c0 [ 249.172335] ? kobj_map+0x70/0x3c0 [ 249.172346] kobj_map+0x70/0x3c0 [ 249.172353] ? __lockdep_init_map+0x10c/0x570 [ 249.172364] ? cdev_get+0xa0/0xa0 [ 249.207414] ? mount_fs.cold+0x4d/0x4d [ 249.211322] cdev_add+0x91/0xf0 [ 249.211335] cdev_device_add+0x8e/0xf0 [ 249.211350] evdev_connect+0x39f/0x4a0 [ 249.211363] input_attach_handler+0x154/0x1a0 11:57:30 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={0x0}, &(0x7f00000003c0)=0xc) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000940)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = add_key(&(0x7f0000000ac0)='syzkaller\x00', &(0x7f0000000b00)={'syz', 0x0}, &(0x7f0000000b40)="727e5b3a03662504d92c0e5ee571b5a5f286ffe7838e1731b6744c4de4c6849a301e15de06962b226628ae1e4a23e057ffaa90a8738da96b1c986e0ec4164ab165077ef40a77bf08ee5b5136a6269188623b76b50207df390d39475157eed60fba05b79bd2149efa511cf143a32af0036f85", 0x72, 0xfffffffffffffffc) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, &(0x7f0000000bc0)='syz1\x00', &(0x7f0000000c00)) r5 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f00000009c0), &(0x7f0000000a40)=0x60, 0x80800) kcmp(r0, r1, 0x0, r2, r5) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) r7 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x20000000000001ff, 0x7131c3) ioctl$int_out(r3, 0x5460, &(0x7f0000000a80)) ioctl$TIOCMBIS(r7, 0x5416, &(0x7f00000000c0)=0x1) write$uinput_user_dev(r6, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r8 = dup(r6) ioctl$UI_SET_SWBIT(r8, 0x4004556d, 0x3) accept$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0}, &(0x7f0000000180)=0x14) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f0000000280)={{{@in=@multicast2, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4e24, 0x40, 0x4e23, 0x4, 0xa, 0x20, 0x80, 0xb5e71e41d4d383a, r9, r10}, {0x2, 0xffff, 0x10001, 0xff, 0x401, 0x80000001, 0x80}, {0x2, 0x4, 0x3, 0x7fffffff}, 0x10001, 0x0, 0x0, 0x1, 0x2, 0x3}, {{@in=@broadcast, 0x4d2, 0x1a8cbc5c7a6d110f}, 0x2, @in=@multicast2, 0x34ff, 0x4, 0x0, 0x4, 0x5, 0x10000, 0x8}}, 0xe8) ioctl$VIDIOC_SUBDEV_G_EDID(r8, 0xc0285628, &(0x7f0000000040)={0x0, 0x1f, 0x2, [], &(0x7f0000000140)=0x100}) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x19) ioctl$KVM_GET_REGS(r7, 0x8090ae81, &(0x7f0000000880)) ioctl$UI_DEV_SETUP(r8, 0x5501, 0x0) 11:57:30 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x400000, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000140)={'NETMAP\x00'}, &(0x7f0000000180)=0x1e) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="3946469746a3bc975f30fa", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) [ 249.211376] input_register_device.cold+0xbf/0x202 [ 249.211391] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 249.211403] ? uinput_request_submit.part.0+0x290/0x290 [ 249.211425] ? __might_sleep+0x93/0xb0 [ 249.218580] ? __fget+0x210/0x370 [ 249.218598] ? uinput_compat_ioctl+0xa0/0xa0 [ 249.218609] uinput_ioctl+0x4a/0x60 [ 249.218621] do_vfs_ioctl+0x7ae/0x1060 [ 249.218634] ? selinux_file_mprotect+0x5d0/0x5d0 [ 249.218642] ? lock_downgrade+0x6e0/0x6e0 [ 249.218654] ? ioctl_preallocate+0x1c0/0x1c0 [ 249.227011] ? __fget+0x237/0x370 [ 249.227033] ? security_file_ioctl+0x89/0xb0 [ 249.227046] SyS_ioctl+0x8f/0xc0 [ 249.227056] ? do_vfs_ioctl+0x1060/0x1060 [ 249.227068] do_syscall_64+0x1e8/0x640 [ 249.227079] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 249.242615] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 249.242625] RIP: 0033:0x459879 [ 249.242629] RSP: 002b:00007fc30efd4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 249.242641] RAX: ffffffffffffffda RBX: 00007fc30efd4c90 RCX: 0000000000459879 [ 249.242647] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 11:57:31 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000000)=""/88) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) sendmmsg$alg(r1, &(0x7f0000001340)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="8b2b49e3bd14b7ca1bf3aa13a7834380debad79cd6f67ebe4b275f36c3c19b0aded39312c575a1eb9b5a70d5425668b3c4bb4539f5b7294c1546bf73489bf297976667a86f1c7b13563b6f4a295a0ce4", 0x50}, {&(0x7f0000000200)="9972fc50cee9e5d5664f87e566af3ba01ab72b253363e93a3105fda824a3da919bbb13148f35ce7345561f605d6dc7f0902417e0f2839935b8a25121654488f7a74d49f1f294799f6213d7515a2c4f05192e658f55b3b69dd99bb52f2866af569f503aa0bbf69ee6214b6b76d8ddc399a06405ef77", 0x75}], 0x2, &(0x7f00000002c0)=[@assoc={0x18, 0x117, 0x4, 0x5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x800}, {0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000300)="14270ec408af68f5a6a611b09ea031c63ff1f94810e4fe7cfabf27b69c0a34f8fea70678a3dbc32dd451f3ab6607bdbce7ae70c42cadbe2a246ff4a787ada7afe89de0c1b8525945e540c04a531b89e3d41d846e99ba45fc99e5a4127a086838d4f33c9879f28c00a55c3896985a33648f994be83845d394bcfe8026ec4a9890f44e7c6aa2c54d90eb07b4467c9ac7d4601e5fe1bc7f73d53329d88149bf30c68d6ba8f7", 0xa4}, {&(0x7f0000000880)="d350d029f0a4d4cc0133907f0ac8b6cb73f1f88f75e42fc361daff041c17e05039d5de9ad17b5e1f9e010664f108003bc38d9c25e973335b0394bb8ee41901e3aaedee538a4188e88dcd6b331263d0e5b1cb4324bf33def23b4e5239ede165ed661aa868b98832553997afac5f19d012474c7277fe63e88edb76b6e99a342efad0b079448e881c0eee871046b43250d3dbc71146b55037acb597c72608e8ae2db4bc0d525600cfd8", 0xa8}, {&(0x7f00000003c0)="cec0ae2539fccc80f54a6f3389c034e2d4add2b7b13876ba610b909b6636098d627c043789ec1b9eedbcdaeae148b51bc594cbf65a8b5fd7f22b3994cedb", 0x3e}], 0x3, &(0x7f0000000980)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18}], 0x30}, {0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000009c0)="82f414c0ce8349568c1599795127ed309b88d11f6516e963ed70bf99caf6e6b337d247864834ffbf0d89d046a0c07ab68adda008bec36f38cbe60404b042040cc02b61f6f1855f1b7930032737951f80d515f73922bcc6d097a848ea3a3323a388e8c5a34edd5a77d62f13a092db30942eaede58af22081c9b09a793c4ffb2784735a29d002915d7fe9dbe03dc663f3985699b8ba6172bb0d38885c664d3df549656c2531f11df04fcf50ec0d7490d49f751e9d0ce1fc600c174ec6de102d76f171ae0a3dd3094eba0f9c9b22d2be491d133acf89e71fd16c59464de10050558c8645d3d0f4a54c398a6c8f626e0f1428a207efa", 0xf4}, {&(0x7f0000000ac0)}], 0x2, &(0x7f0000000b40)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0x78, 0x117, 0x2, 0x61, "bea10c0e8083300622308063ad8bad3a7e8dfa64e1fd51bfc5e98db6eaa0e0bc9b2d2e58fcaf4397520059e4b22f2c87cc8f45076f2049589e7d1ec30b6240041ac8a7bd04400a009f47236492ff847f955e8ace72ce1e4c40be6fd02f3bf028a9"}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0xf82}, @iv={0x18}, @assoc={0x18, 0x117, 0x4, 0xfffffffffffffc6d}, @assoc={0x18, 0x117, 0x4, 0x4}], 0x120, 0x20000000}, {0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000c80)="f8b608b2b40bc33ec2e99d483302317992c180411d2f5789de3159b4986055f1f97737b03947210677df44bdf6374361f9c42a73365e6c923988a7f856fa0b9c19401ca7825f67531adc947c797c707f9bc75f138ca1e3253c2dfa1a24b31b7524c438552ba32c6f83c49a8b6f4e3e901d2ec89f6f3fdc8c4da98049b12816f547b143e6e05d8b210258efb6b9c6571254117f425e72f5485c707199b7f5ce77ef33efd76aa9b7cc1b14d79a24", 0xad}, {&(0x7f0000000d40)="1e797e2586122b673732a9b51833af50271713dbfbd068fed7d18180", 0x1c}, {&(0x7f0000000d80)="86155787817894552d0e17c95b34e6ba1096be5fd778f9c8cbde4c764f0c5c33a6d051f832acb58122f23284cf120b7eabd320657eee8570428063b9694e403fbcf0fdc3c8de1601b4c3220517793729690eb141555615687a46a502f15ce14b90241c1ac098ffeb70e3d2561aec0ad8d63d2959582115b61bb541a44302fd", 0x7f}, {&(0x7f0000000e00)="cbb964dd24fd677c2fb4931937804de6db01e57d272d8a3d68ddcda3a9797f490419ceacedf64c8063c996817e0e15d92b78c0f1590faaab13aa41bd9d95f7f81e215a01c0006851974390b08279853e39a351760b6b94ba5986362d1cd3df7cf48bb73cc7e7c61670d86f40edd62dfc0fbb0945050d7ee7b10b8af9d0aca0e4e8be749a9cdd777f5a0187a396e3e333a104c100068fba0e0c6988", 0x9b}], 0x4, &(0x7f0000000f00)=[@assoc={0x18, 0x117, 0x4, 0x3}], 0x18, 0x800}, {0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000f40)="a10db61859ff7d7ffe3cfa8891", 0xd}, {&(0x7f0000000f80)="6e8f2942b636606998b72c2d46c16db9099564a44ef081435e3da1d0279241515737a6f9984aa26affbcddcb8ca8409f8b37bbb5d51ff688bb72bd1e35a55b9152f71d7d84303a3ec0a5d2aa9d54a9e07e0eab8786a47e6d6fa063c0511978e7954bb1120e661d1f14d4b10bbb961c762ef89a72f680b45215cef36e2bc520bfcec5e007da049eaf1e5dec4833530c013cc939af3814c6a3ba68131b45e513bd0c2002154c9e4c30f25930a8c1b473abe94991f8a4b44ab65b68376a8bb1fc48bd7e7df35cc5af2a4921915a2867fabcb210c5f45227cf9ed225bee0", 0xdc}, {&(0x7f0000001080)="ba4efaa938f4b3e36334f54eeb2a7fa520", 0x11}, {&(0x7f00000010c0)="62a3ea0e08c52a7343359e28b4eda829d491d72503922aa432bb3ac894101ddf5059ca125c3a01b503fec841d31d891c79fbd671fad8b36bafe8f0ee753711483cb7f8211b64c887bc1703f74cfcbedd8b06cd52a33e3d95af50b9756d9cd0a2f19deaae29c331e7530d56bdf720beca9b84496c5d84715427e25630f21ebeb5c0c450bc74357d4ef8b1bd8778587988bf8f11404d", 0x95}, {&(0x7f0000001180)="d74082df0dcaa69b1d31345cbfc5d579a18ad7970ffeca99d57bf178a3c8b8cf8f4af9792df58c6de8f14e83ca571fe46d109e81175562c9dafcbd83f6a3", 0x3e}, {&(0x7f00000011c0)="cd54487dc6cc94571ed486a18458cc3d6ed3a8b8594808be137482d05fd38e0f7714ffc13dc77fe7719804596e9f890845b1b6d33d52ce12562ea24ad0acf18ab30d0e68a1c3d626e44ce16a089fa88be3c6c5c264bdbec439173eacf81779355e004fe469006c501aff977200676e79bb51790e94aa824273561494c18ce94f4ba710985ab2d7368b844d51e039c626c2cc95e4fdc6135827fe5447e0f05e2e147a10c78c8462198c068dca9a25417bba23a78829c4b8", 0xb7}], 0x6, &(0x7f0000001300)=[@op={0x18}], 0x18, 0x8000}], 0x5, 0x20044000) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000140)={0x9, &(0x7f0000000080)=[{0xdd6, 0x6f1, 0xfff, 0x22e8412b}, {0x800, 0x3ff, 0x401, 0x10000000000}, {0x1f, 0x9, 0x8, 0x1}, {0x8, 0x3ff, 0x9, 0x8}, {0x8001, 0xd784, 0x2}, {0x59, 0x3, 0x2e6, 0x3}, {0x9, 0x4, 0x8, 0x7}, {0x3, 0xfffffffffffffc00, 0xfff, 0xed96b4f}, {0xcbba, 0x9, 0x7, 0x80}]}, 0x10) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 249.242653] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 249.242659] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc30efd56d4 [ 249.242666] R13: 00000000004c460b R14: 00000000004d8938 R15: 0000000000000005 [ 249.268714] input: syz1 as /devices/virtual/input/input363 [ 249.412050] input: syz1 as /devices/virtual/input/input364 11:57:31 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = dup3(r0, r0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f00000000c0)={{0x1, 0x3, 0x0, 0x3, 0x2}, 0x7, 0x5, 0xba3}) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) 11:57:31 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cebffffffff55277cdef9d27b87fc271d76985ed6307903f90cbe3413f84cf7f51fd858067fb3a5a3c775be2b3bbc863804ef76b950fa2d4c64f2f8d25b3ae64ef7dc7485b5dbb6d2127d722f3301c61b48c7ea2e94405dfca0bace16e7acbdb7efcfbc8e4eaa2a97760ec529c28a5df8aa5a69fced92ef7aaa6b8f9d68c979c7ee8e38d5e9e5023aa0628462377971deb4516abc0edc34184884d4b44022a60198b7624599f1db38fd6f", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) [ 249.570163] input: failed to attach handler evdev to device input361, error: -12 [ 249.634625] input: syz1 as /devices/virtual/input/input365 11:57:31 executing program 5: clone(0x41bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() getgroups(0x2, &(0x7f00000006c0)=[0xee01, 0xee01]) setresgid(0x0, 0x0, r1) unshare(0x3c010b00) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x4206, r0) 11:57:31 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff}) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x7) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000080)={0x18, 0x6}, 0x18) 11:57:31 executing program 3 (fault-call:5 fault-nth:55): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 11:57:31 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x7f}, &(0x7f0000000040)=0x8) write$capi20(r1, &(0x7f00000000c0)={0x10, 0x80000000, 0x4, 0x83, 0x9, 0x3}, 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000080)={r2, 0x4, 0xfff}, 0x8) 11:57:31 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x200000, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x27}, 0x5}, 0x1c) prlimit64(r0, 0x0, &(0x7f00000000c0)={0x400, 0x2}, &(0x7f0000000100)) r2 = socket(0xa, 0x80005, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000200)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, r3, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x1}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x800}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x485}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4080}, 0x4000000) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000000)={'vxcan1\x00', 0xfffffffffffffffd}) 11:57:31 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) getresgid(&(0x7f0000000040)=0x0, &(0x7f00000001c0), &(0x7f00000003c0)) stat(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00)) r1 = getuid() r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000c40)='/selinux/status\x00', 0x0, 0x0) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f0000000400)=0x100000000) mount$fuse(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x40, &(0x7f0000000b40)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r0}, 0x2c, {[], [{@pcr={'pcr', 0x3d, 0x38}}]}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x141200, 0x0) statx(r3, &(0x7f0000000100)='./file0\x00', 0x400, 0x800, &(0x7f0000000480)) write$capi20_data(r3, &(0x7f0000000580)={{0x10, 0x3ff, 0x4, 0x81, 0x1, 0x101}, 0xf3, "60afe9e88b54164d6d7cafe7d4b141e2d00f5b7127aa40f5c260d3444b5e26a359507e84d265961fa13e2a4d60215ade60d3f649ef9476576c859adc5010d3163f8cabcbbd0543a4b04412345fe87b4cfcfb406561266a4bd7324996baed9d3e226e9cda850a511580f2034adca7cf483f27850e4b7164077c8b0bf2f9e334a7d822c02efff43c95f086147e4407656aafafb5d450e4f9acda3f5ef28dfaa53409cddf4f93ec3a0a21af6daf4f085ec3b67371e6cf655272593268f2b3fd7d8aaf94622fef6c81238d30282d376c970df8ab138407e1ec472f9a3a941f8f61c9158209e905018d8bfbcceb0312c3a5abf75b47"}, 0x105) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x12000000, 0x7, &(0x7f0000000840)=[{&(0x7f00000006c0)="52e8b957d94f76195c02e55f75a37d30cdac1e202ece07ddced8964d5427524d3b707d7491da72d4251b69e74ea3ceca231fdba957057e4a8fa7c6c5f05a659159106408200d35ac8423c485f749540c88f38a2437d3340030db1b76657923963b8f8c49d7247066784e0bc02dcc530580bc0cdbd00f5b704df97a06a465782cc5c00fcbe0658f118feb8d43e6bf87fc23446dcaefc8a7590f3e4dd28b9c55eac9812b636eadd0bb6d8769d51f0c5c4fd033b240d7359527c2508b742ea6727aedc6683d9f30b02d1992340673fec52e984cfe6009f11150a577ca335b06e8935a614cf8aaef7ec31c8551", 0xeb, 0x1}, {&(0x7f00000001c0), 0x0, 0x3}, {&(0x7f0000000240)="cb6693e05998a79a8e6f9d65fe879ea1d681d81d3eca02c3f79bee818d45963937493fc64dbdea40c9a7ded7f3d373af20f9d4fa1e153c9f4bd241a5d4862069f0831635dee865bcb7a6239e645e4b20", 0x50, 0xfffffffffffffffd}, {&(0x7f0000000340)="b7ea5768cff71e37d83a11f273f83be039356df5472ea627db1c1038c54c68e29ab530a227a3f439dee52a616bf6a165a217ea3ba405a460e26fd1722aff547dd694250a6c115a", 0x47, 0x2e5}, {&(0x7f00000002c0)="bfbac6ea080dbb36a898aa", 0xb, 0x1}, {&(0x7f00000007c0)="85dd4aab4178d97e56120fa62c7803fa80ffbba47334b593f0b9b16474d0fb1016c1f0de2c0ececaf6f91343729fb16810b8a6e6a18970770e9b65da215407810277cfce5608bf5b6068d1f853295e93b1402d227eb51dd9ec12c28a5a980cf94cfa61b68e0e57a465", 0x69, 0x80000001}, {&(0x7f00000003c0), 0x0, 0x6}], 0x1000000, &(0x7f0000000900)='rootmode') geteuid() write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x6}, 0x18) [ 249.765944] input: syz1 as /devices/virtual/input/input366 [ 249.794619] vxcan1: Invalid MTU -3 requested, hw min 0 11:57:31 executing program 2: syz_mount_image$ext4(&(0x7f00000001c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaaaf9, &(0x7f0000000100)=[{&(0x7f0000000140)="800000003804000019000300e60100006c000000000000000100000001000000005300000040000080000000000000006d5ebe5a0000ffff53ef", 0x2f0, 0x400}], 0x200000, 0x0) r0 = dup(0xffffffffffffffff) ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000040)={0xfffffffffffff3d2, 0x8000, 0x20}) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000180)=0x8) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x2}) [ 249.815753] input: syz1 as /devices/virtual/input/input367 [ 249.831319] input: syz1 as /devices/virtual/input/input368 [ 249.843340] vxcan1: Invalid MTU -3 requested, hw min 0 11:57:31 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc]}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 11:57:31 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="3a75b06cbea7df1220c52f2c00d7c019d84ad21007605bc0a02ee2ecf0f3ef9150ec76228b695cfffd725ae58f8fde31570f70d41c7891228f4dc8b2d4aca1b41a913566b993b9fb12b696f3d06764ead34f050e8c117bc59ccb4803104f3947842a5e506eb8a40d9974841793e554253fbc37bc3161a31e32ea7da1df769a71414b7c337b238f780e7fcfeb0dbfac84f9bd634db8aaa6488600a216f8eb46df5b3a5142489a308b39c5ceeccd8706bafa502ae67ab63d52787e74b42f3e35f17763e4192f00ea3583ebdc24289e1a0631c201804cd2ec6e1bdb5389168c0bc4b66eef9ef5a0a15141de1fcfb1e05d1bfd311537bad8", @ANYRESDEC=0x0, @ANYBLOB='\x00\x00']) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000040), &(0x7f0000000100)=0x4) [ 249.921962] FAULT_INJECTION: forcing a failure. [ 249.921962] name failslab, interval 1, probability 0, space 0, times 0 [ 249.958945] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 249.983191] CPU: 1 PID: 11575 Comm: syz-executor.3 Not tainted 4.14.140 #36 [ 249.983390] EXT4-fs (loop2): Invalid log block size: 101711873 [ 249.990338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 249.990345] Call Trace: [ 249.990365] dump_stack+0x138/0x197 [ 249.990381] should_fail.cold+0x10f/0x159 [ 249.990398] should_failslab+0xdb/0x130 [ 250.005727] kmem_cache_alloc_trace+0x2e9/0x790 [ 250.005743] ? rcu_read_lock_sched_held+0x110/0x130 [ 250.011930] ? __kmalloc+0x376/0x7a0 [ 250.011939] ? wait_for_completion+0x420/0x420 [ 250.011953] device_private_init+0x4a/0x190 [ 250.011962] device_add+0xd1a/0x1490 [ 250.011974] ? refcount_inc_not_zero+0x88/0xe0 [ 250.011984] ? device_private_init+0x190/0x190 [ 250.020076] ? refcount_inc+0x1f/0x40 [ 250.020088] ? kobject_get+0x60/0x70 [ 250.020100] cdev_device_add+0xa2/0xf0 [ 250.020112] evdev_connect+0x39f/0x4a0 [ 250.020123] input_attach_handler+0x154/0x1a0 [ 250.029933] input_register_device.cold+0xbf/0x202 11:57:31 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000480)={0x5, 0x6, 0x8, 0x0, 0x0, [{r0, 0x0, 0x10001}, {r0, 0x0, 0x95}, {r0, 0x0, 0x1}, {r0, 0x0, 0x2}, {r0, 0x0, 0x95}, {r0, 0x0, 0x4}, {r0, 0x0, 0x7}, {r0, 0x0, 0x5}]}) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xffffffffffffff00, 0x40) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) [ 250.034089] input: syz1 as /devices/virtual/input/input369 [ 250.038216] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 250.038229] ? uinput_request_submit.part.0+0x290/0x290 [ 250.096732] ? __might_sleep+0x93/0xb0 [ 250.096742] ? __fget+0x210/0x370 [ 250.096757] ? uinput_compat_ioctl+0xa0/0xa0 [ 250.104083] uinput_ioctl+0x4a/0x60 [ 250.104097] do_vfs_ioctl+0x7ae/0x1060 [ 250.104108] ? selinux_file_mprotect+0x5d0/0x5d0 [ 250.104122] ? lock_downgrade+0x6e0/0x6e0 [ 250.112130] ? ioctl_preallocate+0x1c0/0x1c0 [ 250.112144] ? __fget+0x237/0x370 [ 250.112160] ? security_file_ioctl+0x89/0xb0 [ 250.112171] SyS_ioctl+0x8f/0xc0 [ 250.112179] ? do_vfs_ioctl+0x1060/0x1060 [ 250.112194] do_syscall_64+0x1e8/0x640 [ 250.124958] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 250.124979] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 250.124990] RIP: 0033:0x459879 [ 250.133027] RSP: 002b:00007fc30efd4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 250.133037] RAX: ffffffffffffffda RBX: 00007fc30efd4c90 RCX: 0000000000459879 11:57:31 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x400600, 0x2) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000100)={0x9, 0x85, {0x54, 0x80, 0x6, {0x7, 0x4f7}, {0xb2, 0x6}, @period={0x5d, 0x6, 0x3, 0x3, 0x4, {0x0, 0x6, 0x81}, 0x5, &(0x7f0000000080)=[0x5, 0x8, 0x6, 0x3ff, 0x40]}}, {0x51, 0xd0, 0xda5d, {0xf3a, 0x1}, {0x2, 0x7}, @const={0x80000000, {0x1c, 0x1, 0x0, 0x6}}}}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0xffffffffffffff18, 0x6, 0x0, {0xfffffffffffffffe}}, 0x18) [ 250.133042] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 250.133047] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 250.133052] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc30efd56d4 [ 250.133057] R13: 00000000004c460b R14: 00000000004d8938 R15: 0000000000000005 [ 250.243774] input: failed to attach handler evdev to device input368, error: -12 [ 250.251847] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 250.274938] EXT4-fs (loop2): Invalid log block size: 101711873 11:57:31 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000100)=':\\/$\xe4\x00', 0xffffffffffffffff}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)='rootmode', 0xffffffffffffffff}, 0x30) perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0xffffffffffffff81, 0xffffffffffffff97, 0x1, 0x1, 0x0, 0x4, 0x40000, 0x1, 0x62cd, 0x7, 0x4bd0, 0xffffffffffff8001, 0x1ff, 0xffffffff80000000, 0x6, 0xffffffff7fffffff, 0x7ff, 0x7fff, 0x77e, 0x0, 0x6, 0x9, 0x10001, 0x5a2, 0x5e83, 0x4, 0x470d0d23, 0x5, 0xfff, 0x6, 0x9, 0x3, 0x40, 0x7f, 0xfffffffffffffc00, 0x7f, 0x0, 0x0, 0x4, @perf_config_ext={0xfff, 0x1}, 0xc54, 0x100000000, 0x2, 0xe, 0x501b, 0x8, 0x7}, r1, 0x9, r2, 0xa) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000240)={0x30, 0x5, 0x0, {0x0, 0x6, 0x961, 0x7fffffff}}, 0x30) socket$packet(0x11, 0x2, 0x300) [ 250.313791] input: syz1 as /devices/virtual/input/input370 [ 250.455141] input: syz1 as /devices/virtual/input/input371 11:57:32 executing program 5: clone(0x41bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() getgroups(0x2, &(0x7f00000006c0)=[0xee01, 0xee01]) setresgid(0x0, 0x0, r1) unshare(0x30010000) r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xa9f, 0x2000) setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, &(0x7f0000000080)={{0x6, 0x12000}, 0x2}, 0x10) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000140)={0xfffffffffffffffd, 0x2000000000009}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x84400, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, &(0x7f0000000000)={0x0, 0x8, 0x300f, 0x1}) ptrace(0x4206, r0) 11:57:32 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x402000, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000140)={0x20, 0x0, 0x0, {0x0, 0x0, 0x7, 0x8}}, 0x20) r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) ioctl$KVM_GET_NESTED_STATE(r1, 0xc080aebe, &(0x7f0000000880)={0x0, 0x0, 0x2080}) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') r2 = open(&(0x7f0000000200)='./file0/file0\x00', 0xf0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'vcan0\x00'}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000780)={{{@in6=@empty, @in6=@ipv4={[], [], @multicast2}, 0x4e20, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x20}, {0x80000000, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x2148}, {}, 0x5, 0x6e6bb8, 0x0, 0x0, 0x3, 0x2}, {{@in6=@local, 0x0, 0x2b}, 0xa, @in6=@empty, 0x3504, 0x2, 0x0, 0x9, 0x5, 0x8284, 0x80}}, 0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@empty, @in6=@initdev}}, {{@in6=@loopback}, 0x0, @in6=@empty}}, &(0x7f0000000440)=0xe8) sendmsg$nl_route_sched(r2, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x40000) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) renameat2(r1, &(0x7f0000000140)='./file0/file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x0) 11:57:32 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x802, 0x0) ioctl$int_in(r0, 0x5473, &(0x7f00000000c0)=0x131) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x80000, 0x0) ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000140)) r2 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r2, 0xc0305615, &(0x7f0000000080)={0x0, {0x7f, 0x2}}) r3 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0xfffbffffffffffff) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x9) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000280)=""/154, &(0x7f0000000340)=0x9a) 11:57:32 executing program 3 (fault-call:5 fault-nth:56): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 11:57:32 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="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"]) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80000, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, &(0x7f0000000040)={0x185e, 0x7, 0x10001, 0x8}) 11:57:32 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x400) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000000)={0x3, 0x7, 0x2, {0xa, @pix_mp={0x0, 0x6, 0x4745504d, 0x2, 0xdd09afbc56eb4da1, [{0x7, 0x8}, {0xfff, 0x100000}, {0x4, 0x2}, {0x25a8, 0x80000001}, {0x5, 0x3}, {0xe9cf, 0x400}, {0x8512, 0x7}, {0x8, 0x400}], 0xfff, 0x9, 0x6, 0x1, 0x7}}}) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0xe) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000180)=0x21e, 0x4) [ 250.603160] input: syz1 as /devices/virtual/input/input372 [ 250.619392] input: syz1 as /devices/virtual/input/input373 11:57:32 executing program 2: perf_event_open(&(0x7f0000000040)={0x1000000000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x909, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x4000) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) 11:57:32 executing program 5: clone(0x41bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() getgroups(0x2, &(0x7f00000006c0)=[0xee01, 0xee01]) setresgid(0x0, 0x0, r1) unshare(0x30010000) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x4206, r0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x10000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) getresuid(&(0x7f00000001c0), &(0x7f0000000200)=0x0, &(0x7f0000000240)) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@empty, @in6=@dev={0xfe, 0x80, [], 0x19}, 0x4e23, 0x4, 0x4e24, 0x80, 0x5dda300b39f173ee, 0x20, 0x20, 0x2c, r3, r4}, {0x6, 0xd59d, 0x8001, 0xffff, 0x5a, 0x1000, 0x5, 0x4}, {0x1ff, 0x5, 0x2, 0xffffffffffff7fff}, 0x7, 0x6e6bbb, 0x3, 0x0, 0x2, 0x3}, {{@in6=@loopback, 0x4d4, 0x7e}, 0x2, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3506, 0x3, 0x3, 0x5, 0x40, 0x2, 0x3}}, 0xe8) [ 250.649927] FAULT_INJECTION: forcing a failure. [ 250.649927] name failslab, interval 1, probability 0, space 0, times 0 [ 250.708049] input: syz1 as /devices/virtual/input/input374 [ 250.730672] CPU: 0 PID: 11635 Comm: syz-executor.3 Not tainted 4.14.140 #36 [ 250.737912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 250.747273] Call Trace: [ 250.749873] dump_stack+0x138/0x197 [ 250.753524] should_fail.cold+0x10f/0x159 [ 250.757682] should_failslab+0xdb/0x130 [ 250.761749] __kmalloc_track_caller+0x2ec/0x790 [ 250.766752] ? pointer+0xb10/0xb10 [ 250.770289] ? find_first_zero_bit+0x76/0x90 [ 250.774680] ? kvasprintf_const+0x5a/0x170 [ 250.778897] kvasprintf+0xa7/0x110 [ 250.782417] ? bust_spinlocks+0xc0/0xc0 [ 250.786673] kvasprintf_const+0x5a/0x170 [ 250.790717] kobject_set_name_vargs+0x5b/0x150 [ 250.795283] dev_set_name+0xa4/0xc0 [ 250.798892] ? device_initialize+0x430/0x430 [ 250.803287] ? __lockdep_init_map+0x10c/0x570 [ 250.807772] ? __lockdep_init_map+0x10c/0x570 [ 250.812264] evdev_connect+0x184/0x4a0 [ 250.816160] input_attach_handler+0x154/0x1a0 [ 250.820656] input_register_device.cold+0xbf/0x202 [ 250.825577] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 250.830840] ? uinput_request_submit.part.0+0x290/0x290 [ 250.836193] ? trace_hardirqs_on_caller+0x400/0x590 [ 250.841252] ? __might_sleep+0x93/0xb0 [ 250.845132] ? uinput_compat_ioctl+0xa0/0xa0 [ 250.849535] uinput_ioctl+0x4a/0x60 [ 250.853288] do_vfs_ioctl+0x7ae/0x1060 [ 250.857167] ? selinux_file_mprotect+0x5d0/0x5d0 [ 250.861902] ? lock_downgrade+0x6e0/0x6e0 [ 250.866035] ? ioctl_preallocate+0x1c0/0x1c0 [ 250.870519] ? __fget+0x237/0x370 [ 250.873956] ? security_file_ioctl+0x89/0xb0 [ 250.878345] SyS_ioctl+0x8f/0xc0 [ 250.881693] ? do_vfs_ioctl+0x1060/0x1060 [ 250.885834] do_syscall_64+0x1e8/0x640 [ 250.889702] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 250.894530] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 250.899962] RIP: 0033:0x459879 11:57:32 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_buf(r1, 0x29, 0xd2, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177915172) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 11:57:32 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="664b3d5f37f420af4e95d9d12c2d65354c9cdeca64451bffd593082ce5bddda47c79824fa847ef15e7e53979e0146096ab4bc134a514cf7e6d5b196044eba8a4a2405077f2b5778a4ef873007ae0ee1bc1f392849d258053ebb9bb8a866eca5f1393c454eec97c6e3a43ff4030", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r0, &(0x7f0000000340), 0x1000) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) [ 250.903132] RSP: 002b:00007fc30efd4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 250.910911] RAX: ffffffffffffffda RBX: 00007fc30efd4c90 RCX: 0000000000459879 [ 250.918362] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 250.925616] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 250.932871] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc30efd56d4 [ 250.940132] R13: 00000000004c460b R14: 00000000004d8938 R15: 0000000000000005 11:57:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4000000000c) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000180)="1f000000010a193b000007000000068100023b05090003000000403902aef5", 0x1f}], 0x1) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x1, 0xdba0, 0x7, 0x3, 0x3}, &(0x7f0000000040)=0x14) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/mls\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(r3, 0xc038563b, &(0x7f0000000140)={0x0, 0x0, {0x5, 0x101, 0x80000001, 0x7}}) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000080)={r2, 0x9}, &(0x7f00000000c0)=0x8) 11:57:32 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="66643d39714aa3e936af92f34a289ed46641d48b2662158980928be19a06586e5534b482d0b5c15b0cbc85d050173ece88c9c5d049c06196431d052d6e7ff4c28984000000000000", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions,blksize=0x0000000000000200,default_permissions,max_read=0x000000000000007f,\x00']) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) r1 = fcntl$dupfd(r0, 0x5c01282964bcb2cb, r0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x5890e183013bea5e}}, 0x20) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000100), &(0x7f0000000140)=0x40) ioctl$VFIO_IOMMU_GET_INFO(r1, 0x3b70, &(0x7f00000002c0)={0x10}) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000240)={0xb, 0x10, 0xfa00, {&(0x7f0000000340), r2, 0x7}}, 0x18) 11:57:32 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$btrfs(&(0x7f0000000040)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x2, 0x5, &(0x7f0000000600)=[{&(0x7f00000003c0)="5b58b50d94dca306b589e26365b9c1f9f6a3c42957b617f7d6489f33a6cc1cf5852e75e627c323e02a06dfc0c479dc779c0b6bf0e27aa5fd38a73900855556e1587528aae2d7d0fa984596e986", 0x4d}, {&(0x7f0000000440)="88c653e7f86a9c92b1ac1dfa995c802b2bdf3628d5314d55855e0a98a7bb3a14083b80fd59f858d02936f9d3e7bd3d30522a985b4698056a31178c7c69c53d21d7066583a8d13e2312a0fe80acb0295558f00d6de21c707410e1548eca09994d644775c2279028d077af0677353c695dad4dd2ba594f248235e7b858c779c911ece00b00e5de10b14948b21edb0109fc5bf16addab35d55bf227567b5ed2ee9a2d92ee32cd8c466643f33b26b1158a920d461d3e27b5849a03f7356e9931aef44fd932c8b0711507628370e5ec3705acb9b1ac", 0xd3, 0x7}, {&(0x7f0000000240)="e975", 0x2, 0xc7f}, {&(0x7f0000000d80)="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", 0x1000}, {&(0x7f0000000540)="3b915dd45d92e33d50ed39e8d17f9eb2304add9ea1eed00c5815bdb7e9f91266f4261ed42b14d68402aeca6aef783e0eba2472bf37ceb33283b78bb7db331bb242d1551daa95edf0a0d13a89a59f04755d066ee3d4a8e4ae4810726e20e8525cbdb94ddd84f2f58d4930660b7f3b50a4aed180b5774050e0239016596f92a50cceed29c1928b4b5ea48786e5eb985d97177cbeb89a738a", 0x97, 0xc483}], 0x0, &(0x7f0000000740)={[{@clear_cache='clear_cache'}, {@rescan_uuid_tree='rescan_uuid_tree'}, {@fragment_data='fragment=data'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@euid_eq={'euid', 0x3d, r1}}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x34, 0x39, 0x63, 0x37, 0x30, 0x31, 0x62], 0x2d, [0x35, 0x39, 0x687755476a9fd8fd, 0x33], 0x2d, [0x38, 0x3d, 0x66, 0x65], 0x2d, [0x31, 0x4d6a250afc23f979, 0x35, 0x39], 0x2d, [0x31, 0x37, 0x32, 0x38, 0x65, 0x30, 0x30, 0x38]}}}, {@hash='hash'}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@dont_hash='dont_hash'}, {@appraise='appraise'}]}) ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x2) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x14) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') writev(r3, &(0x7f0000000380)=[{&(0x7f0000000280)="8abd4146a8df028b2a3f21914ded1a423906ccdfc216664130f7374bdaed85e982bcef5ca9d5df60467cbd021688cc8fcc682794f44a48803ab0f013179d595ca5215f651ac0e724bc776c7d494c0e39c58bf9c495b59083150fc0cce74610ceca2ecf7cbd09266352585c334d2e223df2e384d3b999cb8cc96916a3d02949ade56aee7e9cb1c86b5090b0d738eef6fceabbb0b6156cacef6680abd36bdf65db88b95f6611460d438d644724085e6e3e28fdc5e36d7339fa2b6c5d3ef3c678f80914b785b8da47874a7f5ec12803d73f1b19a22f7255cd3ceace2a91763d", 0xde}], 0x1) [ 251.013835] input: failed to attach handler evdev to device input372, error: -22 11:57:32 executing program 3 (fault-call:5 fault-nth:57): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 11:57:32 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000140)={0x8001007, 0x7fff, 0x2}) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r2 = request_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='syz1\x00', 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x401, 0xffffffffffff7cb5}) keyctl$get_keyring_id(0x0, r2, 0x1) 11:57:32 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) r1 = geteuid() fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = geteuid() mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='fuse\x00', 0x800000, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0x8}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@max_read={'max_read', 0x3d, 0x1}}], [{@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@dont_measure='dont_measure'}, {@obj_role={'obj_role', 0x3d, '/dev/fuse\x00'}}, {@uid_eq={'uid', 0x3d, r3}}, {@obj_role={'obj_role', 0x3d, 'fuse\x00'}}, {@fowner_lt={'fowner<', r4}}, {@audit='audit'}]}}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB]) write$FUSE_NOTIFY_POLL(r5, &(0x7f0000000080)={0x18, 0x6}, 0x18) ioctl$PPPIOCDISCONN(r5, 0x7439) [ 251.123742] input: syz1 as /devices/virtual/input/input375 [ 251.187431] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 251.197855] audit: type=1400 audit(1566820652.853:65): avc: denied { create } for pid=11679 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_rdma_socket permissive=1 11:57:32 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$btrfs(&(0x7f0000000040)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x2, 0x5, &(0x7f0000000600)=[{&(0x7f00000003c0)="5b58b50d94dca306b589e26365b9c1f9f6a3c42957b617f7d6489f33a6cc1cf5852e75e627c323e02a06dfc0c479dc779c0b6bf0e27aa5fd38a73900855556e1587528aae2d7d0fa984596e986", 0x4d}, {&(0x7f0000000440)="88c653e7f86a9c92b1ac1dfa995c802b2bdf3628d5314d55855e0a98a7bb3a14083b80fd59f858d02936f9d3e7bd3d30522a985b4698056a31178c7c69c53d21d7066583a8d13e2312a0fe80acb0295558f00d6de21c707410e1548eca09994d644775c2279028d077af0677353c695dad4dd2ba594f248235e7b858c779c911ece00b00e5de10b14948b21edb0109fc5bf16addab35d55bf227567b5ed2ee9a2d92ee32cd8c466643f33b26b1158a920d461d3e27b5849a03f7356e9931aef44fd932c8b0711507628370e5ec3705acb9b1ac", 0xd3, 0x7}, {&(0x7f0000000240)="e975", 0x2, 0xc7f}, {&(0x7f0000000d80)="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", 0x1000}, {&(0x7f0000000540)="3b915dd45d92e33d50ed39e8d17f9eb2304add9ea1eed00c5815bdb7e9f91266f4261ed42b14d68402aeca6aef783e0eba2472bf37ceb33283b78bb7db331bb242d1551daa95edf0a0d13a89a59f04755d066ee3d4a8e4ae4810726e20e8525cbdb94ddd84f2f58d4930660b7f3b50a4aed180b5774050e0239016596f92a50cceed29c1928b4b5ea48786e5eb985d97177cbeb89a738a", 0x97, 0xc483}], 0x0, &(0x7f0000000740)={[{@clear_cache='clear_cache'}, {@rescan_uuid_tree='rescan_uuid_tree'}, {@fragment_data='fragment=data'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@euid_eq={'euid', 0x3d, r1}}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x34, 0x39, 0x63, 0x37, 0x30, 0x31, 0x62], 0x2d, [0x35, 0x39, 0x687755476a9fd8fd, 0x33], 0x2d, [0x38, 0x3d, 0x66, 0x65], 0x2d, [0x31, 0x4d6a250afc23f979, 0x35, 0x39], 0x2d, [0x31, 0x37, 0x32, 0x38, 0x65, 0x30, 0x30, 0x38]}}}, {@hash='hash'}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@dont_hash='dont_hash'}, {@appraise='appraise'}]}) ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x2) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x14) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') writev(r3, &(0x7f0000000380)=[{&(0x7f0000000280)="8abd4146a8df028b2a3f21914ded1a423906ccdfc216664130f7374bdaed85e982bcef5ca9d5df60467cbd021688cc8fcc682794f44a48803ab0f013179d595ca5215f651ac0e724bc776c7d494c0e39c58bf9c495b59083150fc0cce74610ceca2ecf7cbd09266352585c334d2e223df2e384d3b999cb8cc96916a3d02949ade56aee7e9cb1c86b5090b0d738eef6fceabbb0b6156cacef6680abd36bdf65db88b95f6611460d438d644724085e6e3e28fdc5e36d7339fa2b6c5d3ef3c678f80914b785b8da47874a7f5ec12803d73f1b19a22f7255cd3ceace2a91763d", 0xde}], 0x1) [ 251.244665] input: syz1 as /devices/virtual/input/input376 [ 251.250504] input: syz1 as /devices/virtual/input/input377 [ 251.279776] syz-executor.2 (11680) used greatest stack depth: 22784 bytes left 11:57:33 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f]}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000140)={{{@in=@broadcast, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@dev}}, &(0x7f00000000c0)=0xe8) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000340)={0x1, 0x2, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev={[], 0xf}]}) r4 = geteuid() ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f0000000380)) mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuseblk\x00', 0x8, &(0x7f0000000880)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[], [{@pcr={'pcr', 0x3d, 0xd}}, {@fowner_lt={'fowner<', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x39, 0x64, 0x35, 0x7d, 0x0, 0x62, 0x30], 0x2d, [0x38, 0x30, 0x35, 0x30], 0x2d, [0x30, 0x35, 0x64, 0x63], 0x2d, [0x0, 0x33, 0x4fd32a5510145f7, 0x30], 0x2d, [0x35, 0x35, 0x36, 0x33, 0x36, 0x61, 0x38, 0x32]}}}, {@smackfshat={'smackfshat', 0x3d, 'syz1\x00'}}, {@appraise='appraise'}, {@measure='measure'}, {@obj_type={'obj_type'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '$*eth0)'}}, {@subj_role={'subj_role', 0x3d, '.%@'}}]}}) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f00000009c0)={0x1ff, 0x3, 0x4, 0x400000, {0x0, 0x2710}, {0x3, 0xc, 0x27e, 0xfff, 0x410d, 0x80, "33c10b6d"}, 0x5, 0x2, @planes=&(0x7f00000003c0)={0xa9, 0x1, @fd=r1, 0x7f}, 0x4}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$P9_RLOCK(r1, &(0x7f0000000300)={0x8, 0x35, 0x2, 0x3}, 0x8) 11:57:33 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d30b8a93030304d233030303b30303030303034303030302c756965725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x3, 0x402440) ioctl$CAPI_INSTALLED(r1, 0x80024322) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) [ 251.304859] FAULT_INJECTION: forcing a failure. [ 251.304859] name failslab, interval 1, probability 0, space 0, times 0 [ 251.334294] input: syz1 as /devices/virtual/input/input378 [ 251.345769] CPU: 1 PID: 11686 Comm: syz-executor.3 Not tainted 4.14.140 #36 [ 251.352909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 251.362276] Call Trace: [ 251.363043] audit: type=1400 audit(1566820652.853:66): avc: denied { write } for pid=11679 comm="syz-executor.2" path="socket:[42444]" dev="sockfs" ino=42444 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_rdma_socket permissive=1 [ 251.364868] dump_stack+0x138/0x197 [ 251.364888] should_fail.cold+0x10f/0x159 [ 251.364902] should_failslab+0xdb/0x130 [ 251.364915] kmem_cache_alloc_trace+0x2e9/0x790 [ 251.400514] ? rcu_read_lock_sched_held+0x110/0x130 [ 251.409130] ? __kmalloc+0x376/0x7a0 [ 251.409144] ? wait_for_completion+0x420/0x420 [ 251.409159] device_private_init+0x4a/0x190 [ 251.409170] device_add+0xd1a/0x1490 [ 251.409186] ? refcount_inc_not_zero+0x88/0xe0 [ 251.417888] ? device_private_init+0x190/0x190 [ 251.417900] ? refcount_inc+0x1f/0x40 [ 251.417911] ? kobject_get+0x60/0x70 [ 251.417926] cdev_device_add+0xa2/0xf0 [ 251.417937] evdev_connect+0x39f/0x4a0 [ 251.417950] input_attach_handler+0x154/0x1a0 [ 251.430613] input_register_device.cold+0xbf/0x202 [ 251.430633] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 251.430647] ? uinput_request_submit.part.0+0x290/0x290 [ 251.430671] ? __might_sleep+0x93/0xb0 [ 251.430679] ? __fget+0x210/0x370 [ 251.430691] ? uinput_compat_ioctl+0xa0/0xa0 [ 251.436579] input: syz1 as /devices/virtual/input/input379 [ 251.439957] uinput_ioctl+0x4a/0x60 [ 251.439971] do_vfs_ioctl+0x7ae/0x1060 [ 251.439984] ? selinux_file_mprotect+0x5d0/0x5d0 [ 251.439995] ? lock_downgrade+0x6e0/0x6e0 [ 251.440006] ? ioctl_preallocate+0x1c0/0x1c0 [ 251.515536] ? __fget+0x237/0x370 [ 251.524161] ? security_file_ioctl+0x89/0xb0 [ 251.528582] SyS_ioctl+0x8f/0xc0 [ 251.532038] ? do_vfs_ioctl+0x1060/0x1060 [ 251.536193] do_syscall_64+0x1e8/0x640 [ 251.540088] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 251.545118] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 251.550431] RIP: 0033:0x459879 11:57:33 executing program 5: clone(0x41bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() getgroups(0x2, &(0x7f00000006c0)=[0xee01, 0xee01]) setresgid(0x0, 0x0, r1) migrate_pages(r0, 0x4776, &(0x7f0000000000)=0x1, &(0x7f0000000040)) unshare(0x30010000) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000140)={0x28, 0x4, 0x0, {0x6, 0x7}}, 0x28) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x4206, r0) [ 251.553610] RSP: 002b:00007fc30efd4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 251.561907] RAX: ffffffffffffffda RBX: 00007fc30efd4c90 RCX: 0000000000459879 [ 251.569416] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 251.577288] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 251.584548] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc30efd56d4 [ 251.591812] R13: 00000000004c460b R14: 00000000004d8938 R15: 0000000000000005 [ 251.620610] input: failed to attach handler evdev to device input376, error: -12 11:57:33 executing program 3 (fault-call:5 fault-nth:58): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 11:57:33 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$btrfs(&(0x7f0000000040)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x2, 0x5, &(0x7f0000000600)=[{&(0x7f00000003c0)="5b58b50d94dca306b589e26365b9c1f9f6a3c42957b617f7d6489f33a6cc1cf5852e75e627c323e02a06dfc0c479dc779c0b6bf0e27aa5fd38a73900855556e1587528aae2d7d0fa984596e986", 0x4d}, {&(0x7f0000000440)="88c653e7f86a9c92b1ac1dfa995c802b2bdf3628d5314d55855e0a98a7bb3a14083b80fd59f858d02936f9d3e7bd3d30522a985b4698056a31178c7c69c53d21d7066583a8d13e2312a0fe80acb0295558f00d6de21c707410e1548eca09994d644775c2279028d077af0677353c695dad4dd2ba594f248235e7b858c779c911ece00b00e5de10b14948b21edb0109fc5bf16addab35d55bf227567b5ed2ee9a2d92ee32cd8c466643f33b26b1158a920d461d3e27b5849a03f7356e9931aef44fd932c8b0711507628370e5ec3705acb9b1ac", 0xd3, 0x7}, {&(0x7f0000000240)="e975", 0x2, 0xc7f}, {&(0x7f0000000d80)="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", 0x1000}, {&(0x7f0000000540)="3b915dd45d92e33d50ed39e8d17f9eb2304add9ea1eed00c5815bdb7e9f91266f4261ed42b14d68402aeca6aef783e0eba2472bf37ceb33283b78bb7db331bb242d1551daa95edf0a0d13a89a59f04755d066ee3d4a8e4ae4810726e20e8525cbdb94ddd84f2f58d4930660b7f3b50a4aed180b5774050e0239016596f92a50cceed29c1928b4b5ea48786e5eb985d97177cbeb89a738a", 0x97, 0xc483}], 0x0, &(0x7f0000000740)={[{@clear_cache='clear_cache'}, {@rescan_uuid_tree='rescan_uuid_tree'}, {@fragment_data='fragment=data'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@euid_eq={'euid', 0x3d, r1}}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x34, 0x39, 0x63, 0x37, 0x30, 0x31, 0x62], 0x2d, [0x35, 0x39, 0x687755476a9fd8fd, 0x33], 0x2d, [0x38, 0x3d, 0x66, 0x65], 0x2d, [0x31, 0x4d6a250afc23f979, 0x35, 0x39], 0x2d, [0x31, 0x37, 0x32, 0x38, 0x65, 0x30, 0x30, 0x38]}}}, {@hash='hash'}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@dont_hash='dont_hash'}, {@appraise='appraise'}]}) ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x2) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x14) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') writev(r3, &(0x7f0000000380)=[{&(0x7f0000000280)="8abd4146a8df028b2a3f21914ded1a423906ccdfc216664130f7374bdaed85e982bcef5ca9d5df60467cbd021688cc8fcc682794f44a48803ab0f013179d595ca5215f651ac0e724bc776c7d494c0e39c58bf9c495b59083150fc0cce74610ceca2ecf7cbd09266352585c334d2e223df2e384d3b999cb8cc96916a3d02949ade56aee7e9cb1c86b5090b0d738eef6fceabbb0b6156cacef6680abd36bdf65db88b95f6611460d438d644724085e6e3e28fdc5e36d7339fa2b6c5d3ef3c678f80914b785b8da47874a7f5ec12803d73f1b19a22f7255cd3ceace2a91763d", 0xde}], 0x1) 11:57:33 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x5120ac8dd2a97308, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xd31, 0x9, 0x5, 0x1000, 0xfffffffffffffffe}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000140)={r2, 0x0, 0x30}, &(0x7f0000000180)=0xc) 11:57:33 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$btrfs(&(0x7f0000000040)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x2, 0x5, &(0x7f0000000600)=[{&(0x7f00000003c0)="5b58b50d94dca306b589e26365b9c1f9f6a3c42957b617f7d6489f33a6cc1cf5852e75e627c323e02a06dfc0c479dc779c0b6bf0e27aa5fd38a73900855556e1587528aae2d7d0fa984596e986", 0x4d}, {&(0x7f0000000440)="88c653e7f86a9c92b1ac1dfa995c802b2bdf3628d5314d55855e0a98a7bb3a14083b80fd59f858d02936f9d3e7bd3d30522a985b4698056a31178c7c69c53d21d7066583a8d13e2312a0fe80acb0295558f00d6de21c707410e1548eca09994d644775c2279028d077af0677353c695dad4dd2ba594f248235e7b858c779c911ece00b00e5de10b14948b21edb0109fc5bf16addab35d55bf227567b5ed2ee9a2d92ee32cd8c466643f33b26b1158a920d461d3e27b5849a03f7356e9931aef44fd932c8b0711507628370e5ec3705acb9b1ac", 0xd3, 0x7}, {&(0x7f0000000240)="e975", 0x2, 0xc7f}, {&(0x7f0000000d80)="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", 0x1000}, {&(0x7f0000000540)="3b915dd45d92e33d50ed39e8d17f9eb2304add9ea1eed00c5815bdb7e9f91266f4261ed42b14d68402aeca6aef783e0eba2472bf37ceb33283b78bb7db331bb242d1551daa95edf0a0d13a89a59f04755d066ee3d4a8e4ae4810726e20e8525cbdb94ddd84f2f58d4930660b7f3b50a4aed180b5774050e0239016596f92a50cceed29c1928b4b5ea48786e5eb985d97177cbeb89a738a", 0x97, 0xc483}], 0x0, &(0x7f0000000740)={[{@clear_cache='clear_cache'}, {@rescan_uuid_tree='rescan_uuid_tree'}, {@fragment_data='fragment=data'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@euid_eq={'euid', 0x3d, r1}}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x34, 0x39, 0x63, 0x37, 0x30, 0x31, 0x62], 0x2d, [0x35, 0x39, 0x687755476a9fd8fd, 0x33], 0x2d, [0x38, 0x3d, 0x66, 0x65], 0x2d, [0x31, 0x4d6a250afc23f979, 0x35, 0x39], 0x2d, [0x31, 0x37, 0x32, 0x38, 0x65, 0x30, 0x30, 0x38]}}}, {@hash='hash'}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@dont_hash='dont_hash'}, {@appraise='appraise'}]}) ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x2) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x14) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') writev(r3, &(0x7f0000000380)=[{&(0x7f0000000280)="8abd4146a8df028b2a3f21914ded1a423906ccdfc216664130f7374bdaed85e982bcef5ca9d5df60467cbd021688cc8fcc682794f44a48803ab0f013179d595ca5215f651ac0e724bc776c7d494c0e39c58bf9c495b59083150fc0cce74610ceca2ecf7cbd09266352585c334d2e223df2e384d3b999cb8cc96916a3d02949ade56aee7e9cb1c86b5090b0d738eef6fceabbb0b6156cacef6680abd36bdf65db88b95f6611460d438d644724085e6e3e28fdc5e36d7339fa2b6c5d3ef3c678f80914b785b8da47874a7f5ec12803d73f1b19a22f7255cd3ceace2a91763d", 0xde}], 0x1) [ 251.751867] input: syz1 as /devices/virtual/input/input381 [ 251.758755] input: syz1 as /devices/virtual/input/input380 [ 251.803548] FAULT_INJECTION: forcing a failure. [ 251.803548] name failslab, interval 1, probability 0, space 0, times 0 [ 251.815738] CPU: 0 PID: 11722 Comm: syz-executor.3 Not tainted 4.14.140 #36 [ 251.822846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 251.832233] Call Trace: [ 251.834809] dump_stack+0x138/0x197 [ 251.838509] should_fail.cold+0x10f/0x159 [ 251.842641] should_failslab+0xdb/0x130 [ 251.846595] kmem_cache_alloc+0x47/0x780 [ 251.850749] ? save_stack_trace+0x16/0x20 [ 251.854875] ? save_stack+0x45/0xd0 [ 251.858480] ? kasan_kmalloc+0xce/0xf0 [ 251.862370] ? kasan_slab_alloc+0xf/0x20 [ 251.866417] ? kmem_cache_alloc+0x12e/0x780 [ 251.870723] ? __kernfs_new_node+0x70/0x420 [ 251.875046] ? kernfs_new_node+0x80/0xf0 [ 251.879179] ? kernfs_create_dir_ns+0x41/0x140 [ 251.883866] radix_tree_node_alloc.constprop.0+0x1c7/0x310 [ 251.889487] idr_get_free_cmn+0x563/0x8d0 [ 251.893633] idr_alloc_cmn+0x10e/0x210 [ 251.897529] ? __fprop_inc_percpu_max+0x1e0/0x1e0 [ 251.902356] ? __lock_is_held+0xb6/0x140 [ 251.906398] ? check_preemption_disabled+0x3c/0x250 [ 251.911408] idr_alloc_cyclic+0xd0/0x1e2 [ 251.915455] ? ida_simple_remove+0x60/0x60 [ 251.919675] __kernfs_new_node+0xe4/0x420 [ 251.923904] kernfs_new_node+0x80/0xf0 [ 251.927781] kernfs_create_dir_ns+0x41/0x140 [ 251.932184] sysfs_create_dir_ns+0xbe/0x1d0 [ 251.936660] kobject_add_internal.part.0.cold+0x114/0x5ae [ 251.942185] kobject_add+0x11f/0x180 [ 251.945901] ? kset_create_and_add+0x180/0x180 [ 251.951161] ? __raw_spin_lock_init+0x2d/0x100 [ 251.955726] ? refcount_inc_not_zero+0x88/0xe0 [ 251.960286] ? klist_init+0x71/0xe0 [ 251.964424] device_add+0x383/0x1490 [ 251.968206] ? device_private_init+0x190/0x190 [ 251.972767] ? refcount_inc+0x1f/0x40 [ 251.976562] ? kobject_get+0x60/0x70 [ 251.980258] cdev_device_add+0xa2/0xf0 [ 251.984296] evdev_connect+0x39f/0x4a0 [ 251.988173] input_attach_handler+0x154/0x1a0 [ 251.992652] input_register_device.cold+0xbf/0x202 [ 251.997566] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 252.002765] ? uinput_request_submit.part.0+0x290/0x290 [ 252.008120] ? __might_sleep+0x93/0xb0 [ 252.012074] ? __fget+0x210/0x370 [ 252.015523] ? uinput_compat_ioctl+0xa0/0xa0 [ 252.019911] uinput_ioctl+0x4a/0x60 [ 252.023526] do_vfs_ioctl+0x7ae/0x1060 [ 252.027395] ? selinux_file_mprotect+0x5d0/0x5d0 [ 252.032131] ? lock_downgrade+0x6e0/0x6e0 [ 252.036260] ? ioctl_preallocate+0x1c0/0x1c0 [ 252.040652] ? __fget+0x237/0x370 [ 252.044092] ? security_file_ioctl+0x89/0xb0 [ 252.048490] SyS_ioctl+0x8f/0xc0 [ 252.051847] ? do_vfs_ioctl+0x1060/0x1060 [ 252.055975] do_syscall_64+0x1e8/0x640 [ 252.059843] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 252.064671] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 252.069839] RIP: 0033:0x459879 [ 252.073010] RSP: 002b:00007fc30efd4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 252.081494] RAX: ffffffffffffffda RBX: 00007fc30efd4c90 RCX: 0000000000459879 [ 252.088753] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 252.096002] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 11:57:33 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643d86497fcd3b90d5707a62c6b3667898bd6dd419cb1afc0b6f311e14572324ad87edf4bd61b26789e09cf4477c833066acc61fbdc557337e6099b1f04a776720aff744932a500fba1b1c8a49177302ec7e706fbeec4b8cfedda591b12afab16dc7cdd19508baa7086d65e902231e2a639e12c0e1a6c442bec326729b4f94ed575c7f00a579d09bfd9c4b5f1f0911fedd6300d0c340465cadb4baf4264007897a1fc86a151eac2c1b7a1a00"/193, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x8100, 0x80) renameat2(r1, &(0x7f0000000040)='./file0\x00', r2, &(0x7f0000000140)='./file0\x00', 0x3) 11:57:33 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000180)={r2, @in={{0x2, 0x4e21, @multicast1}}, 0x3, 0x4, 0x5d47, 0x7, 0xc4fe2f595fa17b68}, 0x98) r3 = dup(r0) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0xc) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000000)=0x0) ptrace$setopts(0xffffffffffffffff, r4, 0x5, 0x20) [ 252.103258] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc30efd56d4 [ 252.110512] R13: 00000000004c460b R14: 00000000004d8938 R15: 0000000000000005 [ 252.127597] input: syz1 as /devices/virtual/input/input382 [ 252.169302] input: syz1 as /devices/virtual/input/input383 11:57:33 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) creat(&(0x7f0000000000)='./file0\x00', 0x48) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1b) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 11:57:33 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="0400"]) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) 11:57:33 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',gro1p|id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) r1 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) fcntl$dupfd(r0, 0x406, r1) 11:57:33 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x10000, 0x0) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 11:57:34 executing program 5: clone(0x41bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() getgroups(0x2, &(0x7f00000006c0)=[0xee01, 0xee01]) setresgid(0x0, 0x0, r1) unshare(0x30010000) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x10000, 0x90000) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x4206, r0) 11:57:34 executing program 0: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) recvfrom$llc(r0, &(0x7f0000000000)=""/73, 0x49, 0x4afc59e59ce9d1da, &(0x7f0000000100)={0x1a, 0x207, 0x7f5b, 0x48, 0xfffffffffffeffff, 0x9, @broadcast}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) fremovexattr(r1, &(0x7f0000000140)=@random={'osx.', 'fuse\x00'}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000080)={0x18, 0x6}, 0x18) [ 252.349711] input: syz1 as /devices/virtual/input/input387 11:57:34 executing program 3: r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x7, 0x8}, 0xc) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000880)="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", 0x1000}, {&(0x7f0000000040)="50ac1adb078973a7352d3f5c189a0c93a16f39572b28c686b15dfd7440", 0x1d}, {&(0x7f0000001880)="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", 0x1000}, {&(0x7f0000000140)="c9886e587d638eb72cc3c41343154ca0ab43b5d5ec915f2218675c4f05dbf7d150538aa8707460bcb9ef946a9f93d95621f58d0fd32dd84cc42dc02bf3da7ecb985b28bae4d8d8162bef9fc25b3dba3502db261df50b9f22d5f4da0213a66cf6dfc7387ecb6037738779d4e1075ae71cd1b6a1b9303528b4cdbdf2a6fbb23cb22979012052228eb0b88b421469e3630ff21714bfb7", 0x95}], 0x4) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r2 = dup(r1) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) 11:57:34 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x40, 0x111000) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000100)=""/197) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18, 0x6}, 0x18) [ 252.764037] input: syz1 as /devices/virtual/input/input388 [ 252.777377] input: syz1 as /devices/virtual/input/input389 11:57:34 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x40800, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000040)=0x8001, 0x4) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2ce7726f75705f69603d", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) [ 252.832329] input: syz1 as /devices/virtual/input/input390 [ 253.522433] device bridge_slave_1 left promiscuous mode [ 253.528524] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.593285] device bridge_slave_0 left promiscuous mode [ 253.599594] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.685984] device hsr_slave_1 left promiscuous mode [ 253.764086] device hsr_slave_0 left promiscuous mode [ 253.804088] team0 (unregistering): Port device team_slave_1 removed [ 253.815473] team0 (unregistering): Port device team_slave_0 removed [ 253.825881] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 253.893623] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 253.962236] bond0 (unregistering): Released all slaves [ 255.781011] IPVS: ftp: loaded support on port[0] = 21 [ 256.658769] chnl_net:caif_netlink_parms(): no params data found [ 256.692215] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.704859] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.711778] device bridge_slave_0 entered promiscuous mode [ 256.718638] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.725266] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.732383] device bridge_slave_1 entered promiscuous mode [ 256.748935] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 256.757988] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 256.776379] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 256.783673] team0: Port device team_slave_0 added [ 256.789267] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 256.796645] team0: Port device team_slave_1 added [ 256.802256] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 256.809530] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 256.892137] device hsr_slave_0 entered promiscuous mode [ 256.940463] device hsr_slave_1 entered promiscuous mode [ 256.980792] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 256.987694] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 256.999492] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.005873] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.012669] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.019194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.044678] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 257.051583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.059481] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 257.067872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 257.075937] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.083653] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.092890] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 257.099178] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.108666] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 257.116303] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.122683] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.138459] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 257.146057] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.152826] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.169541] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 257.179442] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 257.190363] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 257.198182] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 257.205895] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 257.214467] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 257.222178] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 257.229759] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 257.236892] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 257.247402] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 257.258961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.650751] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready 11:57:40 executing program 2: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x11) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x8) setxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc09, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getsockopt$inet_mreq(r4, 0x0, 0x24, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001940)={{{@in6=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@initdev}}, &(0x7f0000001a40)=0xe8) accept4(0xffffffffffffffff, &(0x7f0000001a80)=@hci, &(0x7f0000001b00)=0x80, 0x0) accept$packet(r3, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000005c0)=0x14) r6 = semget$private(0x0, 0x0, 0x114) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getgid() semctl$IPC_SET(r6, 0x0, 0x1, &(0x7f0000000500)={{0x40, r5, r7, r5, r8, 0x140, 0x1}, 0x1f, 0x5, 0x5}) getsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000001bc0)={@remote}, &(0x7f0000001c00)=0xc) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000000100)=0x6, 0x4) ioctl$RNDCLEARPOOL(r3, 0x5206, &(0x7f0000000080)=0x101) sendto$inet(r4, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) write$P9_RLINK(r0, &(0x7f0000001900)={0x7}, 0x7) sendfile(0xffffffffffffffff, r2, 0x0, 0x1) io_submit(0x0, 0x5, &(0x7f00000017c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0xa9, r0, &(0x7f0000000080)="345b15c2b045134901fad0c0c9495aed5ac9c9f3318578a1f1212abc9b0c63ef5e87cd7de812f5e17cd187579164ecc67c5e36c167004f200bf7f2c7f1cf04ce39b7202306db0a1990433e161557a67e37517bdd3227bde5aec2fb3e066cf94811da07c5daee4c6e4da000be55fc57034ede", 0x72, 0x2, 0x0, 0x1, r2}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x2, r1, &(0x7f0000000300)="0cac12567ff1edf20347d391aac72bfe13bc9e37098081447b67db5cad7e330dd307e2dbda20468848d6b60f0d581b84eae66986549675a87a0ab3c3c667ea2859b5de4b8276ebeabaebde08cb3e834d0d022ebef7a4fbcaea89a07edf3b0a183dcf2eac06ef113ce1fc1fa605dee3f7cdb874168da1", 0x76, 0x10001, 0x0, 0x1, r2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x7, 0x3, r1, &(0x7f00000003c0)="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", 0xfd, 0x100, 0x0, 0x2, r2}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000600)="b6d4ab10a012259374762b7e8bcf5815b26c0dd37113a5b88589a9c298fcdd744bdf819afde5ee1b5f521fa5739342326556b905f0fe3ca0ae2bf74ec136edd4ed1aa1ab9d052092d58b5b24fc9bc968473da577dc05233c1fb5a38c69c414bc0438be0883b6b705f660d45c9fb9635afd5fe4aadbe93972c9fc522ed4eafa3165ea494e7d22c6fe2026bae5695a47393dbcba2f39936c65e2e5c1588dffffc8c2deffaeef7f5db36bc2e8794c75b4", 0xaf, 0x0, 0x0, 0x0, r1}, 0x0]) 11:57:40 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = dup(r0) setsockopt$inet6_buf(r2, 0x29, 0x2d, &(0x7f00000004c0)="9542798e944d774865b460045a3a4d8ca3d886d955e754af42b83c30bb1490bbc379f3231ea7b430ee1b9fe50450fd37264dd939e16ecece90872c58d9b63d025f52012cef7c42a39c76871e0cb7765dfe146f449c374320c75f3c588c70a4a3566d3598df35437156e2714390bb862c6241f04280dd495246e670f35d457cea59bdf7b6ced164fa", 0x88) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x15) fcntl$setstatus(r0, 0x4, 0x80000000002c00) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r4 = dup(r3) ioctl$UI_SET_SWBIT(r4, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x5) getpeername$ax25(r4, &(0x7f0000000000)={{0x3, @rose}, [@netrom, @null, @default, @bcast, @remote, @remote, @rose]}, &(0x7f0000000080)=0x48) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x4000010, r3, 0x0) 11:57:40 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0xf57bf8871dd7ac4, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x13) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 11:57:40 executing program 1: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r0 = dup(0xffffffffffffffff) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000040)=0x5, 0x4) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0xff, 0x0, 0x2, 0xff}) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f00000000c0)={0x8000, r1, 0x0, 0xff}) r2 = dup(r0) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000100)=0xd2) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$KDGETLED(r2, 0x4b31, &(0x7f0000000140)) readahead(r2, 0x872, 0x8000) 11:57:40 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) 11:57:40 executing program 5: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/checkreqprot\x00', 0x10000, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000380)={0x5c, 0x8, 0xa, 0x9}) clone(0x41bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() getgroups(0x2, &(0x7f00000006c0)=[0xee01, 0xee01]) getgroups(0x2, &(0x7f0000000000)=[r2, r3]) setresgid(0x0, 0x0, r3) unshare(0x30010000) rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f00000000c0)) ptrace(0xb49277d36bcfbdda, r1) r4 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x4, 0x581800) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000000140)=ANY=[@ANYBLOB="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"]) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000080)) [ 258.613618] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 11:57:40 executing program 1: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x2040, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000040)) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r2 = dup(r1) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000080)={0x1, r2}) 11:57:40 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x101000) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000140)={0x0, @reserved}) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x10000, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="0c000000bb00b6120bba8b09f4be9a8d0648f17c165878bcc81e9d71108b256a7476dcf0413905b373343182296a9fb6642b735c23515cccfc750670336f588eb3f721860c59fd659f562bb7db7cef3078c6f3cd583f4bf24f544447f898e1a9b38bd8ddd2b10b672a39214895fc89a9f6078b9dfbf795a55d41f08137d4d5329437572fc686e60f3ec2458ce38ed4fee75a07afba472072b5b5d0b4d637f74087e502987992969faa2cc7025f5483ce14298da96506d6b67035b343350e966aa4"], 0xc1) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) 11:57:40 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r1 = socket$inet(0x2, 0x3, 0x800000000000a) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x198, [0x20000580, 0x0, 0x0, 0x200005b0, 0x200005e0], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff01000000110000000000000000000300736630000011000000000000000064756d6d793000000000000000000000696662300000000000000000000000006c6f0000000000000000000000000000ffffffffffff000000000000ffffffffffff000000000000000076000000a8000000d8000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaaaa0000ffe2ffff0000000072656469726563740000000000000000000000000000000000000000000000000800000000000000ffffffff00000000"]}, 0x210) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d3030300cbff230303038a1b29f6b8ef14e30303030303030303030303034303030302c757365725f9dad8909b112403e69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0xa81, 0x0) connect$tipc(r2, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x3}}, 0x10) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6, 0x0, {0x40000004}}, 0x18) [ 258.752343] input: syz1 as /devices/virtual/input/input392 [ 258.803520] input: syz1 as /devices/virtual/input/input395 [ 258.818385] audit: type=1400 audit(1566820660.463:67): avc: denied { map } for pid=11807 comm="syz-executor.4" path="/dev/uinput" dev="devtmpfs" ino=15211 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:event_device_t:s0 tclass=chr_file permissive=1 [ 258.845285] input: syz1 as /devices/virtual/input/input396 11:57:40 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) readahead(r0, 0x2, 0xfff) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 11:57:40 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x4000000000400048) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f0000000000)) 11:57:40 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x400000) write$FUSE_CREATE_OPEN(r0, 0x0, 0x0) 11:57:40 executing program 0: r0 = accept4(0xffffffffffffffff, &(0x7f0000000340)=@x25={0x9, @remote}, &(0x7f0000000040)=0x80, 0x800) getresuid(&(0x7f00000002c0), &(0x7f00000003c0)=0x0, &(0x7f0000000480)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001bc0)=0x0) r3 = gettid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001f00)={{{@in=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@dev}}, &(0x7f0000002000)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000002040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000020c0)=0x0) lstat(&(0x7f0000002100)='./file0\x00', &(0x7f0000002140)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getgid() r9 = socket$inet(0x2, 0x800, 0x37fe2f58) r10 = socket$nl_crypto(0x10, 0x3, 0x15) r11 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000002200)={&(0x7f00000021c0)='./file0\x00', 0x0, 0x8}, 0x10) r12 = syz_open_dev$sndctrl(&(0x7f0000002240)='/dev/snd/controlC#\x00', 0xffff, 0x200) r13 = socket$isdn(0x22, 0x3, 0x11) r14 = accept4$ax25(0xffffffffffffffff, &(0x7f0000002280)={{0x3, @default}, [@bcast, @netrom, @rose, @rose, @netrom, @rose, @null, @netrom]}, &(0x7f0000002300)=0x48, 0x800) r15 = socket$isdn_base(0x22, 0x3, 0x0) r16 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000002340)='/proc/capi/capi20\x00', 0x80, 0x0) r17 = openat$cgroup(0xffffffffffffffff, &(0x7f0000002380)='syz1\x00', 0x200002, 0x0) r18 = socket$netlink(0x10, 0x3, 0x1f) r19 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000002480)={0x28, 0x0, 0x2711}, 0x10, 0x39d358aa4f869f0a) r20 = syz_open_pts(0xffffffffffffffff, 0x0) r21 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r22 = inotify_init() r23 = openat$dsp(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/dsp\x00', 0x200000, 0x0) r24 = syz_open_dev$ndb(&(0x7f0000002500)='/dev/nbd#\x00', 0x0, 0x41) r25 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000002540)={0x6, 0xfffffffffffffffd, 0x10001, 0x800, 0xffffffffffffffff}) r27 = openat$tun(0xffffffffffffff9c, &(0x7f0000002580)='/dev/net/tun\x00', 0x2000, 0x0) r28 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r29 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000025c0)='/dev/snapshot\x00', 0x4000, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000002600)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000002640)={{{@in=@initdev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f0000002740)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002780)={0x0, 0x0, 0x0}, &(0x7f00000027c0)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000002840)={0x0, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002800)='group_id'}, 0x30) r34 = geteuid() stat(&(0x7f0000002880)='./file0\x00', &(0x7f00000028c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r0, &(0x7f0000002a80)={&(0x7f00000000c0)=@proc={0x10, 0x0, 0x25dfdbfd, 0x10000}, 0xc, &(0x7f0000001ec0)=[{&(0x7f00000004c0)={0x3c0, 0x2b, 0x8, 0x70bd2b, 0x25dfdbfb, "", [@nested={0xd8, 0x68, [@typed={0x4, 0x84, @binary}, @generic="434c3540b3a84fd5d0227f3fa02e41eae8dc9361de3ad354f5baf3eb5c7f9f38b7dd33632232ea2560eed68c2329b7383a4cafabadfb862a6d4a18af1e2ed6bbd0b5ff75650fa44d245388bcec9fee66f8c0e2721b61b30d1a5ef52538c64f1eb46cb2c011f10ee544ecbc742b2d5bc7595be0fa59d35b8abb3fd55cf3913cbae430e32a268797e1c055a672a875b7acc241f6cf8f257d764564090be36139b769e2241e95228156e46ccfb1c570701d10ad0a43f2e717c2c572ade1d0a48af04055d37d0d05075cbbd93ba3ada7"]}, @typed={0x8, 0x1d, @u32=0xff}, @nested={0x134, 0x29, [@generic="238f3a5f75c25cba27637abf353ffeb0bc222bd50dab717c05a5a9a223218f206d8593b1f82ede078b6f16f03a730d40ab82843b00ddc2c8c9d9a7d781ddff6c062c9adebf853ee66c04d5d256b4513c0694ffa21a741e161a629bd25f0b4287caa21cd62655c60987bb29e0e96a6323f3be912b1d469faaf50568cdf4e03d4f5fa6c45111d7fd942272e7e6f07d48822c5224395456f76ef2784eb77fb5c81bd63eb20053f9e6ea41f282fc67d6db4936a2c37459140d5f4ed0349ce2aac7e8e58e5fd2ee3b20e3abbb1a93f605222a9d976775fac9d8c2", @generic="faee3edf2d3d7494385bb8617b675b0c5a9ffb3897a41178f9bba7ff98e105fbb02374b9fe15", @generic="19c306b0b9a5ef926bafca1442bc67b0dcf9c031ad2d8cf38f1c1354414385dac4bcc4e2f327ca5f55b3", @typed={0x8, 0x21, @u32}]}, @nested={0x19c, 0x68, [@typed={0x8, 0x76, @uid=r1}, @typed={0x4, 0x4a, @binary}, @generic="17429f5d3c74295320691c978f4996c5230fea19738b06bc2f0bffb00ceaa3c322ff7b14fad901892fd8bcc2afd429acde45fc08ef0b60b7545d0c47df54d4a5560a5d74a006a31cedfe78", @typed={0x10, 0x2d, @binary="f85c4f5097d021ba5f"}, @typed={0x20, 0x27, @str='md5sum^mime_type,$cgroup\x00'}, @typed={0xc, 0x4e, @u64=0x7}, @generic="20cfb14e1c8c9b8ba2eef2ed1bf5a2ab401ac924bbfc9dce28078271f5887ec4e27601a494fce82545dc274677d77f7bd9b22d85c18903032495444e", @generic="f524e6cd751b1a9042f0f82f271a2eef67f337d4beb4e174fab3b98f10e81d5dbafba1dd2d03452ab9ffaa9be21a247551662a0deb5542a1678f5367fee69bd59e7777ed504aceb879cefcc28d3d26b0b61c59d40719f87b1676d2204672be4c9525475dff59d7c2a2da30075a9ac11bdb5646bd058246d577658d26b3c1991c5b68a4f825d292b72005b7c05d846752981b57da3cc2971280187831813a84dd5356c701af6f0cc5ec84e27d7723f490ff93e5fcf05585ef0f53dc83ba7d2065eee97a054785c6c49c"]}]}, 0x3c0}, {&(0x7f0000000880)={0x1c8, 0x2b, 0x58959f76b85a7e88, 0x70bd2b, 0x25dfdbfe, "", [@nested={0x1b8, 0x34, [@generic="60701d4b99021d134127274e994cb6534b8f338d982f076ab91e292e7c96f79dfc52cf2253c694786b318f65b4795600af6ab385a11b7282e8ccf7f00af5e35eee3d0692e438b80ecedbe9e416744f941b47f71afaf017e2fd51b20d0fb0aba1995c1840016c40c34302ccd633701ab58c43bebd216c542469ebe8291b190852559b2df7c8980b89ccd9a3ecc272ae1f2e34c3d9a3ee6872ab44556146bb0b416fd357edcdfd17bb2a41f4af4d9dcfaf2377e18d2427a175554316aa490d4e1c5d9f4027f71d3cddd9e204df60e5a764b0e8ca9ad2f50b44f3d879e88b69e089", @typed={0xc, 0x17, @u64=0x6}, @generic="2d15f60b14248e74ade02dfb3c3048d69c229f5ba6bbaa920f31c0d04acd95d52faa6048010d3058e80670f67ef86c693cfefb4562a1d54fd71b073ab6c90739e58fea6dc4c5ff06ae4190ec8c0383a15d8320603b0366fde9838c60f3d92f3bbf8534b4de115f116b3c539c73e81a98e4d96a00f9e4ef14fdb0736ccc9d52a0a4d1c17647306860779801b7ad4b2e24d4449c2bdb1adb68f60196ef2d53d418b2ee37b5516d1afe3697b72fe58e290201862c1a5faf4266df60fc8f241ac08a0804fc117e9d"]}]}, 0x1c8}, {&(0x7f0000000a80)={0x111c, 0x22, 0x4, 0x70bd2d, 0x25dfdbfb, "", [@generic="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", @generic="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", @typed={0xc, 0x90, @u64=0x5}]}, 0x111c}, {&(0x7f0000001c00)={0x28c, 0x2b, 0x800, 0x70bd2a, 0x25dfdbfc, "", [@generic="f77034b15f33419c7c2b646b6b8111deae1ef1d6b81bfc81077725db970e1c3d076eadb25fc56f91e25d06e924ee3c1d4bd598b450506186c1a1b344db4d415dfd17b59a5dbeed968c5471641e27b292a11a287bcae47222b7fe818a8c7b147f3f47965eff5f55f04ee11d1273daccad7d03064ed420a25b8c0c0ff05a074f171ca3a37c39a1dd58652ac26dc02f5df47de2dde8ddf95e76da85b39371fdcf57096bffcc77aa2bf1dd0d1563d2989c480ae95f2ad84d40512f47a2d3f4663d7ec4f81baace89b070f45d1f24b9e1019fd319", @typed={0x4, 0x27}, @typed={0x8, 0x7b, @pid=r2}, @nested={0xc4, 0x35, [@typed={0x14, 0x37, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}}, @generic="8376e3338265ff93f0ff38593c6c688b9a5d007f6c82ae1b1a85dff042f2d3e663ed2d10dc785d0fc9f1a3bf829f3bcfcfac5392096b8981d539d9886c9c4e0cc78ed25638354d6338fdb1c6e8dfb2316b88bff8c7e2dba75dc9bdea1fad3686312911a08946af0a99fbde9d469e82bf4a28af2b5b4bfe6ba0968c0e92287830eb1460e07762136b2b74889ecc47c2414bdf00657ccddef603018570273df467a8339b13bbe092f277"]}, @typed={0xd8, 0x22, @binary="7305ee069175abeba287d3279c4ef16dc7c8dd83b4d86e718f5ec452c73fe95a1f90cc08432629f7911f6f1e09c7407fdc7294f463a7120ce0db8df52a2813b8ece192873154fc3dd8c1d88b61d5a7fc709fd02dbc61025dddd597fe89590db680397a18e2d2c3400ecb3068ee01ffc5fca807c490709abda230abc3fba9df02259de02979bc3fcc734e098d48445ef21f43a5880e4d5309200437c283b56b77eae064621c3269f091e08a7995b0e3de5dafd5ee99822dc9748d9fd6c4004eb641edf701c8c134dba00a1fc0647cacad852c4249"}]}, 0x28c}], 0x4, &(0x7f0000002940)=[@cred={{0x1c, 0x1, 0x2, {r3, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}, @rights={{0x28, 0x1, 0x1, [r9, r10, r11, r12, r13, r14]}}, @rights={{0x24, 0x1, 0x1, [r15, r16, r17, r18, r19]}}, @rights={{0x38, 0x1, 0x1, [r20, r21, r22, r23, r24, r25, r26, r27, r28, r29]}}, @cred={{0x1c, 0x1, 0x2, {r30, r31, r32}}}, @cred={{0x1c, 0x1, 0x2, {r33, r34, r35}}}], 0x108, 0x80}, 0x4000) r36 = syz_open_dev$cec(&(0x7f0000000240)='/dev/cec#\x00', 0x3, 0x2) mkdirat(r36, &(0x7f0000000180)='./file0\x00', 0x80) r37 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r37}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_POLL(r37, &(0x7f0000000080)={0x18, 0x6}, 0x18) r38 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x401, 0x1) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r37, 0x84, 0x22, &(0x7f00000001c0)={0x5, 0x4, 0x8, 0xe64, 0x0}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r38, 0x84, 0x11, &(0x7f0000000140)={r39, 0xffffffffffffff00}, 0x8) [ 258.957261] input: syz1 as /devices/virtual/input/input397 [ 259.032622] input: syz1 as /devices/virtual/input/input398 [ 259.055736] audit: type=1400 audit(1566820660.703:68): avc: denied { create } for pid=11851 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 259.110468] input: syz1 as /devices/virtual/input/input400 [ 259.171568] input: syz1 as /devices/virtual/input/input401 [ 259.740438] device bridge_slave_1 left promiscuous mode [ 259.746278] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.820818] device bridge_slave_0 left promiscuous mode [ 259.826400] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.953204] device hsr_slave_1 left promiscuous mode [ 260.003770] device hsr_slave_0 left promiscuous mode [ 260.044461] team0 (unregistering): Port device team_slave_1 removed [ 260.054109] team0 (unregistering): Port device team_slave_0 removed [ 260.064243] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 260.142854] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 260.232080] bond0 (unregistering): Released all slaves 11:57:43 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {0x4, 0xfff, 0x0, 0x7}, 0x56, [0x65, 0x5, 0x100, 0x0, 0x80000001, 0x4, 0x1, 0x6, 0x9, 0x4, 0x1, 0x7fff, 0xb89b, 0x10000, 0x451, 0x9, 0x9, 0x10001, 0x6, 0xfffffffffffffffa, 0x1ff, 0xffffffffffffffff, 0x1, 0x87, 0x1, 0x4636, 0x8, 0x0, 0x1, 0xfffffffffffffffb, 0x3, 0x3, 0x8, 0x7fff, 0x7fff, 0x2, 0x7, 0x3, 0x400, 0x8001, 0x881, 0x9, 0x98, 0x10001, 0x80, 0x5, 0x5, 0x4, 0x50e1, 0xffffffffffff8001, 0x2, 0xfb6, 0x7, 0x3, 0x7ff, 0x6, 0x6, 0x8000, 0xfffffffffffffffc, 0x2, 0x4, 0x400, 0x8b6, 0x860], [0x3, 0xa08, 0x81, 0xaf, 0x0, 0x7, 0xfffffffffffffe01, 0x9f, 0x3, 0x9, 0x10001, 0x81, 0x0, 0x7, 0x7ff, 0x3, 0x101, 0x1, 0x401, 0x1, 0xf03, 0x4, 0x7512, 0x5dac8fc8, 0x5, 0x1, 0x1f, 0x0, 0x0, 0x7, 0x630000000000000, 0x100000000, 0x80000001, 0x9, 0x153, 0x8, 0x4, 0x6, 0x6c25, 0xfffffffffffffff7, 0xaeb6, 0x3, 0xfffffffffffffff9, 0x80000000, 0x81, 0x2f, 0x9, 0x0, 0x1, 0x7, 0xffffffff, 0x9, 0x1, 0x0, 0x20, 0x9a37, 0x2, 0x8460, 0x0, 0x2, 0xfffffffffffff9d5, 0x200, 0x7, 0x5], [0x2, 0x8a4, 0xfffffffeffffffff, 0x100000000, 0x1, 0x3, 0x3f28, 0x7fff, 0x8, 0xffffffff, 0x2, 0x6, 0x2, 0x7, 0xfffffffffffffff8, 0x9, 0x5, 0x7f, 0xd4, 0xc826, 0xfffffffeffffffff, 0x1, 0x3ff, 0x8450, 0x0, 0x8000000000000000, 0x4, 0x401, 0x3, 0x5, 0x6, 0x3, 0x800, 0x5, 0x2, 0x0, 0x4, 0x3, 0x9, 0x1, 0x7fffffff, 0x8, 0x8, 0x5, 0x5, 0x9, 0x3, 0x80, 0x10001, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x5, 0x6, 0x6, 0x100, 0x80000000, 0x8, 0x2, 0x0, 0x10001, 0x9, 0x7, 0x45, 0x3f], [0x0, 0x3, 0x1, 0x10000, 0x7ff, 0x4, 0x3, 0x1ff, 0x0, 0x1, 0xc2ca, 0x0, 0x7, 0x1a, 0x0, 0x2b21, 0x9, 0xc8, 0x0, 0x400, 0x6, 0x7, 0xfffffffffffffffd, 0x8, 0x800, 0x200, 0xaaf3, 0x2, 0x7, 0xfff, 0x6, 0x3, 0x1, 0x17, 0x80000000, 0x3f, 0x3, 0xdef2, 0x7, 0x0, 0x1ff, 0x9, 0x80000000, 0x4, 0x4e, 0xa69, 0x2, 0x2, 0x5, 0xa5, 0x7, 0x200000000000, 0x2, 0x1, 0x6, 0x4, 0x5, 0x6, 0x7, 0xe0, 0xfffffffffffffffa, 0x2, 0x80000001, 0x4040000000]}, 0x45c) ioctl$VT_ACTIVATE(r1, 0x5606, 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x753a9f609d66e7ed, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r2, 0x1}}, 0x18) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 11:57:43 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f0000000140)={0x24000000, 0x3, 0x0, [{0xffffffff, 0x80000000, 0xfffffffffffffffb, 0x7, 0x33fa, 0x8, 0x100000001}, {0x88, 0x9, 0x8, 0x3, 0x7, 0x1f, 0x9}, {0xfffffffffffffffc, 0x3, 0x8, 0x4c7, 0x2, 0x54a, 0x80}, {0xffff, 0x0, 0x9, 0x8e, 0x60020000000, 0x5b55, 0x7}]}) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000004}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x200, 0x70bd28, 0x25dfdbfd, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x1000}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x80) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000002c0)={r1, r1}) 11:57:43 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = epoll_create1(0x0) r2 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x0, 0x40003) r3 = epoll_create1(0x0) r4 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f00000000c0)={0x60002007}) write$UHID_CREATE2(r4, &(0x7f0000000380)={0xb, 'syz1\x00', 'syz0\x00', 'syz1\x00', 0xa1, 0x2, 0x7, 0x81, 0x9, 0x80, "ebca99007f65836e987991f87f0e7efd55f1b2d564f68d22daced4f9c4e46b416b5e8ebea0775d1fb21840d9c030a13393f17591bc8c0d1c57597d9dd67d684148f40c95b4a0dadd595700188698ddbf73406d4ae537451cddc91281575e2f6f21a1c2b8ce85b83ebf0746e985a28945be22f8a6ae7539382ccc613023495a0cb9d4132c49a24e29c64062d1fa8dc55412aa60521b8012b34e57c097a1adc50613"}, 0x1b9) ioctl$BLKDISCARD(r2, 0x1277, &(0x7f0000000640)=0x3f) mlockall(0x3) timerfd_settime(r4, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) syz_open_dev$sndseq(&(0x7f0000000240)='/dev/snd/seq\x00', 0x0, 0x800) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000540)={0x0, 0x5e, "402f210f00719013638d1e24ab0c92ae44496248392c97d3c14bb43fc67f8353d289a506430170d7ab8b1d73a549dcdaf0d627860ccdf6b3cc49638c00e6b55b340b46ce45d6de270f2fcbb3a05ee26ac4d4347c938bee761a9919c3ad2d"}, &(0x7f00000005c0)=0x66) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000600)={r5, 0x3, 0x5, 0x7ff, 0x3f, 0x1}, 0x14) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000002c0)={r6, 0x200, 0x6, 0xb3, 0x3a2, 0x7fd}, &(0x7f0000000300)=0x14) prctl$PR_SET_ENDIAN(0x14, 0x2) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000040)=ANY=[@ANYBLOB="05000000ff00000004000000000000000700000000000000ff7f0000000000001f000000000000000700000000000000080000000000000002000000000000007f0000000000000006000000000000006600000000000000"]) epoll_pwait(r3, &(0x7f0000000340)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) r7 = memfd_create(&(0x7f0000000100)='#em1#+\x00', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r7, 0x0) open_by_handle_at(r4, &(0x7f00000001c0)={0x62, 0x3, "431223132408dc18653d741b236b73207cdb9f0a7e0d2693bd24c7c8d5a67f834ec30aa66ee7d88b03b6d3c56625635be8ffeb9b8761f9f3a00faf80021ff4e33b88717db577b90724681f4c9177e5c84943994042e21266a1d9"}, 0x880) dup3(r4, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000021ff4)={0x2001}) 11:57:43 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0xffffffffffffffff) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)={'syz1', "93b0b83585fd9f589ccac4420a4595988c581ea8a0103e5fcc23db30a2e44983f1e2ad938c10689ce69fb0bf845da8ebde9d2fa746d5349941889b4758910138e7b48ae6b942e3ef0ed0b6c6e7fabf34857babeb045d9b15b30604b98e47dc9d36d44977e8f5e835158e54ea5df5e1138cce4118e3d68e99b03c1d6a5ed53d2f381f96816ce364269b6b379f96d0df0aebd4abda24d674c300da"}, 0x9e) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000002180)={{{@in=@loopback, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@remote}}, &(0x7f0000002280)=0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000002340)={0x14, 0x9, &(0x7f0000000200)=ANY=[@ANYBLOB="b4f5fcff1000000004f7f8ff00009b56704b00000000000095000000000000001a2a01000800000018000000000800000000000004000000645af8ffe3ff00007c14000104000000a7910581437f5f27495e5e5406f334f070a61b333b6729c98ee6c06f49e3f301fa78ed73f8c5ce6ac7aa7f30dcf08c740e94c7989a0709fb83ef5cffa1c3decd3f305e"], &(0x7f0000000080)='syzkaller\x00', 0x7, 0x19, &(0x7f00000000c0)=""/25, 0x0, 0x5, [], r2, 0x15, r1, 0x8, &(0x7f00000022c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000002300)={0x0, 0xf, 0x7fffffff, 0x6}, 0x10}, 0x70) 11:57:43 executing program 5: clone(0x41bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() getgroups(0x2, &(0x7f00000006c0)=[0xee01, 0xee01]) setresgid(0x0, 0x0, r1) unshare(0x30010200) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x4206, r0) 11:57:43 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) fallocate(r0, 0x10, 0xe5d, 0xa946) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) [ 261.709031] input: syz1 as /devices/virtual/input/input402 [ 261.729206] input: syz1 as /devices/virtual/input/input403 [ 261.755111] input: syz1 as /devices/virtual/input/input404 [ 261.770658] input: syz1 as /devices/virtual/input/input405 11:57:43 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r1 = geteuid() mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) r2 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @bcast}, [@null, @remote, @remote, @default, @bcast, @default, @null]}, &(0x7f0000000180)=0x48, 0x800) ioctl$SIOCNRDECOBS(r2, 0x89e2) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x80) write$P9_RLINK(r3, &(0x7f0000000040)={0x7, 0x47, 0x2}, 0x7) 11:57:43 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x3) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) [ 261.862611] input: syz1 as /devices/virtual/input/input406 11:57:43 executing program 3: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r0 = dup(0xffffffffffffffff) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x121400, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) splice(r0, &(0x7f0000000040), r0, &(0x7f0000000080), 0x0, 0x8) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x200040, 0x0) [ 261.925045] input: syz1 as /devices/virtual/input/input407 11:57:43 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) 11:57:43 executing program 3: openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000040)={'gretap0\x00', 0x9}) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x4, 0x80) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 11:57:43 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffffff, &(0x7f0000000140)=@sco, &(0x7f00000001c0)=0x80, 0x80800) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000002c0)=0x14) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000100)) r2 = getegid() mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x800000, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6772e1105c096f8939dbe9e06f75705f69643d", @ANYRESDEC=r2, @ANYBLOB=',\x00']) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) [ 262.056744] input: syz1 as /devices/virtual/input/input410 [ 262.071639] input: syz1 as /devices/virtual/input/input409 11:57:43 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000000)) 11:57:43 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup3(r0, r0, 0x80000) ioctl$IMGETCOUNT(r1, 0x80044943, &(0x7f0000000000)) r2 = dup(r0) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x3) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x1}) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) [ 262.190297] input: syz1 as /devices/virtual/input/input411 [ 262.220372] input: syz1 as /devices/virtual/input/input412 [ 262.318622] input: syz1 as /devices/virtual/input/input413 [ 262.345895] input: syz1 as /devices/virtual/input/input414 [ 262.413001] input: syz1 as /devices/virtual/input/input415 [ 263.961397] IPVS: ftp: loaded support on port[0] = 21 [ 264.746833] chnl_net:caif_netlink_parms(): no params data found [ 264.778442] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.785126] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.792419] device bridge_slave_0 entered promiscuous mode [ 264.798876] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.805897] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.813123] device bridge_slave_1 entered promiscuous mode [ 264.829940] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 264.839545] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 264.858193] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 264.865765] team0: Port device team_slave_0 added [ 264.871677] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 264.878832] team0: Port device team_slave_1 added [ 264.884344] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 264.891732] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 264.952221] device hsr_slave_0 entered promiscuous mode [ 264.990357] device hsr_slave_1 entered promiscuous mode [ 265.030578] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 265.037709] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 265.050235] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.056695] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.063770] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.070281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.096739] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 265.103679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.112780] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 265.122560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 265.129561] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.136821] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.146034] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 265.153210] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.161775] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 265.169854] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.176271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.190715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 265.198480] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.205042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.212727] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 265.220779] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 265.229028] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 265.238450] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 265.248624] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 265.259343] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 265.266630] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 265.273954] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 265.286121] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 265.297701] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.730495] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready 11:57:47 executing program 2: r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/validatetrans\x00', 0x1, 0x0) write$selinux_validatetrans(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='systemHu:object_r:systerd_logger_exec_t:s0 system_u:object_r:removable_device_t:s0 00000000000000000000 /usr/sbin/cups-browsed\x00'], 0x7f) 11:57:47 executing program 1: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={0x3f}, 0x8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x80000) splice(r0, &(0x7f0000000040), r1, &(0x7f00000000c0), 0xff, 0x8) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r3 = dup(r2) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) 11:57:47 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000040)) 11:57:47 executing program 3: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x4580, 0x0) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, &(0x7f0000000080)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$selinux_context(r0, &(0x7f0000000340)='system_u:object_r:lib_t:s0\x00', 0x1b) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], [0x0, 0x7275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000]}, 0x45c) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x200000, 0x0) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f00000000c0)) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r2, 0x80045530, &(0x7f0000000140)=""/233) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r2, 0x80045530, &(0x7f0000000240)=""/243) prctl$PR_SET_THP_DISABLE(0x29, 0x0) r3 = dup(r1) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) 11:57:47 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0xb5, 0x3, 0x5, 0x5}, 'syz1\x00', 0x49}) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x802, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='attr\x00') ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000240)={'ipddp0\x00', 0x30}) r2 = dup(r0) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x6) pread64(r2, &(0x7f0000000140)=""/184, 0xb8, 0x0) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000000)={0x18}, 0x18) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) 11:57:47 executing program 5: msgget(0x0, 0x8) clone(0x41bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = getegid() getgroups(0x2, &(0x7f00000006c0)=[0xee01, r1]) setresgid(0x0, 0x0, r2) unshare(0x30010000) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x4206, r0) 11:57:48 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x20001, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) clock_gettime(0x0, &(0x7f0000003040)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000002f40)=[{{&(0x7f0000000100)=@alg, 0x80, &(0x7f0000000180)=[{&(0x7f0000000480)=""/235, 0xeb}, {&(0x7f0000000580)=""/207, 0xcf}], 0x2, &(0x7f0000000340)=""/163, 0xa3}, 0x100000001}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000680)=""/95, 0x5f}, {&(0x7f0000000700)=""/239, 0xef}], 0x2}, 0xbe4}, {{&(0x7f0000000800)=@nfc_llcp, 0x80, &(0x7f0000000240)=[{&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000001880)=""/87, 0x57}, {&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000002900)=""/205, 0xcd}], 0x4, &(0x7f0000002a00)=""/134, 0x86}, 0x4}, {{&(0x7f0000002ac0)=@ipx, 0x80, &(0x7f0000002e40)=[{&(0x7f00000002c0)=""/25, 0x19}, {&(0x7f0000002b40)=""/196, 0xc4}, {&(0x7f0000002c40)=""/21, 0x15}, {&(0x7f0000002c80)=""/80, 0x50}, {&(0x7f0000002d00)=""/24, 0x18}, {&(0x7f0000002d40)=""/247, 0xf7}], 0x6, &(0x7f0000002ec0)=""/118, 0x76}, 0x1}], 0x4, 0x20, &(0x7f0000003080)={r1, r2+10000000}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000080)={0x18, 0x6}, 0x18) [ 266.342937] input: syz1 as /devices/virtual/input/input416 [ 266.374457] input: syz1 as /devices/virtual/input/input417 11:57:48 executing program 2: setresuid(0x0, 0xfffe, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x3b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x39e, 0x0, 0x0, 0x0, 0x1}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup2(r1, r0) [ 266.392190] input: syz1 as /devices/virtual/input/input418 [ 266.408743] audit: type=1400 audit(1566820668.053:69): avc: denied { validate_trans } for pid=11968 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:security_t:s0 tclass=security permissive=1 11:57:48 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000]}, 0x45c) r1 = dup(r0) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) getsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) setsockopt(r1, 0xda, 0x1, &(0x7f0000000040)="4d91386e521d2ff0dd5d6d490c5339d393fbb160688c55e68425fe0b50c76051d9887f0b9ec7e9fb6ae680ea2c950228adc6ff7da028c743918aab156a17b44847b18c88aa8852b78051564768a5f20ec61cee9c10d0178cf7b980b987a035bc7a59d04fdde8757cf197e2c0114f7e8f98537046d44968d0069293be692807998c1b32cd22fe3de9fdf116c4", 0x8c) [ 266.457868] input: syz1 as /devices/virtual/input/input419 11:57:48 executing program 2: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000140)={0xff, 0x4, 0x7, 0xf8}) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x3f, 0xb1b35ecc4b5d6b6c) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000100)=r1) fsetxattr$security_evm(r1, &(0x7f0000000180)='security.evm\x00', &(0x7f00000001c0)=@v2={0x3, 0x0, 0xd, 0x200, 0xdd, "cd649761914f766a65ba0463c44cb4c54e0dbd9e8ea2e9324df3102f18a89c93d141e64455792160f145cd8c75fcb4f61a9d9efcee9ade38374314c1ec6a653e0ff64852753d25dfb9fad952d8218d5e30134109f3c5c356d0020aabeeb6385a9c30d5c38c858bf8851e89f386c49b824e9c9e83220afef14e3c3c11065f4c11004947077e7571041b255d359f4762a0fdc21a0b757fe916fd2c54b917dcac1e4d25716f830538b9698307ad69c459f742e0336ae7bb0790d236495699901bf4b35b44438ce7d44fe34515d41eead837c786c97c710d1de4b404ece57a"}, 0xe7, 0x2) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ff8000/0x2000)=nil) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, 0x0) 11:57:48 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x20c480, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000040)={0x40000000}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r3 = dup(r2) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) 11:57:48 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f0000000000)=0x5000) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="eccd6094eaea04a364e1a3d99487774d9cc8174417a52fe0aa4514cc58b9bdf848131bb26961e951fbb02a587f09be886bccbe5a0689130bc58d4a1a48e84e0eb7b13977dad5", @ANYRES16=r2, @ANYBLOB="080027bd7000fbdbdf250c0000002c000000000000000000000014000200627269646765300000000000000000000800040000040000"], 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x0) [ 266.567793] input: syz1 as /devices/virtual/input/input422 11:57:48 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_DELETE(r0, &(0x7f00000001c0)={0x30, 0x6, 0x0, {0x2, 0x4, 0x7, 0x0, 'user_id'}}, 0x30) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x8000, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0x9}}, {@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0xe00}}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@audit='audit'}, {@audit='audit'}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$EVIOCGEFFECTS(r3, 0x80044584, &(0x7f00000005c0)=""/207) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) [ 266.639210] input: syz1 as /devices/virtual/input/input423 [ 266.677668] input: syz1 as /devices/virtual/input/input424 11:57:48 executing program 2: socketpair(0x9, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) recvmsg(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000001700)=""/253, 0xfd}], 0x1}, 0x40000020) ioctl(r1, 0x4000001000008912, &(0x7f0000000040)="11dca5055e0bcfe47bf070") close(r0) close(r1) [ 266.689268] input: syz1 as /devices/virtual/input/input425 11:57:48 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10) 11:57:48 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x400000, 0x0) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x2, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={0x0, 0x1ce3}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={r1, 0x4}, 0x8) read$rfkill(r0, &(0x7f0000000180), 0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) mq_timedsend(r0, &(0x7f0000000240)="317b40b567f1492a1a613f27151233ebe972763235c3c291b5023d0c95142fe499a766633d582271d4a66521393ac7dedf6b49c348134a6edc5032b96acf82639558d55c08e54dc34637d5cfe5944d076cc6601cc695", 0x56, 0x1f, &(0x7f00000002c0)={0x77359400}) listen(r3, 0x37) sendto$inet6(r2, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="652a89c4bf1b1e56ea17e4ff7059cb369b3c8da1991d1d47925d049af90e6268af52d519011bb6158486afb5d3fe8183309af9b1f406a464295465ed1e7303c3113ada1c2608d1fbc6e04619e95f9585dc86e3ef05520d0d3afde6cffea8dcb7623b2b5dbe000000000000000000"], 0x1}}, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000001c0)={r1, 0x2}, &(0x7f0000000200)=0x8) recvmmsg(r2, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}}], 0x8000000000003bf, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000003c0)={{0x6, 0xfffffffffffffff7}, {0x10001, 0xac}, 0x6, 0x1, 0x8}) openat$capi20(0xffffffffffffff9c, &(0x7f0000000300)='/dev/capi20\x00', 0x8080, 0x0) dup2(r3, r4) [ 266.781108] input: syz1 as /devices/virtual/input/input426 [ 266.811499] input: syz1 as /devices/virtual/input/input428 11:57:48 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0xffffffffffffff80, 0x0) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f00000002c0)={0x5, 0x1ff, 0x8, 0x9, 0x20}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)="c485d4a6cd23d98d8bf6ea8b3151cc0ac4143c7572f5559a139263dfbd15ee3ac5397bf87e73341784", 0x29) getsockopt$inet_dccp_int(r2, 0x21, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0x4) r3 = dup(r1) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x3) fstat(r1, &(0x7f0000000380)) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x5) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000240)={0x2, 0xffffffff, 0x66e8, 0x1, 0xe7d, 0x100}) [ 266.829930] input: syz1 as /devices/virtual/input/input427 [ 266.974094] input: syz1 as /devices/virtual/input/input431 11:57:48 executing program 5: clone(0x41bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() getgroups(0x2, &(0x7f00000006c0)=[0xee01, 0xee01]) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x10000, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r2, 0x110, 0x4, &(0x7f0000000040)=0x2, 0x4) getgid() setresgid(0x0, r1, r1) unshare(0x30010000) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x4206, r0) 11:57:48 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xa8) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 11:57:48 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000000)={0x4, 0x800, 0x0, 0x0, 0x0, [{r1, 0x0, 0x9}]}) 11:57:48 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x2000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000200)={0xa, 0x0, 'client0\x00', 0xffffffff80000000, "24ef7d1f66165aec", "0d332f269739f7ac15976fa14b5729cdff18e00a0b5b9ae42b82ae2eb5e32e67", 0x7, 0x7}) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10, &(0x7f0000000080), 0x0) r2 = gettid() perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x5, 0x0, 0x8, 0x8f, 0x0, 0xfffffffeffffffff, 0x200, 0x0, 0xd6f6, 0x0, 0x1, 0x7, 0x7, 0x9, 0x3, 0x98, 0x8, 0x4, 0x8, 0xeba5, 0x40, 0x3f, 0x1, 0x1, 0x100000001, 0x3b8e1e02, 0xfffffffffffffffd, 0x779, 0x7, 0x5, 0xf6a, 0x9, 0x0, 0x400, 0x8, 0xe000000000000000, 0x0, 0xd5a5, 0x1, @perf_bp={&(0x7f0000000300), 0x1}, 0x20000, 0x0, 0x400, 0x1, 0x6, 0x800, 0x20}, r2, 0x4, r0, 0x8) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr="3024326b2007e44373e028ee55dd2f5a", 0x80}, 0x1c) r3 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x9, 0x40000) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x4e21, @loopback}, {0x2, 0x4e24, @loopback}, {0x2, 0x4e23, @multicast1}, 0x50, 0x0, 0x0, 0x0, 0x100000000, &(0x7f00000000c0)='vcan0\x00', 0xeab, 0x6, 0x6}) 11:57:48 executing program 3: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x3, 0xe4bb102913de179c) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=0x22, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000240)={0x4, 0x8, 0xfffffffffffffffa, 0x5}, &(0x7f0000000280)=0x8f66, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0x10001}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000008c0)={r0, 0x10, &(0x7f0000000880)={&(0x7f0000000140)=""/149, 0x95, r2}}, 0x10) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r3 = dup(r1) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) [ 267.169447] input: syz1 as /devices/virtual/input/input432 [ 267.177890] input: syz1 as /devices/virtual/input/input434 [ 267.184205] input: syz1 as /devices/virtual/input/input433 11:57:48 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xc1004115, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x9, 0x4}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in6={{0xa, 0x4e23, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8}}, 0x8000, 0x9, 0x1, 0xfe88, 0x8}, 0x98) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0xffffffff, 0x7, 0x5, 0x4, 0x98, 0x8, 0x10c000000000}, 0x1c) 11:57:49 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x52df539a93d52979, 0x0) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, &(0x7f0000000040)=0x0) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000080)=r2) r3 = dup(r0) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) [ 267.294103] input: syz1 as /devices/virtual/input/input435 [ 267.367255] input: syz1 as /devices/virtual/input/input436 11:57:49 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x200, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f0000000040)={0x9, 0x101}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000080)={0x18, 0x6}, 0x18) 11:57:49 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) syz_genetlink_get_family_id$net_dm(&(0x7f0000000000)='NET_DM\x00') ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 11:57:49 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) r2 = semget(0x1, 0x2, 0x120) semctl$SEM_STAT(r2, 0x2, 0x12, &(0x7f0000000000)=""/81) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000000c0)={0x0, 0x6}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000001c0)={r4, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e21, 0x5, @rand_addr="09a6300b99f4f73e4f7d218d9ddd5167", 0x5}]}, &(0x7f0000000200)=0x10) 11:57:49 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xa8) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) [ 267.467426] input: syz1 as /devices/virtual/input/input438 [ 267.525500] input: syz1 as /devices/virtual/input/input439 [ 267.558015] input: syz1 as /devices/virtual/input/input440 11:57:49 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) setsockopt$ax25_int(r1, 0x101, 0xc, &(0x7f0000000000)=0x10000, 0x4) [ 267.588528] input: syz1 as /devices/virtual/input/input441 [ 267.607863] input: syz1 as /devices/virtual/input/input442 [ 267.687194] input: syz1 as /devices/virtual/input/input444 [ 267.757994] input: syz1 as /devices/virtual/input/input445 [ 267.822978] input: syz1 as /devices/virtual/input/input446 11:57:49 executing program 5: clone(0x41bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$isdn(0x22, 0x3, 0x22) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/133, &(0x7f0000000140)=0x85) r1 = getpid() getgroups(0x2, &(0x7f00000006c0)=[0xee01, 0xee01]) setresgid(0x0, 0x0, r2) unshare(0x30010000) rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f00000000c0)) ptrace(0x4206, r1) 11:57:49 executing program 2: accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009040)=[{{0x0, 0x0, &(0x7f0000004580)=[{&(0x7f0000004480)=""/245, 0xf5}], 0x1}}], 0x1, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x1000000000000252) ioctl$KDSETLED(r0, 0x4b32, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000700)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r1, 0x0) clock_settime(0x0, &(0x7f0000000140)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) write(r3, &(0x7f0000000380), 0xfffffffe) 11:57:49 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@initdev}}, &(0x7f0000000240)=0xe8) sendmsg$nl_route(r0, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40100004}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="840000001500000226bd7000ffdbdf250a1e00c8", @ANYRES32=r1, @ANYBLOB="1400060005000000030000000000000079000000140001000000000000003a242dbd8b0000000000000000000014e30500000000000500000100fe8000000000000000000000000000bb140006000800000020000000ff7f000005000000080008"], 0x84}, 0x1, 0x0, 0x0, 0x1}, 0x40000c0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000080)={0x18, 0x6}, 0x18) 11:57:49 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) connect$rose(r1, &(0x7f0000000140)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000340)=@assoc_id=0x0, &(0x7f0000000380)=0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000880)={r2, @in6={{0xa, 0x4e20, 0x8, @mcast2, 0x101}}, 0x80, 0x4, 0x7f, 0x2, 0x10}, 0x98) signalfd(r0, &(0x7f00000000c0)={0x3}, 0x8) r3 = dup(r0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e20, @multicast1}}, 0x7, 0x2}, &(0x7f0000000240)=0x90) sysfs$3(0x3) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000280)={r4, 0x1d, "2b7585d418d618156db6577acc74c75600ec8a20d3f0abdfca91ba7d33"}, &(0x7f00000002c0)=0x25) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x3) linkat(r3, &(0x7f0000000000)='./file0\x00', r3, &(0x7f0000000040)='./file0\x00', 0x1000) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x5) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/member\x00', 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 11:57:49 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc00]}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0xc0001, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x10}, {r0, 0x1020}, {r0, 0x620}, {r0, 0x26}, {r1, 0x2000}, {r0, 0x2}, {r2, 0x4440}], 0x7, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f00000000c0)={0x8001}, 0x8) 11:57:49 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/exec\x00', 0x2, 0x0) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) [ 267.995199] input: syz1 as /devices/virtual/input/input447 [ 268.013789] input: syz1 as /devices/virtual/input/input448 [ 268.023819] input: syz1 as /devices/virtual/input/input449 11:57:49 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.ima\x00', &(0x7f0000000100)=@v1={0x2, "4268797d9592a9e890"}, 0xa, 0x2) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) pipe(&(0x7f0000000140)={0xffffffffffffffff}) setsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000180)=0x3, 0x4) [ 268.110597] audit: type=1400 audit(1566820669.753:70): avc: denied { map } for pid=12113 comm="syz-executor.2" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:security_t:s0 tclass=file permissive=1 [ 268.153788] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 11:57:49 executing program 2: perf_event_open(&(0x7f0000000980)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000040)=0x4000001d, 0x6, 0x0) nanosleep(&(0x7f0000000000)={0x0, 0x989680}, &(0x7f0000000080)) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200c64, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000468000/0x3000)=nil, 0x3000, 0x1, 0x3, 0x3) [ 268.214970] input: syz1 as /devices/virtual/input/input450 11:57:49 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000040)={0x6, 0x0, {0x0, 0x3, 0x80, 0x0, 0x1}}) r2 = dup(r0) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) 11:57:49 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x1, 0x140) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x9}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000240)={r1, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}}}, 0x84) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',7idQ\x00\x00\x00\x00\x00', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000080)={0x18, 0x6}, 0x18) 11:57:50 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x9, 0x0) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000140)=0xfffffffffffffffd) r2 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x1, 0x4880) ioctl$RTC_IRQP_SET(r2, 0x4008700c, 0x1e79) r3 = dup(r0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100008c833684bfdfe9ff4bccb152c98645000601f3ff5407000000000000006bda9dfa98c5d0524c7549f27701"]) ioctl$KVM_DEASSIGN_PCI_DEVICE(r3, 0x4040ae72, &(0x7f0000000000)={0x7ff, 0x6, 0x1, 0x0, 0x1000}) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) [ 268.309186] input: syz1 as /devices/virtual/input/input451 [ 268.336268] input: syz1 as /devices/virtual/input/input452 [ 268.377479] input: syz1 as /devices/virtual/input/input453 11:57:50 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x4, 0x400000) ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f0000000280)=0x4) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r2 = dup(r1) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x5) syz_open_dev$rtc(&(0x7f0000000200)='/dev/rtc#\x00', 0x1, 0x0) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f00000000c0)=0x8f, 0x4) r3 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000140)="739f43e740ff04a8fdfa884be6111bed9453c5f7ee1b61aa872dcac571502a75f40eb978f86bb395b73d10475bd42fd830321b1d3565897badab1fffd32e50b219ee090b73ea1ec934be9778c4b7756eaefb1946d345888f02f9a1936a4c963c3a485ec6221888e04c6900b23748eaec4f9b6b8354a519a490db8385f66da8170c5369cd7a", 0x85, 0x0) keyctl$describe(0x6, r3, &(0x7f0000000080)=""/52, 0x34) [ 268.457403] input: syz1 as /devices/virtual/input/input454 [ 268.504798] input: syz1 as /devices/virtual/input/input456 [ 268.647596] input: syz1 as /devices/virtual/input/input458 11:57:50 executing program 5: clone(0x41bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x3, 0x280) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000080)) write$P9_RSETATTR(r0, &(0x7f0000000040)={0x7, 0x1b, 0x2}, 0x7) r1 = getpid() getgroups(0x2, &(0x7f00000006c0)=[0xee01, 0xee01]) setresgid(0x0, 0x0, r2) unshare(0x64000000) rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f00000000c0)) ptrace(0x4206, r1) 11:57:50 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000]}, 0x45c) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") setsockopt$inet6_tcp_int(r2, 0x6, 0x9, &(0x7f0000000040)=0x7fffffff, 0x4) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000000)={{}, 'port0\x00', 0x40, 0x8, 0x80000000, 0xfff, 0xb6a, 0x5, 0xa492, 0x0, 0x5053533785b3b738, 0xd0}) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x80000000) 11:57:50 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80000, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=0x3, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x8, 0x1}, 0x0, 0x0, &(0x7f00000002c0)={0x2, 0xe, 0x6, 0x64}, &(0x7f0000000340)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x3}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={r1, 0x10, &(0x7f0000000540)={&(0x7f0000000100)=""/224, 0xe0, r2}}, 0x10) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) 11:57:50 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x13) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f00000001c0)={0x1, 0x10, 0xfa00, {&(0x7f00000000c0), r2}}, 0x18) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x1) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) getsockname$netrom(r1, &(0x7f0000000000)={{0x3, @null}, [@remote, @default, @remote, @default, @default, @null, @bcast, @default]}, &(0x7f0000000080)=0x48) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 11:57:50 executing program 2: perf_event_open(&(0x7f0000000980)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000040)=0x4000001d, 0x6, 0x0) nanosleep(&(0x7f0000000000)={0x0, 0x989680}, &(0x7f0000000080)) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200c64, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000468000/0x3000)=nil, 0x3000, 0x1, 0x3, 0x3) 11:57:50 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ba8], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], [0x1]}, 0x45c) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x8, 0x28000) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000140)="60231e5756ddc37a81a1eb06f45bc233f8973bc6696177220b9ae5951bbc6330008c85457d2fe18b6a5b930aa88fbfa0644ecc411f1ef053b582181b5deaf35a000feebc197b7d2962a5356370d4f2ccca5109ff206e88bc796f1b441564ed0551fac8587c6d7f01d0daddbb7d367ff7b2833bf4e0028ff4ec7c372bdf72936b4ab159f1dfa6bd6bd7bb51b9da8b04446911d521e7ce5ac04776e7618865c63dc7b148662c1bf37a96b30888a51b9fe36ca881949725e2c549b9de43832fd4ff021b70c68d") r2 = dup(r0) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) 11:57:50 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000240), &(0x7f00000002c0), &(0x7f0000000340)=0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='fuse\x00', 0x40, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read'}}, {@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0x20}}, {@allow_other='allow_other'}], [{@smackfstransmute={'smackfstransmute', 0x3d, ']@%'}}, {@pcr={'pcr', 0x3d, 0x2b}}]}}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000080)={0x18, 0x6}, 0x18) [ 268.859959] input: syz1 as /devices/virtual/input/input460 [ 268.889578] input: syz1 as /devices/virtual/input/input461 [ 268.907985] input: syz1 as /devices/virtual/input/input459 [ 268.966763] input: syz1 as /devices/virtual/input/input462 11:57:50 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 11:57:50 executing program 3: madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xf) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000cc0)=0x9, 0x4) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x200, 0x0) sendmmsg$alg(r1, &(0x7f0000000b40)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="51348324bbb2517cd6db241be2e49c7b4ce70dc2c2cbe757e36eaeb47609cd5be53e5974f94b40ed0a8f5debb6954d65fd95bf8273b570d496cbbd35a77beab5f056a6d8f2497372b5a9bef0f499b132f91de748b536072edf6a838555d107e08fddd36ad5440c9eef44876430cf576f97c9b58f8174b5b3c6b87c8c30715036a506028a093bc64b93a209d428", 0x8d}], 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/392], 0x188, 0x4000000}, {0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000880)="13dd7c63ca32ac2d7eacb93d6b08c4dc65b9aeaab4599d99b44634b651379442dbc2bcf1d8e6eb3f6b2d05fe998776bfa2d511c38b8104f0489dcd9eb022d9e208cf10c0354192aac1df8c29fed4948c987c7349525c522974847e20995a06e9e123725a0ca9a6327dc9ebb5004b741a3a02c6c694345ed663b9c3e3b41512", 0x7f}, {&(0x7f0000000900)="70aced15026d6b7460e646be544d529f498f1e94a9865e5055748bdd66c91cea30d15d6e4344e025b0101feea5f3caf4af53f4f685a8b5d8adf8abde02e23e82163c99112207b699a7f6b1e1d1bee524b0e1cb904be0658e3071da491a99", 0x5e}, {&(0x7f00000000c0)="1dd105180e678a738129aaeade7f245fa9", 0x11}, {&(0x7f0000000980)="d2920009d7215010da65d2f4a540f00c9e14621e9caf8333bd41d5a863baaea05ae1f5b6879951461d505e04ef97bfe9fb846bdb811c4fcc54c54e782cc56eb2a87512a8f0b489de1c97941e8435412bc3e13c367ed0aa3fc12abe0517ee14ac152f16b1940a8eb168f66dc17fe741a0da8ea454d58f3023bb796397280ed26122beae3a3beba55276a4443e8d1128d667ab8be56f4cf37eed75312e127c7664175fdac7b78411c9e1cf308ad2dbcb61ee776fb0a8d31ec83d", 0xb9}], 0x4, &(0x7f0000000a40)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0x58, 0x117, 0x2, 0x41, "095c679d5444eea56562fe76d8910b48c2f9d6c590555b6aecfa49607f8a415599f7243f514fa89147f9e97f09b1674e9ff919330e5be015be9757c885469d41ff"}, @assoc={0x18, 0x117, 0x4, 0xfffffffffffffffd}, @assoc={0x18, 0x117, 0x4, 0x8000}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}], 0xd0, 0x8000}], 0x2, 0x4000000) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x0, 0x4) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000040)=@ccm_128={{0x304}, "a7cf414ff209bf7c", "7e0659ac281cbc5a11bb902ab16292b5", "d607b62a", "20a24d801730659e"}, 0xa) r2 = getpgid(0x0) ptrace$getregs(0xc, r2, 0x1, &(0x7f0000000bc0)=""/208) r3 = dup(r0) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) [ 269.031799] IPVS: ftp: loaded support on port[0] = 21 11:57:50 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000000), 0x4) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 11:57:50 executing program 0: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x6182f471bcd49be7, 0x0) mkdirat(r1, &(0x7f0000000000)='\x00', 0x10) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="0a1055", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000080)) write$FUSE_NOTIFY_POLL(r0, &(0x7f00000000c0)={0xc, 0x6, 0x0, {0xfffffffffffffffd}}, 0xf3) 11:57:50 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x3e5c, 0x4e80) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000040)={0x1, 0x80000000, 0x200, 0xffffffff, 0x0, 0x7}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r2 = dup(r1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x6) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x10001, 0x40001) [ 269.115851] input: syz1 as /devices/virtual/input/input465 [ 269.211510] input: syz1 as /devices/virtual/input/input468 [ 269.248309] input: syz1 as /devices/virtual/input/input470 [ 269.341431] input: syz1 as /devices/virtual/input/input471 [ 269.363613] input: syz1 as /devices/virtual/input/input472 11:57:51 executing program 5: clone(0x41bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() getgroups(0x2, &(0x7f00000006c0)=[0xee01, 0xee01]) setresgid(0x0, 0x0, r1) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x20040, 0x0) bind$vsock_dgram(r2, &(0x7f0000000040)={0x28, 0x0, 0x2711, @reserved}, 0x10) unshare(0x30010000) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x4206, r0) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000140)=""/240) 11:57:51 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1a) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x4000004a2, 0x8000}) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, &(0x7f0000000140)={0x65}) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000040)=0x1) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000180)={0x0, 0x9d, "01f8f77f8ceb5ebcd55c7832e333b58ae62c1740703c34387a3ee0a91cf788ca7d296b9e98026caca2449781118554012cc3449148ae66ae7e31b7b4205888868740488b7167d4250e6c20166829ec3b83e15f5f73ed0d54c24b02fdede58935646b31c9dac2a6a52cb0dadd4c8559cbf46f70277770e440ffd901e9aa6e7dfa83cf60f3a69004f85888770ececb95bc0c975578cb9bc8a984e79776ee"}, &(0x7f0000000080)=0xa5) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000240)={r2, 0x44, 0x79, "76ee3a6d95d59cf21dad4891afae0fad195ff6d7bcc86c6deb3a5b2049851d923dba29a92ef90c82d07ca47dd614159bea9a7d93268e51cf0c2a1812e0e3896087808b6f1626da072883a0ae9ce62a1556b618779ea1bbeb8df7de0ee443bab0622ea3608a3ebc32c161bfae79bf7650762762275971104ce7"}, 0x81) 11:57:51 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) 11:57:51 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x202000, 0x0) sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="e2532cac387b98e69e5118", 0xb}, {&(0x7f0000000180)="7b5b889f5db608bc8481a2b4543a60953303876fa8f603c75def7ccc8279a158b480772cafb0e6ccb28c0657002ccc5d17e15cb64bebea49485478505681d1597e17cef69b73b894142fde4d96d6aa71637325ab33a2c4b9d8c558f3d9fe9e30abc78a049ab91f29c5f237b834f39cfe9df7f35a8a1f1a0988d442", 0x7b}, {&(0x7f0000000200)="096cd285b7ee8fff0deb69c9b871dd8a50756e432063cad3c8cde8ca616bc3e77f53109a4fe49c749b0c9df95e1d6f3454acc58ad4a3ac6f4ef368c5ff39af00ebdbe62b42fd0bcca2ee0472b4efc9580da86bb012c03db011be1b7a512200", 0x5f}], 0x3}, 0x20000844) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="c0dca5055e0bcfec7bf070") syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)={[{@fat=@dos1xfloppy='dos1xfloppy'}, {@nodots='nodots'}]}) 11:57:51 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000000)={0x8, 0x10000, 0x7fffffff, 0x4, 0x80000000, 0xffffffff, 0x8, 0x100, 0x7, 0x7ff, 0x6}, 0xb) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000040)={0x0, 0x6, 0x400, 0xd53c, 0x200, 0x7f, 0x7f66, 0x7, {0x0, @in={{0x2, 0x4e23, @broadcast}}, 0x8000, 0x53, 0x4, 0x3f, 0x4674af73}}, &(0x7f0000000140)=0xb0) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000180)={r2, 0x400}, &(0x7f00000001c0)=0x8) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x9, 0x80000) 11:57:51 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0xffffffffffffffc0, &(0x7f0000000040)={0xffffffffffffffe0}, 0x8) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) [ 269.682672] input: syz1 as /devices/virtual/input/input473 11:57:51 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) r1 = syz_open_dev$admmidi(&(0x7f0000000340)='/dev/admmidi#\x00', 0x9, 0x8a100) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000600)={{{@in=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000740)={'vcan0\x00', r2}) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000780)={0xad, 0x5, 0xfffffffffffffffa, "9b0a406d7c817d29ea07e7d06b4abc0e281a517e065c4dd91d04c4dd533d57a65465f3f5fccebbfbd50078637a4407bbeaf1f6d7a03105f45be2ce4fb3ccfdff9322328bb32fce178b9d2860b7b184c966da34cdc5a625376622adca1d1bc60b2502945193e020290f84b7a8c7ae88f204b2ff93b6ba955e8426078252202c34b0824d71192be5bcd16c1ebc390342a6d7f43e7d81e288d0b8e5aed812a27a963fa82970649d6baf8e189caf16"}) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x84, r3, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x6, 0xffff]}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x1}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x3f, 0x2]}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={[], [], @empty}}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x2025}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8b1}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}]}, 0x84}, 0x1, 0x0, 0x0, 0x2000c080}, 0x40) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000540)={0x8}, 0x4) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000480)={0x0, @in6={{0xa, 0x4e23, 0x9, @loopback, 0x6}}, 0x0, 0x4, 0x6, 0x6}, &(0x7f00000002c0)=0x98) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000380)={r4, 0x0, 0x0, 0x7, 0xfffffffffffffffd}, &(0x7f00000003c0)=0x18) [ 269.726075] input: syz1 as /devices/virtual/input/input475 [ 269.743518] input: syz1 as /devices/virtual/input/input474 [ 269.752944] FAT-fs (loop2): bogus number of reserved sectors 11:57:51 executing program 5: clone(0x42083000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() getgroups(0x2, &(0x7f00000006c0)=[0xee01, 0xee01]) setresgid(0x0, r1, r1) unshare(0x30010000) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x4206, r0) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4, 0x800) ioctl$TIOCLINUX2(r2, 0x541c, &(0x7f0000000040)={0x2, 0x80000001, 0x2564, 0x7, 0x3, 0x7}) [ 269.770909] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 269.786523] FAT-fs (loop2): Can't find a valid FAT filesystem [ 269.828102] input: syz1 as /devices/virtual/input/input476 [ 269.864784] FAT-fs (loop2): bogus number of reserved sectors 11:57:51 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = socket(0x5, 0x2, 0x4) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000080), 0x4) r2 = dup(r0) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x1d) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r2, 0xc06855c8, &(0x7f0000000000)={0x10, 0x6, {0x51, 0x41, 0xffffffff, {0x9, 0x3}, {0x2, 0x4}, @rumble={0x9, 0x4}}, {0x51, 0x1, 0x0, {0x1ff, 0xffffffff}, {0x6, 0x2555}, @ramp={0xfffffffffffffffa, 0x7, {0x7, 0xff, 0x7, 0x9}}}}) [ 269.882616] input: syz1 as /devices/virtual/input/input477 [ 269.896291] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 269.914092] input: syz1 as /devices/virtual/input/input478 11:57:51 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) bind$ax25(r1, &(0x7f0000000000)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x48) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 11:57:51 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffeffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) [ 269.973161] FAT-fs (loop2): Can't find a valid FAT filesystem [ 270.003325] input: syz1 as /devices/virtual/input/input479 11:57:51 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="66020000005115d861a48e5949cabbc6be7b1038ee3c", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) 11:57:51 executing program 2: r0 = socket(0x11, 0x3, 0xfffffffffffffc01) recvfrom$unix(r0, &(0x7f0000000140), 0x0, 0x12001, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r3 = socket$l2tp(0x18, 0x1, 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000300)={0x0, @multicast1}, &(0x7f0000000340)=0xc) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000380)={@local, r4}, 0x1d1) connect$l2tp(r3, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r5 = socket(0xa, 0x0, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f00000008c0), 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x15, &(0x7f0000000000), 0xffffffffffffff73) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCGARP(r7, 0x8954, &(0x7f000000b680)={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x19}}, {0x6, @local}, 0x62, {0x2, 0x4e23, @loopback}, 'ip6tnl0\x00'}) r8 = socket$inet6(0xa, 0x3, 0xd5f) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000440)) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000780)={{{@in6=@mcast1, @in6=@ipv4={[], [], @multicast2}}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000640)=0xffffffffffffffc8) getgid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000580)=0x25f) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000bc0)={{{@in=@local, @in6=@initdev}}, {{@in=@remote}, 0x0, @in=@empty}}, &(0x7f0000000240)=0xfffffffffffffce6) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000880)={{{@in=@dev, @in=@empty}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000600)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000980), &(0x7f00000000c0)=0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000a00), &(0x7f0000000a40)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000a80)={{{@in=@multicast1, @in=@remote}}, {{@in=@broadcast}, 0x0, @in=@broadcast}}, &(0x7f0000000b80)=0xe8) getgid() ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f00000011c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001200)={{{@in6=@mcast1, @in6=@mcast1}}, {{@in6}, 0x0, @in=@remote}}, &(0x7f0000001300)=0xe8) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000001340), &(0x7f00000001c0)=0xc) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000003a40)) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000003a80)={{{@in=@remote, @in=@remote}}, {{@in6=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000003b80)=0xe8) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000003bc0), &(0x7f0000003c00)=0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000003c40), &(0x7f0000003c80)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000003cc0)={{{@in=@multicast1, @in6=@dev}}, {{@in=@remote}, 0x0, @in=@empty}}, &(0x7f0000003dc0)=0xe8) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000003e00), &(0x7f0000000480)=0xc) ioctl$sock_SIOCGPGRP(r8, 0x8904, &(0x7f0000003e80)) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000003ec0), &(0x7f0000003f00)=0xc) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000003f40), &(0x7f0000003f80)=0xc) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000003fc0), &(0x7f0000000500)=0xc) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000004040)={{{@in=@local, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@local}}, 0x0) getgid() gettid() getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000004140)={{{@in=@broadcast, @in6=@local}}, {{@in=@multicast1}, 0x0, @in=@local}}, &(0x7f0000004240)=0xe8) getgid() gettid() getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000004280)={{{@in=@multicast2, @in6=@initdev}}, {{}, 0x0, @in=@initdev}}, &(0x7f00000002c0)=0xe8) getgid() ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000003c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000004400)={{{@in6=@mcast1, @in=@multicast2}}, {{}, 0x0, @in=@multicast2}}, &(0x7f0000004500)=0x115) getgid() ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000280)) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000004900), &(0x7f0000004940)=0xc) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000004980), &(0x7f00000049c0)=0xc) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000004a00), &(0x7f0000004a40)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000004a80)={{{@in6=@local, @in=@loopback}}, {{@in=@broadcast}, 0x0, @in=@dev}}, &(0x7f0000004b80)=0xe8) getgid() gettid() getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000004bc0)={{{@in6=@initdev}}, {{@in=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000004cc0)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000004d00), &(0x7f0000004d40)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000004dc0)={0x0, 0xffffffffffffff9c, 0x0, 0x4, &(0x7f0000004d80)='nbd\x00'}, 0x30) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000004e00)={{{@in6=@dev, @in=@local}}, {{}, 0x0, @in6=@local}}, &(0x7f0000004f00)=0xe8) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000004f40), &(0x7f0000004f80)=0xc) gettid() getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000004fc0)={{{@in6=@dev, @in=@remote}}, {{@in6=@ipv4}, 0x0, @in=@multicast1}}, &(0x7f00000050c0)=0xffffffffffffffd0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000004c0), &(0x7f0000000400)=0xc) socket$caif_stream(0x25, 0x1, 0x3) gettid() sendto$llc(r6, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x1a, 0x20000000031f, 0x0, 0x0, 0x0, 0x7, @random="0387945b9f37"}, 0x2ff) setsockopt$sock_timeval(r6, 0x1, 0x14, &(0x7f0000000080)={0x0, 0x2710}, 0x10) [ 270.103311] input: syz1 as /devices/virtual/input/input480 [ 270.114507] input: syz1 as /devices/virtual/input/input481 11:57:51 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) fcntl$getown(r0, 0x9) [ 270.165209] input: syz1 as /devices/virtual/input/input482 11:57:51 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x8) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) [ 270.208283] IPVS: ftp: loaded support on port[0] = 21 11:57:51 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xce4b], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 11:57:51 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000440)={0xa0, 0x0, 0x100, 0x70bd2a, 0x0, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000000)={0x591a73ff65652cb1, @remote, 0x4e21, 0x0, 'rr\x00'}, 0x2c) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1, 0x400000) ioctl$EVIOCGSW(r3, 0x8040451b, &(0x7f0000000280)=""/172) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 270.275567] input: syz1 as /devices/virtual/input/input484 [ 270.294833] input: syz1 as /devices/virtual/input/input485 11:57:52 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) 11:57:52 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) r3 = syz_open_dev$amidi(0x0, 0xeffffffffffffff7, 0x0) ioctl$TUNSETVNETLE(r0, 0x400454dc, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000080)=[{0x80400006, 0x0, 0x0, 0x3}]}, 0x10) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000100)=r2) r5 = socket$inet6(0xa, 0x400000000001, 0x0) close(r5) r6 = socket(0x100000000000011, 0x3, 0x0) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, 0x0) bind(r6, &(0x7f0000000000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f00000000c0)) ftruncate(r7, 0x88001) sendfile(r5, r7, 0x0, 0x800000000024) syz_open_procfs(0x0, 0x0) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r9 = dup(r8) ioctl$UI_SET_SWBIT(r9, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r9, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r9, 0x5501, 0x0) [ 270.343805] input: syz1 as /devices/virtual/input/input486 [ 270.584630] input: syz1 as /devices/virtual/input/input489 11:57:52 executing program 5: clone(0x41bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000003f80)='/dev/dsp\x00', 0x28000, 0x0) sendmsg$nfc_llcp(r1, &(0x7f0000004280)={&(0x7f0000003fc0)={0x27, 0x1, 0x1, 0x4, 0xfffffffffffffffc, 0x101, "df6231fbe59835cd19876c048c7e9d786fd032879772d2ff35f6edf79d7de3f6287fa929aeca1f2ed813d30778218f77444a3894ff69f999c1465376d172b0", 0x1b}, 0x60, &(0x7f0000004180)=[{&(0x7f0000004040)="ce5f7b5d01fc1bedd36462b66777d72bf0dfa38c3d8030ef62bf2ca21f340aabb464ee94023ade80db66f0e6402eb956c55992e10b3ff22910d31ebf2c1512620a60391dbb71f372149e9c0b88b6a995c19a88dca7a9f2d985a1ba3e3e3844c2464e66744dad58e9dd13575e19fa6efda2a9b792c0adde57c61a1856456293c006f25f23a0eeb2f3669f36be7635e6e16cdd0e9e9564cf2f48a158795d0e3f7d1602141f8026837cebc3a44b010555a7debdf7f644d7a6084fdaaef3bb6483ccaad12a5444fb5638009b0c935194ba97a5f623997eb8cbfd4ee21bd1f2e0227c8cd0", 0xe2}, {&(0x7f0000004140)="bef47e056f", 0x5}], 0x2, &(0x7f00000041c0)={0xb8, 0x1, 0xadf3, "122d7a955ace39245af71083905564dac337059b9cf4b6e907881063e7b5488d0ec5c3a4ee299e38180c5d68e803ba8aaa162b7530da3c31c766674761dac04d237597cf39fd278dfbac133ab47191069a4d533451467ab52d303789506248c98430089d5dff88b0a3a0a173000a41953b51401157424fb6602784624becac7eb78d49d0f5689fc512f42e7e2921b67ed40f50a21f16decd48d6cf3ae563aac74bacb323bb6ac9"}, 0xb8, 0x8000}, 0x40040) getgroups(0x2, &(0x7f00000006c0)=[0xee01, 0xee01]) recvmmsg(0xffffffffffffffff, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000140)=""/97, 0x61}, {&(0x7f00000001c0)=""/178, 0xb2}, {&(0x7f0000000080)=""/39, 0x27}, {&(0x7f0000000280)=""/219, 0xdb}, {&(0x7f0000000380)=""/137, 0x89}, {&(0x7f0000000440)=""/87, 0x57}, {&(0x7f00000004c0)=""/16, 0x10}, {&(0x7f0000000500)=""/134, 0x86}, {&(0x7f00000005c0)=""/121, 0x79}], 0x9, &(0x7f00000007c0)=""/225, 0xe1}, 0x4}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000640)=""/53, 0x35}, {&(0x7f00000008c0)=""/88, 0x58}, {&(0x7f0000000940)=""/158, 0x9e}, {&(0x7f0000000a00)=""/121, 0x79}, {&(0x7f0000000680)=""/36, 0x24}, {&(0x7f0000000a80)=""/83, 0x53}, {&(0x7f0000000b00)=""/253, 0xfd}, {&(0x7f0000000c00)=""/241, 0xf1}, {&(0x7f0000000d00)=""/111, 0x6f}], 0x9, &(0x7f0000000e40)=""/213, 0xd5}, 0x5}, {{&(0x7f0000000f40)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000002380)=[{&(0x7f0000000fc0)=""/176, 0xb0}, {&(0x7f0000001080)=""/4096, 0x1000}, {&(0x7f0000002080)=""/243, 0xf3}, {&(0x7f0000002180)=""/30, 0x1e}, {&(0x7f00000021c0)=""/62, 0x3e}, {&(0x7f0000002200)=""/218, 0xda}, {&(0x7f0000002300)=""/114, 0x72}], 0x7, &(0x7f0000002400)=""/200, 0xc8}}, {{&(0x7f0000002500)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f00000027c0)=[{&(0x7f0000002580)=""/218, 0xda}, {&(0x7f0000002680)=""/12, 0xc}, {&(0x7f00000026c0)=""/112, 0x70}, {&(0x7f0000002740)=""/116, 0x74}], 0x4}, 0x4}, {{0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f0000002800)=""/167, 0xa7}, {&(0x7f00000028c0)=""/4096, 0x1000}, {&(0x7f00000038c0)=""/61, 0x3d}, {&(0x7f0000003900)=""/92, 0x5c}, {&(0x7f0000003980)=""/124, 0x7c}], 0x5, &(0x7f0000003a80)=""/167, 0xa7}, 0x7fffffff}, {{&(0x7f0000003b40)=@can, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000003bc0)=""/230, 0xe6}], 0x1, &(0x7f0000003d00)=""/130, 0x82}, 0xfffffffffffffff9}], 0x6, 0x2020, &(0x7f0000003f40)) fchdir(r3) setresgid(0x0, 0x0, r2) unshare(0x30010000) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x4206, r0) sched_getscheduler(r0) 11:57:52 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 11:57:52 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x4, 0x408140) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f0000000040)={0x40, 0x101, 0x9, 0x8}) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x6}, 0x18) 11:57:52 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x3) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000000)='.\x00', &(0x7f0000000040)={0xc0, 0x7, "d4c94ff615d2098e690be8161f6fe19b1be4f05f78788be7774b4d5f22cdfe0af418394fbc0ea93fa092ca8ddbc2e61ad6851ae543cebcc949f78f16ac93d4ff9f67d31970a6f52e35e78ac13ab98ff1cb5c433843f1c9f4dfb64ff0c41c3b3c76945a02988ff57e00d772a7c351979fad361e0dce13d5b8d8f7d15e54601855d3860f805e4a86ad07338d5a415e5a19d39a9b76068bff0c2329b7aa2a56d01360344bc3019f2fb574d66f9e06f36b8579e7054f80356170"}, &(0x7f0000000140), 0x1400) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) 11:57:52 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(r0, 0x20201) r2 = dup(r1) ioctl$TCSETS(r2, 0x5402, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40, 0x100, 0x0, 0x0, 0x0, 0x4}) write(r1, 0x0, 0x0) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$apparmor_current(r3, &(0x7f0000000100)=@hat={'permhat ', 0x4, 0x5e, ['/dev/ptmx\x00', 'wlan1cpuset-\x00', '/dev/ptmx\x00']}, 0x3c) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000180)=0x0) kcmp(r4, r5, 0x5, r1, r1) 11:57:52 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) [ 270.742089] input: syz1 as /devices/virtual/input/input490 11:57:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="c0dca5055e0bcfec7bf070") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000440)=0x4018) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000540), 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000480)='{{nodev\x00') ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r4, 0xae80, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000000)={0x28, 0x2, 0x0, {0x5, 0x80, 0x9}}, 0x28) [ 270.794481] input: syz1 as /devices/virtual/input/input493 11:57:52 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x3, 0x214000) epoll_pwait(r2, &(0x7f0000000300)=[{}, {}, {}, {}, {}], 0x5, 0x800, &(0x7f0000000340)={0x3}, 0x8) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x30010, r4, 0x0) sendfile(r0, r4, &(0x7f0000000040), 0x4) process_vm_writev(r1, &(0x7f0000000240)=[{&(0x7f0000002880)=""/4096, 0x1000}], 0x1, &(0x7f00000002c0)=[{&(0x7f0000003880)=""/4096, 0x1000}], 0x1, 0x0) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000200)=r3) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20020}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r5, 0x200, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x4000004) 11:57:52 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) recvmsg(r1, &(0x7f0000000280)={&(0x7f0000000000)=@nl=@proc, 0x80, &(0x7f0000000240)=[{&(0x7f0000000080)=""/17, 0x11}, {&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f0000000140)=""/137, 0x89}, {&(0x7f0000000200)=""/36, 0x24}], 0x4, &(0x7f0000000880)=""/4096, 0x1000}, 0x2000) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000001880)={0x134, r2, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x30, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xa46}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}]}, @TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x20}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3a}]}, @TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xce53}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x7c, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x40010}, 0x97c02e5a5df0b8bf) [ 270.872557] input: failed to attach handler leds to device input493, error: -6 [ 270.882648] input: syz1 as /devices/virtual/input/input495 [ 270.890157] protocol 88fb is buggy, dev hsr_slave_0 [ 270.895484] protocol 88fb is buggy, dev hsr_slave_1 [ 270.900625] protocol 88fb is buggy, dev hsr_slave_0 [ 270.905681] protocol 88fb is buggy, dev hsr_slave_1 [ 270.905756] protocol 88fb is buggy, dev hsr_slave_0 [ 270.905787] protocol 88fb is buggy, dev hsr_slave_1 11:57:52 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {0x6, 0x8, 0x1f, 0x8000}, 0x11, [0x4000000000000, 0x0, 0x0, 0x6, 0xffffffff, 0x1000, 0x3, 0x1, 0x0, 0x6, 0x2, 0x100000000, 0x80000000, 0x8000000000000000, 0x4, 0x200000, 0x6, 0x9, 0xb9f1, 0x6, 0x22, 0x88d, 0x4, 0xfff, 0xfff, 0x7, 0x6, 0x1, 0x10001, 0x5, 0x245, 0xffff, 0x9, 0x8, 0x7f, 0x40, 0x2, 0x4, 0x8, 0x6843, 0x10000, 0xbd, 0xfff, 0x5, 0x2, 0x6, 0x2, 0xeda, 0x6, 0x2, 0x80000001, 0x20, 0xfffffffffffff001, 0x8, 0x4, 0x6, 0x80000000, 0x3, 0x7, 0x19, 0x3, 0x23a1, 0x8, 0x7], [0x0, 0xd53e, 0x7, 0xffffffffffffffff, 0x6, 0x7, 0x4, 0x7f, 0x2, 0x1, 0x10000, 0xfff, 0x7, 0x7, 0x5, 0x100000000, 0x3f, 0x1f, 0x9, 0x7, 0x4, 0x10001, 0x2, 0x8cda, 0x400000000000000, 0x2, 0xc7b, 0x83f, 0x4, 0xe03, 0xfffffffffffffc00, 0x2, 0x623, 0xfe5, 0x18c138f38000000, 0x7, 0x3, 0x802, 0x0, 0x3000000000, 0x200, 0x670f, 0x2, 0x15dd5378, 0x9, 0xcbc0, 0x8001, 0x4, 0x5, 0x7fffffff, 0x1ff, 0xfffffffffffffe00, 0x8, 0x2, 0x401, 0x401, 0xfffffffffffffff9, 0x4, 0x4, 0x0, 0x9, 0x1, 0x8, 0x45], [0xce, 0x7, 0x1f, 0x1, 0x4bb7, 0x7, 0x7ff, 0x2, 0x100000001, 0x101, 0xff, 0x4, 0x7, 0x566c, 0x4, 0x0, 0x101, 0x0, 0x401, 0x1, 0x6, 0x800, 0x6c, 0x0, 0x100, 0x5, 0xffffffffffff0001, 0x3ff, 0x9, 0x3, 0x1, 0x1f, 0x200, 0x3, 0x7fffffff, 0x3f, 0x1, 0x7fffffff, 0x730, 0x5, 0x1, 0x10000, 0x9, 0x8, 0x3366, 0x8, 0x6, 0x0, 0xffff, 0x8, 0xfffffffffffff939, 0x4, 0x3, 0x5, 0xfffffffffffffffa, 0x400, 0x5, 0x2, 0x1d01, 0x101, 0x3, 0x3, 0x0, 0x4], [0x9, 0x5, 0xac, 0x3f, 0x6, 0x6, 0xfffffffffffffffe, 0xffff, 0x9, 0x9c, 0xfa4, 0x1, 0x6, 0x3f, 0x6, 0x1, 0x3, 0x96, 0x8, 0x20, 0x3, 0x8000, 0x3, 0x1f, 0x3, 0x3ff, 0xed, 0x1, 0xe06f, 0x9, 0x0, 0xe64, 0x1b, 0x101, 0x1, 0xffff, 0xfffffffffffffffd, 0x611, 0xfff, 0x3, 0x7, 0x0, 0x40, 0x10001, 0x8, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x8, 0x65, 0x49a, 0x1, 0x4, 0x401, 0x3, 0x7, 0xecf1, 0x7f, 0x200, 0x7, 0xfe8, 0xae, 0x40]}, 0x45c) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000000080)=""/141, &(0x7f0000000000)=0x8d) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f0000000140)={0x6, 0x9, 0x0, [{0x5, 0x3ff, 0x7, 0x9, 0x40, 0x80000000, 0x2}, {0x7fffffff, 0xffffffffffff2113, 0x3f, 0x1, 0x0, 0x5, 0x69}, {0x8, 0x3, 0x7, 0xd0c8, 0x5, 0xffffffffffffad9a, 0x2}, {0x8001, 0x100, 0x4, 0xb42, 0x2, 0x0, 0xffffffff}, {0x8, 0x100000001, 0x5, 0x7, 0x5, 0x52, 0x10000000000000}, {0x800, 0x80000001, 0x1992, 0x4, 0x92e, 0x6, 0x4}, {0x8, 0x10001, 0x80000000, 0x9, 0x8, 0x7, 0x9}, {0x68655f10, 0x1, 0xffff, 0x10000, 0x4, 0x8, 0x7757}, {0x100000001, 0x5e8400000000, 0x1ff, 0x2, 0xfffffffffffffffe, 0x7fff, 0x8}]}) [ 271.026402] input: syz1 as /devices/virtual/input/input497 [ 271.036920] audit: type=1804 audit(1566820672.685:71): pid=12384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir925326283/syzkaller.PBjoRr/275/bus" dev="sda1" ino=17144 res=1 11:57:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(0xffffffffffffffff, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=""/231, 0xe7}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080), 0xfffffffffffffffd) r1 = accept(r0, 0x0, &(0x7f0000000200)) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000240)=0x8, 0x4) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0xffffffffffffff0c, 0x0, 0x0, 0xb2) r3 = syz_open_procfs(0x0, &(0x7f00000007c0)='status\x00') r4 = openat$full(0xffffffffffffff9c, 0x0, 0x8, 0x0) lookup_dcookie(0x0, &(0x7f00000002c0)=""/135, 0x87) preadv(r3, &(0x7f00000017c0), 0x199, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000080), 0x0) io_setup(0x8000, &(0x7f00000000c0)=0x0) io_getevents(r5, 0xcd90, 0x4, &(0x7f0000000100)=[{}, {}, {}, {}], &(0x7f0000000180)) ioctl$TUNGETSNDBUF(r4, 0x800454d3, &(0x7f00000001c0)) ioctl$SNDRV_TIMER_IOCTL_TREAD(r4, 0x40045402, &(0x7f0000000280)) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x2, 0x0) [ 271.088793] input: syz1 as /devices/virtual/input/input498 [ 271.099191] input: failed to attach handler leds to device input497, error: -6 11:57:52 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x3, 0x214000) epoll_pwait(r2, &(0x7f0000000300)=[{}, {}, {}, {}, {}], 0x5, 0x800, &(0x7f0000000340)={0x3}, 0x8) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x30010, r4, 0x0) sendfile(r0, r4, &(0x7f0000000040), 0x4) process_vm_writev(r1, &(0x7f0000000240)=[{&(0x7f0000002880)=""/4096, 0x1000}], 0x1, &(0x7f00000002c0)=[{&(0x7f0000003880)=""/4096, 0x1000}], 0x1, 0x0) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000200)=r3) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20020}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r5, 0x200, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x4000004) [ 271.171191] input: syz1 as /devices/virtual/input/input496 [ 271.174428] audit: type=1804 audit(1566820672.795:72): pid=12389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir925326283/syzkaller.PBjoRr/275/bus" dev="sda1" ino=17144 res=1 [ 271.264227] input: syz1 as /devices/virtual/input/input499 [ 271.296247] audit: type=1804 audit(1566820672.945:73): pid=12402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir925326283/syzkaller.PBjoRr/276/bus" dev="sda1" ino=17137 res=1 [ 271.354534] input: syz1 as /devices/virtual/input/input500 [ 271.402265] input: failed to attach handler leds to device input500, error: -6 11:57:53 executing program 5: clone(0x204000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) getgroups(0x67807e726ac66b5, &(0x7f0000000080)) setresgid(0x0, 0x0, 0x0) unshare(0x30010000) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x8000) ioctl$TIOCSISO7816(r1, 0xc0285443, &(0x7f0000000040)={0x8c60, 0x9, 0x9, 0xa79, 0x2000000000000000}) ptrace(0x4206, r0) 11:57:53 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x101000, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e20, 0x9, @mcast2, 0x7}}, 0x7ff, 0x100000001, 0x9f9, 0x1, 0xa8}, &(0x7f0000000140)=0x98) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000180)={r2, 0x5}, 0x8) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r3 = dup(r0) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) 11:57:53 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}, 0x45c) r1 = dup(r0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000040)) 11:57:53 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) recvmsg(r1, &(0x7f0000000280)={&(0x7f0000000000)=@nl=@proc, 0x80, &(0x7f0000000240)=[{&(0x7f0000000080)=""/17, 0x11}, {&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f0000000140)=""/137, 0x89}, {&(0x7f0000000200)=""/36, 0x24}], 0x4, &(0x7f0000000880)=""/4096, 0x1000}, 0x2000) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000001880)={0x134, r2, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x30, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xa46}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}]}, @TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x20}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3a}]}, @TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xce53}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x7c, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x40010}, 0x97c02e5a5df0b8bf) 11:57:53 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 11:57:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0xa0100, 0x0) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f00000000c0)) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x1b, 0x0, 0x1b, 0x4800], [0xc1]}) [ 271.581457] input: syz1 as /devices/virtual/input/input501 [ 271.592839] input: syz1 as /devices/virtual/input/input502 [ 271.602207] input: syz1 as /devices/virtual/input/input503 [ 271.609257] input: syz1 as /devices/virtual/input/input504 [ 271.627038] Unknown ioctl 8828 [ 271.666833] APIC base relocation is unsupported by KVM [ 271.667164] kvm [12418]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0 [ 271.688334] Unknown ioctl 8828 11:57:53 executing program 2: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000140)={0x1, 0x0, {0x1a, 0x37, 0x4, 0x13, 0x3, 0x101, 0x1, 0xf6, 0x82356a0293b496d2}}) socket(0xa, 0x80b, 0x9) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) recvfrom(r1, 0x0, 0x0, 0xef20e07938757543, 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x440180) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000080)=0x1, &(0x7f00000000c0)=0x4) write$FUSE_NOTIFY_INVAL_INODE(r2, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x4, 0x0, 0x20}}, 0x28) [ 271.713889] kvm [12418]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0 [ 271.724894] input: syz1 as /devices/virtual/input/input505 11:57:53 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000140)={0x5, 0x0, 0x4, 0xa92}) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r2 = dup(r0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x802, 0x0) r4 = getuid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000d40)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@loopback}}, &(0x7f0000000ec0)=0xe8) write$P9_RSTATu(r1, &(0x7f0000000f00)={0x69, 0x7d, 0x1, {{0x0, 0x4f, 0x7, 0x4, {0x8, 0x2}, 0x100000, 0x9, 0xfffffffffffffffc, 0x76, 0xa, '/dev/uhid\x00', 0x5, 'syz1\x00', 0xc, '/dev/uinput\x00', 0x1, '{'}, 0x5, 'syz1\x00', r4, r5, r6}}, 0x69) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f00000001c0)={0x2, {{0x2, 0x4e23, @empty}}}, 0x88) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0], 0x2, 0x5}) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000300)={{0x2, 0x4e22, @multicast2}, {0x6, @broadcast}, 0x20, {0x2, 0x4e22, @loopback}, 'irlan0\x00'}) ioctl$VIDIOC_G_FBUF(r2, 0x8030560a, &(0x7f0000000080)={0x82, 0x2, &(0x7f0000000280)="a8b8717a7d8b99c6f8ee208385679476416366b43515114bdba145f140122a1e4fb0d00aca76f949794ff2fc7a141910402ef7de0a46bc33525088cc6f2b558306de35d6558d970ad4befba70a3c4737868276bd5ac602", {0x8000, 0x1b6f, 0x33363248, 0x5, 0x3, 0x9, 0x4, 0xd233}}) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000880)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000580400000000000048020000000000004802000050010000c0030000c0030000c0030000c0030000c003000004000000", @ANYPTR=&(0x7f0000000380)=ANY=[@ANYBLOB='\x00'/64], @ANYBLOB="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"], 0x4b8) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x3) inotify_init() ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000d80)='/dev/sequencer\x00', 0x200006, 0x0) [ 271.776424] input: syz1 as /devices/virtual/input/input506 11:57:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vga_arbiter\x00', 0x101000, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000640)={0x3, 0x8001, 0xfff, 0x7, 0x0}, &(0x7f0000000680)=0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000700)={r2}, &(0x7f0000000740)=0x5) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], 0x0) getsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000340), &(0x7f0000000380)=0x4) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f00000000c0)) memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000100)={0x7, 0x2, 0x7fffffff}) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000040)='/dev/usbmon#\x00') r3 = socket$inet6_udp(0xa, 0x2, 0x0) keyctl$session_to_parent(0x12) write$FUSE_BMAP(r1, &(0x7f0000000980)={0x18, 0x0, 0x4, {0x1a}}, 0x18) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000480)={0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0xa058, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xc14, 0x3, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000006c0)={0x6, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}]}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) fstat(r4, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000780)={{{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@remote}}, &(0x7f00000005c0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000880)={{{@in=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@initdev}}, &(0x7f0000000140)=0xfffffffffffffed2) setresuid(r5, r6, r7) r8 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080)=""/48, &(0x7f00000002c0)=0x30) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r9 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r9, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r8, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}}, 0xe8) sendmmsg(r9, &(0x7f0000005fc0), 0x800000000000059, 0x0) 11:57:53 executing program 0: ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) r0 = openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000140)) mkdir(&(0x7f00000000c0)='./file0\x00', 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000280)={0x5, 0x0, 0x80, 0x2}, 0x14) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x7) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) symlink(&(0x7f0000000040)='./file1\x00', &(0x7f0000000000)='.//ile0\x00') syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$LOOP_SET_FD(r0, 0x4c00, r1) [ 271.869593] input: syz1 as /devices/virtual/input/input507 [ 271.884897] audit: type=1400 audit(1566820673.535:74): avc: denied { getopt } for pid=12449 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 271.939215] input: syz1 as /devices/virtual/input/input508 11:57:53 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x3ff}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000140)={r1, @in={{0x2, 0x4e22, @loopback}}, 0x0, 0x5, 0x124, 0xfffffffffffff7a9, 0x2}, &(0x7f0000000080)=0x98) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/policy\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0xa798) r3 = getpgid(0xffffffffffffffff) write$FUSE_LK(r2, &(0x7f0000000300)={0x28, 0x0, 0x8, {{0x2, 0x0, 0x2, r3}}}, 0x28) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r5 = dup(r4) ioctl$UI_SET_SWBIT(r5, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x5) ioctl$SCSI_IOCTL_GET_IDLUN(r5, 0x5382, &(0x7f00000000c0)) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r5, 0x0, 0x82, &(0x7f0000000200)={'filter\x00'}, &(0x7f0000000280)=0x78) 11:57:53 executing program 4: syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) r0 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x20040) write$P9_RLOPEN(r0, &(0x7f0000000140)={0x18, 0xd, 0x2, {{0x50, 0x0, 0x3}, 0xfffffffffffeffff}}, 0x18) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r2 = dup(r1) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x5) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000100)={0x20000000, 0x80, 0x2d}) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, &(0x7f0000000040), &(0x7f0000000080)=0xc) [ 272.107384] input: syz1 as /devices/virtual/input/input509 [ 272.119897] input: syz1 as /devices/virtual/input/input510 [ 272.186540] input: syz1 as /devices/virtual/input/input511 [ 272.255971] overlayfs: filesystem on './file0' not supported as upperdir [ 272.376779] input: syz1 as /devices/virtual/input/input513 11:57:54 executing program 5: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000040)) clone(0x41bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() getgroups(0x2, &(0x7f00000006c0)=[0xee01, 0xee01]) setresgid(0x0, 0x0, r2) unshare(0x30010000) rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f00000000c0)) ptrace(0x4206, r1) 11:57:54 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000540)={{{@in, @in=@dev}}, {{}, 0x0, @in=@dev}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)) r2 = fcntl$getown(r1, 0x9) r3 = syz_open_procfs(r2, &(0x7f0000000380)='numa_maps\x00') getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000005b40)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x5, 0x800e, 0xff, 0x0, 0x0}, &(0x7f0000000040)=0x10) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000300)={&(0x7f0000000140)=[0x0, 0x6, 0x6, 0x0, 0x5, 0x0, 0x0], 0x7, 0x8000, 0xb9a3, 0x4, 0x400, 0x8400000000000000, {0x0, 0x6, 0x3, 0x27, 0xfffffffffffffffa, 0x9, 0x9, 0x7, 0x9, 0x0, 0x7, 0x5, 0x0, 0x0, "8f7b83201d0a6ef1840e420632d8665906033c73a5b8732f9cb96f34667953c8"}}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000200)={r4, @in6={{0xa, 0x4e20, 0x2, @local, 0x10001}}, [0x2, 0x7fffffff, 0x9, 0x8, 0x4, 0x60a, 0x7fb, 0x9, 0x0, 0x8001, 0x0, 0x0, 0x401, 0x5]}, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x200004) sendfile(r0, r5, 0x0, 0x80001d00c0d0) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000400)) ioctl$sock_SIOCGSKNS(r5, 0x894c, &(0x7f00000000c0)=0xffffffffffffff01) 11:57:54 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000080)={0x0, 0x4, 0x8, [], &(0x7f0000000040)=0x9}) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r3 = dup(r2) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) 11:57:54 executing program 0: mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_stats\x00', 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000300)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0\x00') umount2(&(0x7f0000000340)='./file0\x00', 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x2d2e783b0abe7656, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x80000001, 0x3, [0x0, 0xfffffffffffffff7, 0x4]}, &(0x7f0000000180)=0xe) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000001c0)={r2, 0x3d, "4a016d4b7d705ff65eb5967b3108d6b336637f0d3343e656b4aebbfcb75bf6f90f11dcdcde21555aa8360718c7548623c1ae67b28c6f72f6756e25077f"}, &(0x7f0000000280)=0x45) umount2(&(0x7f0000000100)='./file0\x00', 0x0) 11:57:54 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x408000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x10002000}) r2 = dup(r0) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) 11:57:54 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) fgetxattr(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="31000500"/14], &(0x7f0000000040)=""/93, 0x5d) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 11:57:54 executing program 0: memfd_create(&(0x7f0000000100)='/dev/snd/seq\x00', 0x7) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x0) r2 = socket$inet6(0xa, 0x2, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x83, &(0x7f00000002c0), &(0x7f0000000440)=0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) recvfrom$netrom(r0, &(0x7f0000000040)=""/12, 0xc, 0x2000, &(0x7f0000000300)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000240)={0x20002010}) write(r4, &(0x7f0000000340), 0x41395527) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000400)={0x4}) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000280)=@assoc_id=0x0, &(0x7f00000003c0)=0x4) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000480)={r6, 0x9}, &(0x7f00000004c0)=0x8) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 272.607142] input: syz1 as /devices/virtual/input/input514 [ 272.618943] input: syz1 as /devices/virtual/input/input516 [ 272.631870] input: syz1 as /devices/virtual/input/input515 11:57:54 executing program 5: clone(0x41bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() getgroups(0x2, &(0x7f00000006c0)=[0xee01, 0xee01]) setresgid(0x0, 0x0, r1) r2 = socket$isdn_base(0x22, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) unshare(0x30010000) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x4206, r0) 11:57:54 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000540)={{{@in, @in=@dev}}, {{}, 0x0, @in=@dev}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)) r2 = fcntl$getown(r1, 0x9) r3 = syz_open_procfs(r2, &(0x7f0000000380)='numa_maps\x00') getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000005b40)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x5, 0x800e, 0xff, 0x0, 0x0}, &(0x7f0000000040)=0x10) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000300)={&(0x7f0000000140)=[0x0, 0x6, 0x6, 0x0, 0x5, 0x0, 0x0], 0x7, 0x8000, 0xb9a3, 0x4, 0x400, 0x8400000000000000, {0x0, 0x6, 0x3, 0x27, 0xfffffffffffffffa, 0x9, 0x9, 0x7, 0x9, 0x0, 0x7, 0x5, 0x0, 0x0, "8f7b83201d0a6ef1840e420632d8665906033c73a5b8732f9cb96f34667953c8"}}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000200)={r4, @in6={{0xa, 0x4e20, 0x2, @local, 0x10001}}, [0x2, 0x7fffffff, 0x9, 0x8, 0x4, 0x60a, 0x7fb, 0x9, 0x0, 0x8001, 0x0, 0x0, 0x401, 0x5]}, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x200004) sendfile(r0, r5, 0x0, 0x80001d00c0d0) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000400)) ioctl$sock_SIOCGSKNS(r5, 0x894c, &(0x7f00000000c0)=0xffffffffffffff01) [ 272.747770] input: syz1 as /devices/virtual/input/input517 11:57:54 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) 11:57:54 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$TUNSETLINK(r1, 0x400454cd, 0x118) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='htcp\x00', 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) [ 272.826371] audit: type=1400 audit(1566820674.475:75): avc: denied { block_suspend } for pid=12509 comm="syz-executor.0" capability=36 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1 11:57:54 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) [ 272.895024] input: syz1 as /devices/virtual/input/input521 [ 272.948267] input: syz1 as /devices/virtual/input/input522 11:57:54 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) [ 272.993884] input: syz1 as /devices/virtual/input/input523 11:57:54 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) getpeername$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c) [ 273.076790] input: syz1 as /devices/virtual/input/input525 11:57:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x14, 0x28, 0x701, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 11:57:54 executing program 4: openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x200000, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1a) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) [ 273.154340] input: syz1 as /devices/virtual/input/input526 [ 273.183324] input: syz1 as /devices/virtual/input/input527 11:57:54 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) write$evdev(0xffffffffffffffff, 0x0, 0x0) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0], 0x14}, 0x0) recvmmsg(r1, &(0x7f0000002180)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/198, 0xc6}], 0x1}, 0x7292}, {{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000140)=""/17, 0x11}, {&(0x7f0000000300)=""/172, 0xac}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f0000000180)=""/42, 0x2a}, {&(0x7f00000013c0)=""/25, 0x19}, {&(0x7f0000001400)=""/112, 0x70}, {&(0x7f0000001480)=""/44, 0x2c}, {&(0x7f00000014c0)=""/148, 0x94}], 0x8, &(0x7f0000001600)=""/55, 0x37}, 0x6}, {{&(0x7f0000001640)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000001b80)=[{&(0x7f00000016c0)=""/71, 0x47}, {&(0x7f0000001740)=""/52, 0x34}, {&(0x7f0000001780)=""/52, 0x34}, {&(0x7f00000017c0)=""/172, 0xac}, {&(0x7f0000001880)=""/126, 0x7e}, {&(0x7f0000001900)=""/51, 0x33}, {&(0x7f0000001940)=""/169, 0xa9}, {&(0x7f0000001a00)=""/62, 0x3e}, {&(0x7f0000001a40)=""/1, 0x1}, {&(0x7f0000001a80)=""/228, 0xe4}], 0xa, &(0x7f0000001c40)=""/205, 0xcd}, 0x4}, {{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000001d40)=""/158, 0x9e}, {&(0x7f0000001e00)=""/94, 0x5e}], 0x2}, 0x40}, {{&(0x7f0000001ec0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000002100)=[{&(0x7f0000001f40)=""/151, 0x97}, {&(0x7f0000002000)=""/36, 0x24}, {&(0x7f0000002040)=""/162, 0xa2}], 0x3, &(0x7f0000002140)=""/51, 0x33}, 0xffffffff7fffffff}], 0x5, 0x62, 0x0) 11:57:54 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000140)="f3c6497af157b9568be27fe39489c242980c11d998dbd4a71dd991fd069249ad412ff3d8e2c60e6bcb8ae7e11d7220195602135d366a225fecd4954ec547c2b82f73ba267461f397d1b44477c766fc99b9f4ca190e911d33ca2849df39d1da6c1bbb6416b8ba57e4458d8ab6d2bafb7298174c6cca26db50db5eb83efd478fd18d1ce930b09232d5e145a07db8afd2de9784392f0d514d5b8127e331297782e18373d16a34642b63baa8f0cd3eacabd1c2a619", 0xb3, r1) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x401]}, 0x45c) r2 = dup(r0) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) [ 273.226288] input: syz1 as /devices/virtual/input/input528 [ 273.256404] input: syz1 as /devices/virtual/input/input529 [ 273.293851] input: syz1 as /devices/virtual/input/input531 [ 273.329351] input: syz1 as /devices/virtual/input/input530 11:57:55 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) write$evdev(0xffffffffffffffff, 0x0, 0x0) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0], 0x14}, 0x0) recvmmsg(r1, &(0x7f0000002180)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/198, 0xc6}], 0x1}, 0x7292}, {{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000140)=""/17, 0x11}, {&(0x7f0000000300)=""/172, 0xac}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f0000000180)=""/42, 0x2a}, {&(0x7f00000013c0)=""/25, 0x19}, {&(0x7f0000001400)=""/112, 0x70}, {&(0x7f0000001480)=""/44, 0x2c}, {&(0x7f00000014c0)=""/148, 0x94}], 0x8, &(0x7f0000001600)=""/55, 0x37}, 0x6}, {{&(0x7f0000001640)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000001b80)=[{&(0x7f00000016c0)=""/71, 0x47}, {&(0x7f0000001740)=""/52, 0x34}, {&(0x7f0000001780)=""/52, 0x34}, {&(0x7f00000017c0)=""/172, 0xac}, {&(0x7f0000001880)=""/126, 0x7e}, {&(0x7f0000001900)=""/51, 0x33}, {&(0x7f0000001940)=""/169, 0xa9}, {&(0x7f0000001a00)=""/62, 0x3e}, {&(0x7f0000001a40)=""/1, 0x1}, {&(0x7f0000001a80)=""/228, 0xe4}], 0xa, &(0x7f0000001c40)=""/205, 0xcd}, 0x4}, {{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000001d40)=""/158, 0x9e}, {&(0x7f0000001e00)=""/94, 0x5e}], 0x2}, 0x40}, {{&(0x7f0000001ec0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000002100)=[{&(0x7f0000001f40)=""/151, 0x97}, {&(0x7f0000002000)=""/36, 0x24}, {&(0x7f0000002040)=""/162, 0xa2}], 0x3, &(0x7f0000002140)=""/51, 0x33}, 0xffffffff7fffffff}], 0x5, 0x62, 0x0) 11:57:55 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') 11:57:55 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 11:57:55 executing program 5: clone(0x41bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() getgroups(0x2, &(0x7f00000006c0)=[0xee01, 0xee01]) setresgid(0x0, 0x0, r1) unshare(0x30010000) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) ptrace(0x4206, r0) 11:57:55 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3b) ptrace$cont(0x18, r2, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x1b}) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r2, 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000080)=0x401) r3 = dup(r0) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) r4 = dup3(r0, r3, 0x80000) setsockopt$ax25_SO_BINDTODEVICE(r4, 0x101, 0x19, &(0x7f0000000000)=@rose={'rose', 0x0}, 0x10) 11:57:55 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x20080, 0x100) r0 = syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0x0, 0x2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r0, 0x0, 0x338, &(0x7f00000000c0)='em1]systemself]cgroup#*em1ppp0,\x00', 0xffffffffffffffff}, 0x30) add_key(&(0x7f00000002c0)='trusted\x00', &(0x7f00000007c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key(&(0x7f0000000880)='big_key\x00', 0x0, &(0x7f0000000900), 0x0, 0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x13, 0x1, {0x1}}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) msgget$private(0x0, 0x80) msgget$private(0x0, 0x1) msgget(0x1, 0x100000000) msgctl$IPC_RMID(0x0, 0x0) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000040)='encrypted\x00', &(0x7f0000000080)='vmnet0^\x00') keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) memfd_create(&(0x7f0000000a80)='t\b\x00\x00\xf9\xff\x85nG\x13g\xa6\x05', 0x0) getpgrp(0xffffffffffffffff) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000240)=0x20000000001) getsockopt$inet6_dccp_int(r2, 0x21, 0x0, 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000180)=0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') getrandom(&(0x7f0000000540)=""/199, 0xc7, 0x3) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x2001, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 11:57:55 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents64(r1, 0x0, 0xfffffffffffffe24) close(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f0000000100)=0x2, &(0x7f0000000140)=0x4) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) r3 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r2, 0x6) r4 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x8001, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) setsockopt(r3, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, 0x0) socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) r5 = accept(r1, 0x0, 0x0) clock_gettime(0x0, 0x0) io_getevents(0x0, 0xf65, 0x6, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000340)={0x77359400}) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x688fe8a019a07bc8}, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000380)=0x9800000000000000, 0x4) sendmmsg(r3, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0xae9d808f) setsockopt$sock_void(r2, 0x1, 0x3f, 0x0, 0x0) [ 273.646061] input: syz1 as /devices/virtual/input/input534 [ 273.666044] input: syz1 as /devices/virtual/input/input535 [ 273.725779] input: syz1 as /devices/virtual/input/input536 [ 273.828115] audit: type=1400 audit(1566820675.475:76): avc: denied { name_bind } for pid=12600 comm="syz-executor.2" src=20000 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 11:57:55 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000000)=0x2, 0x4) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 11:57:55 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$int_in(r1, 0x5473, &(0x7f0000000000)) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) [ 273.914002] audit: type=1400 audit(1566820675.475:77): avc: denied { node_bind } for pid=12600 comm="syz-executor.2" src=20000 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:node_t:s0 tclass=dccp_socket permissive=1 [ 273.937033] audit: type=1400 audit(1566820675.515:78): avc: denied { name_connect } for pid=12600 comm="syz-executor.2" dest=20000 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 [ 274.007486] input: syz1 as /devices/virtual/input/input537 11:57:55 executing program 0: creat(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuseblk(&(0x7f0000000340)='/dev/loop0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='fuseblk\x00', 0x0, 0x0) [ 274.052651] input: syz1 as /devices/virtual/input/input538 [ 274.086190] input: syz1 as /devices/virtual/input/input539 11:57:55 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070") bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx\x00'}, 0x58) r2 = accept$alg(r0, 0x0, 0x0) write$P9_RLOPEN(r2, &(0x7f00000002c0)={0x18}, 0x18) 11:57:55 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuseblk(&(0x7f0000000340)='/dev/loop0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='fuseblk\x00', 0x0, &(0x7f0000000580)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 274.228283] input: syz1 as /devices/virtual/input/input540 11:57:55 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2400000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 11:57:55 executing program 0: mkdir(&(0x7f0000000180)='./file0\x00', 0x2001000000034) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x800000, 0x0) chdir(&(0x7f0000000380)='./file0\x00') r0 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) write$UHID_INPUT(r0, &(0x7f0000001cc0)={0x8, "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", 0x1000}, 0x1006) sendfile(r0, r0, &(0x7f0000000240), 0x2008000fffffffe) [ 274.307494] input: syz1 as /devices/virtual/input/input541 11:57:56 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001dc0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) write(r1, &(0x7f0000000000), 0x0) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) r3 = getuid() r4 = gettid() getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_netfilter(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB="f01400001001010026bd7000fbdbdf2500000005c8011100120bcc8f007583f2b6911c445f821ae4a33f76e7e1531aa435b00ae85e048644fed3c8157751c8b9bdcac204a16efb73fcb9acb028355b470bdbf508045b0a11c7ed96d9311195d7058cca0628709304005d008c5bb73e6ef7f3cb60839088a21a4ca6bcc77caab038b8d3d4f583589d150ea68693837cdd3f8eb1f1efd6711a491665fc45b2ff61a8e23efa296debe3adc951a66c5569be0eda0c23c3bbc2b951608422b54f0043532475a2d26fe7229d8c3ac0289bf1d13d3c81b69153e2d0e5e3e7d7bdec99694d5c9e1a08006b00", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB='\b\x001\x00', @ANYRES32=r4, @ANYBLOB="0800d2d0", @ANYRES32, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="0d30c9fe911ce87e9803182a08004800", @ANYRES32=r6, @ANYBLOB="10000a000400180008004800", @ANYRES32=r7, @ANYBLOB="8f674c22cd784bda9b415db42c83a55ebf41dfa12c961a301a36149d86d2fbc036d93ccd46a650b01da04efe17842813e06c06fb4c3646f5"], 0x14f0}}, 0x7fd7064d1d0b58bc) [ 274.378157] input: syz1 as /devices/virtual/input/input542 11:57:56 executing program 5: clone(0x41bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x200) ioctl$IMSETDEVNAME(r0, 0x80184947, &(0x7f0000000040)={0x80000001, 'syz1\x00'}) r1 = getpid() getgroups(0x2, &(0x7f00000006c0)=[0xee01, 0xee01]) syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x6, 0x10000) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x40000, 0x0) setresgid(0x0, 0x0, r2) unshare(0x30010000) rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f00000000c0)) ptrace(0x4206, r1) [ 274.516258] input: syz1 as /devices/virtual/input/input544 [ 274.634320] input: syz1 as /devices/virtual/input/input545 11:57:58 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) syz_open_dev$mice(&(0x7f00000003c0)='/dev/input/mice\x00', 0x0, 0x20000) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) prctl$PR_GET_FP_MODE(0x2e) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0xc42cd21ff7f42dba, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000380)={0x9, 0x40}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="20022cbd7000fedbdf2503000000280007000800010073348e10080001009e0000000c000300000000ef4807867a4a3c87001f000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x40804) write$UHID_CREATE2(r1, &(0x7f00000001c0)={0xb, 'syz0\x00', 'syz1\x00', 'syz0\x00', 0xa4, 0x7fffffff, 0x5, 0x4, 0x5, 0x0, "f997f6f434e53ad45a09ccc1f2a0671cf7295ab941240c960497ec6a980732740f863a28f7c991196dd4ec373f137310d758124ad58ef7223c4454b7921f7becb372beb29b0ff8becda963e39a538200f02674c10a5a6f931389b444356e9e4672a93f7e353ba9113361be41eb3331bb8d5d278734ec35ba3593f2210691d31d6eb20bf69ad11d3277ee0890b9d381bf65763bb0b5840700b3e675856498520a1fd80f4f"}, 0x1bc) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x3) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) 11:57:58 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0xa) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 11:57:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @loopback}, 0xc) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000080), 0x4) 11:57:58 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f0000000080)) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0xbc, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0x8, @remote, 0x1608ebd6}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e23, 0x5, @remote, 0x7f}, @in6={0xa, 0x4e22, 0x2, @local, 0x106e}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e23, 0x8, @loopback, 0x8}, @in6={0xa, 0x4e22, 0xfffffffffffffffb, @mcast1, 0x7}, @in={0x2, 0x4e23, @remote}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000280)={r2, @in={{0x2, 0x4e21, @remote}}, 0x100000001, 0x6, 0x4, 0x1, 0x3}, &(0x7f0000000340)=0x98) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x5000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000880)="31225d5162dda2010943730a278ea4f351bcbb50d9ed2ceac3c93410cafa2e42b3817de91f21e4a6af22ba977c22dc10ee00bc50219e263ac2a206d2a79ed4f4553c4b46feafe7e1e1516198697e5c50cd495209da4fd3f5fe5adac14cdaca79ed8910d3e69ca1206122b47cf5ca8645aeba8c366395664016157f132b89b07d8dcdc83acad8e1bdc79e46396a548b9e9e4328a7bb9a1110967e53ce721761a35a4c6e6391fbb8d11d34152cf4e64825845ccf2a840685d590294c4d672ff83185193ef729ddd12d733ad93f16e0048f2720a9b0f2ace4f4a5a48bbbd8046baabfbfc0a9276c6fa37801c46e904aa66c77e0f160038a2d27544726e99a3f8811cf4596f41d339468a1d8ddf63362db1445c926767c10b64d022073c36f5b156ee6b59a88b9bb85aa69ca1e0914dd6847b387b32daf1c3b8a66a24b1552efd7bdc902c977173ced380aad564d4804e00c83bd886e1476fac17d23ae16c4ed23ba100e28f335706a0410356f78481ed68aafc6c5de1a8ded523d0171b3937af39a261bc0878399dc5b20201708204ad7b253fb78d27c77dec2ef4f7e406f49a0dd451f16b6d87622b15a3b165a2d4ca2f0ff37314f427a5e9a3f27f8e9333ec504f64d57c75b729a6b63bf7135e897c4b7f054b1ac1d810f7a9f15208cb3f1ade0eee7064dec174ea24820466a5f9d1915c7c0ed835a29fd329664d65ef29e7b5545aad62c9db5b52eed4f368a7dc6676f47ce547e9132939ea443c362fc32f6be47b69deb45b21ea8b7a11afc40827690a535f3d30cac9ba947739353bd089343b29f37fee880f45a18e6ae7c143e6243e1a1f72b3b6dd1b8e637e2280c75cb112fe10feb4bb6780405f02dd6a569e17577cb5f02e0625a2ecd44453a727661890b2db0e400ff339c75f799edd5708ae19ae26be225a9d49ffe26f3bea6f43f2dee9f4277826358c01451e7e7becb9a6d279728f105ab6c200c35fd6334f8c68f79100b17ebe49abfbdf4a4eeb3ba8473be8284ba5dc1b2b080e2d39dbe98155285b88f7c85ff3fd718e64f8ae03e8f4c23178fc1e8fe27e4219ceeb982c041736136237e7f12fb1a67ac90cb443bc4ffb215d55a32228a45583a9d9eb976f8ec8886c67d5c636006d87d83da4300c21ddff06790972aa7c34c425cf201ac2c365066de1a407c4f14aa0be2249d64740b23a3003b8916a749a23fd048bb9d4f32887895145ecfd67390c32d158be88a10db55578bfb01047b2478b49c31bad7c72a125319be660cc4f8ec4e5918dbbe1410bf5a5f003c89993ec10decddad2d54e46359821f13e2de4c55733bc38601c2ea760d56ee7c24d5e3c367acd5e186aa7c4f8a5e616faf7c567cad45820b8376563fef25a4d936d8c12ea73768a654aa8f7f0a07533a1dd3d198ebf3e7964a684efd8b0bf364c22e269626bfd4801cd56b3acd67380aaf822038f61c0625b040aa928566f9ddad3a426095c40a0a3fba4c09dd30cdcd8eee05ca6f85357e2de8413a33e3ff6bddff1cf80936cbf0e1b005e53e54a7e5cdf0e493adbc901ac1f4f63de939443dafe6788169d5c318b9bab6fad09df03e449598d8c94d0f230c9700dcf72747f26d7ab75426294881a6d1c679419c3e19aabb1c3f74f41ea84b7dfd1ee560c55a0f53378c3f0b62ac1e71b448be43dff597a280ed3d222a40f00ff5db8f94f0f1cbc8152f7d80b18e9831a3f962580c668129c610990c15b756fe76db526bc0bc9e7cc09bb620bce3948fa30624ef24d775abd05a1c7da8f388ee8cfb6230b128d91bf9c45791e827c3380790740d6e4c24d67f0e7ee48b6eee436c942bd312a42bbbb71d9b2b14ccb42a51b5aa714a949d6a2ee64f497e8e7efe3dd0c43bf2807d0fd0d8672e1d4bd0b3a0d0b6b8e33e43f6e56c83ea755b3d05c794a72653cfcaee8cd34c307cd18e232a1abc694b40571792094cae1087186bd08b5503c07b839dd0357783c4070f941ec65a538aa7f946f83a2e692a0a9f85c12e09d8c6e6ddf6fe793275a04bde9ce3db3826dd156eba5e1ab1dd70d6b74214b4834759863e39e15036f8bf7a7379888af0ee64c6645c8c434408683b9e7486fb855d5a11e2a6a27aadcbc7ed7f8110caf510d1cc8096690ef4cffb7bf7a44efd65252cae71b46cdd46fa2ad6476c52e67e8143930626716d001b18eae9adaf15e7628a9222079ae7ba54c612196a93f7f28d42c120813764631d3698420b6940db4e4a806c5e99d61eb7f0d2380d7e47d818750f534ea8bccc4fc468b31fb12cdbaa1ca56d698d0c2b586a9230a83f95fbdf300251ea2683ef52552d1238b6b080b546f97a9a7728cd56b850426575adbc22d04e69886740bbad01f2ef51cf51aa5abf68a7163f0271fa5a0bbba46bff83b0be94d6c189ab36c290623fd5dacd147d638cfbe73bc8ef74f62a916e3ce45174869e1cd712aa9d451bcb1174557fb237e0d1411bb0b26c8d8a0f0c65edc797c47704ccffe5166fcb73136b7c9ff62aba6ae01fb823a81a567b19ecabec0d40441bc350f1a1a900713a1be63c48e17a6e730f5b1c55eeedb1aab01b8da7126ef4c90cbce81734f3d00b1c108f46e662b249e03ee01dee842001ca27e5118e300026c02c3cb8b653c7ab79c1c508e07889404f2b4c12ff4db57687a1bbb025394af6407bec780bf0b6c659d59d3c6b680e835cbe0808c2ae041e0a5763ee6022ca49e363a981c6724ce4364e7f3639e8aea24d5d3a61cf6ed9f8d2a5902286098d98025e8d82c2ece655971083381325d68088826294d6dcb2941e8569ef963660bebba38df1887600fc0e9561f991e711ef093bec0d892d614d2b60303bb0d23cded9183956de1c96972995ce94f6a05eaa55fbca78178c101752af4e58d81c07d0d99b7ed2d4858a2d325b006070549acb5afc3142d8a2bfecae946ec738cfde34d76be85f9af756ec4924a1882c6fc805abb25e62c5ffbbbe8a9e21593cf6347eca77a7ef11bd7f9bf86f76e377b35cae9875991affb07e9df2e513ab8662bb1c47759cb9121b669f603551d09788c4dd194816d4325fb6c9e0c369942ff9abd0a4def66d6bdfe59c6015c1a4caaf6d4bb642fd7f9f7e621f1d44ccc70e525ebef59c06f62e1e3341acf156bcfe302632066ceb99ae1a57788640501834f356d9d173a8e6842931dfa7573c1a6f4b7d5938551bb6bfde2f503e730b0fb6b3b8605992a32cc8372f533d7d2f81e50a91a585f0573bc7d977a252cd00cd17a75ff380168576aed91c725627891c6c567f94cbc1d646c1497bb5bfa097e5b1e4da38e7310edce01ebd8bfe22eaed796fb0b075f31c9bcc278165f9af126920f0e7cdd1ab9775d29073ce29063e1784f661149e829b500a68389888a45c8323bcce20fe8a17431b71eb99832e2ef425f5d5ca7864cb8aa6c4c516baeedc633e8b52d09901604ac8036bd3d96f0a4ff7e1428c0f85fbe5f18ce0b0c446274fd4cad52e78f3fbb3d36629dbe0e24dad3f9792ade941ae0544e395bbe367a27cf6482766aef3e4f78964e1b04e237dbc804277b397da7b6b9488473c370b469c3d3a9561bde2d7e2280cc3669fbea945f8645506be93f4739ba22f02f9ce9fb58b73a3930312721928ae2e0eb3d50614f3ee27e775e3ab5c53616e3af8c0171f52cd143b3859b35fbdc1458a4b219a29cdc3d4e474d43f980a426be9eb2e5d9abfb54e89c8af49fbb763beaafac743080a7f9b3cc99c23ae02e2a8c57e785f17348bc73bb01d5470d694966bf48905ccd8be88291c30ccefe5da5d9a2ef1f666c4042aac3660c46581fcb00e3b5c7609d30691fe82f864254a83c1f572fac846462b600d03b6740da37127d91f3a299e0331796ea3110efb6451041cc1f48dd30ffbb3da2285fac121aa82f5f034373905bb2540aec5c71757402dc174b7b8acb52b121b918e47e74b7a25a851f8af104baa864ba3ba6276618a2be0aa6c86b79756224ba2c48a2291cee3dbf44f8a9de6b1a6a900efac20347f27b54f04ee3a074ac7f85b1ec92f858441159234da866bd0274d91540f723ded1283fd563050dc85232d77180007cf3a95a9661baf43a5515bd47a1fea10d42e051177fb955baf69721c524f13d2881e54feed0794cb6db42092fc866316b95249550c8b6eb6b0b3f6705a2b0dac0da3655bbc18df6fd674b49fa052fb908c0362a9be4ec697fabad463a91a6e36b6bd52ebfcb0124d3da840ff8f9f077e75dc0ab07e7cbd4d5bd25178f8ba54296c50eb874befe9b3c9e4c62c3eee10a186e6c13ce3cd9775c5578cbf410e0f8f1ac21307307f07af8df8b721a08d7439742c2ae9ef794884db21d8fe3f9f6e36dd8b660cc3f719c54e2a040c8c51cace05278ac64296cb81e60d17559ce4e63585163075d9ccc06e7d7efe5fd3d7895eb7cdc17920d8d017c10132e4306836377e0153b142a79c29b5328ce1c16b8b9ca9ff3c8f7706d03ab648e55ee7ec3912bf033db8e77e0f8949d751e800fdab6634f7594dbe0427e79982ef58ebafe621d8fedc9476a6b53c7a85976a4499c318ee798c518919b39f2524fe7c4fe94eb3f34aad5c710156d01795f69effcdc970185e83d0635bc846d804e3f01ce40fdd130b47fe398348950be3fb6da9c5a93903caea19794156adb7f391fc8c0253929d36f5fd985ad66a7c56560fb8a5345912dcb88502f9c54edaee05bbd8149a17aa9c064a2318174cb554907b0f4d9ad288e2a7280050cb28c1020427918613eb79871c7bfb7acfd03c0c4ec61a63fb3d75b3d7a52d9178769a909990ed1abfd4d8dd761272cfe81cc2474dd69f92df98c2aae2fe1dc85f337fd77d2ea64b8d1d6b8ddb30de02a4b7eb5df1e54d930d6d92e6b88cbcd5b916d310d0ac06ca2d30eb760ceb81998b93b8c0d080acfb22240eea82daeba7f791c29db20e8345a192528422f26c395c58f080f9789c3afa22e2f95c2557065c063a8ab149ed13a0528f6c5c70d7f82736faf997e07780fac8305d61548aa83af94802535699b671b6dd6925a73259b02c216b93324f8893df95ffe0b34b5ef2d12550b9002926dbea1765c7b436144603f61bed955ae09310f3b44c84c6e166731e06cc883564760623736af218e903940d872e4315a22799d23ac4004992ef9428c8cb90d52af316ff89bb08243541066e51b1391d6154330003c6658bba54c33e9a458c750dc8bc2329b6a5f6368ead5e84e4097f701a9344f5541dc6aa838ac403b38ec934c89283c35c91587d443694d26fa3849028e5feacef2dc352b14c94eaa500e9e333a125619bc48287d0acc44e7f747a0ee14b918e1399f83d7313a0d5dfe065d54cb9251fb244a3668fa6de8b72b147987ad549e8b91b74ffe0c1b8ea5282905da1d2c70cf2d7fa3fe4b47ee06d97ef5ccf602f69bbafc0e5f8d55120e8e21b9d3b862a435c51b5a12f0a661beeb9cdf296f4489a352b10fe5b1f07da0b0a7969bda71c3bb385080f7671561974764ddf9e7ad00d8de3336e97ba879f83bb456834c5d0c8375c5a1ffd6beb7fd78336098406f2b70ebd02ea831cf5730d8a4eb879fecf064de97ea3060918ce1655da0fe0519fca52b7f5c15f4fb063ab7590935b931a60714f97967ac09613c9cdf2c5713e465b688923d1f3dec62e625dbe436401c274bf61fcac6f7394e2c04492c87bf54b0760b98ce1bb5084417d25bf082b4cd96cbff29b9cf45f7192bb2c737243dfa0deab6e195c7d63b6ae38797b74c9664b55d43bb4ff929882886bfe7eb381b0bd4ae7dd7ef2d1", 0x1000, r1}, 0x68) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd8de2eeb23e481c1) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 11:57:58 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000001c0)={0x0, 0x2e1, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="380100001000d77676a499334d910000e000000200000000000000000000000000000000000000000000000000000000001000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f0000000000000000000ffffffffffff000000003200000000000000000000000000ffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c2900"/240], 0x138}}, 0x0) 11:57:58 executing program 5: clone(0x41bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() getgroups(0x2, &(0x7f00000006c0)=[0xee01, 0xee01]) setresgid(0x0, 0x0, r1) unshare(0x30010000) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x4206, r0) 11:57:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000005c0)={'exec \xfbU\xc8\xf0\x13\t\x06\xc6\xba\xfb\xae\xd5\xd1\x97\xf8T~\xcf\xc9\xec\f\xb3\xdazQdZ\xf7\xf1\x8e\x98\xe5\xa3F\x19O;y\x7f0?l=\xd54y\xe4\x1fH8\xc7\x99\x8a$`+6\xd3\x87PA\xf2\xc1\x844\xee\xa5l\xd6M\x85\x1e\x15\x19i\x04\xb3d\x8b7\xd0a\xfe\x8c\x18\xa5\a', '/proc/threadqutr/exec\x00'}, 0x72) [ 276.679291] input: syz1 as /devices/virtual/input/input546 [ 276.697341] input: syz1 as /devices/virtual/input/input547 11:57:58 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(0xffffffffffffffff) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000a40)=ANY=[@ANYBLOB="7f454cf2deda40729b25fb0000000000004000588171001000720155c4af96311d39962100001600380001000900ff030100029ebd6ce1afd40e4ec61030cf4b0794000000094baa1014256024989fb0daa1e1dc"], 0x54) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000180)={{}, 'port1\x00', 0x0, 0x40, 0x3ff, 0x2, 0x6, 0x67d, 0x0, 0x0, 0x7}) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) ioctl$KVM_SET_XSAVE(r1, 0x5000aea5, 0x0) ftruncate(0xffffffffffffffff, 0x0) open(&(0x7f0000000780)='./bus\x00', 0x14102e, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1000000000000277, 0x0) 11:57:58 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000840)={0x0, 0xa, 0x1, {0xb, @pix={0x0, 0x1f}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x4, 0x2, {0xb, @pix_mp={0x0, 0x3, 0x0, 0x0, 0x4, [{}, {0x7}, {}, {}, {}, {}, {0x400}]}}}) 11:57:58 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) fstatfs(r1, &(0x7f0000000000)=""/73) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000080)) 11:57:58 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x400, 0x640000) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000040), 0x4) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000]}, 0x45c) r2 = dup(r1) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x9) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) 11:57:58 executing program 1: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) [ 276.907322] input: syz1 as /devices/virtual/input/input552 [ 276.936023] kasan: CONFIG_KASAN_INLINE enabled [ 276.945802] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 276.973741] input: syz1 as /devices/virtual/input/input553 [ 276.989317] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 276.994670] kobject: 'input554' (ffff8880a0297420): fill_kobj_path: path = '/devices/virtual/input/input554' [ 276.995672] Modules linked in: [ 276.995689] CPU: 1 PID: 12700 Comm: syz-executor.0 Not tainted 4.14.140 #36 [ 276.995696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 277.016321] input: syz1 as /devices/virtual/input/input554 [ 277.016402] task: ffff88805b4f4200 task.stack: ffff88805a198000 [ 277.038563] RIP: 0010:refcount_sub_and_test+0x2b/0xf0 [ 277.043744] RSP: 0018:ffff88805a19fb98 EFLAGS: 00010202 [ 277.049384] RAX: dffffc0000000000 RBX: ffff8880939fe780 RCX: ffffffff84261db0 [ 277.056734] RDX: 0000000000000004 RSI: 0000000000000020 RDI: 0000000000000001 [ 277.064123] RBP: ffff88805a19fbc0 R08: 0000000027b74e9a R09: ffff88805b4f4ac8 [ 277.071437] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000020 [ 277.078890] R13: 0000000000000001 R14: ffff8880939fe794 R15: 0000000000000000 [ 277.086365] FS: 0000000001e28940(0000) GS:ffff8880aef00000(0000) knlGS:0000000000000000 [ 277.094594] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 277.100483] CR2: 00007fa042fe9518 CR3: 0000000034395000 CR4: 00000000001406e0 [ 277.107743] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 277.115194] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 277.122461] Call Trace: [ 277.125062] refcount_dec_and_test+0x1b/0x20 [ 277.129559] vb2_vmalloc_put+0x18/0x70 [ 277.133441] __vb2_buf_mem_free+0x103/0x1e0 [ 277.137750] ? vb2_vmalloc_dmabuf_ops_attach+0x3f0/0x3f0 [ 277.143807] __vb2_queue_free+0x634/0x7d0 [ 277.148031] vb2_core_queue_release+0x64/0x80 [ 277.152510] _vb2_fop_release+0x1cf/0x2a0 [ 277.156646] vb2_fop_release+0x75/0xc0 [ 277.160547] vivid_fop_release+0x180/0x3f0 [ 277.165037] ? vivid_remove+0x3d0/0x3d0 [ 277.168997] ? dev_debug_store+0xe0/0xe0 [ 277.173041] v4l2_release+0xf9/0x190 [ 277.176733] __fput+0x275/0x7a0 [ 277.179991] ____fput+0x16/0x20 [ 277.183314] task_work_run+0x114/0x190 [ 277.187312] exit_to_usermode_loop+0x1da/0x220 [ 277.191880] do_syscall_64+0x4bc/0x640 [ 277.195751] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 277.200594] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 277.205771] RIP: 0033:0x413561 [ 277.208941] RSP: 002b:00007ffe50724ce0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 277.216764] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000413561 [ 277.224113] RDX: 0000001b2f020000 RSI: 0000000000000000 RDI: 0000000000000003 [ 277.231579] RBP: 0000000000000001 R08: 0000000010745ce5 R09: 0000000010745ce9 [ 277.238949] R10: 00007ffe50724dc0 R11: 0000000000000293 R12: 000000000075bf20 [ 277.246558] R13: 00000000000439be R14: 00000000007613d0 R15: ffffffffffffffff [ 277.253816] Code: 55 48 89 e5 41 56 41 55 41 89 fd 41 54 49 89 f4 53 48 83 ec 08 e8 b6 6a 85 fe 4c 89 e2 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 14 02 4c 89 e0 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 11:57:58 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(0xffffffffffffffff) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000a40)=ANY=[@ANYBLOB="7f454cf2deda40729b25fb0000000000004000588171001000720155c4af96311d39962100001600380001000900ff030100029ebd6ce1afd40e4ec61030cf4b0794000000094baa1014256024989fb0daa1e1dc"], 0x54) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000180)={{}, 'port1\x00', 0x0, 0x40, 0x3ff, 0x2, 0x6, 0x67d, 0x0, 0x0, 0x7}) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) ioctl$KVM_SET_XSAVE(r1, 0x5000aea5, 0x0) ftruncate(0xffffffffffffffff, 0x0) open(&(0x7f0000000780)='./bus\x00', 0x14102e, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1000000000000277, 0x0) [ 277.272987] RIP: refcount_sub_and_test+0x2b/0xf0 RSP: ffff88805a19fb98 [ 277.282085] kobject: 'loop2' (ffff8880a4a460a0): kobject_uevent_env [ 277.287032] ---[ end trace eafc9a338f87099a ]--- [ 277.288536] kobject: 'loop2' (ffff8880a4a460a0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 277.303968] Kernel panic - not syncing: Fatal exception [ 277.311360] Kernel Offset: disabled [ 277.315114] Rebooting in 86400 seconds..